270 lines
7 KiB
ReStructuredText
270 lines
7 KiB
ReStructuredText
==============
|
|
cloud.libre.is
|
|
==============
|
|
Administrator documentation for Libre Cloud.
|
|
|
|
`<https://cloud.libre.is/>`_
|
|
|
|
The site is based on Nextcloud software.
|
|
|
|
`<https://nextcloud.com/>`_
|
|
|
|
Nextcloud install documentation:
|
|
|
|
`<https://docs.nextcloud.com/server/latest/admin_manual/installation/index.html>`_
|
|
|
|
`<https://docs.nextcloud.com/server/latest/admin_manual/installation/source_installation.html>`_
|
|
|
|
|
|
Firewall
|
|
========
|
|
Open ports 80 and 443.
|
|
|
|
.. code-block:: cfg
|
|
|
|
-A INPUT -p tcp --dport 80 -j ACCEPT
|
|
-A INPUT -p tcp --dport 443 -j ACCEPT
|
|
|
|
|
|
Apache
|
|
======
|
|
Initial setup of Apache with Certbot.
|
|
|
|
.. code-block:: sh
|
|
|
|
sudo su -
|
|
apt install python3-certbot-apache php php-fpm php-gd php-json php-xml \
|
|
php-curl php-mbstring php-zip php-mysql php-intl php-imap php-bcmath \
|
|
php-gmp php-apcu php-redis php-imagick imagemagick ffmpeg
|
|
echo "cloud.libre.is" > /var/www/html/index.html
|
|
certbot -d cloud.libre.is
|
|
a2enmod rewrite headers env dir mime setenvif ssl proxy_fcgi
|
|
a2enconf php8.2-fpm
|
|
systemctl restart apache2
|
|
|
|
Some PHP config...XXX
|
|
|
|
.. code-block:: sh
|
|
|
|
sed -i -e 's/max_execution_time = 30/max_execution_time = 90/g' \
|
|
/etc/php/8.2/apache2/php.ini
|
|
sed -i -e 's/max_execution_time = 30/max_execution_time = 90/g' \
|
|
/etc/php/8.2/cli/php.ini
|
|
sed -i -e 's/max_execution_time = 30/max_execution_time = 90/g' \
|
|
/etc/php/8.2/fpm/php.ini
|
|
sed -i -e 's/memory_limit = 128M/memory_limit = 512M/g' \
|
|
/etc/php/8.2/apache2/php.ini
|
|
sed -i -e 's/memory_limit = 128M/memory_limit = 512M/g' \
|
|
/etc/php/8.2/cli/php.ini
|
|
sed -i -e 's/memory_limit = 128M/memory_limit = 512M/g' \
|
|
/etc/php/8.2/fpm/php.ini
|
|
sed -i -e 's/;opcache.enable=1/opcache.enable=1/g' \
|
|
/etc/php/8.2/apache2/php.ini
|
|
sed -i -e 's/;opcache.enable=1/opcache.enable=1/g' \
|
|
/etc/php/8.2/cli/php.ini
|
|
sed -i -e 's/;opcache.enable=1/opcache.enable=1/g' \
|
|
/etc/php/8.2/fpm/php.ini
|
|
systemctl restart apache2
|
|
|
|
|
|
Database
|
|
========
|
|
Use MariaDB for the databse.
|
|
|
|
`<https://docs.nextcloud.com/server/latest/admin_manual/configuration_database/linux_database_configuration.html>`_
|
|
|
|
.. code-block:: sh
|
|
|
|
sudo apt install mariadb-server
|
|
sudo mariadb-admin password
|
|
mariadb -uroot -p
|
|
|
|
Then in the database:
|
|
|
|
.. code-block:: sql
|
|
|
|
CREATE USER 'nextcloud'@'localhost' IDENTIFIED BY 'password';
|
|
CREATE DATABASE IF NOT EXISTS nextcloud CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;
|
|
GRANT ALL PRIVILEGES on nextcloud.* to 'nextcloud'@'localhost';
|
|
FLUSH PRIVILEGES;
|
|
EXIT
|
|
|
|
Edit /etc/mysql/my.cnf to look like this:
|
|
|
|
.. code-block:: cfg
|
|
|
|
[server]
|
|
skip_name_resolve = 1
|
|
innodb_buffer_pool_size = 128M
|
|
innodb_buffer_pool_instances = 1
|
|
innodb_flush_log_at_trx_commit = 2
|
|
innodb_log_buffer_size = 32M
|
|
innodb_max_dirty_pages_pct = 90
|
|
query_cache_type = 1
|
|
query_cache_limit = 2M
|
|
query_cache_min_res_unit = 2k
|
|
query_cache_size = 64M
|
|
tmp_table_size= 64M
|
|
max_heap_table_size= 64M
|
|
slow_query_log = 1
|
|
slow_query_log_file = /var/log/mysql/slow.log
|
|
long_query_time = 1
|
|
|
|
[client-server]
|
|
!includedir /etc/mysql/conf.d/
|
|
!includedir /etc/mysql/mariadb.conf.d/
|
|
|
|
[client]
|
|
default-character-set = utf8mb4
|
|
|
|
[mysqld]
|
|
character_set_server = utf8mb4
|
|
collation_server = utf8mb4_general_ci
|
|
transaction_isolation = READ-COMMITTED
|
|
binlog_format = ROW
|
|
innodb_large_prefix=on
|
|
innodb_file_format=barracuda
|
|
innodb_file_per_table=1
|
|
|
|
Restart database:
|
|
|
|
.. code-block:: sh
|
|
|
|
systemctl restart mariadb.service
|
|
|
|
Edit PHP file /etc/php/8.2/apache2/conf.d/20-pdo_mysql.ini for MariaDB.
