Server: NC 17 Client login not working because of Content Security Policy directive when using reverse proxy

[IRelaxxx]

Steps to reproduce

1. Use this gist to create Nextcloud and the reverse proxy
2. Setup Nextcloud throughthe browser
3. Try login with the Nextcloud Desktop client

Expected behaviour

The Client Connects to the Sever

Actual behaviour

The login is not happening. Logs show
[unknown Refused to send form data to 'http://cloud.domainname/' because it violates the following Content Security Policy directive: "form-action 'self'". This also happens in Chrome but can be "fixed" by refreshing the site. This is a regression from Nextcloud 16 where this setup worked.

Server configuration

Operating system: Raspbian

Web server: Apache <-> Traefik

Database: SQLite(also happens with MariaDB, SQLite used to keep the compose file small)

PHP version: see nextcloud docker image

Nextcloud version: (see Nextcloud admin page) 17.0.0.9

Updated from an older Nextcloud/ownCloud or fresh install: fresh Install

Where did you install Nextcloud from: dockerhub

Signing status:

No errors have been found.

Login as admin user into your Nextcloud and access 
http://example.com/index.php/settings/integrity/failed 
paste the results here.

List of activated apps:

Apps shipped with Nextcloud 17

If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your Nextcloud installation folder

Nextcloud configuration:

$CONFIG = array (
'htaccess.RewriteBase' => '/',
'memcache.local' => '\OC\Memcache\APCu',
'apps_paths' =>
array (
0 =>
array (
'path' => '/var/www/html/apps',
'url' => '/apps',
'writable' => false,
),
1 =>
array (
'path' => '/var/www/html/custom_apps',
'url' => '/custom_apps',
'writable' => true,
),
),
'instanceid' => 'ockbqgcul8qy',
'trusted_domains' =>
array (
0 => 'cloud.domainname',
),
'datadirectory' => '/var/www/html/data',
'dbtype' => 'sqlite3',
'version' => '17.0.0.9',
'overwrite.cli.url' => 'http://cloud.domainname',
'installed' => true,
'trusted_proxies' =>
array (
0 => 'traefik',
1 => '172.18.0.2',
2 => '192.168.32.2',
),
);

If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your Nextcloud installation folder

or 

Insert your config.php content here. 
Make sure to remove all sensitive content such as passwords. (e.g. database password, passwordsalt, secret, smtp password, …)

Are you using external storage, if yes which one: local/smb/sftp/... no

Are you using encryption: yes/no no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/... no

Client configuration

Browser: Chrome

Operating system: Windows 10

Logs

Web server error log

Web server error log

No log

Nextcloud log (data/nextcloud.log)

Nextcloud log

172.18.0.2 - - [04/Oct/2019:15:13:49 +0000] "GET /login?clear=1 HTTP/1.1" 303 750 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:50 +0000] "GET /apps/files/ HTTP/1.1" 200 8470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:51 +0000] "GET /css/files/4039-6d39-merged.css?v=db81cddf52fdb3c8ca1e4c859e214124-40393716-0 HTTP/1.1" 200 6412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:51 +0000] "GET /css/notifications/daf8-6d39-styles.css?v=db81cddf52fdb3c8ca1e4c859e214124-daf82050-0 HTTP/1.1" 200 1782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:51 +0000] "GET /css/core/68b4-6d39-server.css?v=db81cddf52fdb3c8ca1e4c859e214124-da7df667-0 HTTP/1.1" 200 20094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:51 +0000] "GET /css/core/68b4-6d39-results.css?v=db81cddf52fdb3c8ca1e4c859e214124-da7df667-0 HTTP/1.1" 200 1374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:51 +0000] "GET /css/core/68b4-6d39-css-variables.css?v=db81cddf52fdb3c8ca1e4c859e214124-da7df667-0 HTTP/1.1" 200 1373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:52 +0000] "GET /apps/files_rightclick/css/app.css?v=f645553d-0 HTTP/1.1" 200 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:52 +0000] "GET /apps/gallery/css/slideshow.css?v=e2aed90d-0 HTTP/1.1" 200 1592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:52 +0000] "GET /apps/gallery/css/share.css?v=e2aed90d-0 HTTP/1.1" 200 1609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:52 +0000] "GET /apps/gallery/css/gallerybutton.css?v=e2aed90d-0 HTTP/1.1" 200 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:52 +0000] "GET /css/icons/icons-vars.css?v=1570200781 HTTP/1.1" 200 29012 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:52 +0000] "GET /css/text/7d23-6d39-icons.css?v=db81cddf52fdb3c8ca1e4c859e214124-7d23ff90-0 HTTP/1.1" 200 1283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"



