Skip to content

Build your own self-hosted cloud storage with Nextcloud, with enhanced privacy and security for file management

License

Notifications You must be signed in to change notification settings

sonosq/nextcloud-setup

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

22 Commits
 
 
 
 
 
 

Repository files navigation

Make your own self-hosted cloud storage

Benefits

  • More privacy and security
  • Cost-Effectiveness
  • Scalability
  • More Control and Customisation

Prerequisites

  • A computer running Ubuntu or any Debian flavor.
  • Check if your ISP allows you to enable port-forward [Optional]
  • Own a domain [Optional]

Initial server setup

Update your Linux distribution

sudo apt update
sudo apt full-upgrade
sudo apt autoremove
  • Install all necessary packages (some may be optional based on your requirements)
sudo apt install neovim wget mariadb-server php php-apcu php-bcmath php-cli php-common php-curl php-gd php-gmp php-imagick php-intl php-mbstring php-mysql php-zip php-xml unzip nmap

Update your hostname (Optional)

  • Modify the file and assign an appropriate hostname or domain name to your server
sudo nvim /etc/hostname

hostname.png

sudo nvim /etc/hosts

hosts.png

  • Restart your server to apply the changes made thus far
sudo reboot

Downloading Nextcloud

  • Download the Nextcloud ZIP file
wget https://download.nextcloud.com/server/releases/latest.zip

MariaDB Setup

  • Check the status of the mariadb service
systemctl status mariadb
  • Run the secure installation script
sudo mysql_secure_installation
  • Then you should see a several question. Answer following the provided input below
Password prompt --> Click Enter key
Switch to unix_socket_auth [Y/n] --> n
Change the root password [Y/n] --> Y
Enter your secure password: 
Remove anonymous users [Y/n] --> Y
Disallow root login remotely [Y/n] --> Y
Remove test database and access to it [Y/n] --> Y
Reload privileges tables now [Y/n] --> Y

Setting up the Nextcloud Database

  • Access to MariaDB
sudo mariadb
  • Create the database
CREATE DATABASE nextcloud;
  • Set-up permissions
GRANT ALL PRIVILEGES ON nextcloud.* TO 'nextcloud'@'localhost' IDENTIFIED BY 'mypassword';
  
FLUSH PRIVILEGES;
  • Press CTRL+D to exit

Apache WebServer

  • Enable these PHP extensions
sudo phpenmod bcmath gmp imagick intl
  • Unzip the Nextcloud file
unzip latest.zip
  • Move the files to the serving location and set the appropriate permissions
mv nextcloud your.domain.name
  • Change permissions
sudo chown -R www-data:www-data your.domain.name
  • Move the directory to /var/www
sudo mv your.domain.name /var/www
  • Disable the default site for apache
sudo a2dissite 000-default.conf

Configure Nextcloud host

  • Create an Apache config file for serving Nextcloud
sudo nvim /etc/apache2/sites-available/your.domain.name.conf
  • Insert the provided content into the file, ensuring to modify the part that mentions 'your.domain.name'
<VirtualHost *:80>
    DocumentRoot "/var/www/your.domain.name"
    ServerName your.domain.name

    <Directory "/var/www/your.domain.name/">
        Options MultiViews FollowSymlinks
        AllowOverride All
        Order allow,deny
        Allow from all
   </Directory>

   TransferLog /var/log/apache2/your.domain.name_access.log
   ErrorLog /var/log/apache2/your.domain.name_error.log

</VirtualHost>  
  • Enable the site
sudo a2ensite your.domain.name.conf

PHP

  • You have to tweak certain lines in order to work nextcloud
sudo nano /etc/php/8.1/apache2/php.ini
  • Within the file, locate and modify these parameters
memory_limit = 3G #(Increase the value if you have more RAM)
upload_max_filesize = 50G #(Increase/Decrease the value following your purposes)
max_execution_time = 3600
post_max_size = 50G #(Increase/Decrease the value following your purposes)
date.timezone = Europe/London #(View the link below to adjust your timezone)
opcache.enable=1
opcache.interned_strings_buffer= 128
opcache.max_accelerated_files=10000
opcache.memory_consumption=128
opcache.save_comments=1
opcache.revalidate_freq=1

Timezones

  • Enable PHP mods for Apache
sudo a2enmod dir env headers mime rewrite ssl
  • Restart Apache
sudo systemctl restart apache2

Set-up Nextcloud web server

  • When you first enter the page you should see something like this admin.png
  • Enter the following information into the respective boxes
Username --> Your Username
Password --> Set a secure password to login into Nextcloud

Data Folder --> Leave as default

Database user --> nextcloud
Database password --> nextcloud_db password
Database name --> nextcloud
  • Then, Install the recommended apps

Optional

  • As mentioned earlier, to establish a connection to your Nextcloud from outside your private network, you need to enable port forwarding on your router
  • In order to proceed, in this example, I configure my port forwarding on a Movistar router
  • The first thing you need to do is search for your private IP using the following command
ifconfig -a

ifconfig.png

  • Next, enter your router portal to configure the port forwarding. Enter the IP address and select 'web-server' at port 80, then enable it

  • To check if your port 80 is open, run the following command

    sudo nmap -n -PN -sT -sU -p80 {IP}
  • Check if the nextcloud page is accessible typing your public IP on the web browser

    • You should see something like this

untrusted.png

Extra

  • If you want to access to your nextcloud through your public IP
  • Edit config.php

    sudo nvim /var/www/your.domain.name/config/config.php
  • On trusted_domains add your public IP

trusted.png

Configure your domain

Set-up Namecheap

  • Once you've acquired a domain, proceed to the Advanced DNS settings and establish a host record
  • In the IP Address section, input your public IP address
  • Then, on the HOST section put "@" namecheap_host.png
  • Proceed to edit the config.php file
sudo nvim /var/www/your.domain.name/config/config.php
  • Add your domain name to the trusted_domains array domain_trusted.png
  • Now, you can access to Nextcloud through your domain

TLS certificate

  • Install snapd
sudo apt install snapd
sudo snap install core && sudo snap refresh core
  • Install certbot
sudo snap install --classic certbot
sudo ln -s /snap/bin/certbot /usr/bin/certbot
  • Get and install your certificates
 sudo certbot --apache

Troubleshooting

  • For troubleshooting, search the internet. Most forums typically have solutions
  • I case that you don't know how to solve the problem. Please feel free to contact me via email

Resources

In case of any errors or suggestions, please submit a pull request

Releases

No releases published

Packages

No packages published