computing:nextcloud
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| computing:nextcloud [2019/06/16 01:09] – oemb1905 | computing:nextcloud [2024/04/13 21:18] (current) – oemb1905 | ||
|---|---|---|---|
| Line 11: | Line 11: | ||
| ------------------------------------------- | ------------------------------------------- | ||
| - | This tutorial is for users of Debian GNU/ | + | This tutorial is for a Nextcloud instance on Debian GNU/ |
| - | sudo apt install | + | sudo apt install |
| + | |||
| + | Or ... | ||
| + | |||
| + | sudo apt-get install php-{xml, | ||
| | | ||
| Once these are installed, make sure you can enable them and that you have no errors in your configurations: | Once these are installed, make sure you can enable them and that you have no errors in your configurations: | ||
| Line 19: | Line 23: | ||
| sudo a2enmod ssl | sudo a2enmod ssl | ||
| sudo a2enmod headers | sudo a2enmod headers | ||
| - | sudo a2enmod proxy_fcgi setenvif | + | sudo a2enmod proxy_fcgi |
| - | sudo a2enconf | + | sudo a2enmod |
| + | sudo a2enconf | ||
| + | sudo a2enconf php8.2-cgi | ||
| sudo sudo apache2ctl configtest | sudo sudo apache2ctl configtest | ||
| - | There may be some others, so run the Overview tool in Settings on Nextcloud after you get the instance up using the commands below, and see if you need to return and enable some more mods or confs - don't assume this is comprehensive (plus, it can/will change with Nextcloud upgrades). Ok, now let's download Nextcloud 15.x and proceed as follows to get your instance up, assuming | + | There may be some others |
| | | ||
| - | cd /var/www/html | + | cd /var/www/nextcloud.jonathanhaack.com/ |
| - | sudo wget https:// | + | sudo wget https:// |
| - | sudo unzip nextcloud-15.0.8.zip | + | sudo unzip latest.zip |
| - | sudo mv / | + | sudo rm latest.zip |
| - | sudo mv / | + | sudo rm public_html |
| - | sudo mv / | + | sudo mv nextcloud |
| - | | + | |
| - | sudo -u www-data php occ db: | + | sudo chown www-data: |
| - | + | sudo mkdir /var/www/ | |
| - | sudo rm nextcloud-15.0.8.zip | + | sudo chown www-data: |
| - | sudo chown www-data: | + | sudo chmod 750 -R / |
| - | sudo mkdir / | + | sudo mkdir -p / |
| - | sudo chown www-data: | + | |
| - | sudo mkdir assets | + | |
| - | sudo mkdir data | + | |
| sudo chmod 0640 *.php *.txt *.html AUTHORS COPYING | sudo chmod 0640 *.php *.txt *.html AUTHORS COPYING | ||
| - | sudo chmod 0750 {3rdparty, | + | sudo chmod 0750 {3rdparty, |
| - | sudo chown root: | + | sudo chown root: |
| - | sudo chown www-data: | + | sudo chown www-data: |
| - | sudo chmod 0755 /var/www/html/occ | + | sudo chmod 0755 /var/www/nextcloud.jonathanhaack.com/ |
| - | sudo chmod 0644 /var/www/html/ | + | sudo chmod 0644 /var/www/nextcloud.jonathanhaack.com/ |
| - | sudo chown root: | + | sudo chown root: |
| sudo systemctl restart mysql | sudo systemctl restart mysql | ||
| sudo systemctl restart mysqld | sudo systemctl restart mysqld | ||
| sudo systemctl restart apache2 | sudo systemctl restart apache2 | ||
| - | sudo systemctl restart php7.0-fpm.service | + | sudo systemctl restart php7.3-fpm.service |
| - | Prepate | + | Prepare |
| - | sudo nano mariadb.conf.d/ | + | sudo nano /etc/mysql/mariadb.conf.d/ |
| | | ||
| Once inside that file, copy these configurations under the [mysqld] block and restart the service: | Once inside that file, copy these configurations under the [mysqld] block and restart the service: | ||
