Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ By default, Nextcloud can generate previews for the following filetypes:
* Cover of MP3 files
* Text documents

.. note:: Older versions of Nextcloud also supported the preview generation
.. note:: Technically Nextcloud can also generate the previews
of other file types such as PDF, SVG or various office documents.
Due to security concerns those providers have been disabled by
default and are considered unsupported.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,7 @@ Simply go to your Nextcloud Apps page to enable it.
.. figure:: ../images/antivirus-app.png

Configuring ClamAV on Nextcloud
------------------------------
-------------------------------

Next, go to your Nextcloud Admin page and set your Nextcloud logging level to
Everything.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ of memcache that best fits your needs. The supported caching backends are:
* `Redis <http://redis.io/>`_, PHP module 2.2.5 and up required.
For distributed caching.

Memcaches must be explicitly configured in Nextcloud 8.1 and up by installing
Memcaches must be explicitly configured in Nextcloud by installing
and enabling your desired cache, and then adding the appropriate entry to
``config.php`` (See :doc:`config_sample_php_parameters` for an overview of
all possible config parameters).
Expand Down
2 changes: 1 addition & 1 deletion admin_manual/configuration_server/email_configuration.rst
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ configured on your Personal page. The test message says::

--
Nextcloud
web services under your control
a safe home for all your data

Configuring PHP and Sendmail
----------------------------
Expand Down
10 changes: 5 additions & 5 deletions admin_manual/configuration_server/harden_server.rst
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ Operating system
.. _dev-urandom-label:

Give PHP read access to ``/dev/urandom``
*****************************************
****************************************

Nextcloud uses a `RFC 4086 ("Randomness Requirements for Security")`_ compliant
mixer to generate cryptographically secure pseudo-random numbers. This means
Expand Down Expand Up @@ -136,21 +136,21 @@ available SSL ciphers and options depend completely on your environment and
thus giving a generic recommendation is not really possible.

We recommend using the `Mozilla SSL Configuration Generator`_ to generate a
suitable configuration suited for your environment, and the free `Qualys
SSL Labs Tests`_ gives good guidance on whether your SSL server is correctly
suitable configuration suited for your environment, and the free `Qualys SSL Labs Tests`_
gives good guidance on whether your SSL server is correctly
configured.

Also ensure that HTTP compression is disabled to mitigate the BREACH attack.

Use a dedicated domain for Nextcloud
-----------------------------------
------------------------------------

Administrators are encouraged to install Nextcloud on a dedicated domain such as
cloud.domain.tld instead of domain.tld to gain all the benefits offered by the
Same-Origin-Policy.

Ensure that your Nextcloud instance is installed in a DMZ
--------------------------------------------------------
---------------------------------------------------------

As Nextcloud supports features such as Federated File Sharing we do not consider
Server Side Request Forgery (SSRF) part of our threat model. In fact, given all our
Expand Down
5 changes: 2 additions & 3 deletions admin_manual/configuration_server/index.rst
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
=============================
==============================
Nextcloud Server Configuration
=============================
==============================

.. toctree::
:maxdepth: 2
Expand All @@ -24,4 +24,3 @@ Nextcloud Server Configuration
js_css_asset_management_configuration
automatic_configuration
oc_server_tuning

11 changes: 5 additions & 6 deletions admin_manual/configuration_server/oc_server_tuning.rst
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
======================
=======================
Nextcloud Server Tuning
======================
=======================

Using cron to perform background jobs
-------------------------------------
Expand All @@ -20,9 +20,8 @@ Caching
-------

Caching improves performance by storing data, code, and other objects in memory.
Memory cache configuration for the Nextcloud server is no longer automatic in
Nextcloud 8.1 and up, but must be installed and configured. See
:doc:`caching_configuration`.
Memory cache configuration for the Nextcloud server must be installed and configured.
See :doc:`caching_configuration`.

Using MariaDB/MySQL instead of SQLite
-------------------------------------
Expand Down Expand Up @@ -73,4 +72,4 @@ AES-NI extension:
coreinfo, it is maybe disabled in the BIOS.

* If your environment runs virtualized, check the virtualization vendor for
support.
support.
28 changes: 7 additions & 21 deletions admin_manual/configuration_server/occ_command.rst
Original file line number Diff line number Diff line change
Expand Up @@ -2,17 +2,15 @@
Using the occ Command
=====================

Nextcloud's ``occ`` command (Nextcloud console) is Nextcloud's command-line
Nextcloud's ``occ`` command (origins from "ownCloud Console") is Nextcloud's command-line
interface. You can perform many common server operations with ``occ``, such as
installing and upgrading Nextcloud, manage users, encryption, passwords, LDAP
setting, and more.

``occ`` is in the :file:`nextcloud/` directory; for example
:file:`/var/www/nextcloud` on Ubuntu Linux. ``occ`` is a PHP script. **You must
run it as your HTTP user** to ensure that the correct permissions are maintained
on your Nextcloud files and directories. In Nextcloud 8.2+ you may run it from
any directory (specifying the filepath); in previous releases it had to be
run from the :file:`nextcloud/` directory.
on your Nextcloud files and directories.

occ Command Directory
---------------------
Expand Down Expand Up @@ -167,7 +165,6 @@ The ``app`` commands list, enable, and disable apps::
app:disable disable an app
app:enable enable an app
app:getpath Get an absolute path to the app directory
(added in 9.0)
app:list List all available apps

List all of your installed apps, and show whether they are
Expand Down Expand Up @@ -419,7 +416,7 @@ Run this command to migrate calendars::

sudo -u www-data php occ dav:migrate-calendars [user]

See `Nextcloud 9.0 - calendar migration analysis
See `ownCloud 9.0 - calendar migration analysis
<http://morrisjobke.de/2016/03/07/ownCloud-9.0-calendar-migration-analysis/>`_
for help with troubleshooting and reporting problems.

Expand All @@ -433,8 +430,6 @@ bernie::
addressbook::

sudo -u www-data php occ dav:sync-system-addressbook

Added in 9.0.

.. _database_conversion_label:

Expand Down Expand Up @@ -561,13 +556,11 @@ Synchronize the addressbooks of all federated Nextcloud servers::
federation:sync-addressbooks Synchronizes addressbooks of all
federated clouds

In Nextcloud 9.+, servers connected with federation shares can share user
In Nextcloud, servers connected with federation shares can share user
address books, and auto-complete usernames in share dialogs. Use this command
to synchronize federated servers::

sudo -u www-data php occ federation:sync-addressbooks

Added in 9.0.

.. _file_operations_label:

Expand All @@ -580,7 +573,7 @@ File Operations
files:cleanup cleanup filecache
files:scan rescan filesystem
files:transfer-ownership All files and folders are moved to another
user - shares are moved as well. (Added in 9.0)
user - shares are moved as well.

The ``files:scan`` command scans for new files and updates the file cache. You
may rescan all files, per-user, a space-delimited list of users, and limit the
Expand Down Expand Up @@ -644,9 +637,6 @@ before removing a user::
Files External
--------------

These commands replace the ``data/mount.json`` configuration file used in
Nextcloud releases before 9.0.

.. note::
These commands are only available when the "External storage support" app
(``files_external``) is enabled.
Expand Down Expand Up @@ -675,14 +665,12 @@ Nextcloud user.
Use ``files_external:import [filename]`` to import legacy JSON configurations,
and to copy external mount configurations to another Nextcloud server.

Added in 9.0.

.. _integrity_check_label:

Integrity Check
---------------

Apps which have an official tag MUST be code signed starting with Nextcloud 9.0. Unsigned official apps won't be installable anymore. Code signing is optional for all third-party applications::
Apps which have an official tag MUST be code signed with Nextcloud. Unsigned official apps won't be installable anymore. Code signing is optional for all third-party applications::

integrity
integrity:check-app Check app integrity using a signature.
Expand All @@ -704,16 +692,14 @@ When it returns nothing, your app is signed correctly. When it returns a message
``integrity:sign-core`` is for Nextcloud core developers only.

See :doc:`../issues/code_signing` to learn more.

Added in 9.0.

.. _create_javascript_translation_files_label:

l10n, Create Javascript Translation Files for Apps
--------------------------------------------------

This command is for app developers to update their translation mechanism from
Nextcloud 7 to Nextcloud 8 and later.
ownCloud 7 to Nextcloud.

