{"id":1875,"date":"2021-03-23T18:19:09","date_gmt":"2021-03-23T17:19:09","guid":{"rendered":"https:\/\/markus-blog.de\/?p=1875"},"modified":"2023-04-03T08:43:57","modified_gmt":"2023-04-03T06:43:57","slug":"how-to-install-nextcloud-19-on-ubuntu-20-04-with-postgresql-12-php7-4-fpm-apache2-and-http-2","status":"publish","type":"post","link":"https:\/\/markus-blog.de\/index.php\/2021\/03\/23\/how-to-install-nextcloud-19-on-ubuntu-20-04-with-postgresql-12-php7-4-fpm-apache2-and-http-2\/","title":{"rendered":"How to install Nextcloud 21 on Ubuntu 20.04 with postgreSQL 13 php8.0-fpm Apache2 and HTTP\/2"},"content":{"rendered":"Nextcloud 21 (NextcloudHub) was released and we want to install it on a new clean VPS\r\n\r\nIf you want to know what has changed, read the ChangeLog<\/a>\r\n\r\nIf you are ready, then let us begin\r\n\r\nRequirements:<\/strong>\r\n\r\n– a VPS with Ubuntu 20.04 LTS minimal Image installed (you can get one here @netcup<\/a> with 5\u20ac Discount or start at Hetzner Cloud<\/a> with 20\u20ac start credits)\r\n– shell access and appropriate rights\r\n– One DNS A and possibly AAAA record for our Apache vhost\r\n\r\nStep 1: Install Firewall<\/strong>\r\n\r\nFirst of all, you should install a firewall to secure your VPS (if not installed) and allow incoming traffic to port 80\/443 and 22 (ssh) only. For Securing ssh-access you can use fail2ban and passwordless authentication. Many guides for this are out there.\r\n
apt install ufw -y\r\nufw allow http\r\nufw allow https\r\nufw allow ssh\r\nufw enable<\/pre>\r\nAccept with „y“\r\n\r\nStep 2: Install postgreSQL 13<\/strong>\r\n\r\nFirst, we have to add the official postgreSQL-Repository\r\n
echo \"deb [arch=amd64] http:\/\/apt.postgresql.org\/pub\/repos\/apt\/ `lsb_release -cs`-pgdg main\" |sudo tee \/etc\/apt\/sources.list.d\/pgdg.list\r\nwget --quiet -O - https:\/\/www.postgresql.org\/media\/keys\/ACCC4CF8.asc | apt-key add -\r\napt update<\/pre>\r\nAfter this we can install the postgreSQL as Database-Server:\r\n
apt install -y postgresql-13 postgresql-client-13<\/pre>\r\nNow you can connect to postgreSQL with:\r\n
root@db01:\/# sudo -u postgres psql\r\npsql (13.2 (Ubuntu 13.2-1.pgdg20.04+1))\r\nType \"help\" for help.\r\n\r\npostgres=#<\/pre>\r\nyou can get information about connection with:\r\n
postgres=#  \\conninfo\r\nYou are connected to database \"postgres\" as user \"postgres\" via socket in \"\/var\/run\/postgresql\" at port \"5432\".<\/pre>\r\nand end session with:\r\n
postgres-#  \\q<\/pre>\r\nStep 3: Install Apache2<\/strong>\r\n\r\nWith the following command we will install the Apache-Webserver:\r\n
apt install -y apache2 apache2-utils<\/pre>\r\nStep 4: Install php8.0-fpm an recommended moduls<\/strong>\r\n\r\nthe php8.0 packages are not in offical repository of Ubuntu 20, so you have to add ondrej’s ppa:\r\n
echo \"deb http:\/\/ppa.launchpad.net\/ondrej\/php\/ubuntu $(lsb_release -cs) main\" | tee \/etc\/apt\/sources.list.d\/php.list<\/pre>\r\nand add the key:\r\n
apt-key adv --recv-keys --keyserver hkps:\/\/keyserver.ubuntu.com:443 4F4EA0AAE5267A6C<\/pre>\r\nNow you can install php8.0 and moduls with the following command:\r\n
apt update && apt install -y php8.0-cli php8.0-common php8.0-mbstring php8.0-gd php8.0-imagick php8.0-intl php8.0-bz2 php8.0-xml php8.0-pgsql php8.0-zip php8.0-dev php8.0-curl php8.0-fpm redis-server php8.0-redis php8.0-smbclient php8.0-ldap php8.0-bcmath php8.0-gmp libmagickcore-6.q16-6-extra<\/pre>\r\nStep 5: Configure Apache2 and php8.0-fpm<\/strong>\r\n\r\nNow we enable the needed modules in Apache2 with:\r\n
a2enmod proxy_fcgi setenvif mpm_event rewrite headers env dir mime ssl http2<\/pre>\r\nand after that we activate php8.0-fpm<\/code>:\r\n
