NS8 Onlyoffice "download failed" error

NethServer Version: 8 Debian 12
Module: Onlyoffice 1.1.3

I have installed the Nextcloud and OnlyOffice modules. I have both configured with their own FQDs and Let’s Encrypt certs. I have the Nextcloud OnlyOffice connector enabled and configured. I have configured an external storage option in Nextcloud using an SMB/CIFS share, allowing users to access files through the share; however, when they try to open a document, they receive the error “download failed.” Any help with solving this matter would be greatly appreciated.

Nextcloud Log

2025-12-09T08:30:45-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:45 +0000 “POST /index.php” 200 2025-12-09T08:30:46-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:46 +0000 “GET /index.php” 200 2025-12-09T08:30:46-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:46 +0000 “GET /index.php” 200 2025-12-09T08:30:47-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:47 +0000 “GET /ocs/v2.php” 200 2025-12-09T08:30:47-05:00 [1:nextcloud1:nextcloud-nginx] 2025/12/09 13:30:47 [warn] 31#31: *1818 an upstream response is buffered to a temporary file /var/cache/nginx/fastcgi_temp/4/00/0000000004 while reading upstream, client: XXX.XXX.XXX.XXX, server: , request: “GET /apps/onlyoffice/download?doc=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhY3Rpb24iOiJkb3dubG9hZCIsImZpbGVJZCI6MTEsInVzZXJJZCI6ImFkbWluIn0.HsZAymyNVaMbTXTz_vnAt6lDbuo31MRUaCj16Yfr5W8 HTTP/1.1”, upstream: “fastcgi://127.0.0.1:9000”, host: “mycloud.xxxxx.net” 2025-12-09T08:30:47-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:47 +0000 “GET /index.php” 200 2025-12-09T08:30:47-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:47 +0000 “GET /index.php” 200 2025-12-09T08:30:49-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:48 +0000 “GET /index.php” 200 2025-12-09T08:30:49-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:49 +0000 “POST /index.php” 200 2025-12-09T08:30:49-05:00 [1:nextcloud1:nextcloud-nginx] 2025/12/09 13:30:49 [warn] 31#31: *1813 an upstream response is buffered to a temporary file /var/cache/nginx/fastcgi_temp/5/00/0000000005 while reading upstream, client: 173.162.22.77, server: , request: “GET /apps/onlyoffice/download?doc=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhY3Rpb24iOiJkb3dubG9hZCIsImZpbGVJZCI6MTEsInVzZXJJZCI6ImFkbWluIn0.HsZAymyNVaMbTXTz_vnAt6lDbuo31MRUaCj16Yfr5W8 HTTP/1.1”, upstream: “fastcgi://127.0.0.1:9000”, host: “mycloud.xxxxx.net” 2025-12-09T08:30:49-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:49 +0000 “GET /index.php” 200 2025-12-09T08:30:51-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:50 +0000 “POST /index.php” 200 2025-12-09T08:30:53-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:53 +0000 “POST /index.php” 200 2025-12-09T08:30:56-05:00 [1:nextcloud1:nextcloud-app] 127.0.0.1 - 09/Dec/2025:13:30:56 +0000 “POST /index.php” 200

