List of errors on "docker compose up"

[partytimeexcellent]

I just set this up for the first time with an external proxy. Proxy is Pangolin (Traefik). I disabled the external authentication for now, otherwise I can't login. All the basic functionality seems to work, I can browse locally and connect the iOS app with the FQDN. My main concern is with these logs that appear on docker compose up, and just wondering if these are problematic or expected?

opencloud-1  | 2026/02/13 07:47:46 Could not create config: config file already exists, use --force-overwrite to overwrite or --diff to show diff
opencloud-1  | 2026-02-13T07:47:47Z WRN skipped as signer with same kid already loaded kid=private-key path=/var/lib/opencloud/idp/private-key.pem service=idp
opencloud-1  | 2026-02-13T07:47:47Z WRN missing or incomplete nats configuration. Events will not be published. host.name=f445b6d315d9 pkg=rhttp service=storage-system
opencloud-1  | 2026-02-13T07:47:47Z WRN missing or incomplete nats configuration. Events will not be published. host.name=f445b6d315d9 pkg=rhttp service=ocm
opencloud-1  | 2026-02-13T07:47:47Z WRN core access token not set host.name=f445b6d315d9 pkg=rhttp service=ocm traceid=533d810408e601ffba980b5d7caa7a72
opencloud-1  | 2026-02-13T07:47:47Z WRN http end="13/Feb/2026:07:47:47 +0000" host=127.0.0.1 host.name=f445b6d315d9 method=GET pkg=rhttp proto=HTTP/1.1 service=ocm size=19 start="13/Feb/2026:07:47:47 +0000" status=404 time_ns=91934 traceid=533d810408e601ffba980b5d7caa7a72 uri=/ url=/
opencloud-1  | 2026-02-13T07:47:47Z WRN core access token not set host.name=f445b6d315d9 pkg=rhttp service=ocm traceid=70871f3dc5610c371acfac22cc11758b
opencloud-1  | 2026-02-13T07:47:47Z WRN http end="13/Feb/2026:07:47:47 +0000" host=127.0.0.1 host.name=f445b6d315d9 method=GET pkg=rhttp proto=HTTP/1.1 service=ocm size=19 start="13/Feb/2026:07:47:47 +0000" status=404 time_ns=72379 traceid=70871f3dc5610c371acfac22cc11758b uri=/ url=/
opencloud-1  | 2026-02-13T07:47:48Z WRN core access token not set host.name=f445b6d315d9 pkg=rhttp service=frontend traceid=3b21173f320fc7cbbc4c6291d5d9ee35
opencloud-1  | 2026-02-13T07:47:48Z WRN http end="13/Feb/2026:07:47:48 +0000" host=127.0.0.1 host.name=f445b6d315d9 method=GET pkg=rhttp proto=HTTP/1.1 service=frontend size=0 start="13/Feb/2026:07:47:48 +0000" status=401 time_ns=49673 traceid=3b21173f320fc7cbbc4c6291d5d9ee35 uri=/ url=/
opencloud-1  | 2026-02-13T07:56:28Z ERR failed to authenticate the request error="failed to verify access token: token signature is invalid: crypto/rsa: verification error" authenticator=oidc client.address=192.168.1.242 network.peer.address= network.peer.port= path=/ocs/v2.php/apps/notifications/api/v1/notifications/sse service=proxy user_agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"

.env:

INSECURE=true
COMPOSE_FILE=compose.yml:external-proxy/opencloud.yml
OC_DOCKER_IMAGE=opencloudeu/opencloud-rolling
OC_DOMAIN=cloud.domain.com
INITIAL_ADMIN_PASSWORD=admin123
LOG_LEVEL=warn
LOG_PRETTY=true
OC_CONFIG_DIR=./app/config
OC_DATA_DIR=./app/data
OC_APPS_DIR=./app/apps

compose:

