{"id":1695,"date":"2019-10-01T22:00:57","date_gmt":"2019-10-01T20:00:57","guid":{"rendered":"https:\/\/markus-blog.de\/?p=1695"},"modified":"2023-04-03T08:43:58","modified_gmt":"2023-04-03T06:43:58","slug":"how-to-install-nextcloud-17-on-debian-buster-with-mariadb-php7-3-fpm-apache2-and-http-2","status":"publish","type":"post","link":"https:\/\/markus-blog.de\/index.php\/2019\/10\/01\/how-to-install-nextcloud-17-on-debian-buster-with-mariadb-php7-3-fpm-apache2-and-http-2\/","title":{"rendered":"How to install Nextcloud 17 on Debian Buster with MariaDB php7.3-fpm Apache2 and HTTP\/2"},"content":{"rendered":"

Nextcloud 17 was released, so here is a manual to install it on a Debian Buster VPS, secure it with LetsEncrypt and deploy it via Apache2 with php-fpm and HTTP\/2.<\/p>\n

Requirements:<\/strong><\/p>\n

– an VPS with Debian Buster installed
\n– shell access and appropriate rights
\n– One DNS A and possibly AAAA record for our Apache vhost<\/p>\n

Step 1: Install MariaDB<\/strong><\/p>\n

First, we install the MariaDB as Database-Server:<\/p>\n

apt install -y mariadb-server mariadb-client<\/pre>\n
and we secure the MariaDB installation:<\/p>\n
mysql_secure_installation<\/pre>\n
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
\nSERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!<\/p>\n
In order to log into MariaDB to secure it, we’ll need the current
\npassword for the root user. If you’ve just installed MariaDB, and
\nyou haven’t set the root password yet, the password will be blank,
\nso you should just press enter here.<\/p>\n
Enter current password for root (enter for none):
\nOK, successfully used password, moving on…<\/p>\n
Setting the root password ensures that nobody can log into the MariaDB
\nroot user without the proper authorisation.<\/p>\n
Set root password? [Y\/n] y
\nNew password:your-password
\nRe-enter new password:your-password
\nPassword updated successfully!
\nReloading privilege tables..
\n… Success!<\/p>\n
By default, a MariaDB installation has an anonymous user, allowing anyone
\nto log into MariaDB without having to have a user account created for
\nthem. This is intended only for testing, and to make the installation
\ngo a bit smoother. You should remove them before moving into a
\nproduction environment.<\/p>\n
Remove anonymous users? [Y\/n] y
\n… Success!<\/p>\n
Normally, root should only be allowed to connect from ‚localhost‘. This
\nensures that someone cannot guess at the root password from the network.<\/p>\n
Disallow root login remotely? [Y\/n] y
\n… Success!<\/p>\n
By default, MariaDB comes with a database named ‚test‘ that anyone can
\naccess. This is also intended only for testing, and should be removed
\nbefore moving into a production environment.<\/p>\n
Remove test database and access to it? [Y\/n] y
\n– Dropping test database…
\n… Success!
\n– Removing privileges on test database…
\n… Success!<\/p>\n
Reloading the privilege tables will ensure that all changes made so far
\nwill take effect immediately.<\/p>\n
Reload privilege tables now? [Y\/n] y
\n… Success!<\/p>\n
Cleaning up…<\/p>\n
All done! If you’ve completed all of the above steps, your MariaDB
\ninstallation should now be secure.<\/p>\n
Thanks for using MariaDB!<\/p><\/blockquote>\n
Step 2: Install Apache2<\/strong><\/p>\n
With the following command we will install the Apache-Webserver:<\/p>\n
apt install -y apache2 apache2-utils<\/pre>\n
Step 3: Install php7.3-fpm an recommended moduls<\/strong><\/p>\n
Installation of nextcloud needs a few php-modules and other packages, which we install with the following command:<\/p>\n