OnlyOffice_logs

2025-12-09T05:08:01-05:00 [1:onlyoffice3:onlyoffice-app]2025-12-09T05:08:01-05:00 [1:onlyoffice3:onlyoffice-app] ==> /var/log/onlyoffice/documentserver/docservice/out.log <==2025-12-09T05:08:01-05:00 [1:onlyoffice3:onlyoffice-app] [2025-12-09T10:08:01.730] [WARN] [localhost] [docId] [userId] nodeJS - checkJwt error: name = JsonWebTokenError message = invalid signature token = eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhc3luYyI6ZmFsc2UsInVybCI6Imh0dHBzOi8vbXljbG91ZC5idXJraGFsdGVybGF3Lm5ldC9hcHBzL29ubHlvZmZpY2UvZG93bmxvYWQ_ZG9jPWV5SjBlWEFpT2lKS1YxUWlMQ0poYkdjaU9pSklVekkxTmlKOS5leUpoWTNScGIyNGlPaUprYjNkdWJHOWhaQ0lzSW1acGJHVkpaQ0k2Tmprc0luVnpaWEpKWkNJNkltRmtiV2x1SW4wLkFEbFdySlZEUlhjd3plMFhWbnlReUpmNUhIUFAyODNBYUNnLVdfdjRrWUUiLCJvdXRwdXR0eXBlIjoianBlZyIsImZpbGV0eXBlIjoicGRmIiwidGl0bGUiOiIxMTYxNTA2NDIxLnBkZiIsImtleSI6IjExNjE1MDY0MjEiLCJpYXQiOjE3NjUyNzQ4ODEsImV4cCI6MTc2NTI3NTE4MX0.fwVs3yxY-RSLGBJyIGe6NT4KX8oF9BsBSn0ADeGGaus2025-12-09T05:08:01-05:00 [1:onlyoffice3:onlyoffice-app] [2025-12-09T10:08:01.732] [WARN] [localhost] [docId] [userId] nodeJS - convertRequest auth failed {“code”:-120,“description”:“token:invalid signature”,“isDecoded”:false,“params”:{“async”:false,“url”:“https://mycloud.xxxxxx.net/apps/onlyoffice/download?doc=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhY3Rpb24iOiJkb3dubG9hZCIsImZpbGVJZCI6NjksInVzZXJJZCI6ImFkbWluIn0.ADlWrJVDRXcwze0XVnyQyJf5HHPP283AaCg-W_v4kYE",“outputtype”:“jpeg”,“filetype”:“pdf”,“title”:“1161506421.pdf”,“key”:“1161506421”,“iat”:1765274881,“exp”:1765275181,“token”:"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhc3luYyI6ZmFsc2UsInVybCI6Imh0dHBzOi8vbXljbG91ZC5idXJraGFsdGVybGF3Lm5ldC9hcHBzL29ubHlvZmZpY2UvZG93bmxvYWQ_ZG9jPWV5SjBlWEFpT2lKS1YxUWlMQ0poYkdjaU9pSklVekkxTmlKOS5leUpoWTNScGIyNGlPaUprYjNkdWJHOWhaQ0lzSW1acGJHVkpaQ0k2Tmprc0luVnpaWEpKWkNJNkltRmtiV2x1SW4wLkFEbFdySlZEUlhjd3plMFhWbnlReUpmNUhIUFAyODNBYUNnLVdfdjRrWUUiLCJvdXRwdXR0eXBlIjoianBlZyIsImZpbGV0eXBlIjoicGRmIiwidGl0bGUiOiIxMTYxNTA2NDIxLnBkZiIsImtleSI6IjExNjE1MDY0MjEiLCJpYXQiOjE3NjUyNzQ4ODEsImV4cCI6MTc2NTI3NTE4MX0.fwVs3yxY-RSLGBJyIGe6NT4KX8oF9BsBSn0ADeGGaus”}}2025-12-09T08:19:05-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/cfb9b2aa-10fd-407b-9e58-c091455e07c5: get-name/50get_name is starting2025-12-09T08:19:05-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/ebf4b1a3-bb45-44ae-9618-49a35105b933: get-status/20read is starting2025-12-09T08:19:05-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/25090439-444e-4f05-aa6c-03561bbb15e3: get-configuration/20read is starting2025-12-09T08:19:06-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/cfb9b2aa-10fd-407b-9e58-c091455e07c5: action “get-name” status is “completed” (0) at step 50get_name2025-12-09T08:19:06-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/ebf4b1a3-bb45-44ae-9618-49a35105b933: action “get-status” status is “completed” (0) at step validate-output.json2025-12-09T08:19:06-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/25090439-444e-4f05-aa6c-03561bbb15e3: action “get-configuration” status is “completed” (0) at step validate-output.json2025-12-09T09:05:52-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/0dd4d48d-3ce1-4fec-9058-4dbb03ee38b9: get-name/50get_name is starting2025-12-09T09:05:52-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/761f0fef-a5fd-4cc2-9254-f7b512a94004: get-configuration/20read is starting2025-12-09T09:05:52-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/bfe1d39d-2eda-437d-ba3e-f0efc7c2f518: get-status/20read is starting2025-12-09T09:05:52-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/0dd4d48d-3ce1-4fec-9058-4dbb03ee38b9: action “get-name” status is “completed” (0) at step 50get_name2025-12-09T09:05:52-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/bfe1d39d-2eda-437d-ba3e-f0efc7c2f518: action “get-status” status is “completed” (0) at step validate-output.json2025-12-09T09:05:53-05:00 [1:onlyoffice3:agent@onlyoffice3] task/module/onlyoffice3/761f0fef-a5fd-4cc2-9254-f7b512a94004: action “get-configuration” status is “completed” (0) at step validate-output.json2025-12-09T09:16:28-05:00 [1:onlyoffice3:onlyoffice-app]2025-12-09T09:16:28-05:00 [1:onlyoffice3:onlyoffice-app] ==> /var/log/onlyoffice/documentserver/nginx.error.log <==2025-12-09T09:16:28-05:00 [1:onlyoffice3:onlyoffice-app] 2025/12/09 14:16:28 [error] 9767#9767: *126 connect() failed (111: Connection refused) while connecting to upstream, client: 10.0.2.100, server: , request: “GET /admin/ HTTP/1.1”, upstream: “http://127.0.0.1:9000/admin/”, host: “onlyoffice.xxxxxx.net”, referrer: “https://onlyoffice.xxxxxx.net/welcome/”2025-12-09T09:16:28-05:00 [1:onlyoffice3:onlyoffice-app] 2025/12/09 14:16:28 [error] 9767#9767: *126 connect() failed (111: Connection refused) while connecting to upstream, client: 10.0.2.100, server: , request: “GET /admin/ HTTP/1.1”, upstream: “http://[::1]:9000/admin/”, host: “onlyoffice.xxxxxx.net”, referrer: “https://onlyoffice.xxxxxx.net/welcome/”2025-12-09T09:17:03-05:00 [1:onlyoffice3:onlyoffice-app] 2025/12/09 14:17:03 [error] 9767#9767: *126 connect() failed (111: Connection refused) while connecting to upstream, client: 10.0.2.100, server: , request: “GET /example/ HTTP/1.1”, upstream: “http://127.0.0.1:3000/”, host: “onlyoffice.xxxxxx.net”, referrer: “https://onlyoffice.xxxxxx.net/welcome/”2025-12-09T09:17:03-05:00 [1:onlyoffice3:onlyoffice-app] 2025/12/09 14:17:03 [error] 9767#9767: *126 connect() failed (111: Connection refused) while connecting to upstream, client: 10.0.2.100, server: , request: “GET /example/ HTTP/1.1”, upstream: “http://[::1]:3000/”, host: “onlyoffice.xxxxxx.net”, referrer: “https://onlyoffice.xxxxxx.net/welcome/”

