[Bug]: installation stop working.

[allancomar]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

Good morning.
I am seeing a very interesting bug. I saw some discussion about it in the past. I upgrade AIO image last Friday. From yesterday I started not been able to connect to the next cloud instance.

Looking at the container logs I see the following

127.0.0.1 - - [09/Mar/2026:14:27:25 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.66 (Debian) PHP/8.4.18 (internal dummy connection)"
127.0.0.1 - - [09/Mar/2026:14:27:26 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.66 (Debian) PHP/8.4.18 (internal dummy connection)"

Fatal error: Maximum execution time of 3600+2 seconds exceeded (terminated) in /var/www/html/lib/private/Security/CSRF/CsrfTokenManager.php on line 45

Fatal error: Maximum execution time of 3600+2 seconds exceeded (terminated) in /var/www/html/lib/private/Security/CSRF/CsrfTokenManager.php on line 45

Fatal error: Maximum execution time of 3600+2 seconds exceeded (terminated) in /var/www/html/lib/private/Security/CSRF/CsrfTokenManager.php on line 44

Fatal error: Maximum execution time of 3600+2 seconds exceeded (terminated) in /var/www/html/lib/private/Security/CSRF/CsrfTokenManager.php on line 43

Fatal error: Maximum execution time of 3600+2 seconds exceeded (terminated) in /var/www/html/lib/private/Security/CSRF/CsrfTokenManager.php on line 43

I had cleaned the nextcloud.log and that log is completelly empty now, nothing gets to it.

ls -alh nextcloud.log
-rw-r--r-- 1 www-data www-data 0 Mar  9 08:01 nextcloud.log

This installation had been working for over 1 year, always updating once a week.

How can I diagnose and fix the issue?

Config file:

<?php
$CONFIG = array (
  'htaccess.RewriteBase' => '/',
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'apps_paths' =>
  array (
    0 =>
    array (
      'path' => '/var/www/html/apps',
      'url' => '/apps',
      'writable' => false,
    ),
    1 =>
    array (
      'path' => '/var/www/html/custom_apps',
      'url' => '/custom_apps',
      'writable' => true,
    ),
  ),
  'upgrade.disable-web' => true,
redacted keys
  'trusted_domains' =>
  array (
    0 => 'nextcloud',
  ),
  'datadirectory' => '/var/www/html/data',
  'dbtype' => 'mysql',
  'version' => '33.0.0.16',
  'overwrite.cli.url' => 'http://nextcloud',
  'dbname' => 'nextcloud',
  'dbhost' => 'db',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'nextcloud',
  'dbpassword' => 'userpass',
  'installed' => true,
  'overwritehost' => 'nextcloud.heptopus.ca',
  'overwriteprotocol' => 'https',
  'loglevel' => 2,
  'maintenance' => false,
);

Steps to reproduce

1. Old AIO install with the following docker compose file

services:
  db:
    image: mariadb:10.6
    restart: unless-stopped
    networks:
      - nginx-proxy
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    volumes:
      - /data/nextcloud/db:/var/lib/mysql
      - /data/nextcloud/backup:/backup
    environment:
      - MYSQL_ROOT_PASSWORD=<>
      - MYSQL_PASSWORD=<>
      - MYSQL_DATABASE=<>
      - MYSQL_USER=<>

  nextcloud:
    image: nextcloud
    restart: unless-stopped
    networks:
      - nginx-proxy
    expose:
      - "80"
    volumes:
      - /data/nextcloud/data:/var/www/html
    environment:
      - MYSQL_PASSWORD=<>
      - MYSQL_DATABASE=<>
      - MYSQL_USER=<>
      - MYSQL_HOST=db
      #- OVERWRITECLIURL=nextcloud.heptopus.ca
      - OVERWRITEHOST=nextcloud.heptopus.ca
      - OVERWRITEPROTOCOL=https

networks:
  nginx-proxy:
    external: true

2. upgrade to the latest install
3. get the timeout errors

Expected behavior

Nextcloud should start and run

Nextcloud Server version

33

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.4

Web server

None

Database engine version

MariaDB

Is this bug present after an update or on a fresh install?

Updated from a MINOR version (ex. 32.0.1 to 32.0.2)

Are you using the Nextcloud Server Encryption module?

None

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

php occ config:list system
{
    "system": {
        "htaccess.RewriteBase": "\/",
        "memcache.local": "\\OC\\Memcache\\APCu",
        "apps_paths": [
            {
                "path": "\/var\/www\/html\/apps",
                "url": "\/apps",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/custom_apps",
                "url": "\/custom_apps",
                "writable": true
            }
        ],
        "upgrade.disable-web": true,
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "nextcloud"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "33.0.0.16",
        "overwrite.cli.url": "http:\/\/nextcloud",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "overwritehost": "nextcloud.heptopus.ca",
        "overwriteprotocol": "https",
        "loglevel": 2,
        "maintenance": false
    }
}

List of activated Apps

php occ app:list
Enabled:
  - activity: 6.0.0-dev.0
  - app_api: 33.0.0
  - bruteforcesettings: 6.0.0-dev.0
  - calendar: 6.2.1
  - circles: 33.0.0
  - cloud_federation_api: 1.17.0
  - comments: 1.23.0
  - contacts: 8.4.0
  - contactsinteraction: 1.14.1
  - dashboard: 7.13.0
  - dav: 1.36.0
  - federatedfilesharing: 1.23.0
  - federation: 1.23.0
  - files: 2.5.0
  - files_downloadlimit: 5.1.0-dev.0
  - files_pdfviewer: 6.0.0-dev.0
  - files_reminders: 1.6.0
  - files_sharing: 1.25.2
  - files_trashbin: 1.23.0
  - files_versions: 1.26.0
  - firstrunwizard: 6.0.0-dev.0
  - logreader: 6.0.0
  - lookup_server_connector: 1.21.0
  - mail: 5.7.2
  - nextcloud_announcements: 5.0.0
  - notifications: 6.0.0
  - oauth2: 1.21.0
  - password_policy: 5.0.0-dev.0
  - photos: 6.0.0-dev.0
  - privacy: 5.0.0-dev.0
  - profile: 1.2.0
  - provisioning_api: 1.23.0
  - recommendations: 6.0.0-dev.0
  - related_resources: 4.0.0-dev.0
  - serverinfo: 5.0.0-dev.0
  - settings: 1.16.0
  - sharebymail: 1.23.0
  - support: 5.0.0
  - survey_client: 5.0.0-dev.0
  - systemtags: 1.23.0
  - text: 7.0.0-dev.3
  - theming: 2.8.0
  - twofactor_backupcodes: 1.22.0
  - twofactor_totp: 15.0.0-dev.0
  - updatenotification: 1.23.0
  - user_status: 1.13.0
  - viewer: 6.0.0-dev.0
  - weather_status: 1.13.0
  - webhook_listeners: 1.5.0
  - workflowengine: 2.15.0
Disabled:
  - admin_audit: 1.23.0
  - encryption: 2.21.0
  - files_external: 1.25.1
  - suspicious_login: 11.0.0-dev.0
  - twofactor_nextcloud_notification: 7.0.0
  - user_ldap: 1.24.0

Nextcloud Signing status

not running for long enough to get this

Nextcloud Logs

completelly empty

Additional info

No response

[allancomar]

Just realize that after the update nextcloud / apache is using 100% of the CPU

[allancomar]

One more comment, I am not using the AIO image just the nextcloud with an external mariaDB instance.

[joshtrichards]

How can I diagnose and fix the issue?

https://help.nextcloud.com/