WebUI is not reachable when I use compose & volumes

[peterge-misoft]

Hey, I am trying to run sftpgo via compose. Its working fine using docker run --name sftpgo -p 8080:8080 -p 2022:2022 -d "drakkan/sftpgo:latest". I am using the compose file:

root@midevsftpgo:~# cat docker-compose.yml 
services:
  sftpgo:
    image: drakkan/sftpgo:latest
    container_name: sftpgo
    ports:
      - "8080:8090"
      - "2022:2022"
    volumes:
      - /docker/sftpgodata:/srv/sftpgo
      - /docker/sftpgohome:/var/lib/sftpgo

This is my folder setup:

root@midevsftpgo:~# ls -l / | grep docker
drwxrwxrwx    4   1000    1000   4 Jun 27 12:34 docker
root@midevsftpgo:~# ls -l /docker
total 9
drwxrwxrwx 2 1000 1000 2 Jun 27 12:34 sftpgodata
drwxrwxrwx 2 1000 1000 9 Jun 27 12:35 sftpgohome

This is the log after starting the container:

root@midevsftpgo:~# docker compose up -d
[+] Running 1/0
 ✔ Container sftpgo  Running                                                                                             0.0s 
root@midevsftpgo:~# docker logs -f sftpgo 
{"level":"info","time":"2024-06-27T10:37:31.771","sender":"service","message":"starting SFTPGo 2.6.2-636a1c2c-2024-06-21T17:30:20Z +metrics +azblob +gcs +s3 +bolt +mysql +pgsql +sqlite +unixcrypt +portable, config dir: ., config file: , log max size: 10 log max backups: 5 log max age: 28 log level: debug, log compress: false, log utc time: false, load data from: \"\", grace time: 0 secs"}
{"level":"info","time":"2024-06-27T10:37:31.772","sender":"config","message":"unable to read env files from \"env.d\": open env.d: no such file or directory"}
{"level":"debug","time":"2024-06-27T10:37:31.779","sender":"config","message":"config file used: '\"/etc/sftpgo/sftpgo.json\"', config loaded: {Common:{IdleTimeout:15 UploadMode:0 Actions:{ExecuteOn:[] ExecuteSync:[] Hook:} SetstatMode:0 RenameMode:0 ResumeMaxSize:0 TempPath: ProxyProtocol:0 ProxyAllowed:[] ProxySkipped:[] StartupHook: PostConnectHook: PostDisconnectHook: DataRetentionHook: MaxTotalConnections:0 MaxPerHostConnections:20 AllowListStatus:0 AllowSelfConnections:0 DefenderConfig:{Enabled:false Driver:memory BanTime:30 BanTimeIncrement:50 Threshold:15 ScoreInvalid:2 ScoreValid:1 ScoreLimitExceeded:3 ScoreNoAuth:0 ObservationTime:30 EntriesSoftLimit:100 EntriesHardLimit:150 LoginDelay:{Success:0 PasswordFailed:1000}} RateLimitersConfig:[{Average:0 Period:1000 Burst:1 Type:2 Protocols:[SSH FTP DAV HTTP] GenerateDefenderEvents:false EntriesSoftLimit:100 EntriesHardLimit:150}] Umask: ServerVersion: Metadata:{Read:0} idleTimeoutAsDuration:0 idleLoginTimeout:0 defender:<nil> allowList:<nil> rateLimitersList:<nil> proxyAllowed:[] proxySkipped:[]} ACME:{Email: KeyType:4096 CertsPath:certs CAEndpoint:https://acme-v02.api.letsencrypt.org/directory Domains:[] RenewDays:30 HTTP01Challenge:{Port:80 WebRoot: ProxyHeader:} TLSALPN01Challenge:{Port:0} accountConfigPath: accountKeyPath: lockPath: tempDir:} SFTPD:{Bindings:[{Address: Port:2022 ApplyProxyConfig:true}] MaxAuthTries:0 HostKeys:[] HostCertificates:[] HostKeyAlgorithms:[] KexAlgorithms:[] MinDHGroupExchangeKeySize:2048 Ciphers:[] MACs:[] PublicKeyAlgorithms:[] TrustedUserCAKeys:[] RevokedUserCertsFile: LoginBannerFile: EnabledSSHCommands:[md5sum sha1sum sha256sum cd pwd scp] KeyboardInteractiveAuthentication:true KeyboardInteractiveHook: