CentOS Stream 8
Sponsored Link

NextCloud : Install2021/06/10

 
Install NextCloud which is the Cloud Storage System.
The version of NextCloud on this example is NextCloud 21 which is the latest one as of now.
[1]
[2]
Configure SSL/TLS for Apache httpd.
HTTPS connection is required when using Chat, Camera, Screen Sharing features and so on.
[3]
[4]
[5] Install other required PHP modules.
# install from EPEL, PowerTools

[root@dlp ~]#
dnf --enablerepo=powertools,epel -y install php-pear php-mbstring php-pdo php-intl php-gd php-pecl-zip php-mysqlnd php-bcmath php-gmp php-opcache php-pecl-apcu php-devel ImageMagick ImageMagick-devel make
[root@dlp ~]#
pecl install imagick

[root@dlp ~]#
echo 'extension=imagick.so' > /etc/php.d/99-imagick.ini
[root@dlp ~]#
vi /etc/php-fpm.d/nextcloud.conf
;; create new

[nextcloud]
user = apache
group = apache

listen = /run/php-fpm/nextcloud.sock
listen.acl_users = apache
listen.allowed_clients = 127.0.0.1

pm = dynamic
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 35

php_value[session.save_handler] = files
php_value[session.save_path]    = /var/lib/php/session

;; maybe you need to configure parameters below if users want to upload large files
php_value[max_execution_time] = 3600
php_value[memory_limit] = 2G
php_value[post_max_size] = 2G
php_value[upload_max_filesize] = 2G
php_value[max_input_time] = 3600
php_value[max_input_vars] = 2000
php_value[date.timezone] = Asia/Tokyo

php_value[opcache.enable] = 1
php_value[opcache.memory_consumption] = 128
php_value[opcache.interned_strings_buffer] = 8
php_value[opcache.max_accelerated_files] = 10000
php_value[opcache.revalidate_freq] = 1
php_value[opcache.save_comments] = 1

[root@dlp ~]#
systemctl restart php-fpm

[6] Create a User and Database on MariaDB for NextCloud.
[root@dlp ~]#
mysql -u root -p

Enter password:
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 16
Server version: 10.3.28-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> create database nextcloud; 
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> grant all privileges on nextcloud.* to nextcloud@'localhost' identified by 'password'; 
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> exit 
Bye
[7] Configure Apache httpd for NextCloud.
[root@dlp ~]#
vi /etc/httpd/conf.d/nextcloud.conf
Timeout 3600
ProxyTimeout 3600

Alias /nextcloud "/var/www/nextcloud/"
<Directory "/var/www/nextcloud">
    Options FollowSymLinks
    AllowOverride All
    Require all granted

    <FilesMatch \.(php|phar)$>
        SetHandler "proxy:unix:/run/php-fpm/nextcloud.sock|fcgi://localhost"
    </FilesMatch>
</Directory>

[root@dlp ~]#
wget https://download.nextcloud.com/server/releases/latest.zip -P /var/www/

[root@dlp ~]#
unzip /var/www/latest.zip -d /var/www/

[root@dlp ~]#
chown -R apache. /var/www/nextcloud

[root@dlp ~]#
systemctl restart httpd

[8] If SELinux is enabled, change policy.
[root@dlp ~]#
setsebool -P httpd_can_network_connect on

[root@dlp ~]#
setsebool -P httpd_unified on

[root@dlp ~]#
setsebool -P httpd_execmem on

[root@dlp ~]#
setsebool -P nis_enabled on

[root@dlp ~]#
vi nextcloud.te
# create new

module nextcloud 1.0;

require {
        type configfs_t;
        type httpd_t;
        type httpd_sys_script_t;
        type fuse_device_t;
        type httpd_sys_rw_content_t;
        type kernel_t;
        type lib_t;
        type init_t;
        class file { create unlink write execute execute_no_trans };
        class dir getattr;
        class dir { add_name write read remove_name rmdir getattr setattr mounton };
        class lnk_file unlink;
        class chr_file { open read write };
        class process setrlimit;
        class system module_request;
}

#============= httpd_t ==============
allow httpd_t configfs_t:dir getattr;
allow httpd_t lib_t:dir { add_name remove_name setattr write };
allow httpd_t lib_t:file { create unlink write };

#============= httpd_sys_script_t ==============
allow httpd_sys_script_t fuse_device_t:chr_file { open read write };
allow httpd_sys_script_t httpd_sys_rw_content_t:dir mounton;
allow httpd_sys_script_t httpd_sys_rw_content_t:file { execute execute_no_trans };
allow httpd_sys_script_t lib_t:dir setattr;
allow httpd_sys_script_t self:process setrlimit;
allow httpd_sys_script_t kernel_t:system module_request;

#============= init_t ==============
allow init_t httpd_sys_rw_content_t:dir { read remove_name rmdir write };
allow init_t httpd_sys_rw_content_t:file unlink;
allow init_t httpd_sys_rw_content_t:lnk_file unlink;

[root@dlp ~]#
checkmodule -m -M -o nextcloud.mod nextcloud.te

[root@dlp ~]#
semodule_package --outfile nextcloud.pp --module nextcloud.mod

[root@dlp ~]#
semodule -i nextcloud.pp

[9] Access to the URL [https://(Server's Hostname or IP address)/nextcloud/] with Web browser on any Client, then following screen is displayed. Configure Administrative user account and Database connection infomation. Input any admin user name and password. For Database, specify MariaDB user and database you added on [6]. That's OK, Click [Finish Setup].
[10] By default, recommended applications are installed.
[11] After recommended apps successfully installed, NextCloud start page is displayed.
[12] After finishing Setup, it's possible to access to NextCloud to the URL [https://(Server's Hostname or IP address)/nextcloud/].
[13] This is the Nextcloud start page.
[14] After initial setup, configure memory cache and [default_phone_region] value that are the NextCloud recommended requirements.
[root@dlp ~]#
vi /var/www/nextcloud/config/config.php
.....
.....
  // add a line in the section
  // replace [default_phone_region] value to your own region (ISO 3166-1) 
  'installed' => true,
  'memcache.local' => '\OC\Memcache\APCu',
  'default_phone_region' => 'JP',
);

[root@dlp ~]#
systemctl restart httpd php-fpm

Matched Content