.2 - - [04/Oct/2019:15:13:52 +0000] "GET /css/activity/e2ca-6d39-style.css?v=db81cddf52fdb3c8ca1e4c859e214124-e2ca6b2b-0 HTTP/1.1" 200 1976 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:52 +0000] "GET /apps/notifications/js/notifications.js?v=da7df667-0 HTTP/1.1" 200 74457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:52 +0000] "GET /js/files/merged-index.js?v=da7df667-0 HTTP/1.1" 200 90993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/1.1" 200 2944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /apps/notifications/js/notifications.js.map HTTP/1.1" 200 380206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /apps/files_sharing/js/dist/collaboration.js?v=da7df667-0 HTTP/1.1" 200 1027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /apps/files_trashbin/js/files_trashbin.js?v=da7df667-0 HTTP/1.1" 200 4765 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /apps/files_sharing/js/dist/files_sharing.js?v=da7df667-0 HTTP/1.1" 200 4144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /avatar/user/32?v=0 HTTP/1.1" 201 1210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /apps/comments/js/comments.js?v=da7df667-0 HTTP/1.1" 200 19066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /js/activity/activity-sidebar.js?v=da7df667-0 HTTP/1.1" 200 5905 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /apps/notifications/img/notifications.svg HTTP/1.1" 200 689 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /apps/federatedfilesharing/js/external.js?v=da7df667-0 HTTP/1.1" 200 2072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /apps/files_rightclick/js/script.js?v=da7df667-0 HTTP/1.1" 200 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:53 +0000] "GET /apps/files_versions/js/files_versions.js?v=da7df667-0 HTTP/1.1" 200 9434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:54 +0000] "GET /apps/files_sharing/js/dist/collaboration.js.map HTTP/1.1" 200 2654 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:54 +0000] "GET /apps/files_trashbin/js/files_trashbin.js.map HTTP/1.1" 200 14939 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:54 +0000] "GET /apps/files_rightclick/js/files.js?v=da7df667-0 HTTP/1.1" 200 1564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:54 +0000] "GET /apps/files_sharing/js/dist/additionalScripts.js?v=da7df667-0 HTTP/1.1" 200 7434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:54 +0000] "GET /apps/comments/js/comments.js.map HTTP/1.1" 200 51433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:54 +0000] "GET /js/gallery/scripts-for-file-app.js?v=da7df667-0 HTTP/1.1" 200 56881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:54 +0000] "GET /apps/files_sharing/js/dist/additionalScripts.js.map HTTP/1.1" 200 20519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:55 +0000] "GET /apps/files_sharing/js/dist/files_sharing.js.map HTTP/1.1" 200 13053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:55 +0000] "GET /apps/systemtags/js/systemtags.js?v=da7df667-0 HTTP/1.1" 200 5643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:55 +0000] "GET /apps/recommendations/js/main.js?v=da7df667-0 HTTP/1.1" 200 33422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:55 +0000] "GET /apps/text/js/files.js?v=da7df667-0 HTTP/1.1" 200 13709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:55 +0000] "GET /apps/files_versions/js/files_versions.js.map HTTP/1.1" 200 52520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:55 +0000] "GET /apps/firstrunwizard/js/about.js?v=da7df667-0 HTTP/1.1" 200 583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:55 +0000] "GET /apps/viewer/js/viewer.js?v=da7df667-0 HTTP/1.1" 200 84109 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:55 +0000] "GET /core/js/dist/systemtags.js?v=da7df667-0 HTTP/1.1" 200 6247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:55 +0000] "GET /settings/img/admin.svg?v=da7df667 HTTP/1.1" 200 468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:56 +0000] "GET /settings/img/apps.svg?v=da7df667 HTTP/1.1" 200 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:56 +0000] "GET /apps/recommendations/js/main.js.map HTTP/1.1" 200 138596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:56 +0000] "GET /settings/img/users.svg?v=da7df667 HTTP/1.1" 200 1071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:56 +0000] "GET /apps/systemtags/js/systemtags.js.map HTTP/1.1" 200 17317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:56 +0000] "GET /core/js/dist/systemtags.js.map HTTP/1.1" 200 19593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:56 +0000] "GET /apps/firstrunwizard/img/info.svg?v=da7df667 HTTP/1.1" 200 762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:56 +0000] "GET /apps/text/js/files.js.map HTTP/1.1" 200 37089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:57 +0000] "GET /settings/img/help.svg?v=da7df667 HTTP/1.1" 200 752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:57 +0000] "GET /core/img/actions/logout.svg?v=da7df667 HTTP/1.1" 200 575 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:57 +0000] "GET /apps/files/img/app.svg?v=da7df667 HTTP/1.1" 200 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:57 +0000] "GET /ocs/v2.php/core/whatsnew?format=json HTTP/1.1" 204 644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:57 +0000] "GET /apps/viewer/js/viewer.js.map HTTP/1.1" 200 252054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:57 +0000] "GET /core/img/breadcrumb.svg?v=1 HTTP/1.1" 200 420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:57 +0000] "GET /apps/systemtags/lastused HTTP/1.1" 200 704 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:57 +0000] "GET /apps/gallery/config?extramediatypes=1 HTTP/1.1" 200 834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:57 +0000] "GET /apps/recommendations/api/recommendations HTTP/1.1" 200 1721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:58 +0000] "GET /apps/activity/img/activity.svg?v=da7df667 HTTP/1.1" 200 449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:58 +0000] "GET /logout?requesttoken=%2BBjl%2FoOcHwMkBaqLXnmjQ7U3kv7LWBgXAk%2FPKWbamN4%3D%3AsnnXu%2FOsVmdQdM%2FcZzuVKuNl3aiPamtPUiqCeAe0rJU%3D HTTP/1.1" 303 