PasswordAuthentication:true certChecker:<nil> parsedUserCAKeys:[]} FTPD:{Bindings:[{Address: Port:0 ApplyProxyConfig:true TLSMode:0 TLSSessionReuse:0 CertificateFile: CertificateKeyFile: MinTLSVersion:12 ForcePassiveIP: PassiveIPOverrides:[] PassiveHost: ClientAuthType:0 TLSCipherSuites:[] PassiveConnectionsSecurity:0 ActiveConnectionsSecurity:0 IgnoreASCIITransferType:0 Debug:false ciphers:[]}] BannerFile: CertificateFile: CertificateKeyFile: CACertificates:[] CARevocationLists:[] ActiveTransfersPortNon20:true DisableActiveMode:false EnableSite:false HASHSupport:0 CombineSupport:0 PassivePortRange:{Start:50000 End:50100} acmeDomain:} WebDAVD:{Bindings:[{Address: Port:0 EnableHTTPS:false CertificateFile: CertificateKeyFile: MinTLSVersion:12 ClientAuthType:0 TLSCipherSuites:[] Protocols:[] Prefix: ProxyAllowed:[] ClientIPProxyHeader: ClientIPHeaderDepth:0 DisableWWWAuthHeader:false allowHeadersFrom:[]}] CertificateFile: CertificateKeyFile: CACertificates:[] CARevocationLists:[] Cors:{AllowedOrigins:[] AllowedMethods:[] AllowedHeaders:[] ExposedHeaders:[] AllowCredentials:false Enabled:false MaxAge:0 OptionsPassthrough:false OptionsSuccessStatus:0 AllowPrivateNetwork:false} Cache:{Users:{ExpirationTime:0 MaxSize:50} MimeTypes:{Enabled:true MaxSize:1000 CustomMappings:[]}} acmeDomain:} ProviderConf:{Driver:sqlite Name:sftpgo.db Host: Port:0 Username: Password: SSLMode:0 DisableSNI:false TargetSessionAttrs: RootCert: ClientCert: ClientKey: ConnectionString: SQLTablesPrefix: TrackQuota:2 PoolSize:0 UsersBaseDir:/srv/sftpgo/data Actions:{ExecuteOn:[] ExecuteFor:[] Hook:} ExternalAuthHook: ExternalAuthScope:0 PreLoginHook: PostLoginHook: PostLoginScope:0 CheckPasswordHook: CheckPasswordScope:0 UpdateMode:0 PasswordHashing:{BcryptOptions:{Cost:10} Argon2Options:{Memory:65536 Iterations:1 Parallelism:2} Algo:bcrypt} PasswordValidation:{Admins:{MinEntropy:0} Users:{MinEntropy:0}} PasswordCaching:true DelayedQuotaUpdate:0 CreateDefaultAdmin:false NamingRules:5 IsShared:0 Node:{Host: Port:0 Proto:http} BackupsPath:/srv/sftpgo/backups} HTTPDConfig:{Bindings:[{Address: Port:8080 EnableWebAdmin:true EnableWebClient:true EnableRESTAPI:true EnabledLoginMethods:0 EnableHTTPS:false CertificateFile: CertificateKeyFile: MinTLSVersion:12 ClientAuthType:0 TLSCipherSuites:[] Protocols:[] ProxyAllowed:[] ClientIPProxyHeader: ClientIPHeaderDepth:0 HideLoginURL:0 RenderOpenAPI:true OIDC:{ClientID: ClientSecret: ClientSecretFile: ConfigURL: RedirectBaseURL: UsernameField: RoleField: ImplicitRoles:false Scopes:[openid profile email] CustomFields:[] InsecureSkipSignatureCheck:false Debug:false provider:<nil> verifier:<nil> providerLogoutURL: oauth2Config:<nil>} Security:{Enabled:false AllowedHosts:[] AllowedHostsAreRegex:false HostsProxyHeaders:[] HTTPSRedirect:false HTTPSHost: HTTPSProxyHeaders:[] STSSeconds:0 STSIncludeSubdomains:false STSPreload:false ContentTypeNosniff:false ContentSecurityPolicy: PermissionsPolicy: CrossOriginOpenerPolicy: proxyHeaders:[]} Branding:{WebAdmin:{Name: ShortName: LogoPath: FaviconPath: DisclaimerName: DisclaimerPath: DefaultCSS:[] ExtraCSS:[]} WebClient:{Name: ShortName: LogoPath: FaviconPath: DisclaimerName: DisclaimerPath: DefaultCSS:[] ExtraCSS:[]}} allowHeadersFrom:[]}] TemplatesPath:templates StaticFilesPath:static OpenAPIPath:openapi WebRoot: CertificateFile: CertificateKeyFile: CACertificates:[] CARevocationLists:[] SigningPassphrase: SigningPassphraseFile: TokenValidation:0 MaxUploadFileSize:0 Cors:{AllowedOrigins:[] AllowedMethods:[] AllowedHeaders:[] ExposedHeaders:[] AllowCredentials:false Enabled:false MaxAge:0 OptionsPassthrough:false OptionsSuccessStatus:0 AllowPrivateNetwork:false} Setup:{InstallationCode: InstallationCodeHint:Installation code} HideSupportLink:false acmeDomain:} HTTPConfig:{Timeout:20 RetryWaitMin:2 RetryWaitMax:30 RetryMax:3 CACertificates:[] Certificates:[] SkipTLSVerify:false Headers:[] customTransport:<nil>} CommandConfig:{Timeout:30 Env:[] Commands:[]} KMSConfig:{Secrets:{URL: MasterKeyPath: MasterKeyString: masterKey:}} MFAConfig:{TOTP:[{Name:Default Issuer:SFTPGo Algo:sha1 algo:0}]} TelemetryConfig:{BindPort:0 BindAddress:127.0.0.1 EnableProfiler:false AuthUserFile: CertificateFile: CertificateKeyFile: TLSCipherSuites:[] MinTLSVersion:12 Protocols:[]} PluginsConfig:[] SMTPConfig:{Host: Port:587 From: User: Password: AuthType:0 Encryption:0 Domain: TemplatesPath:templates Debug:0 OAuth2:{Provider:0 Tenant: ClientID: ClientSecret: RefreshToken: mu:<nil> config:<nil> accessToken:<nil>}}}"}
{"level":"info","time":"2024-06-27T10:37:31.779","sender":"kms","message":"secret provider registered for scheme: \"builtin\", encrypted status: \"AES-256-GCM\""}
{"level":"info","time":"2024-06-27T10:37:31.779","sender":"kms","message":"secret provider registered for scheme: \"local\", encrypted status: \"Secretbox\""}
{"level":"debug","time":"2024-06-27T10:37:31.779","sender":"dataprovider_sqlite","message":"sqlite database handle created, connection string: \"file:sftpgo.db?cache=shared&_foreign_keys=1\""}
{"level":"debug","time":"2024-06-27T10:37:31.781","sender":"dataprovider_sqlite","message":"sql database is up to date, current version: 29"}
{"level":"debug","time":"2024-06-27T10:37:31.781","sender":"dataprovider_sqlite","message":"absolute backup path \"/srv/sftpgo/backups\""}
{"level":"debug","time":"2024-06-27T10:37:31.781","sender":"plugins","message":"initialize"}
{"level":"debug","time":"2024-06-27T10:37:31.781","sender":"util","message":"found share data path for name \"templates\": \"/usr/share/sftpgo/templates\""}
{"level":"debug","time":"2024-06-27T10:37:31.782","sender":"smtp","message":"loading templates from \"/usr/share/sftpgo/templates/email\""}
{"level":"debug","time":"2024-06-27T10:37:31.781","sender":"dataprovider_sqlite","message":"delayed quota update loop started, wait time: 0s"}
{"level":"debug","time":"2024-06-27T10:37:31.782","sender":"dataprovider_sqlite","message":"delayed quota update loop ended, wait time: 0s"}
{"level":"debug","time":"2024-06-27T10:37:31.782","sender":"smtp","message":"activating initial config"}
{"level":"debug","time":"2024-06-27T10:37:31.782","sender":"smtp","message":"configuration disabled, email capabilities will not be available"}
{"level":"debug","time":"2024-06-27T10:37:31.782","sender":"eventmanager","message":"loading updated rules"}
{"level":"debug","time":"2024-06-27T10:37:31.782","sender":"eventmanager","message":"recently updated event rules loaded: 0"}
{"level":"debug","time":"2024-06-27T10:37:31.782","sender":"eventmanager","message":"event rules updated, fs events: 0, provider events: 0, schedules: 0, ip blocked events: 0, certificate events: 0, IDP login events: 0"}
