nethserver-nextcloud

This package can be installed before or after any user provider like nethserver-dc and nethserver-directory.

If nethserver-dc or nethserver-directory are installed, the nethserver-nextcloud-save event will automatically enable all local users.

The package does the following:

• create nextcloud mysql database
• create default database credentials: user nextcloud and password stored in /var/lib/nethserver/secrets/nextcloud
• add trusted domains to use with web access
• create default credentials for web login: user "admin" and password "Nethesis,1234"
• set english as the default language
• set the user data directory as /var/lib/nethserver/nextcloud

The configuration is stored inside the configuration db, under the nextcloud key. To show it:

config show nextcloud

Properties:

• TrustedDomains: list of trusted domains added to Nextcloud config file
• VirtualHost: set custom virtual host, e.g. mycloud.mydomain.it
• Wellknown: can be enabled or disabled. If enabled, add redirects for calDAV and cardDAV. This property has effect only if VirtualHost is empty.
• HonorAdStartTls: can be enabled or disabled. The StartTLS option from SSSD configuration was historyically ignored. If set to enabled, the sssd/StartTls prop value is honored.

Admin user

After installation the application is accesible using the following credentials:

• User: admin
• Password: Nethesis,1234

Please, remember to change the default password after the first login!

Customize virtual host

Set custom virtual host and add it to trusted domains as follow:

config setprop nextcloud VirtualHost <VHOST>.<DOMAIN_NAME>
config setprop nextcloud TrustedDomains <VHOST>.<DOMAIN_NAME>
signal-event nethserver-nextcloud-update

Backup

The Nextcloud backup includes the configuration file and all data of the users:

/var/lib/nethserver/nextcloud
/usr/share/nextcloud/config/config.php

The database is automatically saved by nethserver-mysql.

OCC

When using occ command, PHP 7.3 should be enabled inside the environment.

Invocation example:

occ ldap:show-config"

The occ command is just a wrapper around:

su - apache -s /bin/bash -c "source /opt/remi/php80/enable; cd /usr/share/nextcloud/; php occ ldap:show-config"

Log of php80-fpm

The log of php80-fpm can be found at /opt/remi/php80/log/php-fpm/error-nextcloud.log

PHP upload limits

Nextcloud runs with the PHP defaults post_max_size = 8M and upload_max_filesize = 2M. They apply only to form uploads, like the user avatar and the theming logo: normal file uploads use WebDAV PUT requests and are not limited by them.

Do not raise post_max_size over 32M: larger values weaken the mitigation for the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (see the PHP advisory).

PHP-FPM workers

The Nextcloud pool sets pm.max_requests = 1: each PHP-FPM worker serves one request and is then replaced, so no state is left for the next request (mitigation for CVE-2026-109619). The pool file /etc/opt/remi/php80/php-fpm.d/000-nextcloud.conf is %config(noreplace): if it was edited locally, the update writes the new version to 000-nextcloud.conf.rpmnew and the setting must be added by hand.

Cockpit API

read

Return mattermost status and configuration.

Input

• app-info or configuration

Output

Example (app-info):

{
 "url": "https://your.host.domain"
}

Example (configuration):

{
 "props": {
   "Wellknown": "enabled",
   "VirtualHost": "eccoci.rva.org",
   "TrustedDomains": "a.b,b.c"
 },
 "stats": {
   "version": "16.0.2.1",
   "admin_pass_warn": true,
   "users": "3"
 }
}

validate

Constraints:

• VirtualHost: must be a valid FQDN or EMPTY
• TrustedDomains: must be an array of valid FQDN

Input

Example:

{
 "props": {
   "Wellknown": "enabled",
   "VirtualHost": "eccoci.rva.org",
   "TrustedDomains": "a.b,b.c"
 }
}

update

Same input as validate.

Full reinstall

As with many other applications in NethServer, un-installing the Nextcloud application does not remove the settings, stored files, or the database. Here are the suggested steps to do a full un-install and re-install with a fresh configuration:

1. Uninstall Nextcloud using the admin page
2. Drop the MySQL database: /opt/rh/rh-mariadb105/root/bin/mysql --socket="/var/run/rh-mariadb105-mariadb/nextcloud-mysql.sock" -e "drop database nextcloud;"
3. Remove the packages: yum remove nethserver-nextcloud
4. Remove the whole Nextcloud directory: rm -rf /usr/share/nextcloud/
5. Remove the e-smith DB configuration: config delete nextcloud
6. Remove the NethServer config directory (WARNING: will remove user data): rm -rf /var/lib/nethserver/nextcloud
7. Install Nextcloud from the Software Center