| Line 66: | Line 69: | ||
| sudo mysql -u root -p | sudo mysql -u root -p | ||
| - | Enter your password for sudo and then for MySQL. | + | Enter your password for sudo and then for MySQL. |
| - | | + | CREATE DATABASE nextcloud; |
| - | | + | CREATE USER nextclouduser@localhost IDENTIFIED BY ' |
| - | | + | GRANT ALL PRIVILEGES ON nextcloud.* to nextclouduser@localhost IDENTIFIED BY ' |
| - | | + | FLUSH PRIVILEGES; |
| - | | + | EXIT; |
| - | Okay, you can now proceed to the website test.com and make finish the remaining set up using the Nextcloud website that is now active. | + | Let's first restart the web server, php, and mysql: |
| | | ||
| sudo systemctl restart mysql | sudo systemctl restart mysql | ||
| sudo systemctl restart apache2 | sudo systemctl restart apache2 | ||
| + | sudo systemctl restart php7.3-fpm.service | ||
| - | Ok, now that those services are restarted, you should be able to access your website. | + | Now, visit test.com in your browser |
| - | * create new user name: < | + | * create new user name: adminname |
| - | * create new user pass: <this is public facing and is the admin user, so make it a bit beefy> | + | * create new user pass: password |
| - | * specify data folder: /var/www/test.com/ | + | * specify data folder: / |
| - | * database user name: nextcloud | + | * database user name: nextclouduser |
| * database name: nextcloud | * database name: nextcloud | ||
| * database location: localhost | * database location: localhost | ||
| - | Once you are done, you can now use Nextcloud at will. | + | The first thing to do is to navigate to Settings, Overview. |
| - | + | ||
| - | Nextcloud offered this: | + | |
| - | + | ||
| - | sudo find / | + | |
| - | sudo find / | + | |
| - | + | ||
| - | But that gives me errors, so I developed this (also two lines), from within ServerRoot... | + | |
| - | + | ||
| - | cd / | + | |
| - | sudo chmod 0640 *.php *.txt *.html AUTHORS COPYING | + | |
| - | sudo chmod 0750 {3rdparty, | + | |
| - | sudo chown -R root:www-data / | + | |
| - | sudo chown www-data: | + | |
| - | sudo chmod 0755 / | + | |
| - | sudo chmod 0644 / | + | |
| - | sudo chown root: | + | |
| - | And finally you have an instance ... [[https:// | + | sudo nano /etc/php/8.2/ |
| - | + | ||
| - | Update: | + | |
| - | + | ||
| - | | + | |
| | | ||
| - | The settings | + | I entered the following |
| | | ||
| opcache.enable=1 | opcache.enable=1 | ||
| opcache.enable_cli=1 | opcache.enable_cli=1 | ||
| - | opcache.interned_strings_buffer=8 | + | opcache.interned_strings_buffer=16 |
| opcache.max_accelerated_files=10000 | opcache.max_accelerated_files=10000 | ||
| opcache.memory_consumption=128 | opcache.memory_consumption=128 | ||
| Line 122: | Line 106: | ||
| opcache.revalidate_freq=1 | opcache.revalidate_freq=1 | ||
| - | Adjust the memory limit for php by finding the line `memory_limit = ` and changing it to 1G: | + | To adjust php memory limit and post size, navigate |
| - | sudo nano /etc/php/7.2/ | + | sudo nano /etc/php/7.3/ |
| + | sudo nano / | ||
| + | sudo nano / | ||
| + | sudo nano / | ||
| + | upload_max_filesize=2G | ||
| + | post_max_size=2G | ||
| + | memory_limit=512M | ||
| + | |||
| + | Next, adjust your max age header in your ssl vhost: | ||
| - | Find the `memory_limit = ` line and change the value to 1G. | + | sudo nano / |
| + | <Header | ||