{"level":"info","time":"2024-06-27T10:37:31.783","sender":"common","message":"scheduled overquota transfers check, schedule \"@every 1m0s\""}
{"level":"info","time":"2024-06-27T10:37:31.783","sender":"common","message":"scheduled idle connections check, schedule \"@every 3m0s\""}
{"level":"info","time":"2024-06-27T10:37:31.783","sender":"common","message":"using memory transfer checker"}
{"level":"info","time":"2024-06-27T10:37:31.783","sender":"acme","message":"no domains configured, acme disabled"}
{"level":"info","time":"2024-06-27T10:37:31.783","sender":"service","message":"FTP server not started, disabled in config file"}
{"level":"info","time":"2024-06-27T10:37:31.783","sender":"service","message":"WebDAV server not started, disabled in config file"}
{"level":"info","time":"2024-06-27T10:37:31.783","sender":"service","message":"telemetry server not started, disabled in config file"}
{"level":"info","time":"2024-06-27T10:37:31.783","sender":"service","message":"initializing SFTP server with config {Bindings:[{Address: Port:2022 ApplyProxyConfig:true}] MaxAuthTries:0 HostKeys:[] HostCertificates:[] HostKeyAlgorithms:[] KexAlgorithms:[] MinDHGroupExchangeKeySize:2048 Ciphers:[] MACs:[] PublicKeyAlgorithms:[] TrustedUserCAKeys:[] RevokedUserCertsFile: LoginBannerFile: EnabledSSHCommands:[md5sum sha1sum sha256sum cd pwd scp] KeyboardInteractiveAuthentication:true KeyboardInteractiveHook: PasswordAuthentication:true certChecker:<nil> parsedUserCAKeys:[]}"}
{"level":"info","time":"2024-06-27T10:37:31.784","sender":"httpd","message":"initializing HTTP server with config {Bindings:[{Address: Port:8080 EnableWebAdmin:true EnableWebClient:true EnableRESTAPI:true EnabledLoginMethods:0 EnableHTTPS:false CertificateFile: CertificateKeyFile: MinTLSVersion:12 ClientAuthType:0 TLSCipherSuites:[] Protocols:[] ProxyAllowed:[] ClientIPProxyHeader: ClientIPHeaderDepth:0 HideLoginURL:0 RenderOpenAPI:true OIDC:{ClientID: ClientSecret: ClientSecretFile: ConfigURL: RedirectBaseURL: UsernameField: RoleField: ImplicitRoles:false Scopes:[openid profile email] CustomFields:[] InsecureSkipSignatureCheck:false Debug:false provider:<nil> verifier:<nil> providerLogoutURL: oauth2Config:<nil>} Security:{Enabled:false AllowedHosts:[] AllowedHostsAreRegex:false HostsProxyHeaders:[] HTTPSRedirect:false HTTPSHost: HTTPSProxyHeaders:[] STSSeconds:0 STSIncludeSubdomains:false STSPreload:false ContentTypeNosniff:false ContentSecurityPolicy: PermissionsPolicy: CrossOriginOpenerPolicy: proxyHeaders:[]} Branding:{WebAdmin:{Name: ShortName: LogoPath: FaviconPath: DisclaimerName: DisclaimerPath: DefaultCSS:[] ExtraCSS:[]} WebClient:{Name: ShortName: LogoPath: FaviconPath: DisclaimerName: DisclaimerPath: DefaultCSS:[] ExtraCSS:[]}} allowHeadersFrom:[]}] TemplatesPath:templates StaticFilesPath:static OpenAPIPath:openapi WebRoot: CertificateFile: CertificateKeyFile: CACertificates:[] CARevocationLists:[] SigningPassphrase: SigningPassphraseFile: TokenValidation:0 MaxUploadFileSize:0 Cors:{AllowedOrigins:[] AllowedMethods:[] AllowedHeaders:[] ExposedHeaders:[] AllowCredentials:false Enabled:false MaxAge:0 OptionsPassthrough:false OptionsSuccessStatus:0 AllowPrivateNetwork:false} Setup:{InstallationCode: InstallationCodeHint:Installation code} HideSupportLink:false acmeDomain:}"}
