Hi Guys, I have three identical Nextcloud servers in operation. A haproxy takes the round robin. In principle everything works, but only almost.
When im surfing the proxy, im reaching one of the server. However, the login does not work. I surf the individual server directly, everything works flawlessly. I have noticed that when I log on to the proxy and try to log in, it takes a moment and then I redirected to other nextcloud instance. The url chances from: http://SERVER/index.php/login <http://server/index.php/login> --> http://SERVER/index.php/login?redirect_url=/index.php/apps/files/ <http://server/index.php/login?redirect_url=/index.php/apps/files/> Config: #####################START##################### global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats socket /run/haproxy/admin.sock mode 660 level admin stats timeout 30s user haproxy group haproxy daemon maxconn 4096 tune.ssl.default-dh-param 2048 # Default SSL material locations ca-base /etc/ssl/certs crt-base /etc/ssl/private # Default ciphers to use on SSL-enabled listening sockets. # For more information, see ciphers(1SSL). This list is from: # https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/ ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS ssl-default-bind-options no-sslv3 defaults log global mode http option forwardfor option http-server-close option httplog option dontlognull stats enable stats uri /stats stats realm Haproxy\ Statistics stats auth user:password! timeout connect 5000 timeout client 50000 timeout server 50000 errorfile 400 /etc/haproxy/errors/400.http errorfile 403 /etc/haproxy/errors/403.http errorfile 408 /etc/haproxy/errors/408.http errorfile 500 /etc/haproxy/errors/500.http errorfile 502 /etc/haproxy/errors/502.http errorfile 503 /etc/haproxy/errors/503.http errorfile 504 /etc/haproxy/errors/504.http frontend www-http bind SERVERROXY:80 reqadd X-Forwarded-Proto:\ http default_backend www-backend frontend www-https bind SERVERROXY:443 ssl crt /etc/ssl/private/SERVER.pem reqadd X-Forwarded-Proto:\ https default_backend www-backend backend www-backend balance roundrobin redirect scheme https if !{ ssl_fc } server nxtcl1 SERVER:80 check server nxtcl2 SERVER:80 check server nxtcl3 SERVER:80 check #####################END##################### I guess i have to do some header or cookie manipulation. But im really helpless at this time. I hope you can help me! Best regards! Micha
smime.p7s
Description: S/MIME Cryptographic Signature