apt install -y php7.3-cli php7.3-common php7.3-mbstring php7.3-gd php-imagick php7.3-intl php7.3-bz2 php7.3-xml php7.3-mysql php7.3-zip php7.3-dev php7.3-curl php7.3-fpm php-dompdf redis-server php-redis php-smbclient php7.3-ldap<\/pre>\n
Step 4: Configure Apache2 and php7.3-fpm<\/strong><\/p>\n
Now we enable the needed modules in Apache2 with:<\/p>\n
a2enmod proxy_fcgi setenvif mpm_event rewrite headers env dir mime ssl http2<\/pre>\n
and after that we activate php7.3-fpm<\/code>:<\/p>\n
a2enconf php7.3-fpm<\/pre>\n
now we have edit the apache2.conf<\/code> to allow the usage of .htaccess<\/code>-files:<\/p>\n
nano \/etc\/apache2\/apache2.conf<\/pre>\n
and change the following code:<\/p>\n
<Directory \/var\/www\/>\r\nOptions Indexes FollowSymLinks\r\nAllowOverride None<\/span>\r\nRequire all granted\r\n<\/Directory><\/pre>\n
to:<\/p>\n
<Directory \/var\/www\/>\r\nOptions Indexes FollowSymLinks\r\nAllowOverride All<\/span>\r\nRequire all granted\r\n<\/Directory><\/pre>\n
To enable HTTP\/2, we need to add this line to apache2.conf<\/code>:<\/p>\n
Protocols h2 h2c http\/1.1<\/pre>\n
now we have to prepare the php.ini<\/code> for nextcloud:<\/p>\n
nano \/etc\/php\/7.3\/fpm\/php.ini<\/pre>\n
extend with the following directives:<\/p>\n
opcache.enable=1\r\nopcache.enable_cli=1\r\nopcache.interned_strings_buffer=8\r\nopcache.max_accelerated_files=10000\r\nopcache.memory_consumption=128\r\nopcache.save_comments=1\r\nopcache.revalidate_freq=1<\/pre>\n
and adjust the following Lines:<\/p>\n
max_execution_time = 300\r\nmax_input_time = 600\r\nmemory_limit = 512M\r\nupload_max_filesize = 10240M<\/pre>\n
Afterwards, the web server<\/code> and php7.3-fpm<\/code> must be restarted:<\/p>\n
systemctl restart apache2 php7.3-fpm<\/pre>\n
Step 4: Install Certbot and other tools<\/strong><\/p>\n
To request a ssl-sert from LetsEncrypt we use Certbot<\/code> and the apache-plugin<\/code>:<\/p>\n
apt install python-certbot-apache certbot wget curl sudo unzip<\/pre>\n
Step 5: Create Database<\/strong><\/p>\n
Before we can install Nextcloud, we first have to create a database. To do this, we execute the following commands:<\/p>\n
mysql -u root -p<\/pre>\n
enter your password and then execute:<\/p>\n
create database nextcloud;\r\ncreate user nextcloud@localhost identified by 'YOUR_PASSWORD';\r\ngrant all privileges on nextcloud.* to nextcloud@localhost;\r\nflush privileges;\r\nexit;<\/pre>\n
Step 6: Download Nextcloud and create filesystem<\/strong><\/p>\n
Now it’s time to download the latest Release of Nextcloud 17 from nextcloud:<\/p>\n
wget https:\/\/download.nextcloud.com\/server\/releases\/latest-17.zip<\/pre>\n
and unzip the downloaded archive:<\/p>\n
unzip latest-17.zip<\/pre>\n
Afterwards we move the folder nextcloud<\/code> to the right place.<\/p>\n
If we just want to deploy Nextcloud on this server, we can move the data to the  \/var\/www\/html\/<\/code> folder and adjust the permissions.<\/p>\n
mv nextcloud\/* \/var\/www\/html\/\r\nchown -R www-data:www-data \/var\/www\/html\/<\/pre>\n
In order to keep the option of other websites open, we move the entire folder into the path \/var\/www\/html\/<\/code><\/p>\n
mv nextcloud \/var\/www\/html\/\r\nchown -R www-data:www-data \/var\/www\/html\/nextcloud<\/pre>\n
You can delete the downloaded archive now:<\/p>\n
sudo rm latest-17.zip<\/pre>\n
For our nextcloud-files we prepare a directory outside of \/var\/www\/html\/nextcloud<\/code>:<\/p>\n
mkdir \/nextcloud_data<\/pre>\n
and change the owner to www-data<\/code>:<\/p>\n
chown -R www-data:www-data \/nextcloud_data<\/pre>\n
Step 7: Create Apache2 vHost and secure with SSL<\/strong><\/p>\n
To create an Apache vhost, we simply create a new .conf<\/code> in \/etc\/apache2\/sites-available\/<\/code>:<\/p>\n