| + | |||
| + | Enable overrides so that cal/card dav will work without cumbersome vhost entries: | ||
| + | |||
| + | sudo nano / | ||
| + | <AllowOverride All> | ||
| + | |||
| + | If you do not want to allow overrides, then manually set the redirects for cal/card dav as follows: | ||
| sudo nano / | sudo nano / | ||
| + | < | ||
| + | < | ||
| - | Add the following Header parameter with the other parameters, or anywhere before the </ | + | Lastly, when upgraing you might get a big integers db error. If so, run this in web root: |
| - | | + | |
| - | Header always set Strict-Transport-Security "max-age=15552000; | + | |
| - | </ | + | |
| - | Lastly, Nextcloud uses an .htaccess file inside the webroot, and in order for that configuration | + | To configure cron to refresh php every 5 minutes: |
| + | |||
| + | sudo crontab -e -u www-data | ||
| + | < | ||
| + | < | ||
| + | |||
| + | To fine tune php: | ||
| - | sudo nano /etc/apache2/apache2.conf | + | sudo nano /etc/php/8.2/ |
| + | https:// | ||
| + | |||
| + | For a 4GB server: | ||
| + | |||
| + | pm = dynamic | ||
| + | pm.max_children = 120 | ||
| + | pm.start_servers = 12 | ||
| + | pm.min_spare_servers = 6 | ||
| + | pm.max_spare_servers = 18 | ||
| | | ||
| - | Scroll down to the web server | + | For a 1GB server, use defaults: |
| - | | + | |
| - | | + | |
| - | | + | |
| - | | + | |
| - | | + | |
| - | Also, your cal and card dav need redirects for some reasons a bit unclear to me, so adjust your ssl.conf as follows: | + | To reset permissions after an update: |
| + | cd / | ||
| + | sudo chown www-data: | ||
| + | sudo chown www-data: | ||
| + | sudo chmod 0640 *.php *.txt *.html AUTHORS COPYING | ||
| + | sudo chmod 0750 {3rdparty,apps,config, | ||
| + | sudo chown root: | ||
| + | sudo chown www-data:www-data {apps, | ||
| + | sudo chmod 0755 / | ||
| + | sudo chmod 0644 / | ||
| + | sudo chown root: | ||
| + | sudo systemctl restart mysql | ||
| + | sudo systemctl restart mysqld | ||
| + | sudo systemctl restart apache2pm = dynamic | ||
| + | sudo systemctl restart php7.3-fpm.service | ||
| - | | + | Need to manually move files from an old NAS or elsewhere to Nextcloud: |
| + | |||
| + | | ||
| + | sudo -u www-data php occ files:scan --path=/oemb1905/ | ||
| + | sudo -u www-data php occ files:scan --path=/ | ||
| + | sudo -u www-data php occ files:scan --help | ||
| + | |||
| + | Okay, and for Nextcloud Talk configuration, | ||
| + | |||
| + | sudo apt install coturn | ||
| + | sudo nano / | ||
| + | openssl rand -hex 32 | ||
| | | ||
| - | Place the following redirects after < | + | The Nextcloud [[https://nextcloud-talk.readthedocs.io/ |
| - | | + | |
| - | | + | |
| + | use-auth-secret | ||
| + | static-auth-secret=< | ||
| + | realm=your.domain.org | ||
| + | total-quota=100 | ||
| + | bps-capacity=0 | ||
| + | stale-nonce | ||
| + | no-multicast-peers | ||
| + | systemctl restart coturn | ||
| | | ||
| - | Okay, that is the majority of fundamental configuration details required | + | After doing this, go to Nextcloud / Settings / Talk, and enter localhost: |
| + | |||
| + | sudo nano /etc/php/7.3/ | ||
| + | sudo nano / | ||
| + | sudo nano / | ||
| + | sudo nano / | ||
| + | max_excution_time = 240 (for all of them) | ||
| + | |||
| + | If you get the missing indexes error on an upgrade, use: | ||
| - | sudo apt install php7.0-apcu | + | sudo -u www-data php occ db: |