|
|
XXX maybe too:
|
|
/etc/php/8.2/cli/conf.d/20-pdo_mysql.ini
|
|
/etc/php/8.2/fpm/conf.d/20-pdo_mysql.ini
|
|
|
|
.. code-block:: cfg
|
|
|
|
extension=pdo_mysql.so
|
|
|
|
[mysql]
|
|
mysql.allow_local_infile=On
|
|
mysql.allow_persistent=On
|
|
mysql.cache_size=2000
|
|
mysql.max_persistent=-1
|
|
mysql.max_links=-1
|
|
mysql.default_port=
|
|
mysql.default_socket=/run/mysqld/mysqld.sock
|
|
mysql.default_host=
|
|
mysql.default_user=
|
|
mysql.default_password=
|
|
mysql.connect_timeout=60
|
|
mysql.trace_mode=Off
|
|
|
|
Then restart apache...
|
|
|
|
.. code-block:: sh
|
|
|
|
sudo systemctl restart apache2
|
|
|
|
|
|
Nextcloud
|
|
=========
|
|
Get Nextcloud source.
|
|
|
|
.. code-block:: sh
|
|
|
|
wget https://download.nextcloud.com/server/releases/latest.tar.bz2
|
|
wget https://download.nextcloud.com/server/releases/latest.tar.bz2.sha256
|
|
cat latest.tar.bz2.sha256 ; sha256sum latest.tar.bz2
|
|
tar xf latest.tar.bz2
|
|
sudo cp -a nextcloud/* /var/www/html/nextcloud/
|
|
sudo cp -a nextcloud/.htaccess nextcloud/.user.ini /var/www/html/nextcloud/
|
|
sudo chown -R www-data:www-data /var/www/html/nextcloud/
|
|
|
|
|
|
Apache More
|
|
===========
|
|
Set up Apache for nextcloud.
|
|
|
|
Remove the old configs:
|
|
|
|
.. code-block::
|
|
|
|
rm /etc/apache2/sites-enabled/000-default.conf \
|
|
/etc/apache2/sites-enabled/000-default-le-ssl.conf
|
|
|
|
Then add file /etc/apache2/sites-available/cloud-libre-is.conf
|
|
with these contents:
|
|
|
|
.. code-block:: apache
|
|
|
|
<VirtualHost 70.39.110.157:80>
|
|
ServerName cloud.libre.is
|
|
ServerAdmin webmaster@localhost
|
|
DocumentRoot /var/www/html/nextcloud
|
|
ErrorLog ${APACHE_LOG_DIR}/error-cloud-libre-is.log
|
|
CustomLog ${APACHE_LOG_DIR}/access-cloud-libre-is.log combined
|
|
RewriteEngine on
|
|
ReWriteCond %{HTTPS} off
|
|
ReWriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
|
|
RewriteCond %{SERVER_NAME} =cloud.libre.is
|
|
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
|
|
</VirtualHost>
|
|
|
|
<VirtualHost 70.39.110.157:443>
|
|
ServerName cloud.libre.is
|
|
ServerAdmin webmaster@localhost
|
|
DocumentRoot /var/www/html/nextcloud
|
|
ErrorLog ${APACHE_LOG_DIR}/error-ssl-cloud-libre-is.log
|
|
CustomLog ${APACHE_LOG_DIR}/access-ssl-cloud-libre-is.log combined
|
|
Include /etc/letsencrypt/options-ssl-apache.conf
|
|
SSLCertificateFile /etc/letsencrypt/live/cloud.libre.is/fullchain.pem
|
|
SSLCertificateKeyFile /etc/letsencrypt/live/cloud.libre.is/privkey.pem
|
|
<Directory /var/www/html/nextcloud/>
|
|
Require all granted
|
|
AllowOverride All
|
|
Options FollowSymLinks MultiViews
|
|
<IfModule mod_dav.c>
|
|
Dav off
|
|
</IfModule>
|
|
</Directory>
|
|
</VirtualHost>
|
|
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
|
|
|
|
|
|
Symlink it to enable it, then restart apache.
|
|
|
|
.. code-block:: sh
|
|
|
|
sudo ln -s /etc/apache2/sites-available/cloud-libre-is.conf \
|
|
/etc/apache2/sites-enabled/
|
|
rm /var/www/html/index.html
|
|
sudo systemctl restart apache2
|
|
|
|
|
|
Nextcloud Admin
|
|
===============
|
|
Now go to the new site and configure via web browser:
|
|
|
|
`<https://cloud.libre.is/>`_
|
|
|
|
|
|
Config changes:
|
|
|
|
.. code-block:: cfg
|
|
|
|
'overwrite.cli.url' => 'https://cloud.libre.is/',
|
|
'htaccess.RewriteBase' => '/',
|
|
|
|
Update config:
|
|
|
|
.. code-block:: sh
|
|
|
|
sudo -u www-data php /var/www/nextcloud/occ maintenance:update:htaccess
|
|
|
|
Background jobs:
|
|
|
|
`<https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/background_jobs_configuration.html>`_
|
|
|
|
FPM config:
|
|
|
|
`<https://docs.nextcloud.com/server/latest/admin_manual/installation/source_installation.html>`_
|
|
`<https://www.php.net/manual/en/install.fpm.php>`_
|
|
|
|
|