1446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:58 +0000] "GET /apps/firstrunwizard/img/apps/spreed.svg HTTP/1.1" 200 784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:57 +0000] "PROPFIND /remote.php/dav/files/user/ HTTP/1.1" 207 6526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:58 +0000] "GET /cron.php HTTP/1.1" 200 1533 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:59 +0000] "GET /index.php/apps/files/ajax/getstoragestats.php?dir=%2F HTTP/1.1" 401 833 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:59 +0000] "GET /apps/firstrunwizard/img/apps/mail.svg HTTP/1.1" 200 793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:59 +0000] "GET /apps/firstrunwizard/img/apps/contacts.svg HTTP/1.1" 200 1089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:59 +0000] "GET /apps/gallery/img/app.svg?v=da7df667 HTTP/1.1" 200 803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:59 +0000] "GET /apps/theming/img/core/filetypes/text.svg?v=0 HTTP/1.1" 200 1213 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:59 +0000] "GET /apps/theming/img/core/filetypes/image.svg?v=0 HTTP/1.1" 200 1271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:59 +0000] "GET /apps/theming/img/core/filetypes/folder.svg?v=0 HTTP/1.1" 200 1175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:00 +0000] "GET /core/preview?fileId=11&x=32&y=32 HTTP/1.1" 401 756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:59 +0000] "GET /apps/theming/img/core/filetypes/application-pdf.svg?v=0 HTTP/1.1" 200 1605 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:01 +0000] "GET /apps/firstrunwizard/img/apps/calendar.svg HTTP/1.1" 200 732 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:01 +0000] "GET /core/preview?fileId=15&x=32&y=32 HTTP/1.1" 401 756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:01 +0000] "GET /core/preview?fileId=14&x=32&y=32 HTTP/1.1" 401 756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:01 +0000] "GET /login?clear=1 HTTP/1.1" 303 752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:01 +0000] "GET /core/preview?fileId=17&x=32&y=32 HTTP/1.1" 401 756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:01 +0000] "GET /core/preview?fileId=8&c=cc9da3dbede1f01624d26e6ae31ae1dc&x=250&y=250&forceIcon=0 HTTP/1.1" 401 756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:01 +0000] "GET /login?clear=1 HTTP/1.1" 200 4431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:01 +0000] "GET /core/preview?fileId=16&x=32&y=32 HTTP/1.1" 401 756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:01 +0000] "GET /apps/theming/styles?v=0 HTTP/1.1" 200 1260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:13:59 +0000] "GET /apps/theming/img/core/filetypes/video.svg?v=0 HTTP/1.1" 200 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:02 +0000] "GET /core/css/guest.css?v=da7df667-0 HTTP/1.1" 200 5558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:02 +0000] "GET /apps/files_pdfviewer/css/style.css?v=ca9f0d77-0 HTTP/1.1" 200 522 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:02 +0000] "GET /core/js/dist/main.js?v=da7df667-0 HTTP/1.1" 200 386368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:02 +0000] "GET /core/js/backgroundjobs.js?v=da7df667-0 HTTP/1.1" 200 886 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:02 +0000] "GET /core/search/js/search.js?v=da7df667-0 HTTP/1.1" 200 1931 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:02 +0000] "GET /core/js/dist/share_backend.js?v=da7df667-0 HTTP/1.1" 200 22204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /js/core/merged-template-prepend.js?v=da7df667-0 HTTP/1.1" 200 3824 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /core/img/background.png?v=2 HTTP/1.1" 200 102970 "https://cloud.domainname/core/css/guest.css?v=da7df667-0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /apps/files_pdfviewer/js/previewplugin.js?v=da7df667-0 HTTP/1.1" 200 2499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /apps/files_videoplayer/js/main.js?v=da7df667-0 HTTP/1.1" 200 2959 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /core/search/js/searchprovider.js?v=da7df667-0 HTTP/1.1" 200 3994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /apps/theming/js/theming?v=0 HTTP/1.1" 200 984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /apps/files_videoplayer/js/main.js.map HTTP/1.1" 200 7543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /core/js/dist/share_backend.js.map HTTP/1.1" 200 65775 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /apps/accessibility/js/accessibility?v=0 HTTP/1.1" 200 816 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:04 +0000] "GET /core/js/files/fileinfo.js?v=da7df667-0 HTTP/1.1" 200 1177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:04 +0000] "GET /core/js/files/client.js?v=da7df667-0 HTTP/1.1" 200 5942 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /svg/core/logo/logo?color=fff&v=1 HTTP/1.1" 200 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:04 +0000] "GET /core/js/dist/login.js?v=da7df667-0 HTTP/1.1" 200 177255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:03 +0000] "GET /core/js/dist/main.js.map HTTP/1.1" 200 1155424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:05 +0000] "GET /core/img/actions/confirm-white.svg?v=2 HTTP/1.1" 200 638 "https://cloud.domainname/core/css/guest.css?v=da7df667-0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:04 +0000] "GET /core/js/dist/login.js.map HTTP/1.1" 200 620586 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
172.18.0.2 - - [04/Oct/2019:15:14:05 +0000] "GET /cron.php HTTP/1.1" 200 876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
127.0.0.1 - - [04/Oct/2019:15:14:09 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.38 (Debian) PHP/7.3.10 (internal dummy connection)"
127.0.0.1 - - [04/Oct/2019:15:14:10 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.38 (Debian) PHP/7.3.10 (internal dummy connection)"
172.18.0.2 - - [04/Oct/2019:15:14:09 +0000] "POST /login HTTP/1.1" 303 1123 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
127.0.0.1 - - [04/Oct/2019:15:14:18 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.38 (Debian) PHP/7.3.10 (internal dummy connection)"

