[Bug]: Can't enable or disable apps after upgrade to v28.0.4 about server

[quenenni]

I forgot to mention that I can enable / disabel apps with the occ command and the cloud and apps are working good (as mush as I can tell).

The problem is only from the web interface.

[joshtrichards]

Content-Security-Policy : Les paramètres de la page ont empêché le chargement d’une ressource à https://cloud.yyyyy.be:4431/apps/files/ (« connect-src »).

This is the source of your seeing the unstable error message. The app stability check runs from your browser and CSP is blocking this check so it by definition fails. I suspect you don't wish the :4431 to be in your URL.

Set the appropriate overwrite*
parameters in your config (i.e. without the port) and see if the problem goes away.

I suspect it will, but let us know if not.

[quenenni]

Very good catch. I completely missed that wrong port number there. Thank you.
Indeed, it should be 443 or no port.

I set all the overwrite* params, but no luck, the errors are still the same.

  'overwrite.cli.url' => 'https://cloud.yyyyy.be/',   <- already present
  'overwriteprotocol' => 'https',
  'overwritehost' => 'cloud.yyyyy.be:443',
  'overwritewebroot'  => '/',

I tried to play with the option fastcgi_param SERVER_PORT 443; in my Nginx vhost, but also no luck (I remebered having a similar issue couple years ago and that param fixed it at the time).

[joshtrichards]

More possibly related reports on the forum: https://help.nextcloud.com/t/this-app-cannot-be-enabled-because-it-makes-the-server-unstable-error/187233/5

[brunoscota]

same to me and I already did what @quenenni also did with no luck

[Masgalor]

I have the same problem since v28.0.4 and I can confirm this is because of a CSP error.

In my case overwriteprotocol => https seems to be ignored.
The app-install-page queries http://<domain>/apps/files/ that fails because of the policy connect-src self, that would require https://<domain>/apps/files/.