Failed to load Nextcloud Office - Please try again later

[Nuliel]

Hello,
I have a problem with the latest version of nextcloud image: nextcloud office doesn't work and it's impossible to view an ods/docx file.

Steps to reproduce:
sudo docker run -d -p 8080:80 nextcloud
then go to localhost:8080, set a username/password, click on Install, choose to install recommended applications, then try to open a docx file, the error "Failed to load Nextcloud Office - Please try again later" will appear after some seconds.

I've also found this error during load of docx

$ docker exec --user www-data ad6d4036f59c php occ log:watch

Error    richdocuments      GuzzleHttp\Exception\ConnectException: 2023-07-17T17:03:51+00:00 
                              cURL error 7: Failed                             
                              to connect to                                    
                              localhost port 8080:                             
                              Connection refused                               
                              (see                                             
                              https://curl.haxx.se/libcurl/c/libcurl-errors.html)                           
                              for                                              
                              http://localhost:8080/custom_apps/richdocumentscode/proxy.php?req=/hosting/capabilities                           
                              at                                               
                              .../guzzlehttp/guzzle/src/Handler/CurlFactory.php                           
                              line 210
...

This error is repeated many times.

I've seen problems with firewall during my research into the error I encounter. I don't have configured iptables, so it's the default configuration made by docker:

$ sudo iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy DROP)
target     prot opt source               destination         
DOCKER-USER  all  --  anywhere             anywhere            
DOCKER-ISOLATION-STAGE-1  all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
DOCKER     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
DOCKER     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
DOCKER     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
DOCKER     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain DOCKER (4 references)
target     prot opt source               destination         
ACCEPT     tcp  --  anywhere             172.17.0.2           tcp dpt:http

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
target     prot opt source               destination         
DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere            
DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere            
DROP       all  -- !172.19.0.0/16        anywhere            
DROP       all  --  anywhere            !172.19.0.0/16       
DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere            
DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere            
RETURN     all  --  anywhere             anywhere            

Chain DOCKER-ISOLATION-STAGE-2 (4 references)
target     prot opt source               destination         
DROP       all  --  anywhere             anywhere            
DROP       all  --  anywhere             anywhere            
DROP       all  --  anywhere             anywhere            
DROP       all  --  anywhere             anywhere            
RETURN     all  --  anywhere             anywhere            

Chain DOCKER-USER (1 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere

Edit: I also tried to connect to localhost from a httpd container, and it works well. So I don't think the problem is related to the firewall.

My version of docker: Docker version 20.10.21, build 20.10.21-0ubuntu1~20.04.2
OS: ubuntu 20.04

[joshtrichards]

That's because you remapped 80->8080 outside your container, but inside your container 80 remains the port from NC Office's perspective (since it runs inside the container).

There are a couple ways of addressing this, but without a reverse proxy the easiest would be to change the -p 8080:80 to -p 80:80.