.. _ldap_commands_label:

Expand Down
4 changes: 2 additions & 2 deletions admin_manual/configuration_server/security_setup_warnings.rst
Original file line number Diff line number Diff line change
Expand Up @@ -87,7 +87,7 @@ Your Web server is not yet set up properly to allow file synchronization
"Your web server is not yet set up properly to allow file synchronization because
the WebDAV interface seems to be broken."

At the Nextcloud community forums a larger `FAQ <https://forum.owncloud.org/viewtopic.php?f=17&t=7536>`_
At the ownCloud community forums a larger `FAQ <https://forum.owncloud.org/viewtopic.php?f=17&t=7536>`_
is maintained containing various information and debugging hints.

Outdated NSS / OpenSSL version
Expand Down Expand Up @@ -126,4 +126,4 @@ Your database does not run with "READ COMMITED" transaction isolation level
"Your database does not run with "READ COMMITED" transaction isolation level.
This can cause problems when multiple actions are executed in parallel."

Please refer to :ref:`db-transaction-label` how to configure your database for this requirement.
Please refer to :ref:`db-transaction-label` how to configure your database for this requirement.
14 changes: 7 additions & 7 deletions admin_manual/configuration_user/user_auth_ldap.rst
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ user.

.. note:: The PHP LDAP module is required; this is supplied by ``php5-ldap`` on
Debian/Ubuntu, and ``php-ldap`` on CentOS/Red Hat/Fedora. PHP 5.4+ is
required in Nextcloud 8.1.
required in Nextcloud.

The LDAP application supports:

Expand Down Expand Up @@ -411,9 +411,9 @@ User Home Folder Naming Rule:

* Example: *cn*

In new Nextcloud installations (8.0.10, 8.1.5, 8.2.0 and up) the home folder rule is enforced. This means that once you set a home folder naming rule (get a home folder from an LDAP attribute), it must be available for all users. If it isn't available for a user, then that user will not be able to login. Also, the filesystem will not be set up for that user, so their file shares will not be available to other users.
In new Nextcloud installations the home folder rule is enforced. This means that once you set a home folder naming rule (get a home folder from an LDAP attribute), it must be available for all users. If it isn't available for a user, then that user will not be able to login. Also, the filesystem will not be set up for that user, so their file shares will not be available to other users.

In existing Nextcloud installations the old behavior still applies, which is using the Nextcloud username as the home folder when an LDAP attribute is not set. You may change this to enforcing the home folder rule with the ``occ`` command in Nextcloud 8.2, like this example on Ubuntu::
In migrated Nextcloud installations the old behavior still applies, which is using the Nextcloud username as the home folder when an LDAP attribute is not set. You may change this to enforcing the home folder rule with the ``occ`` command in Nextcloud, like this example on Ubuntu::

sudo -u www-data php occ config:app:set user_ldap enforce_home_folder_naming_rule --value=1

Expand Down Expand Up @@ -496,7 +496,7 @@ When the configuration test reports success, save your settings and check if the
users and groups are fetched correctly on the Users page.

Nextcloud Avatar integration
---------------------------
----------------------------

Nextcloud supports user profile pictures, which are also called avatars. If a user
has a photo stored in the *jpegPhoto* or *thumbnailPhoto* attribute on your LDAP
Expand Down Expand Up @@ -571,7 +571,7 @@ In case you have a working configuration and want to create a similar one or
Now you can modify and enable the configuration.

Nextcloud LDAP Internals
-----------------------
------------------------

Some parts of how the LDAP backend works are described here.

Expand All @@ -598,8 +598,8 @@ testing, you can empty the tables any time. Do not do this in production.
Caching
^^^^^^^

The LDAP cache has changed in Nextcloud 8.1. There is no more file cache, but
only a memory cache, and you must install and configure the memory cache (see
The LDAP information is cached in Nextcloud memory cache, and you must install
and configure the memory cache (see
:doc:`../configuration_server/caching_configuration`). The Nextcloud **Cache**
helps to speed up user interactions and sharing. It is populated on demand,
and remains populated until the **Cache Time-To-Live** for each unique request
Expand Down
4 changes: 2 additions & 2 deletions admin_manual/configuration_user/user_auth_ldap_cleanup.rst
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ This example shows what the table of users marked as ``deleted`` looks like::

$ sudo -u www-data php occ ldap:show-remnants
+-----------------+-----------------+------------------+--------------------------------------+
| Nextcloud name | Display Name | LDAP UID | LDAP DN |
| Nextcloud name | Display Name | LDAP UID | LDAP DN |
+-----------------+-----------------+------------------+--------------------------------------+
| aaliyah_brown | aaliyah brown | aaliyah_brown | uid=aaliyah_brown,ou=people,dc=com |
| aaliyah_hammes | aaliyah hammes | aaliyah_hammes | uid=aaliyah_hammes,ou=people,dc=com |
Expand All @@ -63,7 +63,7 @@ Then you can run ``sudo -u www-data php occ user:delete aaliyah_brown`` to delet
user aaliyah_brown. You must use the user's Nextcloud name.