nano \/etc\/apache2\/sites-available\/001-nextcloud.conf<\/pre>\n
add the following content and adjust your names:<\/p>\n
<VirtualHost *:80>\r\nServerName nextcloud.your-domain.tld\r\nServerAdmin webmaster@your-domain.tld\r\nDocumentRoot \/var\/www\/html\/nextcloud\r\n\r\nErrorLog ${APACHE_LOG_DIR}\/error.log\r\nCustomLog ${APACHE_LOG_DIR}\/access.log combined\r\n<\/VirtualHost><\/pre>\n
 <\/p>\n
then we activate this site and disable the default vHost:<\/p>\n
a2ensite 001-nextcloud.conf\r\na2dissite 000-default.conf\r\nsystemctl reload apache2<\/pre>\n
Since we want to reach the site of course via https, we create a LetEncrypt certificate. The easiest way to do this is with Certbot, which we already installed above:<\/p>\n
certbot --apache --rsa-key-size 4096<\/pre>\n
In the last query, we confirm with „2“ that a redirect should occur.<\/p>\n
Certbot then creates a second vhost configuration file, which we then process again:<\/p>\n
nano \/etc\/apache2\/sites-available\/001-nextcloud-le-ssl.conf<\/pre>\n
we add the following block under DocumentRoot<\/code>-directive:<\/p>\n
<IfModule mod_headers.c>\r\nHeader always set Strict-Transport-Security \"max-age=15768000; preload\"\r\nHeader always set Referrer-Policy \"strict-origin-when-cross-origin\"\r\n# Prevent MIME based attacks\r\nHeader always set X-Content-Type-Options \"nosniff\"\r\nHeader always set X-Frame-Options \"SAMEORIGIN\"\r\n<\/IfModule>\r\n# SSL Configuration - uses strong cipher list - these might need to be downgraded if you need to support older browsers\/devices\r\nSSLEngine on\r\nSSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\r\nSSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1\r\nSSLHonorCipherOrder On\r\n\r\n<Directory \/var\/www\/html\/nextcloud\/>\r\nRequire all granted\r\nAllowOverride All\r\nOptions FollowSymLinks MultiViews\r\n\r\n<IfModule mod_dav.c>\r\nDav off\r\n<\/IfModule>\r\n\r\nSetEnv HOME \/var\/www\/html\/nextcloud\r\nSetEnv HTTP_HOME \/var\/www\/html\/nextcloud\r\nSatisfy Any\r\n\r\n<\/Directory><\/pre>\n
then we have to reload the webserver again:<\/p>\n
systemctl reload apache2<\/pre>\n
Step 8: Configure Nextcloud<\/strong><\/p>\n
For final configuration, we call our domain in the browser:<\/p>\n
\"\"<\/p>\n
and enter the corresponding data, as DB host<\/code> we enter localhost<\/code> and the data directory is \/nextcloud_data<\/code>.<\/p>\n
Now, let’s take Nextcloud’s config.php<\/code> to configure the recommended memory cache:<\/p>\n
nano \/var\/www\/html\/nextcloud\/config\/config.php<\/pre>\n
add the following code:<\/p>\n
'memcache.local' => '\\OC\\Memcache\\Redis',\r\n'memcache.locking' => '\\\\OC\\\\Memcache\\\\Redis',\r\n'redis' => array(\r\n'host' => 'localhost',\r\n'port' => 6379,\r\n),<\/pre>\n
It looks like this:<\/p>\n
\"\"<\/p>\n
In the basic settings, we customize the background tasks and use cron<\/code>:<\/p>\n
\"\"<\/p>\n
and configure the user’s cron job accordingly www-data<\/code>(adjust path and\/or user if you use another one):<\/p>\n
sudo crontab -u www-data -e<\/pre>\n
add the following line at the end:<\/p>\n
*\/15 * * * * php7.3 -f \/var\/www\/html\/nextcloud\/cron.php<\/pre>\n
Restart Aapche2 and php-fpm:<\/p>\n
systemctl restart apache2 && sudo systemctl restart php7.3-fpm<\/pre>\n
and refresh your browser<\/p>\n
Do not forget to configure your mail-settings<\/p>\n
Now we have a freshly installed Nextcloud 17 and can enjoy… Remember: If you find issues within the Nextcloud, then report here on GitHub<\/a>.<\/p>\n
Problems with the tutorial? Then comment below or contact me per Mail or Mastodon.<\/p>\n
Happy nextclouding and do not forget to share \ud83d\ude42<\/p>\n