{"level":"info","time":"2024-06-27T10:37:31.784","sender":"httpd","message":"using memory token manager"}
{"level":"info","time":"2024-06-27T10:37:31.784","sender":"httpd","message":"using memory reset code manager"}
{"level":"info","time":"2024-06-27T10:37:31.784","sender":"httpd","message":"using memory OIDC manager"}
{"level":"info","time":"2024-06-27T10:37:31.784","sender":"httpd","message":"using memory OAuth2 manager"}
{"level":"info","time":"2024-06-27T10:37:31.784","sender":"httpd","message":"using memory task manager"}
{"level":"debug","time":"2024-06-27T10:37:31.784","sender":"util","message":"found share data path for name \"static\": \"/usr/share/sftpgo/static\""}
{"level":"debug","time":"2024-06-27T10:37:31.784","sender":"sftpd","message":"minimum key size allowed for diffie-ellman-group-exchange: 2048"}
{"level":"debug","time":"2024-06-27T10:37:31.784","sender":"util","message":"found share data path for name \"templates\": \"/usr/share/sftpgo/templates\""}
{"level":"debug","time":"2024-06-27T10:37:31.784","sender":"util","message":"found share data path for name \"openapi\": \"/usr/share/sftpgo/openapi\""}
{"level":"info","time":"2024-06-27T10:37:31.784","sender":"sftpd","message":"Loading private host key \"id_rsa\""}
{"level":"info","time":"2024-06-27T10:37:31.785","sender":"sftpd","message":"Host key \"id_rsa\" loaded, type \"ssh-rsa\", fingerprint \"SHA256:2xFtljRflnJnatVu4xdJ3b4o7tQIUfZAo7K/7VvU72g\", algorithms [rsa-sha2-256 rsa-sha2-512]"}
{"level":"info","time":"2024-06-27T10:37:31.785","sender":"sftpd","message":"Loading private host key \"id_ecdsa\""}
{"level":"info","time":"2024-06-27T10:37:31.785","sender":"sftpd","message":"Host key \"id_ecdsa\" loaded, type \"ecdsa-sha2-nistp256\", fingerprint \"SHA256:8pZYmkBLThZy2JE1WM7qNtFg5kRlWve01O59aWH8YZA\", algorithms [ecdsa-sha2-nistp256]"}
{"level":"info","time":"2024-06-27T10:37:31.785","sender":"sftpd","message":"Loading private host key \"id_ed25519\""}
{"level":"info","time":"2024-06-27T10:37:31.790","sender":"sftpd","message":"Host key \"id_ed25519\" loaded, type \"ssh-ed25519\", fingerprint \"SHA256:Ca1eNAyvcu1Xz/Ib88i+wNtWn+rinuK7onTm7K2bdwA\", algorithms [ssh-ed25519]"}
{"level":"debug","time":"2024-06-27T10:37:31.790","sender":"sftpd","message":"enabled SSH commands [md5sum sha1sum sha256sum cd pwd scp]"}
{"level":"info","time":"2024-06-27T10:37:31.790","sender":"sftpd","message":"server listener registered, address: [::]:2022"}
{"level":"info","time":"2024-06-27T10:37:31.827","sender":"httpd","message":"server listener registered, address: [::]:8080 TLS enabled: false"}

I feel like I am missing sth, but I set the UID/GID to 1000, used chmod 777 and I can still not reach the webinterface...
Its not displaying any errror...

root@midevsftpgo:~# docker ps
CONTAINER ID   IMAGE                   COMMAND          CREATED         STATUS         PORTS                                                                                  NAMES
bde675fd65eb   drakkan/sftpgo:latest   "sftpgo serve"   4 minutes ago   Up 3 minutes   0.0.0.0:2022->2022/tcp, :::2022->2022/tcp, 0.0.0.0:8080->8090/tcp, :::8080->8090/tcp   sftpgo
root@midevsftpgo:~# curl localhost:8080
curl: (56) Recv failure: Connection reset by peer

[peterge-misoft]

Oh wait GPT set the port to 8080:8090 when I asked it to translate the run cmd to a compose file...