Nextcloud - Revision history

Vincent: Update Nginx conf for Nextcloud 12

2017-10-04T07:37:51Z

Update Nginx conf for Nextcloud 12

← Older revision		Revision as of 07:37, 4 October 2017
Line 17:		Line 17:

	=== Configure Webserver ===		=== Configure Webserver ===
	{{Nginx/New Site\|domain=nextcloud.example.org\|config=~~server server~~ server {		{{Nginx/New Site\|domain=nextcloud.example.org\|config=server {
	include snippets/listen-http.conf;		include snippets/listen-http.conf;
	server_name nextcloud.example.org;		server_name nextcloud.example.org;
Line 46:		Line 46:

	include snippets/security-headers.conf;		include snippets/security-headers.conf;
	~~include snippets/x-frame-options-sameorigin.conf;~~		# Using more_set_headers instead of add_header to be cascaded in sub location
	more_set_headers "X-Robots-Tag: none";		more_set_headers "X-Robots-Tag: none";
	more_set_headers "X-Download-Options: noopen";		more_set_headers "X-Download-Options: noopen";
Line 63:		Line 63:
	fastcgi_buffers 64 4K;		fastcgi_buffers 64 4K;

	~~error_page 403 /core/templates/403.php;~~
	~~error_page 404 /core/templates/404.php;~~
	location / {		location / {
	rewrite ^ /index.php$uri;		rewrite ^ /index.php$uri;
Line 76:		Line 74:
	}		}

	location ~ ^/(?:index{{!}}remote{{!}}public{{!}}cron{{!}}core/ajax/update{{!}}status{{!}}ocs/v[12]{{!}}updater/.+{{!}}ocs-provider/.+~~{{!}}core/templates/40[34]~~)\.php(?:${{!}}/) {		location ~ ^/(?:index{{!}}remote{{!}}public{{!}}cron{{!}}core/ajax/update{{!}}status{{!}}ocs/v[12]{{!}}updater/.+{{!}}ocs-provider/.+)\.php(?:${{!}}/) {
	fastcgi_split_path_info ^(.+\.php)(/.+)$;		fastcgi_split_path_info ^(.+\.php)(/.+)$;
	include fastcgi_params;		include fastcgi_params;
Line 98:		Line 96:
	location ~* \.(?:css{{!}}js{{!}}woff{{!}}svg{{!}}gif)$ {		location ~* \.(?:css{{!}}js{{!}}woff{{!}}svg{{!}}gif)$ {
	try_files $uri /index.php$uri$is_args$args;		try_files $uri /index.php$uri$is_args$args;
	add_header Cache-Control "public, max-age=~~7200~~";		add_header Cache-Control "public, max-age=15778463";
	}		}

Vincent: PHP7.0

2017-06-24T09:25:50Z

PHP7.0

← Older revision		Revision as of 09:25, 24 June 2017
Line 84:		Line 84:
	fastcgi_param modHeadersAvailable true; #Avoid sending the security headers twice		fastcgi_param modHeadersAvailable true; #Avoid sending the security headers twice
	fastcgi_param front_controller_active true;		fastcgi_param front_controller_active true;
	fastcgi_pass ~~unix:/var/run/php5-fpm.sock~~;		fastcgi_pass php;
	fastcgi_intercept_errors on;		fastcgi_intercept_errors on;
	fastcgi_request_buffering off;		fastcgi_request_buffering off;

Vincent: PHP7.0

2017-06-24T09:25:11Z

PHP7.0

← Older revision		Revision as of 09:25, 24 June 2017
Line 14:		Line 14:

	=== Configure PHP ===		=== Configure PHP ===
	~~Edit file <code>[[~~PHP~~#Common_configuration~~\|~~/etc/php5/mods-available/local-common.ini]]</code> and add <code>~~/var/www/nextcloud/:/dev/:/var/log/nextcloud/~~</code> to the <code>open_basedir</code> setting.~~		{{PHP/open_basedir\|folders=/var/www/nextcloud/:/dev/:/var/log/nextcloud/}}

	~~Reload PHP:~~
	~~<syntaxhighlight lang="console">~~
	~~$ sudo service php5-fpm reload~~
	~~</syntaxhighlight>~~

	=== Configure Webserver ===		=== Configure Webserver ===

Vincent: scan.nextcloud.com

2017-05-22T06:06:15Z

scan.nextcloud.com

← Older revision		Revision as of 06:06, 22 May 2017
Line 147:		Line 147:

	[[File:owncloud cron.png\|border\|frameless\|540x540px]]		[[File:owncloud cron.png\|border\|frameless\|540x540px]]

			== Test ==

			=== Security ===
			Nextcloud is providing a [https://scan.nextcloud.com/ security scanning service] for public instances. Scan your instance to find configuration issues.

