Apache IP Binding with IPv6

[PlayerSchark]

Steps to reproduce

1. Setup a reverse Proxy by following the steps on https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
2. in docker set the environment variable APACHE_IP_BINDING=[::]
3. Start the AIO

Expected behavior

Apache should bind to [::]

Actual behavior

Error message:
You provided an ip-address for the apache container's ip-binding but it was not a valid ip-address.
It is set to '[::]'.

Host OS

Alpine Linux v3.13

Nextcloud AIO version

nextcloud/all-in-one:latest

Current channel

You are running the latest channel

Other valuable info

The host runs behind a reverse proxy

[szaimen]

Hi, may I ask why 127.0.0.1 is not sufficient for you?

[PlayerSchark]

Thanks for your reply.

Well, there are two main reasons for that.

1. it's Ipv4 and I think [::1] won't work either. This is the main reason. Since multiple years Ipv4 should be replaced with Ipv6. And this topic becomes more important these days.

This is only recommended to be set if you use localhost in your reverse proxy config to connect to your AIO instance. If you use an ip-address instead of localhost, you should set it to 0.0.0.0.
https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md

As per documentation, if you run behind a reverse proxy and nextcloud is being targeted by an IP you should use 0.0.0.0

Nextcloud AIO in general seems to support IPv6 https://github.com/nextcloud/all-in-one/blob/main/docker-ipv6-support.md

[Zoey2936]

all-in-one/Containers/mastercontainer/start.sh

Line 182 in 9d640fa

if ! echo "$APACHE_IP_BINDING" | grep -q '^[0-9.]\+$'; then

would changing this regex not be enough to fix it?

[szaimen]

would changing this regex not be enough to fix it?

We would need to make sure that the [] are not given to docker because it will bug out IIRC...

[Zoey2936]

compose supports [], so you mean that they need to be escaped?

    ports:
      - "127.0.0.1:53:53/tcp"
      - "127.0.0.1:53:53/udp"
      - "[::1]:53:53/tcp"
      - "[::1]:53:53/udp"
      - "192.168.168.3:53:53/tcp"
      - "192.168.168.3:53:53/udp"

[szaimen]

# docker run --name test -p [::]:81:80 alpine
# docker inspect test
...
            "PortBindings": {
                "80/tcp": [
                    {
                        "HostIp": "::",
                        "HostPort": "81"
                    }
                ]
            },
...

[PlayerSchark]

As per RFC-5952 (update of RFC-4291)It seems to be enough without [] as long as you don't use a Port. So what about rejection of the [] format?

[Zoey2936]

all-in-one/Containers/mastercontainer/start.sh

Line 182 in 9d640fa

if ! echo "$APACHE_IP_BINDING" | grep -q '^[0-9.]\+$'; then

would changing this regex not be enough to fix it?

I've added : to the regex, and set "APACHE_IP_BINDING=::1", restarted the containers and:

[szaimen]

all-in-one/Containers/mastercontainer/start.sh

Line 182 in 9d640fa

if ! echo "$APACHE_IP_BINDING" | grep -q '^[0-9.]\+$'; then

would changing this regex not be enough to fix it?

I've added : to the regex, and set "APACHE_IP_BINDING=::1", restarted the containers and:

All right! Would someone be able to adjust the regex then? :)
PRs are welcome!

[szaimen]

This is now released with v7.4.0 Beta. Testing and feedback is welcome! See https://github.com/nextcloud/all-in-one#how-to-switch-the-channel

[PlayerSchark]

Currently I use the beta channel and everything seems to work fine.

I may mention that it wasn't enough to set APACHE_IP_BINDING to IPv6 to fully support IPv6.
I also had to follow the steps on https://github.com/nextcloud/all-in-one/blob/main/docker-ipv6-support.md because i ran into the following error. But because of good documentation it was easy to solve the problem.

NOTICE: PHP message: Could not get digest of container nextcloud/aio-postgresql:beta cURL error 6: Could not resolve host: auth.docker.io (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://auth.docker.io/token?service=registry.docker.io&scope=repository:nextcloud/aio-postgresql:pull

I looking forward to see it on the latest channel.