| - | After installing the package, make sure to adjust your config.php as follows: | + | Brute force won't permit log in |
| - | | + | |
| + | delete FROM oc_bruteforce_attempts; | ||
| + | flush privileges; | ||
| + | exit; | ||
| | | ||
| - | Add the following line to the config file so that Nextcloud knows which program | + | Log in normally after that. My latest command is for Stubborn files that won't delete from trashbin: |
| + | |||
| + | sudo -u www-data php occ trashbin: | ||
| + | |||
| + | Phone region issue | ||
| + | |||
| + | sudo nano / | ||
| + | ' | ||
| + | |||
| + | New weird error about svg support for phpimagick | ||
| + | |||
| + | sudo apt install libmagickcore-6.q16-6-extra | ||
| + | |||
| + | Upgrade & Update: | ||
| + | |||
| + | cd / | ||
| + | sudo -u www-data php occ upgrade | ||
| + | cd / | ||
| + | sudo -u www-data php updater.phar | ||
| + | |||
| + | Use redis for everything except local memcache | ||
| + | |||
| + | sudo apt install | ||
| + | sudo apt install | ||
| + | sudo apt-get install php-{xml, | ||
| + | sudo apt-get install php8.3-{xml, | ||
| + | |||
| + | Then, right underneath the ''' | ||
| ' | ' | ||
| + | ' | ||
| + | ' | ||
| + | ' | ||
| + | ' | ||
| + | ' | ||
| + | ], | ||
| - | Lastly, I ran into an error that stated that the database I created above was not set to handle "13 big integers" | ||
| - | sudo systemctl stop apache2 | + | Configure apcu in php mods: |
| - | sudo systemctl stop php7.0-fpm | + | |
| - | Now that your service is sudo -u www-data | + | |
| - | stopped, you can safely run Netcloud' | + | < |
| - | sudo -u www-data php occ db: | + | To get Social working, these rewrite rules are needed. However, these need to actually point to a .well-known directory which is configured properly. If, however, override All did not make that or your instance was upgraded and does not have it, these rewrites in .htaccess will not be enough on their own. |
| - | Follow the prompts, and then run it again once it completes in order to verify that "All tables are already up to date!" | + | RewriteRule ^\.well-known/ |
| + | RewriteRule ^\.well-known/ | ||
| | | ||
| - | sudo systemctl restart mysql | + | Enable rotation of logs |
| - | | + | |
| - | | + | |
| - | sudo systemctl restart php7.0-fpm.service | + | |
| - | sudo reboot | + | Delete the log contents (removes errors from admin settings GUI) |
| + | |||
| + | sudo -u www-data truncate nextcloud.log --size 0 | ||
| + | |||
| + | This will put the logs on a schedule and remove old errors in due time. When I put Nextcloud behind a reverse proxy, I had to change the following in the primary config: | ||
| - | Happy clouding | + | sudo nano / |
| + | ' | ||
| + | array ( | ||
| + | 0 => ' | ||
| + | 1 => ' | ||
| + | ), | ||
| + | ' | ||
| + | ' | ||
| - | -- -- -- -- -- | + | This ensures that the upstream subnet and node is trusted and that external url requests don't try to access the subnet directly. There are other notes in the proxmox tutorial since that is when I set up the reverse proxy setup. There is now a recommended maintenance window setting: |
| - | This tutorial is a designated " | + | ' |
| - | --- //[[netcmnd@jonathanhaack.com|oemb1905]] | + | --- //[[webmaster@haacksnetworking.org|oemb1905]] |
computing/nextcloud.1560647366.txt.gz · Last modified: 2019/06/16 01:09 by oemb1905
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3
