Live data from Hacker News

Nextcloud: Open-Source Cloud Apps

nextcloud.com

71–80 of 250 posts

Re: Nextcloud: Open-Source Cloud Apps

#71

I started using Nextcloud first to have an alternative to big-tech in case Google locks me out of my account, and then it became my daily driver. It's fast, private, and has mature clients for all major desktop and mobile platforms. Together with OnlyOffice, it's a good-enough substitute for Google Docs Editors (the office suite) for non-collaborative editing. I love self-hosting but file storage is one thing that I…

> I've been paying for Hetzner Storage Share [0] happily to save myself the headache.

Assuming you start with NX11, which has 1TB storage, and before hitting the limit you want to upgrade to the 5TB storage, NX21.

Can you just call Hetzner and tell them they should upgrade your NX11 plan to NX21 in-place, or will you have to order NX21 and then move all the data over to the new instance yourself?

Re: Nextcloud: Open-Source Cloud Apps

#72
post #71

I started using Nextcloud first to have an alternative to big-tech in case Google locks me out of my account, and then it became my daily driver. It's fast, private, and has mature clients for all major desktop and mobile platforms. Together with OnlyOffice, it's a good-enough substitute for Google Docs Editors (the office suite) for non-collaborative editing. I love self-hosting but file storage is one thing that I…

> I've been paying for Hetzner Storage Share [0] happily to save myself the headache. Assuming you start with NX11, which has 1TB storage, and before hitting the limit you want to upgrade to the 5TB storage, NX21. Can you just call Hetzner and tell them they should upgrade your NX11 plan to NX21 in-place, or will you have to order NX21 and then move all the data over to the new instance yourself?

Pretty sure you can do an in-place upgrade on the web interface of Hetzner

Re: Nextcloud: Open-Source Cloud Apps

#73

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

>A common misconception IMO is that running and owning your own infrastructure is somehow more secure. If done properly cve-s don't matter that much. You create a headscale install on a pi and the headscale port and your router's ssh (key only) are the only things visible from the outside. Take any other than a home router - aka something with support. And you are done.

Or go with Wireguard. It uses UDP, it has a silent protocol, no one from the outside can see it. (unless they can MITM you)

Re: Nextcloud: Open-Source Cloud Apps

#74

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

I would dig a bit more into the breakdown of the CVEs: https://www.cvedetails.com/product/34622/Nextcloud-Nextcloud... As well as if this reflects a systemic issue with the codebase or if it is just getting much needed attention from security researchers. More CVEs can just mean they're cleaning up after vulns really well. But at the same time, if they have critical vulns over and over again, that might indicate bad…

Nextcloud is well known for it shitty legacy PHP codebase.

Re: Nextcloud: Open-Source Cloud Apps

#75
post #51

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

Those cloud specialists aren't configuring your ACLs and firewalls - the most common source of severe security problems in the cloud.

Yes, there is a concept of "shared responsibility" in the cloud. Obviously the provider is going to handle some things and you have to take care of others.

Re: Nextcloud: Open-Source Cloud Apps

#76
post #17
post #9

Earlier quoted context omitted.

I run Seafile for this reason. The sync client isn't pretty, but file transfers are fast, conflict detection good and it's pretty light on resources.

I have looked into Seafile, but the thing is that I like some of the extra Nextcloud things, especially the calendar. I just wish that file sync was the main focus and not an afterthought. But honestly, I should probably just use Seafile and get another, more lightweight CalDAV server.

I use syncthing for files and radicale for calendar and contacts. Very lightweight and stable for years. Radicale sits behind a proxy with basic auth, so dont have to worry about patching vulns to much.

Re: Nextcloud: Open-Source Cloud Apps

#77

I like very much Next loud (the idea, the project, some part of the design like storing files flat easily backup able) but my major issue is with the file synchronisation with the Android. It totally does not work. If you try to send or synchronize just a few files it is mostly ok. But when trying to upload more than a few dozen files, things starts to not work well, like transfer being stuck, or the transfer complet…

When I tried Nextcloud, I found there was an option to sync all photos from Google Photos. It synced around 10% photos and reported success. Overall, Nextcloud had lots of breaking bugs/instability issues like that in almost all cases I tried, so I ended up just buying a second account at a different cloud provider, so everything is now synced to 2 providers, in case I lose access to my Google account.

I experienced the bug you mentioned about 5 years ago, I wonder if they ever fixed it.

Re: Nextcloud: Open-Source Cloud Apps

#78

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

One doesn't have to expose it to malicious actors. It is most-useful that way, sure. Mine is at 10.27.0.68 . Have fun, hackers! Also, I lol at most CVEs. Butterfly farted outside, oh uh. Take the top one: In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4. You mean to tell me a few minor po…

I find that one concerning in an enterprise setup (which they target). Or the fact that the desktop client has 999 open issues. Or that the last version silently takes you off the stable channel. I could go on … Nextcloud desktop has severe quality control issues.

Re: Nextcloud: Open-Source Cloud Apps

#79

I like very much Next loud (the idea, the project, some part of the design like storing files flat easily backup able) but my major issue is with the file synchronisation with the Android. It totally does not work. If you try to send or synchronize just a few files it is mostly ok. But when trying to upload more than a few dozen files, things starts to not work well, like transfer being stuck, or the transfer complet…

File syncing also frustrates me, although I think it's working as intended. I would expect that if I update a synced file on my laptop, that should also automatically update it on the cloud. But it seems like there's an extra step where I have to go to the web ui and say that I want it to use the updated version.

Also sharing has been very confusing, people keep thinking they've shared files they haven't.

Maybe the problem is me / us, idk. Or maybe it's better as a "personal" cloud than a shared one. I have, overall, not enjoyed using it. I wish management would just let us store docs in a git repo, which would be much more intuitive for most of us.

Re: Nextcloud: Open-Source Cloud Apps

#80
post #67
post #24

Earlier quoted context omitted.

The performance issues are noticeable to me because I'm hosting it on a Raspberry Pi 4. I figured that the bottleneck when syncing etc would be network and disk IO so the Pi would be fine; however when I'm syncing, all cores are pegged at 100% by the PHP processes . I've enabled bytecode cache and Redis and all the other normal performance things, PHP itself is just too slow. And I imagine that at least part of the i…

I assume you are not running on the sd card?

I boot from the SD card but I have a USB SSD connected which I use for file storage. I have also configured stuff and set up bind mounts such that everything that gets written to regularly (such as logs, the Nextcloud install itself, Postgres, ...) is on the SSD.
Post reply on HN