RHEL 上私有盘 NextCloud

Benefit

• 免费版支持客户端加密（文件夹本地加密后上传，相当于OneCloud的E2EE）
• 客户端加密适用于不信任的服务器环境
• 同时可以向信任环境混合部署过渡

INSTALL

使用Podman运行AIO会收到如下提示：Docker API v1.41 is not supported by your docker engine. Cannot proceed. Please upgrade your docker engine if you want to run Nextcloud AIO!

# example of rootless-podman
podman run \
--sig-proxy=false \
--name nextcloud-aio-mastercontainer \
--publish 1080:80 \
--publish 8080:8080 \
--publish 8443:8443 \
--volume nextcloud_aio_mastercontainer:/mnt/docker-aio-config \
--volume $XDG_RUNTIME_DIR/podman/podman.sock:/var/run/docker.sock:ro,z \
-e DOCKER_SOCKET_PATH=$XDG_RUNTIME_DIR/podman/podman.sock \
--privileged \
nextcloud/all-in-one:latest

放弃AIO换个思路 (All in one)

我觉得AIO有点多余，下面的直接配置也比较简单

For RHEL: single user/test environment
https://github.com/nextcloud/docker
使用sqlite + nextCloud.apache(php)
限制最大内存600M

podman run -d \
--name nextcloud \
-v nextcloud_storage:/var/www/html \
-p 80:80 \
-p 443:443 \
-m=600m \
nextcloud

For RHEL: production
https://docs.rockylinux.org/guides/containers/podman-nextcloud/
使用MariaDB + NextCloud.apache(php)

Usage

• Open web console: App -> "Default encryption module" enable.
• Open web console: App -> search "End-to-End Encryption", install and enable.
• Open web console: Admin Setting -> Server-side encryption -> enable it.
• Now we can reopen Desktop Client, right-click -> setting -> right click on folder: Encrypt. (client side encrypt enabled for specific folder)
• 实测sqlite版初始状态占用内存 116.9MB