services:
  opencloud:
    image: ${OC_DOCKER_IMAGE:-opencloudeu/opencloud-rolling}:${OC_DOCKER_TAG:-latest}
    # changelog: https://github.com/opencloud-eu/opencloud/tree/main/changelog
    # release notes: https://docs.opencloud.eu/opencloud_release_notes.html
    user: ${OC_CONTAINER_UID_GID:-1000:1000}
    networks:
      opencloud-net:
    entrypoint:
      - /bin/sh
    # run opencloud init to initialize a configuration file with random secrets
    # it will fail on subsequent runs, because the config file already exists
    # therefore we ignore the error and then start the opencloud server
    command: ["-c", "opencloud init || true; opencloud server"]
    environment:
      # enable services that are not started automatically
      OC_ADD_RUN_SERVICES: ${START_ADDITIONAL_SERVICES}
      OC_URL: https://${OC_DOMAIN:-cloud.opencloud.test}${TRAEFIK_PORT_HTTPS:+:}${TRAEFIK_PORT_HTTPS:-}
      OC_LOG_LEVEL: ${LOG_LEVEL:-info}
      OC_LOG_COLOR: "${LOG_PRETTY:-false}"
      OC_LOG_PRETTY: "${LOG_PRETTY:-false}"
      # do not use SSL between the reverse proxy and OpenCloud
      PROXY_TLS: "false"
      # INSECURE: needed if OpenCloud / reverse proxy is using self generated certificates
      OC_INSECURE: "${INSECURE:-false}"
      # basic auth (not recommended, but needed for eg. WebDav clients that do not support OpenID Connect)
      PROXY_ENABLE_BASIC_AUTH: "${PROXY_ENABLE_BASIC_AUTH:-false}"
      # demo users
      IDM_CREATE_DEMO_USERS: "${DEMO_USERS:-false}"
      # admin password
      IDM_ADMIN_PASSWORD: "${INITIAL_ADMIN_PASSWORD}"
      # email server (if configured)
      NOTIFICATIONS_SMTP_HOST: "${SMTP_HOST}"
      NOTIFICATIONS_SMTP_PORT: "${SMTP_PORT}"
      NOTIFICATIONS_SMTP_SENDER: "${SMTP_SENDER:-OpenCloud Notifications <notifications@cloud.opencloud.test>}"
      NOTIFICATIONS_SMTP_USERNAME: "${SMTP_USERNAME}"
      NOTIFICATIONS_SMTP_PASSWORD: "${SMTP_PASSWORD}"
      NOTIFICATIONS_SMTP_INSECURE: "${SMTP_INSECURE:-false}"
      NOTIFICATIONS_SMTP_AUTHENTICATION: "${SMTP_AUTHENTICATION}"
      NOTIFICATIONS_SMTP_ENCRYPTION: "${SMTP_TRANSPORT_ENCRYPTION:-none}"
      FRONTEND_ARCHIVER_MAX_SIZE: "10000000000"
      FRONTEND_CHECK_FOR_UPDATES: "${CHECK_FOR_UPDATES:-true}"
      PROXY_CSP_CONFIG_FILE_LOCATION: /etc/opencloud/csp.yaml
      # enable to allow using the banned passwords list
      OC_PASSWORD_POLICY_BANNED_PASSWORDS_LIST: banned-password-list.txt
      # control the password enforcement and policy for public shares
      OC_SHARING_PUBLIC_SHARE_MUST_HAVE_PASSWORD: "${OC_SHARING_PUBLIC_SHARE_MUST_HAVE_PASSWORD:-true}"
      OC_SHARING_PUBLIC_WRITEABLE_SHARE_MUST_HAVE_PASSWORD: "${OC_SHARING_PUBLIC_WRITEABLE_SHARE_MUST_HAVE_PASSWORD:-false}"
      OC_PASSWORD_POLICY_DISABLED: "${OC_PASSWORD_POLICY_DISABLED:-false}"
      OC_PASSWORD_POLICY_MIN_CHARACTERS: "${OC_PASSWORD_POLICY_MIN_CHARACTERS:-8}"
      OC_PASSWORD_POLICY_MIN_LOWERCASE_CHARACTERS: "${OC_PASSWORD_POLICY_MIN_LOWERCASE_CHARACTERS:-1}"
      OC_PASSWORD_POLICY_MIN_UPPERCASE_CHARACTERS: "${OC_PASSWORD_POLICY_MIN_UPPERCASE_CHARACTERS:-1}"
      OC_PASSWORD_POLICY_MIN_DIGITS: "${OC_PASSWORD_POLICY_MIN_DIGITS:-1}"
      OC_PASSWORD_POLICY_MIN_SPECIAL_CHARACTERS: "${OC_PASSWORD_POLICY_MIN_SPECIAL_CHARACTERS:-1}"
      # default language for services/WebUI; defaults to English, language code (ISO 639-1, e.g. de, en, fr)
      OC_DEFAULT_LANGUAGE: ${DEFAULT_LANGUAGE}
#      PROXY_HTTP_ADDR: "0.0.0.0:9200"
    ports:
     - "9201:9200"
    volumes:
      - ./config/opencloud/csp.yaml:/etc/opencloud/csp.yaml
      - ./config/opencloud/banned-password-list.txt:/etc/opencloud/banned-password-list.txt
      # configure the .env file to use own paths instead of docker internal volumes
      - ${OC_CONFIG_DIR:-opencloud-config}:/etc/opencloud
      - ${OC_DATA_DIR:-opencloud-data}:/var/lib/opencloud
      - ${OC_APPS_DIR:-./config/opencloud/apps}:/var/lib/opencloud/web/assets/apps
    logging:
      driver: ${LOG_DRIVER:-local}
    restart: unless-stopped

volumes:
  opencloud-config:
  opencloud-data:

networks:
  opencloud-net: