Absolutely. Go download it and spin up your own version for your company today!
So what's the Enterprise stuff they offer? Well, if my NC is down because of some weird bug then I'm sad. If your business NC is down, you'll presumably lose money. So they're offering ways that they can help build a stronger NC (a home user is FAR less of a target than a business for criminals) & prevent NC from being down as often as most home instances (eg: during upgrades--be they system or NC) or power outages, etc.
This is all to say, setting up NC is easy. Running it at home isn't too bad. Running it for years when you'll get a call in the middle of the night when it goes down 10% of the time is hard.
It's also worth pointing out that there are other features they offer exclusively to businesses such as branding (you can replace the NC logo/info with your corporate logo/info) more detailed documentation on "enterprise setups" like High Availability (I'm bitter this was taken out of the documentation cause apparently it's too cool for home users </rant>).
​
So if you want a few of those extra features they offer, a contact at NC (be it tech support for upgrades/downtime, initial setup/design, or to talk about buying custom capabilities), official help hardening your NC instance, and so on--THAT's what they're offering businesses.
​
If non of that appeals to you (or your CEO/CTO/CMO), then by all means use the free version.
​
​
See this page for more info:
By default nothing is encrypted on the storage, then there is server side encryption and what you want is end to end encryption. This is available and I'm using it for one of my folders. While it is working for me I've seen some users report instability. All I can say is: The sync to and from the client can take longer and you can't access encrypted data over WebDav or web UI (that's why I only encrypt the important stuff).
So I can't say if the lack of SSL/TLS is the cause of your issue but you can get a certificate without exposing the service to the internet.
You have a couple options:
Hetzener, in Germany, is your best bet.
https://www.hetzner.com/storage/nextcloud
For € 39.90 a month, you can get 10tb of storage. 500gb of storage would just be € 4.90 a month. Unlimited users, admin access to install apps, etc.
The android app suuuuuuuuuuuuucks for syncing. It's unreliable, buggy, and only one way. The amount of times I've had it simply not detect files. For accessing your stuff, or for manually throwing something to your cloud, it's great, but the auto-sync feature is basically useless.
Use foldersync, instead, it supports nextcloud and has FAR better syncing, and is miles and miles more configurable.
As for performance, your nextcloud instance will probably tell you, go to settings>administration>overview. There might be a list of things that can be done to improve the servers functionality/performance.
Answered my own question. Remove the $($filename) from the URL.
$NextCloudURL = "https://nextcloud.com" $ShareID = "FaAr3aBsGXwaXX6" $SharePassword = "hotIkxXnary47" $Header = @{ "Authorization" = "Basic "+[System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes("$($ShareID):$($SharePassword)")); "X-Requested-With"="XMLHttpRequest"; } Invoke-RestMethod -Uri "$($NextCloudURL)public.php/webdav" -Headers $Header -OutFile c:\temp\birdie.jpg
Agree on that, not happy either. I was recently made aware of https://photoprism.app/, which looks too good to be true. Not tried it yet - haven't had the time yet - so no clue if it does what it claims.
For Nextcloud: https://apps.nextcloud.com/apps/previewgenerator may solve the randomly missing photos. In detail: App and WebUI show downscaled versions of the photos to save bandwidth, even in full-screen-gallery. By default, these are generated on demand to save on storage. That may take some time, and depending on your webserver settings the download may timeout. This plugin generates them on upload, so they are always ready.
I've got no experience with hosted Nextcloud but I've used Hetzner for VPS in the past and were happy with them. They were on the low end of the price scale for the providers offering hosted Nextcloud the last time I checked so might not be there worst place to start.
The full announcement is live, go nuts: https://nextcloud.com/blog/nextcloud-16-introduces-machine-learning-based-security-and-usability-features-acl-permissions-and-cross-app-projects/
Hi,
https://nextcloud.com/blog/nextcloud-introduces-social-features-joins-the-fediverse/ is probably helpful - in simple terms, Nextcloud is a Mastodon server itself and can simply connect to others. You can follow people from other mastodon servers and they can follow you!
You can follow me from @ ;-)
The app is still basic and a lot has to be done, so don't expect everything to be there which you're used to in Mastodon! We're adding things all the time, but there is a lot left. Help is more than welcome!
The most notable improvements include:
Several Object Storage fixes
Better IPv6 handling
Allowing a quota of 0, don’t reset quota
Improved browser support
Improve LDAP user cleanup
Style and translation improvements (contrast/readability, adding missing icons)
Instead of creating users and sharing credentials with your customers, why don't you just share it with a link.
Nextcloud can create a share link for a specifiek folder, this link can be password protected and can have a expiration.
ADDED: Nextcloud Documentation
I'm seriously excited to share the news with you all that Nextcloud 11 is released! Some of you have been test driving it already and seen some of the improvements. They are all over, but major areas of improvement include:
Watch a video of some of the more 'minor' improvements like scrolling in pdf previews, easily moving files, more complete theming and more here: https://youtu.be/9CGQ3dJkDdI
Let me know what you think!!!
To browse your NC you can use any WebDAV supported file manager.
I use SolidExplorer for this. Easy to move files from/to your NC instance, can also browse.
https://play.google.com/store/apps/details?id=pl.solidexplorer2
This, nextcloud uses webdav.
You can use any file explorer that supports webdav, SolidExplorer for example.
Add your nextcloud instance as a remote webdav host (https://domain.tld/remote.php/dav/files/USER/). Your standard username and password work except if you use 2fa, then you need to create a app password.
Then in the file explorer navigate to your video and it will open in your video app of choice.
Webdav is not the fastest protocol for video streaming. Maybe think about setting up a VPN and accesing your videos that way.
You'd probably have to step through each major release, and that's not necessarily guaranteed to work. Since you've only just installed it, i assume don't already have a heap of data stored, meaning it would be easiest to simply remove the version you've installed and install the latest version (22) (e.g. via https://nextcloud.com/install/#instructions-server).
If you are waiting for the updater, keep in mind: Nextcloud rolls out releases incrementally. By the middle of next week, we will make Nextcloud 16 available to some 10-20% of our user base through the updater, increasing that percentage every few days after that. Don’t want to wait but have the convenience of the updater? Switch to the Beta channel! You can then update to 16 and switch back to stable without issues.
The official android app only is one-way sync. Meaning from your phone to nextcloud.
If you want to reverse it (nextcloud to phone) or 2-way sync, you would need to look for a onofficial app. Basically any app that supports webdav.
I used Folder Symc for this a while ago, did the job. Has built-in Nextcloud support.
For Contacts (CardDAV) and Calendar (CalDAV), you need to add your Nextcloud account to the device using e.g. DAVDroid and configure them in there - contacts and calendars will then be available within your normal contacts and calendar apps (iOS can speak these natively without needing an app).
Tasks are a bit different, you'll need something like OpenTasks.
Well Canonical maintains the snap repository https://snapcraft.io/about
You can get info about a snap with snap info nextcloud
The NextCloud snap is maintained under the NextCloud organization on GitHub
I've tried several over the last few years. IMHO, for Android, the best is Tasks.org which is on both Google and F-droid. Also very good is aCalendar+ (pay a couple of dollars for the tasks integration). The latter combines calendar and tasks.
Now I use Tasks.org combined with Simple Calendar. Works great!
For Desktop, I use Thunderbird with Lightning - provides a great integrated email-calendar-tasks combo with features built in e.g. email can be converted into a task or calendar entry.
Hi,
If it is a VPS, you may encrypt your stuff but if the owner of the hypervisor is really keen on your stuff they can just dump the VM memory and find the key for the encryption.
If your stuff is in an enviroment where there is little trust, you need to encrypt your files on the clinet side.
There is an option on NextCloud for end to end encryption what my fit on your situation: https://nextcloud.com/endtoend/[https://nextcloud.com/endtoend/]
You may want to consider using https://joplinapp.org/ This is a standalone notes app with the ability to synchronise with Nextcloud, among other providers. Although it has clients for all popular platforms and is developed by the community
You can build an email server but it's quite "difficult" and need periodic maintenance, I use this guide when I need install an email server: https://www.digitalocean.com/community/tutorials/how-to-configure-a-mail-server-using-postfix-dovecot-mysql-and-spamassassin
If you don't build an email server, you can replace Google Contacts , Keep and Calendar (and Drive, obviously) with Nextcloud.
UFW is super easy to use. I believe you only need to open port 80 and 443 (ssl).
sudo ufw allow 80/tcp sudo ufw allow 443/tcp
and you're good to go! UFW TUTORIAL will run down the basics of UFW for you.
If you use the dns challenge for LetsEncrypt instead of http then you don't even have to open the ports. This also allows you to get wildcard certs.
https://letsencrypt.org/docs/challenge-types/#dns-01-challenge
There is a nifty little program called cardcalbackup that can take backups of contacts and calendar from a Nextcloud DB. I'm not sure if you need to have a working NC instance or just the DB directory and a PostgreSQL working so it can access the DB.
I use Calibre-web (https://github.com/janeczku/calibre-web) , which is a self hosted online calibre library with good features including reader, it can be integrated with nextcloud with the external sites app However their is no sync between nextcloud files and the library, everything need to be importer in the calibre web app
Maybe try installing NextcloudPi before buying the new raspberry. It comes configured to deliver the best nextcloud performance on the raspberry.
To protect your data against natural disasters you could use some sort of cloud storage, Microsoft Azure or Amazon S3. You could also have a look at sia, it is end-to-end encrypted so only you can see your files.
Take into account that raspberry's ports (USBs and Ethernet) share all the bandwidth of a single USB 2.0 if you want to connect multiple drives. If they are not going to be used at the same time it should probably be fine. The microSD has full bandwidth thought. I no longer own a raspberry so I can not test speeds, but it should suffice since probably your internet connection will be the bottleneck .
I am afraid do not know of any way to selectively backup files.
> I don't think Keepass qualifies. Enpass is nice,
I do use a strong password for my encrypted file.
I used to use Enpass. Can you elaborate why you don't like Keepass? It uses the same encryption as Enpass PLUS it can require a SHA-256 key with the password, to unlock the encrypted file. Keepass Enpass AND Keepass is open source, which I think is important, and most here would probably agree, since Nextcloud is opensource
Otherwise it sounds like I'm fine with my current setup.
Moodle looks ok. Or https://bigbluebutton.org/:
Looking for a professional solution for teaching remote students online? BigBlueButton provides real-time sharing of audio, video, slides, chat, and screen. Students are engaged through sharing of emoji icons, polling, and breakout rooms.
FYI: For your use case Syncthing might be the better choice.
​
Regarding Nextcloud, there's unfortunately no workaround. I'd really suggest trying Syncthing instead of Nextcloud or, maybe, a versioning system like git.
Caddy would be possible.
https://caddy.community/t/example-docker-nextcloud-fpm-caddy-v2-webserver/9407
Because caddy is able to build automatic renewable ssl-certs on internal IP address.
The link isn't a perfect copy&paste solution, just a hint in the right direction for the config file.
I am unsure where you are looking, but NC is currently on v19 (blog post). They just released it earlier in the week, so v18.x is the place to be right now until they release the first round of bugfixes to the major release
I am also curious, there was a just a Window release tech preview, but haven't seen anything recent after that:
https://nextcloud.com/blog/nextcloud-introduces-virtual-drive-in-desktop-client-to-simplify-desktop-integration/
Nextcloud does staged rollouts so it's entirely possible/likely that you're just not in the current wave. As others have said, you can manually upgrade if you want it sooner.
It is possible with the E2E app. This requires Nextcloud >= 13 and unfortunately it's still in alpha state and not production ready (yet). Last time I've tested it, it didn't work for me.
If you want to know more, here's their overview about End to End Encryption.
Have you seen https://play.google.com/store/apps/details?id=com.nitramite.apcupsdmonitor
​
You could also likely script something so that in the event of an outage the apcupsd app could create a file in your nextcloud folder on the local machine. One for online, one for shutting down and then have it purge on power restore. Then use IFTTT on your phone to monitor for that same file/folder synced via the nextcloud phone app.
In fact, there are some good free services, like ProtonVPN and ProtonMail, even with limited resources in the free accounts. All funded by paid users and provided by companies that believe in digital rights and privacy. I imagine there will be some sort of services for cloud storage too.
I tried everything and have settled on cloud beats. It's not big on features, no widgets, no eq, in fact, there's virtually no features.
But, it's very easy to add a next cloud instance and then you can just scan music folders and it adds them (just don't try and scan a big library - I f to scan a few albums at a time)
It's the only thing I found that did what I needed.. Just to play music without hassle
https://play.google.com/store/apps/details?id=com.cloudbeats
There are a lot of different and good tutorials out there for your setup:
This one for example (its a snap install)
Or this one:
For a regular installation.
As the install is a bit extensive it’s hard to analyse your problem without knowing the steps you did with your server.
Good luck!
You need to set up a server that will host your files. It is quite inexpensive to rent a Virtual Private Server (VPS) which would hold your linux-like OS. (Digital Ocean provides this as do many other hosting companies.) Your MacBook Air and andriod phone would then be able to read/write files to your server.
I am technically inclined but I don't have any special skills in this area, and I was able to set up my Nextcloud server without too much trouble. It took a few tries to get it right but I enjoyed the process, and once it is set up there isn't much to do.
These three guides helped me a lot and pretty much cover the full process if you follow them in order. (They are specifically written for Ubuntu, and they should work with Digital Ocean or any other VPS provider.)
https://www.digitalocean.com/community/tutorials/initial-server-setup-with-ubuntu-16-04
Edit: Removed link to install the LAMP stack, I guess the install packages take care of this now!
I should also mention, that I have not mentioned anything about domains, so you'll need one of those, and a place to point it using DNS (Hetzner provide DNS servers too, the details are in their wiki).
You could also experiment for less money with a DigitalOcean droplet, which may be an easier starting place if you are completely new. You don't get dedicated hardware, but if you are just experimenting, it may be better for you. Both DigitalOcean and Hetzner have pretty good documentation, but the specific systems vary between providers (e.g. DO doesn't have the same rescue system or installimage command that Hetzner does, because you can control a droplet through a web interface).
I am not a security expert so take everything in this comment with a grain of salt, but I think this depends on the way you use and set up your VPS.
In case you are the only one who uses the Nextcloud instance and VPN service, I think it would be fine to host both of them on the same server. However, if you do so, make sure that your VPN server is properly configured and you're using a secure way to connect your client(s) to it (e.g. by using certificates in combination with a password and proper encryption methods, as explained in this guide. Also, if all of the devices that you use Nextcloud on will also be able to connect to the VPN service, you may consider to only make Nextcloud available through your VPN (instead of a public facing web server). This can be done by changing your Apache (or Nginx/...) settings to only listen to IP addresses that are being use by the VPN server (probably 10.8.x.x).
Also, in case you haven't done this yet, set up a firewall. Block every port that you don't need.
Just my 0,02$ :-)
You would need to install a mail server on your machine. I believe the most popular one is iRedMail.
I wouldn't recommend it myself, but it really isn't that hard if you are up for the challenge.
https://www.digitalocean.com/community/tutorials/why-you-may-not-want-to-run-your-own-mail-server
This was the first google recommended: https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-nextcloud-on-ubuntu-16-04
It seemed to be fine at quick look. I personally use nginx and so I recommend following this guide: https://www.c-rieger.de/nextcloud-installation-guide/#
I use https://sourceforge.net/projects/automysqlbackup/ to backup the databases on the server, rsync to copy backups, nextcloud directory and the data directory to a local machine and http://storebackup.org/ to backup those files locally.
NC21 isn't the latest. It's 23 that just have been released. That is if you self host it.
Do you self host it or buying the service from some hosting business?
Challenge failed for domain YYYYYYY.duckdns.org http-01 challenge for YYYYYYY.duckdns.org Cleaning up challenges Some challenges have failed. IMPORTANT NOTES: - The following errors were reported by the server:
Domain: YYYYYYY.duckdns.org Type: connection Detail: Fetching http://YYYYYYY.duckdns.org/.well-known/acme-challenge/mIcAWyurkVaZbRSkfFlE9mp6iUwuLC5T-NikcYOIDp0: Connection refused
https://letsencrypt.org/docs/challenge-types/
The http-01 challenge is the basic challenge that requests info from the example.com/.well-known directory. The link there says that it will follow a certain number of redirects, and will skip validating certs on the way so that it can be used as a bootstrap. But, the first port 80 connection does need to succeed. Now that you have the server working, does an nmap scan of the VM ip on the local network (192.168.1.5) show port 80 as being open, or only 443?
the first answer has all the points, not much to add :
- absolutely don't forget about backups, HDDs die, basements flood, houses burn, kids to silly things .... rclone.org to push data to e.g. backblaze at $.005/gb/month is well worth it
- your pi may buckle under OMV and a NC running in docker - so if you don't need the NAS per se and are happy with WebDav access, a clean NC install may be the way to got.
- the best way to have the data encrypted on the Pi at rest is indeed full disk encryption (LUKS), just keep in mind that you need physical access to the pi after each reboot.
Good luck !
So, if you want incremental encrypted backups there are quite a few options. I know you don't want to install additional software but I think that this will make it so much easier for you than trying to cobble this all together yourself.
rclone can do incremental encrypted backups to Backblaze
restic is also pretty great, can do what you want (encrypted incremental backups to Backblaze), and is super easy to use, highly recommended. I run local backups twice a day and then to Backblaze once in the middle of the night
If you only want to transport data, and don't plan on using any of the other NC features you can better use Syncthing.
NC can handle large files if setup properly, but WebDAV may not be the best protocol to transport that large volume of data fast.
Nextcloud providers can be found here https://nextcloud.com/signup/ and yes, it means a degree of trust with a third party. The system itself is free of control or influence from the likes of Google, Apple Microsoft et Al, but you are still entrusting the management and maintenance to the provider. If you host at home you are reliant on far fewer third parties, however Nextcloud would be an org you relied upon...
Imho it isn't possible to self host without learning the technology stack and how it interrelates. This is a good thing though. Knowledge and understanding is part of the cost of maintaining control.
The closest I am aware to a turnkey solution is using multiple docker images to create the software stack you need, this can be done using Rpi's or x86 machines, the more powerful you can afford the better, but for testing, your current computer is just fine. I say this because docker is a way of prepackaging a server into one easy to use image. You need minimum skill to configure it as the image creator has done that for you. Get a Nextcloud SQL and proxy image, even collabora for office editing, buy a domain and/or set up dynamic DNS, configure your router to accept incoming packets to one statically assigned IP address on your network (your server) and all you really need to do is give docker some parameters ( user names, where to store the data etc) . If you can get that setup on your current machine, just with local access then you know you can do it on a dedicated server. Minimum cost, you learn a cool technology and you have as much control as possible, though you still have to trust the image providers 😉
I ran into the same thing on my last reinstall, and getting everything up to date fixed it for me. Are you able to get to the NextCloudPi Admin panel at [yourIP]:4443
? If you can, I'd start by updating the NextCloudPi interface using the "NC-Update" option, then check your NextCloud version under System Info (the heartbeat icon at the top right) and make sure you're at least on 20.0.12. To upgrade the Nextcloud instance itself, you use the "NC-Update-Nextcloud" option, and enter the next stable version* in the box.
*VERY IMPORTANT! Do not skip any major versions when you upgrade or it will break everything! I did it without thinking the first time and had to completely reinstall. If you're on 18.0.10, go to 18.0.14, then 19.0.13, then 20.0.12, then 21.0.4 (or 21.0.3 if .4 isn't there yet). See the Nextcloud changelog for the latest versions.
I have NextCloudPi running NC 21.0.3 on top of Raspberry Pi OS (previously know as Raspbian) on a RaspberryPi4
>As nc doesn't offer end to end encryption
https://nextcloud.com/endtoend/
Are we talking about the same thing? end-to-end encryption in this instance means client side encryption where the client encrypts the data and server only stores the encrypted data. I have it enabled on my rpi400 testing server and it works fine on it.
Before you decided to go for self hosting, you may subscribe a free account from one of the nextcloud hosting service and try. The free account will offer limited amount of storage space and usually doesn't provide data encryption. U can then consider whether upgrade to use the paid service.
By using Nextcloud hosting, you don't have to take care of the possible hardware issue and data backup/restore stuff.
I've been using the (unfortunately discontinued) Nextcloud Box Kit that Western Digital had available for a short time. It came with the OS pre-flashed on an SD and a 1Tb USB HDD and really had no major issues until I tried to update the OS itself last week
That's on the edge to a Rootserver but (depending on your hosting company) well into the range of usual hosting. If you can live with Central EU I recommend hetzner, they offer reasonably cheap rootservers, even good used ones: https://www.hetzner.com/sb
Otherwise post more requirements so we don't have to guess.
The server is new in the sense that I really haven't tried to use it before now, because I got tired of the error.
I am running Windows 10, and do not have access to a terminal (that I know of...).
I have been reading through Hetzners documentation, and they say that "for each subdomain that you add, our administration interface will request an SSL certificate from the provider Let's Encrypt" (https://www.hetzner.com/konsoleh/storage-share/subdomain). Do you think that could mean that I would need a subdomain in order to get an SSL-certificate, or would that not make sense?
Maybe check out Hetzner in Germany, what I had in mind was the market for second-hand dedicated servers, which you can rent monthly with no setup fee, but they also do new servers that are not extortionate, setup fees and minimum contracts apply though.
Check their auctions ... they have older hardware (but still quite good) for less than the mainline offerings at a discount
As of a few minutes ago, you can get a RAIDed 3TB setup with 16G RAM for 26.89€ / mo
Yep totally, I'm doing it. You just have to mount the default Jellyfin directory to nextcloud as external storage. Or define another directory for Jellyfin. Either way it's not complicated.
You'll get the same user account to access your jellyfin and Nextcloud, everything will be display in a simple dashboard.
You can even setup Sonarr, Radarr, Jackett and Transmission to automatically grab some movies, but that's another story.
Here is a list a Yunohost apps, there is a notation score that indicate if app is well package, maintained, support automatic backup, etc...
https://dash.yunohost.org/appci/branch/stable
A side note; am a longtime user of Pikture gallery app on android. Have the same issues as OP wrt Nextcloud and photohandling.
Did a quick search just now, and stumbled over some new info at https://www.piktures.app/.
"CLOUD ACCESS
Piktures let you access your photos on Dropbox, Google Drive and Microsoft Onedrive. Nextcloud is coming soon".
Dunno' how soon, "soon" is, but might be worth waiting for, as Piktures is IMHO pretty good in and of itself.
I use Nextcloud and point it to an “External” share on my NAS. I then share that out to family so they can upload photos. This folder is also the one Plex looks at. Then I have another folder on my NAS where I use PhotoSync iOS app to automatically upload photos and videos. Something I have been looking into though is. PhotoStructure which may have the AI piece you’re looking for. https://photostructure.com/
Linode employee here - Sorry to hear you're having trouble getting Nextcloud set up on your Linode. Have you tried deploying it with our Marketplace app? The link below will walk you through it and show you how to use your domain with the installation:
https://www.linode.com/docs/guides/how-to-deploy-nextcloud-with-marketplace-apps/
Till now I have not found a native way to do this, a .nomedia file is not respected.
For this I use Cryptomator, a password protected container specially made for cloud.
Since it is encrypted nextcloud cannot access it, use it for log in secrets and documents.
Bummer that it's CentOS based, dangit! Talk about timing. Great job, looks nicely formatted. REALLY like you used Nginx, I don't know what processed me to use apache2. Nginx works really well for me with rocket.chat and jitsi, just apache2 seems the traditional path.
Nextcloud isn't a email server and so doesn't contain any emails. However I presume you are talking about this mail client app? You wouldn't see this in the android client as that is only for the files stored in Nextcloud
If you wish to use the Nextcloud mail app on your phone you will have to log in with your browser. As the mail app is only an IMAP client you can just use any mobile native IMAP client to interface with whatever email server you are dealing with. I presume that's the hetzner server that has Nextcloud and an Email server set up for you to use
I have been searching for the same and did try carnet and joplin. But now i found a new contender. Quillnote https://qosp.org/ downloaded it from fdroid. It looks lite keep/carnet and syncs to Nextcloud. 5/5 😁
Interesting! Fastmail has a reasonable price, starting at $30 per year. Its wikipedia article that states:
>The site developers are among active contributors to the widely used Cyrus IMAP open source software project and include the lead developer and maintainer of Perl module Mail::IMAPTalk. They are actively developing JMAP - a new open email protocol.
Also, it has some features that protonmail lacks: (1) it can use IMAP (2) looks like it can act as a server for calendar/contacts with caldav/carddav.
Couldn't find anything about the opensourceness of the service server, though.
All good folks. with the pandemic things are a bit hectic so I was a day late.
We do out-of-plan updates when there are significant issues. Could be security, could be file loss, could be something else, but only important things. So these updates do have some important fixes, please update asap. Just like any update, btw, it is usually really wise to update as quick as you reasonably can (no need to lose sleep over it but don't wait 2 weeks). That's what we also always say in our announcements ;-)
As a matter of policy, we don't give details about security fixes until 2 weeks after release because that gives the Bad Folks tips on how to exploit them. In 2 weeks, we will have published security advisories with impact analysis on https://nextcloud.com/security/ as usual.
This sounds like great advice, thank you for your frankness. I do not plan on sharing this with anyone else, but I still don't want it to go down or, worse yet, become insecure.
Question -- can I use NextCloud via an iOS app without "exposing it directly to the internet" in your meaning? I am guessing no? That was the main way I was intending it.
Second question -- I still want to self-host to keep my data private and secure, so would it be any better to buy one of the pre-configured boxes on Nextcloud.com/devices? Or is that just as much work to keep it up and running?
You can encrypt your local Nextcloud folder with something like Veracrypt. If you want to keep it safe from your provider, if you have access to the OS you could encrypt the drive at the OS level.
If you decide to go with the Nextcloud E2E encryption, make sure you take note of what you lose here: https://nextcloud.com/endtoend/
It depends on where you are viewing the file from.
If you use the Nextcloud client on Windows you can right click on the file or folder and click share with Nextcloud.
On a browser you should see 3 dots to the right of your window connected to each other in sideways arch/triangle (best explanation I've got there) it's essentially a share button. Once you click that you should see a box for "share link"
This might help: https://nextcloud.com/sharing/
We're all SUPER fancy ;-)
I work from Berlin, home office, we have 3 other peeps here. Head of sales is in Hannover, his right hand in some obscure place between Berlin and Hannover and their sales engineers in Switzerland and Berlin. Our head of Security also in Switzerland but on the other side of the sales engineer. We have one office with 5 engineers, the rest is spread out over Europe Netherlands/Germany/France/Croatia/more and one in Cape Verde. You'd have to dump a LOT of elephants to take us down.
But we have company+community meetings every 2 months in Stuttgart where typically some 35-40 people gather and you could also hold your elephants for the Nextcloud conference in Berlin (https://nextcloud.com/conf) where we expect well over 100 techies to help us make it better.
You could look at the suggested providers if you want. I don't think nextcloud has client side encryption yet, though, so you'll have to keep that in mind. You can also look at the suggestions on privacytools.io (maybe check out the rest as well).
There is the Documents app, which might or might not work - the app store is sadly under ownCloud's control (until Nextcloud 11) and they tend to break it occasionally.
Another alternative is Collabora Online: https://nextcloud.com/collabora
A bit more work but awesome once it works, loads more features.
See our latest release which introduces easy theming besides SAML and Windows Network Drive support and a Password Policy tool.
Here's a video showing how you can change the Nextcloud theme in half a minute!
If you are looking for mobile solution then at least for Android there are many options in F-Droid store.
Pick one that stores db locally and sync files to nextcloud with https://play.google.com/store/apps/details?id=dk.tacit.android.foldersync.lite
I use an app called folder sync. It will do periodic syncs (one way or two way). I use it to sync a few folders to my device. https://play.google.com/store/apps/details?id=dk.tacit.android.foldersync.lite
My take as a past Librem One user and Librem 5 backer: Honestly Librem one is worthless, each app is just a re-skinned clone of open source apps, provided without support but with fewer updates due to the nature of forking a software project. Librem social (just mastodon with a purism logo) is a ghost town, Librem chat is just a node on element/matrix. The VPN is Private Internet Access I believe and seems fine aside from a slowish connection. You're better off sticking with nextcloud and just making a mastodon account - I'd be surprised to see a Librem Files app bundled into Librem one in any timely or meaningful manner considering how far behind the Purism team is on the Librem 5.
I use Cloudbeats https://play.google.com/store/apps/details?id=com.cloudbeats&hl=en_GB
​
That can access your nextcloud and you can decide which music folders to add. Scanning takes a little while so dont recommend scanning your entire collection if its very large.
​
I tend to scan a handful of artists every few days depending on what I want to listen to .
​
it works really well. Lacking some features like widgets etc, but its a solid reliable player, ive been using it well over a year.
Stupid question time from a Nextcloud beginner: is this the "standard" Nextcloud app (e.g. https://play.google.com/store/apps/details?id=com.nextcloud.client) or is it a separate app? The blog doesn't make that clear.
As an android user you could use Foldersync.
https://play.google.com/store/apps/details?id=dk.tacit.android.foldersync.lite&hl=de
It supports WebDAV and you can set the sync direction. If you enable the camera roll folder from your wife’s phone and set the direction: phone -> cloud it should upload the whole camera roll folder.
I just used this app in the past and it worked like a charm.
Read this documentation on the nextcloud android client. Looks like FolderSync will accomplish what you need on android between your mobile and nextcloud for arbitrary sync of folders. Still won't be read-only as it will download them. For read-only you'll just need to use the browser app afaik
Its an Ubuntu guide but yeah, Debian is kinda the same though. It’s using snap so you have to install snapd on Debian first.
Thats basically my setup besides the dynamic update client since i opted instead to configure it through my router. As long as your no-ip account is getting updated with your ip address this link: https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-nextcloud-on-ubuntu-16-04 should help. Look at the adjusting the trusted domains part.
This is the same for installing NC via any method. Overview: you'll need to open the ports on your router (http and https). If you want to connect via a custom URL address and not just IP number, set up a free address via a host e.g. noip.com, then register this with Letsencrypt. You can adapt the info in this guide. This explains how to set it up on an external VPS, but the bit about opening it to the internet applies (certificate via letsencrypt, opening ports etc) are relevant.
Security-wise, I'd recommend i) installing fail2ban to stop brute-force attempts to login ii) consider login in only via SSH key after deactivating password access iii) Set up Nextcloud to require Authy/Google authenticator 2FA during login via the TOTP add-on in the NC admin account.
I first did this from a RPi using nextcloudpi, but the upload speed from my house was too slow meaning file transfer was impractical. But it meant I learned about how to set it up, configuring the router and certificate etc. Afterwards I set up a $5 a month VPS with DigitalOcean and couldn't be happier. From NC13, it will be encrypted on the DO server anyway (client-side I think).
there is an app from someone else. But it will also need to index the exif.
https://play.google.com/store/apps/details?id=com.nkming.nc_photos&hl=en&gl=US
otherwise I have my dashboard saved to my phone as a direct link. Also works, but a bit less tidy.
great work dude. It just took 10min for the photos to show, don't know why. Love this! I was looking for this exactly. I just need an app now, just like this: https://play.google.com/store/apps/details?id=com.nkming.nc\_photos&hl=en&gl=US
I know this is an old thread but I cannot find that setting in either Tasks,org on Android, nor in Nextcloud 24.0.3.
Trying to setup Tasks.org mostly on the phone but I'd like the nextcloud backup.
I mean, surely it is possible to manage all the container by yourself or build a custom nextcloud image... but the AIO seems to be currently the preferred way to install, as you can see over at https://nextcloud.com/install/ .
Furthermore, AIO is actually very convenient in order to automatically set up all the containers (nexcloud, db, redis, talk, collabora) and keeping everything nice an updated as well as schedule auto-backups for all the data.
I hope someone jumps in with a solution for my problem without having to give up AIO.
As far as I know it's a work in progress.
https://nextcloud.com/endtoend/
But regardless of what MC can or cannot do, your best bet is to encrypt the files yourself. If you send someone an encrypted blob, it doesn't matter what they do! That said, I don't have a good recommendation :( Hopefully someone else does?
Yes administrators have a sacred trust to not user their powers to access data they shouldn't. No different than any other product.
Encrypting the data on the server is a possibility. I haven't used it yet. It is supposed to allow users to encrypt whatever folders they want to encrypt. Those folders cannot be accessed from the server, but they can be shared to other users.
I use LDAP for users in Nextcloud. You can onboard your users in AD/LDAP in more secure ways than Nextcloud. If you are using this for business I highly suggest you enable some sort of MFA (Multi-Factor-Authentication) to protect your users from phishing attacks.
Ah, got it. Yes I had some issues with that before. I didn't like having to be in kernel limbo where some things we supported and others not.
Ansible. Awesome. I'd never heard of it and will take a look.
I was looking at these that seem to have any i/o we may need and seem to be reasonably priced. If you don't mind, I'd love to know if you think they would be any good?
Another vote for foldersync (I use the free / lite version as it fits my requirements...!)
This project could work for your situation:
https://github.com/huginn/huginn
I use it in a Docker container.
You will have to test yourself, but Huginn has Webhook support. So you could see if it can load data to NC with;
https://apps.nextcloud.com/apps/webhooks
I contacted Nextcloud. In case anyone else is considering this, Nextcloud will only rebrand a desktop or mobile client if you sign up for their “Nextcloud Enterprise” program. Pricing starts at €36 per user per year, with a minimum of 100 users. So the cost for Nextcloud to customize the desktop clients is at least €3600 per year.
More information here: https://nextcloud.com/pricing/