kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2024-11-22 12:41:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Optimized nextcloud for v 27

Browse Source
This commit is contained in:
Kevin Veen-Birkenbach 2023-11-04 14:20:59 +01:00
parent c0be4a912f
commit 1a02d833a6
3 changed files with 35 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

45
roles/docker-nextcloud/README.md
View File

@ -1,18 +1,21 @@
# role docker-nextcloud # role docker-nextcloud
## precondition ## modify config
Enter container:
Before executing cli commands the following variable needs to be set:
```bash ```bash
NEXTCLOUD_APPLICATION_DOCKER_CONTAINER=nextcloud-application-1 docker-compose exec -it application /bin/sh
```
Afterwards modify config:
```bash
apk add --no-cache nano && nano config/config.php
``` ```
## update ## update
To update the nextcloud container execute the following commands on the server: To update the nextcloud container execute the following commands on the server:
```bash ```bash
docker exec -it -u www-data $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER /var/www/html/occ maintenance:mode --on && docker-compose exec -it -u www-data application /var/www/html/occ maintenance:mode --on &&
export COMPOSE_HTTP_TIMEOUT=600 && export COMPOSE_HTTP_TIMEOUT=600 &&
export DOCKER_CLIENT_TIMEOUT=600 && export DOCKER_CLIENT_TIMEOUT=600 &&
docker-compose down docker-compose down
@ -27,27 +30,27 @@ Wait for the update to finish.
You can verify that the update is finished by checking the following logs: You can verify that the update is finished by checking the following logs:
```bash ```bash
docker logs $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER docker-compose logs application
``` ```
and and
```bash ```bash
docker exec -it $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER top docker-compose exec -it application top
``` ```
If nextcloud stays in the maintenance mode after the update try the following: If nextcloud stays in the maintenance mode after the update try the following:
```bash ```bash
docker exec -it -u www-data $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER /var/www/html/occ maintenance:mode --on docker-compose exec -it -u www-data application /var/www/html/occ maintenance:mode --on
docker exec -it -u www-data $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER /var/www/html/occ upgrade docker-compose exec -it -u www-data application /var/www/html/occ upgrade
docker exec -it -u www-data $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER /var/www/html/occ maintenance:mode --off docker-compose exec -it -u www-data application /var/www/html/occ maintenance:mode --off
``` ```
If the update process fails execute If the update process fails execute
```bash ```bash
docker exec -it -u www-data $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER /var/www/html/occ maintenance:repair docker-compose exec -it -u www-data application /var/www/html/occ maintenance:repair
``` ```
and disable the not functioning apps. and disable the not functioning apps.
@ -56,7 +59,7 @@ and disable the not functioning apps.
```bash ```bash
cd {{path_docker_compose_files}}nextcloud && cd {{path_docker_compose_files}}nextcloud &&
docker-compose down && docker-compose down &&
docker exec -i nextcloud_database_1 mysql -u nextcloud -pPASSWORT nextcloud < "/Backups/$(sha256sum /etc/machine-id | head -c 64)/docker-volume-backup/latest/nextcloud_database/sql/backup.sql" && docker-compose exec -i database mysql -u nextcloud -pPASSWORT nextcloud < "/Backups/$(sha256sum /etc/machine-id | head -c 64)/docker-volume-backup/latest/nextcloud_database/sql/backup.sql" &&
cd {{path_administrator_scripts}}docker-volume-backup && cd {{path_administrator_scripts}}docker-volume-backup &&
bash ./docker-volume-recover.sh "nextcloud_data" "$(sha256sum /etc/machine-id | head -c 64)" bash ./docker-volume-recover.sh "nextcloud_data" "$(sha256sum /etc/machine-id | head -c 64)"
``` ```
@ -65,12 +68,12 @@ bash ./docker-volume-recover.sh "nextcloud_data" "$(sha256sum /etc/machine-id |
### database access ### database access
To access the database execute To access the database execute
