ilnmors-homelab/docs/services/app/nextcloud.md

Nextcloud

Prerequisite

Create database

• Create the password with openssl rand -base64 32
  • Save this value in secrets.yaml in postgresql.password.nextcloud
  • Access infra server to create nextcloud_db with podman exec -it postgresql psql -U postgres

CREATE USER nextcloud WITH PASSWORD 'postgresql.password.nextcloud';
CREATE DATABASE nextcloud_db;
ALTER DATABASE nextcloud_db OWNER TO nextcloud;

Create oidc secret and hash

• Create the secret with openssl rand -base64 32
• access to auth vm
  • podman exec -it authelia sh
  • authelia crypto hash generate pbkdf2 --password 'nextcloud.oidc.secret'
• Save this value in secrets.yaml in nextcloud.oidc.secret and nextcloud.oidc.hash

Create admin password

• Create the secret with openssl rand -base64 32
• Save this value in secrets.yaml in nextcloud.admin-local.password

Add postgresql dump backup list

• set_postgresql.yaml

- name: Set connected services list
  ansible.builtin.set_fact:
    connected_services:
      - ...
      - "nextcloud"

Configuration

Access

• https://nextcloud.ilnmors.com
  • login with admin-local

Disable and enable apps

• Profile: Apps: Your apps: Disable

  • Photo
  • dashboard

• Profile: Apps: Search

  • OpenID Connect user backend
  • Calendar
  • Contacts
  • Deck
  • Tasks
  • Mail
  • Nextcloud Office

Configuration

podman exec -u www-data nextcloud php occ user_oidc:provider Authelia \
  --clientid="nextcloud" \
  --clientsecret="nextcloud.oidc.secret" \
  --discoveryuri="https://authelia.ilnmors.com/.well-known/openid-configuration" \
  --scope="openid profile email groups" \
  --unique-uid=0 \
  --mapping-uid="preferred_username" \
  --mapping-display-name="name" \
  --mapping-email="email" \
  --mapping-groups="groups" \
  --group-whitelist-regex="/^users$/" \
  --group-provisioning=1

podman exec -u www-data nextcloud php occ db:add-missing-indices
podman exec -u www-data nextcloud php occ db:add-missing-columns
podman exec -u www-data nextcloud php occ db:add-missing-primary-keys

Account configuration

• Profile: Accounts:
  • allocate admin group for admin users