Succefull Installation but not possible to Login

[DeEichhorn]

Hello, Installed opencloud on unraid. if i try to login i get only following message:

i look allready in the logs, where i found informations about an bad certificate ?
dont found anything to fix this. someone here can help ?

[micbar]

Please open the browser console and post the error.

[micbar]

Normally this is due to a misconfiguration of the OC_URL.

OC_URL needs to be the publicly available URL with protocol and port and it should be also reachable from the openCloud container.

[DeEichhorn]

you mean the console in unraid ?

2025/03/19 13:01:58 http: TLS handshake error from IP :64878: remote error: tls: bad certificate {"level":"error","service":"proxy","error":"failed to verify access token: Get \"https://IP:9200/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate is valid for localhost, not IP","authenticator":"oidc","path":"/graph/v1.0/me","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","client.address":"","network.peer.address":"IP","network.peer.port":"60214","time":"2025-03-19T13:01:58Z","message":"failed to authenticate the request"} 2025/03/19 13:01:58 http: TLS handshake error from IP:63833: remote error: tls: bad certificate {"level":"error","service":"proxy","error":"failed to verify access token: Get \"IP:9200/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate is valid for localhost, not IP","authenticator":"oidc","path":"/ocs/v2.php/apps/notifications/api/v1/notifications/sse","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","client.address":"","network.peer.address":"IP","network.peer.port":"60214","time":"2025-03-19T13:02:41Z","message":"failed to authenticate the request"} 2025/03/19 13:02:41 http: TLS handshake error from IP:61649: remote error: tls: bad certificate 2025/03/19 13:02:55 http: TLS handshake error from IP:65194: remote error: tls: unknown certificate

[Skorpi08]

kannst du erklären/zeigen wie du es installiert hast? Weiter als hier komme ich nicht, auch auf unraid 7.0

[DeEichhorn]

das hab ich auch wenn ich über unraid auf das webui gehen will, greiff ich aber über die internet ip drauf zu mit dem dazugehörigen port, komme ich auf den loginscreen, wo ich aber auch nicht weiter komme leider

[micbar]

If you explain how you have done the setup, we can help.

It is very likely a domain&dns issue.

The error message above says something about a wrong ssl cert.

But if you get the web screen from your screenshot, something fundamental is wrong with your config.

[DeEichhorn]

ok, and how can i setup this ssl cert ?

[perdicaro]

i have same problem

[micbar]

We need more details to help you.

From a first look, it seems that there is a mismatch between OC_URL=https://your-cloud.net and what you have in your browser URL.

OC_URL always needs to be set to the publicly available URL.

E.G if you set it to the default, which is https://localhost:9200 you can only access the cloud on this host and port.

If you use a reverse proxy to a public URL, you need to change the OC_URL to match the public url.

Normally it is something like https://your.cloud.net (Port 443 doesn't need to be added)

[perdicaro]

[micbar]

okay. Next step: open the developer view in the Browser and try to login. Check the failing request in the network tab and post the error here?

[perdicaro]

[micbar]

Can you still see {"level":"error","service":"proxy","error":"failed to verify access token: Get \"https://IP:9200/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate is valid for localhost, not IP","authenticator":"oidc","path":"/graph/v1.0/me","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","client.address":"","network.peer.address":"IP","network.peer.port":"60214","time":"2025-03-19T13:01:58Z","message":"failed to authenticate the request"} in the logs? Then you need to set INSECURE: true.

[perdicaro]

thanks for your help, it works now

[DeEichhorn]

after i set insecure to True i get this in the log

[zenkraker]

I get a similar issue, Installation went well, but when trying to login I can insert username and password but this is the logs of opencloud:
ERR failed to authenticate the request | service=proxy error=failed to verify access token: Get "https://cloak.home.my-domain.com/realms/openCloud/.well-known/openid-configuration": context deadline exceeded (Client.Timeout exceeded while awaiting headers) authenticator=oidc path=/ocs/v1.php/cloud/capabilities user_agent=Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0 client.address=192.168.10.193 network.peer.address= network.peer.port= line=github.com/opencloud-eu/opencloud/services/proxy/pkg/middleware/oidc_auth.go:198

[zenkraker]

keycloak and opencloud both have their own domain

[kashalls]

Did you ever figure this out @zenkraker ? I'm seeing this as well in a default installation. With the self-managed IdP.