1 Like

I couldn’t reproduce. Here files from a samba share via external storage can be opened.
Does it work to create/open a document outside of the external storage?

Please check the browser console when opening the document.

Are you sure that both Nextcloud and Onlyoffice are using a valid certificate?
Please check by browsing to your Onlyoffice URL.

Is the NethServer installed on a VPS or in LAN?
If in LAN you may need to enable this setting in Nextcloud but here it works without that setting.

Does it work to save the Onlyoffice app settings in Nextcloud without error?

Is the token correct?

I could reproduce the issue and found the error. Due to updating to the new certificate process I removed an important traefik header which I readded in the new release.

So please update to 1.1.4 and if the error still occurs, just reconfigure Onlyoffice once (click “Save” in the Ns8 onlyoffice app settings) to recreate the traefik route.

1 Like

Tried both a fresh install and an update: I can confirm that everything worked flawlessly :smiley:
Thanks @mrmarkuz!

1 Like

Hi @mrmarkuz

After update to the latest version i get this error:

Error connecting (cURL error 60: SSL: no alternative certificate subject name matches target hostname ‘myonlyoffice.xxx..com’ (see libcurl - Error Codes) for https://myonlyoffice.xxx.com./healthcheck).

However, there is a suitable certificate.

Regards…

Uwe

1 Like

Where do you get that error? When opening a document or when saving the settings or somewhere else?

Can you connect to https://your.onlyoffice.url/welcome/ and is there a valid cert?

It may take some time until onlyoffice is ready after the update.

EDIT:

Did you already try to reconfigure the app in the NS8 Onlyoffice app settings?

1 Like

OK, i found the error. I set an incorrect FQDN in the DNS, so the certificate doesn’t match.

1 Like