```bash ```bash
docker exec -it nextcloud_database_1 mysql -u nextcloud -D nextcloud -p docker-compose exec -it database mysql -u nextcloud -D nextcloud -p
``` ```
### recreate database with new volume: ### recreate database with new volume:
```bash ```bash
docker run --detach --name nextcloud_database_1 --env MYSQL_USER="nextcloud" --env MYSQL_PASSWORD=PASSWORD --env MYSQL_ROOT_PASSWORD=PASSWORD --env MYSQL_DATABASE="nextcloud" -v nextcloud_database:/var/lib/mysql docker-compose run --detach --name database --env MYSQL_USER="nextcloud" --env MYSQL_PASSWORD=PASSWORD --env MYSQL_ROOT_PASSWORD=PASSWORD --env MYSQL_DATABASE="nextcloud" -v nextcloud_database:/var/lib/mysql
``` ```
The process can be checked with: The process can be checked with:
@ -84,7 +87,7 @@ show processlist;
To use occ run: To use occ run:
```bash ```bash
docker exec -it -u www-data $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER /var/www/html/occ docker-compose exec -it -u www-data application /var/www/html/occ
``` ```
## app relevant tables ## app relevant tables
@ -94,14 +97,14 @@ To use occ run:
### initialize duplicates ### initialize duplicates
```bash ```bash
sudo docker exec -it -u www-data $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER /var/www/html/occ duplicates:find-all --output docker-compose exec -it -u www-data application /var/www/html/occ duplicates:find-all --output
``` ```
### unlock files ### unlock files
```bash ```bash
docker exec -it -u www-data $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER /var/www/html/occ maintenance:mode --on docker-compose exec -it -u www-data application /var/www/html/occ maintenance:mode --on
docker exec -it nextcloud_database_1 mysql -u nextcloud -pPASSWORD1234132 -D nextcloud -e "delete from oc_file_locks where 1" docker-compose exec -it nextcloud_database_1 mysql -u nextcloud -pPASSWORD1234132 -D nextcloud -e "delete from oc_file_locks where 1"
docker exec -it -u www-data $NEXTCLOUD_APPLICATION_DOCKER_CONTAINER /var/www/html/occ maintenance:mode --off docker-compose exec -it -u www-data application /var/www/html/occ maintenance:mode --off
``` ```
## architecture ## architecture
@ -112,7 +115,7 @@ Until NC24 MariaDB version has to be used.
### 504 Gateway Timeout ### 504 Gateway Timeout
```bash ```bash
docker logs nextcloud_web_1 --tail 1000 | grep 504 docker-compose logs web --tail 1000 | grep 504
``` ```
#### See #### See

3
roles/docker-nextcloud/templates/nextcloud.conf.j2
View File

@ -7,6 +7,9 @@ server
# Remove X-Powered-By, which is an information leak # Remove X-Powered-By, which is an information leak
fastcgi_hide_header X-Powered-By; fastcgi_hide_header X-Powered-By;
# Set X-Robots-Tag to noindex, nofollow on all responses
add_header X-Robots-Tag "noindex, nofollow";
# set max upload size # set max upload size
client_max_body_size 10G; client_max_body_size 10G;
client_body_buffer_size 400M; client_body_buffer_size 400M;

16
roles/docker-nextcloud/templates/nginx.conf.j2
View File

@ -61,17 +61,17 @@ http {
#pagespeed off; #pagespeed off;
# HTTP response headers borrowed from Nextcloud `.htaccess` # HTTP response headers borrowed from Nextcloud `.htaccess`
add_header Referrer-Policy "no-referrer" always; add_header Referrer-Policy "no-referrer" always;
add_header X-Content-Type-Options "nosniff" always; add_header X-Content-Type-Options "nosniff" always;
add_header X-Download-Options "noopen" always; add_header X-Download-Options "noopen" always;
add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Permitted-Cross-Domain-Policies "none" always; add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "none" always; add_header X-Robots-Tag "noindex, nofollow" always;
add_header X-XSS-Protection "1; mode=block" always; add_header X-XSS-Protection "1; mode=block" always;
# Remove X-Powered-By, which is an information leak # Remove X-Powered-By, which is an information leak
fastcgi_hide_header X-Powered-By; fastcgi_hide_header X-Powered-By;
# Path to the root of your installation # Path to the root of your installation
root /var/www/html; root /var/www/html;