[comet424]

hi i have the same problem.. i followed a video to install this on Unraid Server i installed opencloudeu set my paths i ran

root@Tardis:~# mkdir -p '/mnt/user/Family Files/opencloud'
root@Tardis:~# mkdir -p '/mnt/user/Family Files/opencloud/data'
root@Tardis:~# chmod -R 1000:1000 /mnt/unraid_files/appdata/opencloud/config
chmod: invalid mode: ‘1000:1000’
Try 'chmod --help' for more information.
root@Tardis:~# chown -R 1000:1000 /mnt/unraid_files/appdata/opencloud/config
root@Tardis:~# chown -R 1000:1000 '/mnt/user/Family Files/opencloud'
root@Tardis:~# find /mnt/unraid_files/appdata/opencloud -type d -exec chmod 751 {} \;

i setup in dns resolver in pfsense to point to example.com address to point to my cotainer.. i get the error
missing or invalid config.
the log file says

2026/02/18 00:42:40 Could not create config: config file already exists, use --force-overwrite to overwrite or --diff to show diff
2026/02/18 00:43:15 http: TLS handshake error from 192.168.0.49:57365: remote error: tls: unknown certificate
2026/02/18 00:43:15 http: TLS handshake error from 192.168.0.49:53786: remote error: tls: unknown certificate
2026/02/18 00:43:15 http: TLS handshake error from 192.168.0.49:55621: remote error: tls: unknown certificate
2026/02/18 00:43:25 http: TLS handshake error from 192.168.0.49:50729: remote error: tls: unknown certificate
2026/02/18 00:43:25 http: TLS handshake error from 192.168.0.49:64790: remote error: tls: unknown certificate
2026/02/18 00:43:25 http: TLS handshake error from 192.168.0.49:54665: remote error: tls: unknown certificate
2026/02/18 00:43:29 http: TLS handshake error from 192.168.0.49:56818: remote error: tls: unknown certificate
2026/02/18 00:43:29 http: TLS handshake error from 192.168.0.49:62091: remote error: tls: unknown certificate
2026/02/18 00:43:29 http: TLS handshake error from 192.168.0.49:59547: remote error: tls: unknown certificate
2026/02/18 00:43:29 http: TLS handshake error from 192.168.0.49:49482: remote error: tls: unknown certificate

Command execution
docker run
  -d
  --name='opencloud'
  --net='bridge'
  --pids-limit 2048
  -e TZ="America/New_York"
  -e HOST_OS="Unraid"
  -e HOST_HOSTNAME="Tardis"
  -e HOST_CONTAINERNAME="opencloud"
  -e 'OC_URL'='https://<my dns address>'
  -e 'IDM_ADMIN_PASSWORD'='password'
  -e 'OC_INSECURE'='false'
  -e 'FRONTIER_DISABLE_RADICALE'='true'
  -e 'PROXY_ENABLE_BASIC_AUTH'='false'
  -e 'NOTIFICATIONS_SMTP_SENDER'=''
  -e 'NOTIFICATIONS_SMTP_USERNAME'=''
  -e 'NOTIFICATIONS_SMTP_HOST'=''
  -e 'NOTIFICATIONS_SMTP_PORT'='587'
  -e 'NOTIFICATIONS_SMTP_PASSWORD'=''
  -e 'NOTIFICATIONS_SMTP_ENCRYPTION'='starttls'
  -e 'COLLABORA_DOMAIN'=''
  -e 'ONLYOFFICE_DOMAIN'=''
  -e 'START_ADDITIONAL_SERVICES'='"notifications"'
  -l net.unraid.docker.managed=dockerman
  -l net.unraid.docker.webui='https://[IP]:[PORT:9200]'
  -l net.unraid.docker.icon='https://avatars.githubusercontent.com/u/188916550?s=200&v=4'
  -p '9200:9200/tcp'
  -v '/mnt/unraid_files/appdata/opencloud/config':'/etc/opencloud':'rw'
  -v '/mnt/user/Family Files/opencloud/data':'/var/lib/opencloud':'rw'
  --entrypoint /bin/sh 'opencloudeu/opencloud-rolling'
  -c "opencloud init || true; opencloud server"
b4f44daec034f77c5b8bea14f336b0d802051301af259699d2b77f1aead313b5

The command finished successfully!

i changed my dns address above

so how you suppsed to fix this is there something else you need to install?

[micbar]

It cannot connect from the web ui to the backend url. Something is wrong with your dns. All domains need to be resolvable in the same way for all devices and from inside all containers. OpenCloud needs to connect to it’s own public domain.