a2enconf php8.0-fpm<\/pre>\r\nnow we have edit the apache2.conf<\/code> to allow the usage of .htaccess<\/code>-files:\r\n
nano \/etc\/apache2\/apache2.conf<\/pre>\r\nand change the following code:\r\n
<Directory \/var\/www\/>\r\nOptions Indexes FollowSymLinks\r\nAllowOverride None<\/span>\r\nRequire all granted\r\n<\/Directory><\/pre>\r\nto:\r\n
<Directory \/var\/www\/>\r\nOptions Indexes FollowSymLinks\r\nAllowOverride All<\/span>\r\nRequire all granted\r\n<\/Directory><\/pre>\r\nTo enable HTTP\/2, we need to add this line to apache2.conf<\/code>:\r\n
Protocols h2 h2c http\/1.1<\/pre>\r\nnow we have to prepare the php.ini<\/code> for nextcloud:\r\n
nano \/etc\/php\/8.0\/fpm\/php.ini<\/pre>\r\nextend with the following directives:\r\n
opcache.enable=1\r\nopcache.enable_cli=1\r\nopcache.interned_strings_buffer=8\r\nopcache.max_accelerated_files=10000\r\nopcache.memory_consumption=128\r\nopcache.save_comments=1\r\nopcache.revalidate_freq=1<\/pre>\r\nand adjust the following Lines:\r\n
max_execution_time = 300\r\nmax_input_time = 600\r\nmemory_limit = 512M\r\nupload_max_filesize = 10240M<\/pre>\r\nAfterwards, the web server<\/code> and php8.0-fpm<\/code> must be restarted:\r\n
systemctl restart apache2 php8.0-fpm<\/pre>\r\nStep 6: Install Certbot and other tools<\/strong>\r\n\r\nTo request a ssl-sert from LetsEncrypt we use Certbot<\/code> and the apache-plugin<\/code>:\r\n
apt install -y python3-certbot-apache certbot wget curl sudo unzip<\/pre>\r\nStep 7: Create Database<\/strong>\r\n\r\nBefore we can install Nextcloud, we first have to create a database in postgreSQL. To do this, we execute the following commands:\r\n
sudo -u postgres psql<\/pre>\r\nthen execute:\r\n
CREATE USER nextcloud WITH PASSWORD 'your-password';\r\nCREATE DATABASE nextclouddb TEMPLATE template0 ENCODING 'UNICODE';\r\nALTER DATABASE nextclouddb OWNER TO nextcloud;\r\nGRANT ALL PRIVILEGES ON DATABASE nextclouddb TO nextcloud;\r\n\\q<\/pre>\r\nStep 8: Download Nextcloud and create filesystem<\/strong>\r\n\r\nNow it’s time to download the latest Release of Nextcloud 21 from nextcloud:\r\n
wget https:\/\/download.nextcloud.com\/server\/releases\/latest-21.zip<\/pre>\r\nand unzip the downloaded archive:\r\n
unzip latest-21.zip<\/pre>\r\nAfterwards we move the folder nextcloud<\/code> to the right place.\r\n\r\nwe move the entire folder into the path \/var\/www\/html\/<\/code>\r\n
mv nextcloud \/var\/www\/html\/\r\nchown -R www-data:www-data \/var\/www\/html\/nextcloud<\/pre>\r\nYou can delete the downloaded archive now:\r\n
sudo rm latest-21.zip<\/pre>\r\nFor our nextcloud-files we prepare a directory outside of \/var\/www\/html\/nextcloud<\/code>:\r\n
mkdir \/nextcloud_data<\/pre>\r\nand change the owner to www-data<\/code>:\r\n
chown -R www-data:www-data \/nextcloud_data<\/pre>\r\nThe document-root for Apache is now \/var\/www\/html\/nextcloud\r\n\r\nStep 9: Create Apache2 vHost and secure with SSL<\/strong>\r\n\r\nTo create an Apache vhost, we simply create a new .conf<\/code> in \/etc\/apache2\/sites-available\/<\/code>:\r\n
nano \/etc\/apache2\/sites-available\/001-nextcloud.conf<\/pre>\r\nadd the following content and adjust your names:\r\n
<VirtualHost *:80>\r\nServerName nextcloud.your-domain.tld\r\nServerAdmin webmaster@your-domain.tld\r\nDocumentRoot \/var\/www\/html\/nextcloud\r\n\r\nErrorLog ${APACHE_LOG_DIR}\/error.log\r\nCustomLog ${APACHE_LOG_DIR}\/access.log combined\r\n<\/VirtualHost><\/pre>\r\n \r\n\r\nthen we activate this site and disable the default vHost:\r\n