Deleting Local Nextcloud Users
-----------------------------
------------------------------

You may also use ``occ user:delete [user]`` to remove a local Nextcloud user;
this removes their user account and their data.
6 changes: 3 additions & 3 deletions admin_manual/index.rst
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ See :doc:`../whats_new_admin` for more information on the different Nextcloud
editions.

Nextcloud Videos and Blogs
-------------------------
--------------------------

See the `official Nextcloud channel
<https://www.youtube.com/channel/UCQjN5Fs5QSz1loJqLb5bkew>`_
Expand All @@ -41,11 +41,11 @@ user interface, and desktop and mobile clients, please refer to their
respective manuals:

* `Nextcloud User Manual`_
* `Nextcloud/Nextcloud Desktop Client`_
* `Nextcloud/ownCloud Desktop Client`_
* `Nextcloud Android App`_
* `Nextcloud iOS App`_

.. _`Nextcloud User Manual`: https://docs.nextcloud.org/server/9.0/user_manual/
.. _`Nextcloud/Nextcloud Desktop Client`: https://doc.owncloud.org/desktop/2.2/
.. _`Nextcloud/ownCloud Desktop Client`: https://doc.owncloud.org/desktop/2.2/
.. _`Nextcloud Android App`: https://docs.nextcloud.org/android/
.. _`Nextcloud iOS App`: https://docs.nextcloud.org/ios/
4 changes: 2 additions & 2 deletions admin_manual/installation/apps_management_installation.rst
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ page by default.

Click the app name to view a description of the app and any of the app settings in the Application View field. Clicking the **Enable** button will enable the app. If the app is not part of the Nextcloud installation, it will be downloaded from the app store, installed and enabled.

Click the gear icon on the lower left to browse experimental apps in the `Nextcloud Apps
Click the gear icon on the lower left to browse experimental apps in the `ownCloud Apps
Store <https://apps.owncloud.com/>`_. Install experimental apps at your own risk.

Sometimes the installation of a third-party app fails silently, possibly because
Expand All @@ -52,7 +52,7 @@ API. If they are then they will not be installed.

.. note:: If you would like to create or add your own Nextcloud app, please
refer to the `developer manual
<https://doc.owncloud.org/server/9.0/developer_manual/app/index.html>`_.
<https://docs.nextcloud.org/server/10/developer_manual/app/index.html>`_.

Using Custom App Directories
----------------------------
Expand Down
18 changes: 2 additions & 16 deletions admin_manual/installation/apps_supported.rst
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
==========================
===========================
Supported Apps in Nextcloud
==========================
===========================

AGPL Apps
---------
Expand Down Expand Up @@ -31,17 +31,3 @@ AGPL Apps
* Update Notifications
* User External
* User LDAP

Enterprise-Only Apps
--------------------

* Enterprise License Key
* Files Drop
* File Firewall
* LDAP Home Connector
* Log user and Sharing actions (1 new app, replacing the 2 former logging apps)
* Object Storage (S3)
* SharePoint
* Shibboleth (SAML)
* Windows Network Drives (requires External Storage)
* Workflow
2 changes: 1 addition & 1 deletion admin_manual/installation/command_line_installation.rst
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ convenient for scripted operations, headless servers, and sysadmins who prefer
the command line. There are three stages to installing Nextcloud via the command
line:

1. Download and install the Nextcloud code and unpack the tarball in the appropriate directories. (See :doc:`source_installation`.)
1. Download the Nextcloud code and unpack the tarball in the appropriate directories. (See :doc:`source_installation`.)

2. Change the ownership of your ``nextcloud`` directory to your HTTP user, like
this example for Debian/Ubuntu. You must run ``occ`` as your HTTP user; see
Expand Down
Loading