셀프 호스팅 넥스트클라우드: 나만의 프라이빗 클라우드 솔루션

version: '3'

services:
  nextcloud-db:
    image: mariadb:10.11
    container_name: nextcloud-db
    restart: always
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    volumes:
      - db:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD=your_secure_root_password
      - MYSQL_PASSWORD=your_secure_password
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud

  nextcloud-redis:
    image: redis:alpine
    container_name: nextcloud-redis
    restart: always

  nextcloud-app:
    image: nextcloud:latest
    container_name: nextcloud-app
    restart: always
    ports:
      - 8080:80
    links:
      - nextcloud-db
      - nextcloud-redis
    volumes:
      - nextcloud:/var/www/html
      - ./data:/var/www/html/data
    environment:
      - MYSQL_PASSWORD=your_secure_password
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
      - MYSQL_HOST=nextcloud-db
      - REDIS_HOST=nextcloud-redis

volumes:
  db:
  nextcloud:

docker-compose up -d

# 시스템 업데이트
sudo apt update && sudo apt upgrade -y

# 필요한 패키지 설치
sudo apt install apache2 mariadb-server libapache2-mod-php php-gd \
  php-mysql php-curl php-mbstring php-intl php-gmp php-bcmath \
  php-xml php-imagick php-zip php-bz2 unzip -y

# MariaDB 보안 설정
sudo mysql_secure_installation

# 데이터베이스 및 사용자 생성
sudo mysql -u root -p

CREATE DATABASE nextcloud;
CREATE USER 'nextcloud'@'localhost' IDENTIFIED BY 'your_secure_password';
GRANT ALL PRIVILEGES ON nextcloud.* TO 'nextcloud'@'localhost';
FLUSH PRIVILEGES;
EXIT;

# Nextcloud 다운로드 및 추출
cd /tmp
wget https://download.nextcloud.com/server/releases/latest.tar.bz2
tar -xjf latest.tar.bz2
sudo mv nextcloud /var/www/html/
sudo chown -R www-data:www-data /var/www/html/nextcloud

# Apache 구성
sudo nano /etc/apache2/sites-available/nextcloud.conf

sudo snap install nextcloud

server {
    listen 80;
    server_name cloud.yourdomain.com;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name cloud.yourdomain.com;

    ssl_certificate /etc/letsencrypt/live/cloud.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/cloud.yourdomain.com/privkey.pem;

    client_max_body_size 512M;
    fastcgi_buffers 64 4K;

    location / {
        proxy_pass http://localhost:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx -d cloud.yourdomain.com

'memcache.local' => '\OC\Memcache\APCu',
'memcache.distributed' => '\OC\Memcache\Redis',
'memcache.locking' => '\OC\Memcache\Redis',
'redis' => [
    'host' => 'nextcloud-redis',
    'port' => 6379,
],
'default_phone_region' => 'US',
'maintenance_window_start' => 1,

sudo crontab -u www-data -e

# Docker를 사용한 OnlyOffice
docker run -i -t -d -p 8000:80 --restart=always \
  -v /app/onlyoffice/DocumentServer/logs:/var/log/onlyoffice \
  -v /app/onlyoffice/DocumentServer/data:/var/www/onlyoffice/Data \
  onlyoffice/documentserver

# Nextcloud Apps에서 Talk 앱 설치
# 더 나은 연결성을 위해 TURN 서버 설치
sudo apt install coturn

#!/bin/bash
# Nextcloud backup script

BACKUP_DIR="/backup/nextcloud"
DATE=$(date +%Y%m%d_%H%M%S)
NEXTCLOUD_DIR="/var/www/html/nextcloud"

# 유지 관리 모드 활성화
sudo -u www-data php ${NEXTCLOUD_DIR}/occ maintenance:mode --on

# 데이터베이스 백업
mysqldump --single-transaction -u nextcloud -p'your_password' nextcloud > \
  ${BACKUP_DIR}/nextcloud-db-${DATE}.sql

# 데이터 디렉토리 백업
rsync -Aavx ${NEXTCLOUD_DIR}/data/ ${BACKUP_DIR}/data-${DATE}/

# 구성 백업
cp -r ${NEXTCLOUD_DIR}/config/ ${BACKUP_DIR}/config-${DATE}/

# 유지 관리 모드 비활성화
sudo -u www-data php ${NEXTCLOUD_DIR}/occ maintenance:mode --off

# 지난 7일 간의 백업만 유지
find ${BACKUP_DIR} -type f -mtime +7 -delete

# 원격 백업 위치로 동기화 (선택사항)
rsync -avz ${BACKUP_DIR}/ user@backup-server:/nextcloud-backups/

0 2 * * * /usr/local/bin/nextcloud-backup.sh

# UFW 사용
sudo ufw allow 22/tcp    # SSH
sudo ufw allow 80/tcp    # HTTP
sudo ufw allow 443/tcp   # HTTPS
sudo ufw enable

sudo apt install fail2ban
sudo nano /etc/fail2ban/filter.d/nextcloud.conf

[Definition]
failregex=^{"reqId":".*","level":2,"time":".*","remoteAddr":"<HOST>","user":".*","app":"core","method":".*","url":".*","message":"Login failed:
ignoreregex =

sudo nano /etc/fail2ban/jail.local

[nextcloud]
enabled = true
port = 80,443
protocol = tcp
filter = nextcloud
maxretry = 3
bantime = 86400
logpath = /var/www/html/nextcloud/data/nextcloud.log

# Docker
docker-compose pull
docker-compose up -d

# 수동 설치
sudo -u www-data php /var/www/html/nextcloud/updater/updater.phar
sudo -u www-data php /var/www/html/nextcloud/occ upgrade

# 파일 스캔
sudo -u www-data php occ files:scan --all

# 무결성 확인
sudo -u www-data php occ integrity:check-core

# 사용자 관리
sudo -u www-data php occ user:list
sudo -u www-data php occ user:add username

# 앱 관리
sudo -u www-data php occ app:list
sudo -u www-data php occ app:enable app_name

# 모니터링 도구 설치
sudo apt install htop iotop nethogs

# 로그 확인
tail -f /var/www/html/nextcloud/data/nextcloud.log
journalctl -u docker -f  # Docker 설치용

# PHP 구성
sudo nano /etc/php/8.1/apache2/php.ini

upload_max_filesize = 16G
post_max_size = 16G
max_execution_time = 3600
memory_limit = 512M

sudo -u www-data php occ db:add-missing-indices
sudo -u www-data php occ db:convert-filecache-bigint

sudo chown -R www-data:www-data /var/www/html/nextcloud
sudo find /var/www/html/nextcloud -type d -exec chmod 750 {} \;
sudo find /var/www/html/nextcloud -type f -exec chmod 640 {} \;