il
278dd3cebe
deployment note: - use nextcloud for groupware - consider replacing vikunja and opencloud
89 lines
2.2 KiB
Markdown
89 lines
2.2 KiB
Markdown
# Nextcloud
|
|
|
|
## Prerequisite
|
|
|
|
### Create database
|
|
|
|
- Create the password with `openssl rand -base64 32`
|
|
- Save this value in secrets.yaml in `postgresql.password.nextcloud`
|
|
- Access infra server to create nextcloud_db with `podman exec -it postgresql psql -U postgres`
|
|
|
|
```SQL
|
|
CREATE USER nextcloud WITH PASSWORD 'postgresql.password.nextcloud';
|
|
CREATE DATABASE nextcloud_db;
|
|
ALTER DATABASE nextcloud_db OWNER TO nextcloud;
|
|
```
|
|
|
|
### Create oidc secret and hash
|
|
|
|
- Create the secret with `openssl rand -base64 32`
|
|
- access to auth vm
|
|
- `podman exec -it authelia sh`
|
|
- `authelia crypto hash generate pbkdf2 --password 'nextcloud.oidc.secret'`
|
|
- Save this value in secrets.yaml in `nextcloud.oidc.secret` and `nextcloud.oidc.hash`
|
|
|
|
### Create admin password
|
|
|
|
- Create the secret with `openssl rand -base64 32`
|
|
- Save this value in secrets.yaml in `nextcloud.admin-local.password`
|
|
|
|
### Add postgresql dump backup list
|
|
|
|
- [set_postgresql.yaml](../../../ansible/roles/infra/tasks/services/set_postgresql.yaml)
|
|
|
|
```yaml
|
|
- name: Set connected services list
|
|
ansible.builtin.set_fact:
|
|
connected_services:
|
|
- ...
|
|
- "nextcloud"
|
|
```
|
|
|
|
## Configuration
|
|
|
|
### Access
|
|
|
|
- https://nextcloud.ilnmors.com
|
|
- login with admin-local
|
|
|
|
### Disable and enable apps
|
|
|
|
- Profile: Apps: Your apps: Disable
|
|
- Photo
|
|
- dashboard
|
|
|
|
- Profile: Apps: Search
|
|
- OpenID Connect user backend
|
|
- Calendar
|
|
- Contacts
|
|
- Deck
|
|
- Tasks
|
|
- Mail
|
|
- Nextcloud Office
|
|
|
|
### Configuration
|
|
|
|
```bash
|
|
podman exec -u www-data nextcloud php occ user_oidc:provider Authelia \
|
|
--clientid="nextcloud" \
|
|
--clientsecret="nextcloud.oidc.secret" \
|
|
--discoveryuri="https://authelia.ilnmors.com/.well-known/openid-configuration" \
|
|
--scope="openid profile email groups" \
|
|
--unique-uid=0 \
|
|
--mapping-uid="preferred_username" \
|
|
--mapping-display-name="name" \
|
|
--mapping-email="email" \
|
|
--mapping-groups="groups" \
|
|
--group-whitelist-regex="/^users$/" \
|
|
--group-provisioning=1
|
|
|
|
podman exec -u www-data nextcloud php occ db:add-missing-indices
|
|
podman exec -u www-data nextcloud php occ db:add-missing-columns
|
|
podman exec -u www-data nextcloud php occ db:add-missing-primary-keys
|
|
```
|
|
|
|
### Account configuration
|
|
|
|
- Profile: Accounts:
|
|
- allocate admin group for admin users
|