400使用Traefik v2和NextcloudPi的错误请求

Question

我尝试在Traefik后面运行我的NextcloudPi-Docker安装，以允许服务器上有更多的服务，并确保对所有这些服务进行简单的SSL加密。

我没有使用Traefik的Nextcloudpi的docker-compose.yml是这样的：

version: '3'

services:
  nextcloud:
    image: ownyourbits/nextcloudpi-armhf
    container_name: nextcloud
    restart: unless-stopped
    networks:
      - proxy
    volumes:
      - /media/external_1/nextcloud:/data
      - /media/external_1/backup:/backup
    ports:
      - 80:80
      - 443:443

这很好用，我现有的安装开始得很顺利。

当我用它的docker-compose.yml启动Traefik时，我可以打开仪表板，没有问题。我还尝试了Portainer，作为Traefik的一个路由，它是有效的，但我不想让它变得更复杂，所以我仍然使用基于文本的配置。

Traefik的docker-compose.yml

version: '3'

services:
  traefik:
    image: traefik:v2.0
    container_name: traefik
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      - proxy
    ports:
      - 80:80
      - 443:443
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./data/traefik.yml:/traefik.yml:ro
      - ./data/acme.json:/acme.json
      - ./logs:/logging
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.entrypoints=http"
      - "traefik.http.routers.traefik.rule=Host(`sub.domain.tld`)"
      - "traefik.http.middlewares.traefik-auth.basicauth.users=<user>:<password>
      - "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
      - "traefik.http.routers.traefik-secure.entrypoints=https"
      - "traefik.http.routers.traefik-secure.rule=Host(`sub.domain.tld`)"
      - "traefik.http.routers.traefik-secure.middlewares=traefik-auth"
      - "traefik.http.routers.traefik-secure.tls=true"
      - "traefik.http.routers.traefik-secure.tls.certresolver=http"
      - "traefik.http.routers.traefik-secure.service=api@internal"

networks:
  proxy:
    external: true

NextcloudPi docker-compose.yml

version: '3'

services:
  nextcloud:
    image: ownyourbits/nextcloudpi-armhf
    container_name: nextcloud
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      - proxy
    volumes:
      - /media/external_1/nextcloud:/data
      - /media/external_1/backup:/backup
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.nextcloud.entrypoints=http"
      - "traefik.http.routers.nextcloud.rule=Host(`sub.domain.tld`)"
      - "traefik.http.middlewares.nextcloud-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.nextcloud.middlewares=nextcloud-https-redirect"
      - "traefik.http.routers.nextcloud-secure.entrypoints=https"
      - "traefik.http.routers.nextcloud-secure.rule=Host(`sub.domain.tld`)"
      - "traefik.http.routers.nextcloud-secure.tls=true"
      - "traefik.http.routers.nextcloud-secure.tls.certresolver=http"
      - "traefik.http.routers.nextcloud-secure.service=nextcloud"
      - "traefik.http.services.nextcloud.loadbalancer.server.port=443"
      - "traefik.docker.network=proxy"

networks:
  proxy:
    external: true

access.log的输出如下：

151.177.45.100 - - [07/Mar/2020:15:20:44 +0000] "GET /status.php HTTP/1.1" 400 362 "-" "-" 22 "nextcloud-secure@docker" "http://172.19.0.4:443" 5ms
151.177.45.100 - - [07/Mar/2020:15:21:16 +0000] "GET /status.php HTTP/1.1" 400 362 "-" "-" 23 "nextcloud-secure@docker" "http://172.19.0.4:443" 3ms
151.177.45.100 - - [07/Mar/2020:15:21:48 +0000] "GET /status.php HTTP/1.1" 400 362 "-" "-" 24 "nextcloud-secure@docker" "http://172.19.0.4:443" 9ms
151.177.45.100 - - [07/Mar/2020:15:22:09 +0000] "GET / HTTP/2.0" 400 362 "-" "-" 25 "nextcloud-secure@docker" "http://172.19.0.4:443" 8ms

和traefik.yml

api:
  dashboard: true

entryPoints:
  http:
    address: ":80"
  https:
    address: ":443"

providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false

certificatesResolvers:
  http:
    acme:
      email: email@address.com
      storage: acme.json
      httpChallenge:
        entryPoint: http
log:
  filePath: "/logging/traefik.log"
  format: json
  level: DEBUG

# Configuring a buffer of 100 lines
accessLog:
  filePath: "/logging/access.log"
  bufferingSize: 100

我不知道我做错了什么，我使用与没有Traefik相同的域名，正如我所说的，其他服务在它上面工作得很好。我甚至尝试创建一个新的NextcloudPi实例，但也不起作用。如果有任何帮助，我将不胜感激！

Answer 1

从日志中，我可以说这个问题的根本原因是以下原因之一

1- nextcloud服务没有侦听端口443，这就是您收到400错误的原因。您需要修改此行以修复它

   - "traefik.http.services.nextcloud.loadbalancer.server.port=443"

2-请求且未由nextcloud提供服务，这是因为您使用相同的规则(主机名)来管理不同的服务

- "traefik.http.routers.traefik-secure.rule=Host(`sub.domain.tld`)"

有关详细信息，请查看此post