	[[Category:Debian Release]]		[[Category:Debian Release]]
	[[Category:Linux Server]]		[[Category:Linux Server]]

Vincent: /* Configure Webserver */ Update nginx config

2017-05-16T07:07:05Z

Configure Webserver: Update nginx config

← Older revision		Revision as of 07:07, 16 May 2017
Line 52:		Line 52:
	include snippets/security-headers.conf;		include snippets/security-headers.conf;
	include snippets/x-frame-options-sameorigin.conf;		include snippets/x-frame-options-sameorigin.conf;
	~~add_header~~ X-Robots-Tag none ~~always~~;		more_set_headers "X-Robots-Tag: none";
	~~add_header~~ X-Download-Options noopen ~~always~~;		more_set_headers "X-Download-Options: noopen";

	# Path to the root of your installation		# Path to the root of your installation
Line 73:		Line 73:
	rewrite ^ /index.php$uri;		rewrite ^ /index.php$uri;
	}		}


	location ~ ^/(?:build{{!}}tests{{!}}config{{!}}lib{{!}}3rdparty{{!}}templates{{!}}data)/ {		location ~ ^/(?:build{{!}}tests{{!}}config{{!}}lib{{!}}3rdparty{{!}}templates{{!}}data)/ {
	~~return 404~~;		deny all;
	}		}
	location ~ ^/(?:\.{{!}}autotest{{!}}occ{{!}}issue{{!}}indie{{!}}db_{{!}}console) {		location ~ ^/(?:\.{{!}}autotest{{!}}occ{{!}}issue{{!}}indie{{!}}db_{{!}}console) {
	~~return 404~~;		deny all;
	}		}

Line 95:		Line 94:
	}		}

	location ~* \.(?:css{{!}}js)$ {		location ~ ^/(?:updater{{!}}ocs-provider)(?:${{!}}/) {
			try_files $uri/ =404;
			index index.php;
			}

			# Adding the cache control header for js and css files
			# Make sure it is BELOW the PHP block
			location ~* \.(?:css{{!}}js{{!}}woff{{!}}svg{{!}}gif)$ {
	try_files $uri /index.php$uri$is_args$args;		try_files $uri /index.php$uri$is_args$args;
	add_header Cache-Control "public, max-age=7200";		add_header Cache-Control "public, max-age=7200";
	}		}
	location ~* \.(?:~~svg{{!}}gif{{!}}~~png{{!}}html{{!}}ttf~~{{!}}woff~~{{!}}ico{{!}}jpg{{!}}jpeg)$ {
			location ~* \.(?:png{{!}}html{{!}}ttf{{!}}ico{{!}}jpg{{!}}jpeg)$ {
	try_files $uri /index.php$uri$is_args$args;		try_files $uri /index.php$uri$is_args$args;
	}

	~~location ~* ^.+\.(jpg{{!}}jpeg{{!}}gif{{!}}bmp{{!}}ico{{!}}png{{!}}css{{!}}js{{!}}swf{{!}}svg)$ {~~
	~~expires 30d;~~
	}		}
	<nowiki>}</nowiki>		<nowiki>}</nowiki>

Vincent: Fail2Ban is not needed anymore

2017-05-16T05:58:07Z

Fail2Ban is not needed anymore

← Older revision		Revision as of 05:58, 16 May 2017
Line 3:		Line 3:
	* [[PHP]]		* [[PHP]]
	* [[MariaDB]]		* [[MariaDB]]
	* [[Fail2Ban]] to avoid people trying brute-force attacks on your password

	== Install ==		== Install ==
Line 146:		Line 145:
	[[File:owncloud cron.png\|border\|frameless\|540x540px]]		[[File:owncloud cron.png\|border\|frameless\|540x540px]]
	[[Category:Debian Release]]		[[Category:Debian Release]]
	~~[[Category:Fail2Ban]]~~
	[[Category:Linux Server]]		[[Category:Linux Server]]

Vincent: ownCloud => Nextcloud

2017-05-03T21:54:54Z

ownCloud => Nextcloud

← Older revision		Revision as of 21:54, 3 May 2017
Line 7:		Line 7:
	== Install ==		== Install ==

	=== ~~Add Repository~~ ===		=== Download ===
	~~In order to get an up~~-~~to-date ownCloud, it is preferable to install it from~~ the ~~upstream repositories~~.		Download Nextcloud from https://nextcloud.com/install/#instructions-server and extract the archive in <code>/var/www/nextcloud</code>.

	~~Use the following command to install the repository and its key, plus to configure pinning to use it as the default source~~<syntaxhighlight lang="console">		Fix file permissions using<syntaxhighlight lang="console">
	$ ~~curl -s https://download.owncloud.org/download/repositories/stable/Debian_8.0/Release.key \|~~ sudo ~~apt~~-~~key add~~ -		$ sudo chown -r www-data: /var/www/nextcloud/
	OK
	~~$ echo "deb http~~://~~download.owncloud.org/download/repositories/stable/Debian_8.0~~/ /~~" \| sudo tee /etc/apt/sources.list.d/owncloud.list > /dev/null~~
	~~$ sudo tee "/etc/apt/preferences.d/owncloud" > /dev/null << EOF~~
	~~> Package: owncloud~~
	~~> Pin: origin "download.owncloud.org"~~
	~~> Pin-Priority: 995~~
	~~> EOF~~
	~~$ sudo apt update~~
	~~</syntaxhighlight>~~

