nextcloud / nextcloud/nextcloudpi

Page http://nextcloud is Forbidden before activation becouse of router dhcpv6

Open
#2,036 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

has-updates
Dominant language
Shell
Stars
2.9k
Forks
318
PR merge metrics
No merged PRs in 30d

Description

System information
Page http://nextcloudpi is Forbidden before activation

The problem is in /etc/apache2/sites-enabled/ncp.conf
Because I use router with IPv6 with global IPv6 assignment. But there is no rule in apache to manage local or global ipv6 restriction. The solution is to replace with this

….
Require all granted

But then we have a security issue (Page of activation is exposed from the internet). To solve this, we need to move the activation page to url https://nextcloudpi:4443/. On url https://nextcloudpi/ we have to implement automatic redirect to url https://nextcloudpi:4443/ to activation page. So user do first run go https://nextcloudpi/ and Activation page is not exposed to internet from router forwarding port.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Inspect /etc/apache2/sites-enabled/ncp.conf and reproduce the Forbidden response with a router assigning global IPv6 addresses. Compare the IPv6 access restriction with the proposed Require all granted behavior, then verify that activation is available at https://nextcloudpi:4443/ while the HTTP entry point redirects without exposing activation through router port forwarding.

Written by the indexing model from the issue text.

Assessment

Tech stack
apache
Domain
networking, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.