Browser log

Browser log

[unknown    Refused to send form data to 'http://cloud.domainname/' because it violates the following Content Security Policy directive: "form-action 'self'".

[kesselb]

Might be fixed by https://github.com/nextcloud/server/pull/17411

[kinolaev]

I think it is not related, I see that grant form target is http://cloud.domainname/ but in nextcloud log I see https://cloud.domainname/, so form submission maybe be blocked because of different schemes. If I'm right then It is not bug.

[IRelaxxx]

I think it is not related, I see that grant form target is http://cloud.domainname/ but in nextcloud log I see https://cloud.domainname/, so form submission maybe be blocked because of different schemes. If I'm right then It is not bug.

This behavior is an regression from NC 16. It seems to a problem lies with using the reverse proxy to upgrade http to https.

[kinolaev]

It is not regression, I think, CSP directive form-action 'self' added intentionally. I suppose your problem is that nextcloud doesn't know that it was accessed through https. Maybe traefik don't add X-Forwarded-Proto header. You can try to add 'overwriteprotocol' => 'https' to your config and see if problem persists.

I use php-fpm with nginx and chrome doesn't block grant form submission (because of fastcgi_param HTTPS on; in config).

[IRelaxxx]

It is not regression, I think, CSP directive form-action 'self' added intentionally. I suppose your problem is that nextcloud doesn't know that it was accessed through https. Maybe traefik don't add X-Forwarded-Proto header. You can try to add 'overwriteprotocol' => 'https' to your config and see if problem persists.

I use php-fpm with nginx and chrome doesn't block grant form submission.

I tried enabling ssl with a self signed certificate and traefik redirecting to 443 which didnt work. But 'overwriteprotocol' => 'https' worked, thanks.

[AleksanderGrzybowski]

I have nextcloud running in k8s behing nginx ingress, and overwriteprotocol did the trick for me :) thanks!

[jasonkuehl]

@AleksanderGrzybowski Same! Thank you all.