	~~=== Install ===~~
	~~<syntaxhighlight lang="console">~~
	~~$ sudo apt install owncloud~~
	</syntaxhighlight>		</syntaxhighlight>

Line 36:		Line 23:

	=== Configure Webserver ===		=== Configure Webserver ===
	{{Nginx/New Site\|domain=~~owncloud~~.example.org\|config=server server server {		{{Nginx/New Site\|domain=nextcloud.example.org\|config=server server server {
	include snippets/listen-http.conf;		include snippets/listen-http.conf;
	server_name ~~owncloud~~.example.org;		server_name nextcloud.example.org;

	access_log /var/log/nginx/~~owncloud~~.example.org.access.log;		access_log /var/log/nginx/nextcloud.example.org.access.log;
	error_log /var/log/nginx/~~owncloud~~.example.org.error.log;		error_log /var/log/nginx/nextcloud.example.org.error.log;

	include snippets/https-permanent-redirect.conf;		include snippets/https-permanent-redirect.conf;
Line 48:		Line 35:
	server {		server {
	include snippets/listen-https.conf;		include snippets/listen-https.conf;
	server_name ~~owncloud~~.example.org;		server_name nextcloud.example.org;

	access_log /var/log/nginx/~~owncloud~~.example.org.access.log;		access_log /var/log/nginx/nextcloud.example.org.access.log;
	error_log /var/log/nginx/~~owncloud~~.example.org.error.log;		error_log /var/log/nginx/nextcloud.example.org.error.log;

	include snippets/acme-challenge.conf;		include snippets/acme-challenge.conf;
	#include snippets/ssl.conf;		#include snippets/ssl.conf;
	#ssl_certificate /etc/letsencrypt/live/~~owncloud~~.example.org/fullchain.pem;		#ssl_certificate /etc/letsencrypt/live/nextcloud.example.org/fullchain.pem;
	#ssl_certificate_key /etc/letsencrypt/live/~~owncloud~~.example.org/privkey.pem;		#ssl_certificate_key /etc/letsencrypt/live/nextcloud.example.org/privkey.pem;
	#include snippets/hsts.conf;		#include snippets/hsts.conf;

Line 70:		Line 57:

	# Path to the root of your installation		# Path to the root of your installation
	root /var/www/~~owncloud~~/;		root /var/www/nextcloud/;

	location = /.well-known/carddav {		location = /.well-known/carddav {
Line 123:		Line 110:
	}}		}}

	=== Configure ~~ownCloud~~ ===		=== Configure Nextcloud ===
	//config.php<syntaxhighlight lang="console">		//config.php<syntaxhighlight lang="console">
	$ sudo tee "/usr/local/bin/occ" > /dev/null << EOF		$ sudo tee "/usr/local/bin/occ" > /dev/null << EOF

Vincent: /* Fail2Ban */ Nextcloud include a bruteforce protection by default

2017-04-29T13:24:27Z

Fail2Ban: Nextcloud include a bruteforce protection by default

@@ Line 158: / Line 158: @@
 [[File:owncloud cron.png|border|frameless|540x540px]]
 [[Category:Debian Release]]
 [[Category:Fail2Ban]]
 [[Category:Linux Server]]

Vincent: /* Cron */ owncloud => nextcloud

2017-04-29T12:55:32Z

Cron: owncloud => nextcloud

← Older revision		Revision as of 12:55, 29 April 2017
Line 153:		Line 153:

	=== Cron ===		=== Cron ===
	Create file <code>/etc/cron.d/~~owncloud~~</code><syntaxhighlight lang="text">		Create file <code>/etc/cron.d/nextcloud</code><syntaxhighlight lang="text">
	/15 * * * www-data /usr/bin/php -f /var/www/~~owncloud~~/cron.php		/15 * * * www-data /usr/bin/php -f /var/www/nextcloud/cron.php
	</syntaxhighlight>Now open ~~ownCloud~~ in your browser and go to the admin section and activate cron		</syntaxhighlight>Now open Nextcloud in your browser and go to the admin section and activate cron

	[[File:owncloud cron.png\|border\|frameless\|540x540px]]		[[File:owncloud cron.png\|border\|frameless\|540x540px]]

Vincent: /* Configure ownCloud */ owncloud > nextcloud

2017-04-29T11:46:46Z

Configure ownCloud: owncloud > nextcloud

← Older revision		Revision as of 11:46, 29 April 2017
Line 127:		Line 127:
	$ sudo tee "/usr/local/bin/occ" > /dev/null << EOF		$ sudo tee "/usr/local/bin/occ" > /dev/null << EOF
	> !/bin/sh		> !/bin/sh
	> sudo -u www-data /usr/bin/php /var/www/~~owncloud~~/occ "\$@"		> sudo -u www-data /usr/bin/php /var/www/nextcloud/occ "\$@"
	> EOF		> EOF
	$ sudo chmod +x /usr/local/bin/occ		$ sudo chmod +x /usr/local/bin/occ