a2ensite 001-nextcloud.conf\r\na2dissite 000-default.conf\r\nsystemctl reload apache2<\/pre>\r\nSince we want to reach the site of course via https, we create a LetEncrypt certificate. The easiest way to do this is with Certbot, which we already installed above:\r\n
certbot --apache --rsa-key-size 4096<\/pre>\r\nIn the last query, we confirm with „2“ that a redirect should occur.\r\n\r\nCertbot then creates a second vhost configuration file, which we then process again:\r\n
nano \/etc\/apache2\/sites-available\/001-nextcloud-le-ssl.conf<\/pre>\r\nwe add the following block under DocumentRoot<\/code>-directive:\r\n
<IfModule mod_headers.c>\r\nHeader always set Strict-Transport-Security \"max-age=15768000; preload\"\r\nHeader always set Referrer-Policy \"strict-origin-when-cross-origin\"\r\n# Prevent MIME based attacks\r\nHeader always set X-Content-Type-Options \"nosniff\"\r\nHeader always set X-Frame-Options \"SAMEORIGIN\"\r\n<\/IfModule>\r\n# SSL Configuration - uses strong cipher list - these might need to be downgraded if you need to support older browsers\/devices\r\nSSLEngine on\r\nSSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\r\nSSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1\r\nSSLHonorCipherOrder On\r\n\r\n<Directory \/var\/www\/html\/nextcloud\/>\r\nRequire all granted\r\nAllowOverride All\r\nOptions FollowSymLinks MultiViews\r\n\r\n<IfModule mod_dav.c>\r\nDav off\r\n<\/IfModule>\r\n\r\nSetEnv HOME \/var\/www\/html\/nextcloud\r\nSetEnv HTTP_HOME \/var\/www\/html\/nextcloud\r\nSatisfy Any\r\n\r\n<\/Directory><\/pre>\r\nthen we have to reload the webserver again:\r\n
systemctl reload apache2<\/pre>\r\nStep 10: Configure Nextcloud<\/strong>\r\n\r\nFor final configuration, we call our domain in the browser:\r\n\r\n\"\"\r\n\r\nand enter the corresponding data, as DB host<\/code> we enter localhost<\/code> and the data directory is \/nextcloud_data<\/code>.\r\n\r\nYou have to finish the Installation with the Button at the botton.\r\n\r\nNow wait some time until all Apps have been installed\r\n\r\nWhen finished, let’s take Nextcloud’s config.php<\/code> to configure the recommended memory cache and setting default phone region:\r\n
nano \/var\/www\/html\/nextcloud\/config\/config.php<\/pre>\r\nadd the following code:\r\n
'memcache.local' => '\\OC\\\\Memcache\\\\Redis',\r\n'memcache.locking' => '\\\\OC\\\\Memcache\\\\Redis',\r\n'redis' => array(\r\n'host' => 'localhost',\r\n'port' => 6379,\r\n),\r\n'default_phone_region' => 'DE',<\/pre>\r\nIt looks like this:\r\n\r\n\"\"\r\n\r\nIn the basic settings, we customize the background tasks and use cron<\/code>:\r\n\r\n\"\"\r\n\r\nand configure the user’s cron job accordingly www-data<\/code>(adjust path and\/or user if you use another one):\r\n
sudo crontab -u www-data -e<\/pre>\r\nadd the following line at the end:\r\n
*\/5 * * * * php8.0 -f \/var\/www\/html\/nextcloud\/cron.php<\/pre>\r\nRestart Apache2 and php-fpm:\r\n
systemctl restart apache2 && sudo systemctl restart php8.0-fpm<\/pre>\r\nthen refresh your browser and Check the Security and Setup Warnings in Settings Overview.\r\n\r\nDo not forget to configure your mail-settings\r\n\r\nNow we have a freshly installed NextcloudHub and can enjoy… Remember: If you find issues within the Nextcloud, then report here on GitHub<\/a>.\r\n\r\nProblems with the tutorial? Then comment below or contact me per Mail or Mastodon.\r\n\r\nIf you want a managed nextcloud, then look here<\/a>.\r\n\r\nI will be happy if you would support my work here<\/a>.\r\n\r\nHappy nextclouding and do not forget to share \ud83d\ude42\r\n
Beitragsbild mit freundlicher Genehmigung von Marcus G\u00fcnther.\r\n\r\nhttp:\/\/guenique-photography.de<\/a><\/cite><\/blockquote>\r\n