nextcloud

933 readers

1 users here now

Nextcloud is a suite of client-server software for creating and using file hosting services.

https://nextcloud.com/

https://github.com/nextcloud

IRC: #nextcloud on libera.chat
Matrix: #nextcloud:matrix.org

Other Nextcloud communities on Lemmy

founded 5 years ago

MODERATORS

testman@lemmy.ml

How do I properly secure NextCloud server connected to the open internet? (lemmy.zip)

submitted 4 months ago by anonvurr@lemmy.zip to c/nextcloud@lemmy.ml

5 comments fedilink hide all child comments

I have had a NextCloud up & running for a few weeks thus far and haven't had any problems. The reason I can't just connect to it via vpn is that I want to share links of files with other people. I always keep the system up to date and I think I configured nginx correctly. I have blocked all requests to ports other than 80 and 443, but the firewall is still not the best right now: someone can send many requests in a short timeframe. I have also used tools like pentest-tools.com and some others, but those say that there are no major vulnerabilities. I also keep track of logs with a tool called logwatch. Any tips and tricks or resources (articles, videos, etc) would be much appreciated. Or maybe you want to know more about my setup. I know that NextCloud can be really secure if everything is done right!

you are viewing a single comment's thread
view the rest of the comments

[–] tabris@lemmy.world 2 points 4 months ago

From a cursory look, as I don't know NPM, Swag doesn't require a database itself as all config is file based, and doesn't have any user management. Both seem to be nginx based with Fail2Ban installed, there's probably some other differences.

What I like about Swag is that with my config checked into a git repo and an act runner set up, I can reconfigure swag on the fly, with a rollback, as it's just a case of pushing an update to the repo and letting the runner pull changes and restart the container. It works very well for how I want things set up.