From 0f666d2d4b27c2b3bc283d9eeeaab25efdd6cd0f Mon Sep 17 00:00:00 2001 From: "Simon L." Date: Tue, 25 Aug 2026 13:46:40 +0200 Subject: [PATCH 1/2] change Caddy ACME profile to shortlived Signed-off-by: Simon L. --- Containers/apache/Caddyfile | 2 +- Containers/nextcloud/entrypoint.sh | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/Containers/apache/Caddyfile b/Containers/apache/Caddyfile index a9169a89..0fafb46f 100644 --- a/Containers/apache/Caddyfile +++ b/Containers/apache/Caddyfile @@ -89,7 +89,7 @@ http://{$APACHE_HOST}.nextcloud-aio:23973, # For Collabora callback and WOPI req # TLS options tls { issuer acme { - profile tlsserver + profile shortlived # Disable HTTP challenge because that would require port 80, which we don't get (it's exposed to the mastercontainer). # This container by default only exposes port 443 if not configured otherwise via APACHE_PORT. disable_http_challenge diff --git a/Containers/nextcloud/entrypoint.sh b/Containers/nextcloud/entrypoint.sh index c3fddad5..99d9fdf8 100644 --- a/Containers/nextcloud/entrypoint.sh +++ b/Containers/nextcloud/entrypoint.sh @@ -947,6 +947,8 @@ if [ "$TALK_ENABLED" = 'yes' ]; then elif [ "$SKIP_UPDATE" != 1 ]; then php /var/www/html/occ app:update spreed fi + # We auto-renew the certs via caddy so the outdated cert warning should not be displayed + php /var/www/html/occ config:app:set certificate_expiration_days --type int --value="0" # Add turn server # shellcheck disable=SC2153 if ! php /var/www/html/occ talk:turn:list --output="plain" | grep server | grep -q " $TURN_DOMAIN:$TALK_PORT"; then From 3e3ce552f0f7ebdf7a87abb7a46b87f1a4a334fd Mon Sep 17 00:00:00 2001 From: "Simon L." Date: Wed, 26 Aug 2026 11:24:15 +0200 Subject: [PATCH 2/2] Update Containers/nextcloud/entrypoint.sh Co-authored-by: Zoey Signed-off-by: Simon L. --- Containers/nextcloud/entrypoint.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Containers/nextcloud/entrypoint.sh b/Containers/nextcloud/entrypoint.sh index 99d9fdf8..b95fa29f 100644 --- a/Containers/nextcloud/entrypoint.sh +++ b/Containers/nextcloud/entrypoint.sh @@ -948,7 +948,7 @@ if [ "$TALK_ENABLED" = 'yes' ]; then php /var/www/html/occ app:update spreed fi # We auto-renew the certs via caddy so the outdated cert warning should not be displayed - php /var/www/html/occ config:app:set certificate_expiration_days --type int --value="0" + php /var/www/html/occ config:app:set spreed certificate_expiration_days --type=integer --value="2" # Add turn server # shellcheck disable=SC2153 if ! php /var/www/html/occ talk:turn:list --output="plain" | grep server | grep -q " $TURN_DOMAIN:$TALK_PORT"; then