here we go...
find . -type f -printf "\n%p\n" -exec cat {} \;
./nginx-error.log
2026/04/15 00:30:16 [error] 786#786: *7 open() "/usr/share/nginx/html/favicon.ico" failed (2: No such file or directory), client: 12.34.56.78, server: _, request: "GET /favicon.ico HTTP/2.0", host: "my.example.com", referrer: "https://my.example.com/web/"
./nginx-ews-error.log
./nginx-rpc-error.log
./nginx-autodiscover-error.log
./error.log
./nginx-mapi-access.log
./nginx-sync-error.log
./nginx-dav-access.log
./nginx-web-access.log
12.34.56.78 - - [15/Apr/2026:00:30:04 +0200] "GET /web/ HTTP/1.1" 200 4720 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:08 +0200] "GET /web/ HTTP/2.0" 200 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:09 +0200] "POST /web/grommunio.php?service=fingerprint HTTP/2.0" 200 20 "https://my.example.com/web/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:32 +0200] "GET /web/ HTTP/2.0" 200 2105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:38 +0200] "GET /web/ HTTP/2.0" 200 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:39 +0200] "POST /web/grommunio.php?service=fingerprint HTTP/2.0" 200 20 "https://autodiscover.example.com/web/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
./nginx-rpc-access.log
./nginx-admin-error.log
./access.log
12.34.56.78 - - [15/Apr/2026:00:30:03 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:04 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:08 +0200] "GET / HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:16 +0200] "GET /web/ HTTP/2.0" 500 10796 "https://my.example.com/web/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0"
12.34.56.78 - - [15/Apr/2026:00:30:16 +0200] "GET /favicon.ico HTTP/2.0" 404 5266 "https://my.example.com/web/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0"
12.34.56.78 - - [15/Apr/2026:00:30:31 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:32 +0200] "GET / HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:38 +0200] "GET / HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
./nginx-access.log
12.34.56.78 - - [15/Apr/2026:00:30:03 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:04 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:08 +0200] "GET / HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:16 +0200] "GET /web/ HTTP/2.0" 500 10796 "https://my.example.com/web/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0"
12.34.56.78 - - [15/Apr/2026:00:30:16 +0200] "GET /favicon.ico HTTP/2.0" 404 5266 "https://my.example.com/web/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0"
12.34.56.78 - - [15/Apr/2026:00:30:31 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:32 +0200] "GET / HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
12.34.56.78 - - [15/Apr/2026:00:30:38 +0200] "GET / HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
./nginx-oab-error.log
./nginx-autodiscover-access.log
seems to be a PHP-problem:
./nginx-web-error.log
2026/04/15 00:30:16 [error] 786#786: *7 FastCGI sent in stderr: "PHP message: PHP Fatal error: Uncaught MAPIException: The operation failed for an unspecified reason in /usr/share/grommunio-web/server/includes/core/class.mapisession.php:624
Stack trace:
#0 /usr/share/grommunio-web/server/includes/core/class.mapisession.php(624): mapi_table_queryallrows()
#1 /usr/share/grommunio-web/server/includes/core/class.mapisession.php(661): MAPISession->loadMessageStoresFromSession()
#2 /usr/share/grommunio-web/server/includes/core/class.mapisession.php(526): MAPISession->getDefaultMessageStore()
#3 /usr/share/grommunio-web/server/includes/core/class.mapisession.php(535): MAPISession->isGwebEnabled()
#4 /usr/share/grommunio-web/index.php(176): MAPISession->isWebappDisableAsFeature()
#5 {main}
thrown in /usr/share/grommunio-web/server/includes/core/class.mapisession.php on line 624" while reading response header from upstream, client: 12.34.56.78, server: _, request: "GET /web/ HTTP/2.0", upstream: "fastcgi://unix:/run/php/php-grommunio-web-fpm.sock:", host: "my.example.com", referrer: "https://my.example.com/web/"
./nginx-sync-access.log
./nginx-dav-error.log
./nginx-ews-access.log
./nginx-oab-access.log
./nginx-admin-access.log
::1 - - [15/Apr/2026:00:30:16 +0200] "GET /api/v1/status HTTP/1.1" 200 61 "-" "-"
./nginx-mapi-error.log
/php8.4-fpm.log
[15-Apr-2026 00:29:20] NOTICE: fpm is running, pid 694
[15-Apr-2026 00:29:20] NOTICE: ready to handle connections
[15-Apr-2026 00:29:20] NOTICE: systemd monitor interval set to 10000ms
[15-Apr-2026 00:30:16] WARNING: [pool grommunio-web-pool] child 831 said into stderr: "NOTICE: PHP message: PHP Fatal error: Uncaught MAPIException: The operation failed for an unspecified reason in /usr/share/grommunio-web/server/includes/core/class.mapisession.php:624"
[15-Apr-2026 00:30:16] WARNING: [pool grommunio-web-pool] child 831 said into stderr: "Stack trace:"
[15-Apr-2026 00:30:16] WARNING: [pool grommunio-web-pool] child 831 said into stderr: "#0 /usr/share/grommunio-web/server/includes/core/class.mapisession.php(624): mapi_table_queryallrows()"
[15-Apr-2026 00:30:16] WARNING: [pool grommunio-web-pool] child 831 said into stderr: "#1 /usr/share/grommunio-web/server/includes/core/class.mapisession.php(661): MAPISession->loadMessageStoresFromSession()"
[15-Apr-2026 00:30:16] WARNING: [pool grommunio-web-pool] child 831 said into stderr: "#2 /usr/share/grommunio-web/server/includes/core/class.mapisession.php(526): MAPISession->getDefaultMessageStore()"
[15-Apr-2026 00:30:16] WARNING: [pool grommunio-web-pool] child 831 said into stderr: "#3 /usr/share/grommunio-web/server/includes/core/class.mapisession.php(535): MAPISession->isGwebEnabled()"
[15-Apr-2026 00:30:16] WARNING: [pool grommunio-web-pool] child 831 said into stderr: "#4 /usr/share/grommunio-web/index.php(176): MAPISession->isWebappDisableAsFeature()"
[15-Apr-2026 00:30:16] WARNING: [pool grommunio-web-pool] child 831 said into stderr: "#5 {main}"
[15-Apr-2026 00:30:16] WARNING: [pool grommunio-web-pool] child 831 said into stderr: " thrown in /usr/share/grommunio-web/server/includes/core/class.mapisession.php on line 624"