Live data from Hacker News

Nextcloud Hub 26 Spring: Built together, designed for the future

nextcloud.com

71–80 of 103 posts

Re: Nextcloud Hub 26 Spring: Built together, designed for the future

#71

I love nextcloud and have been using it for years. However recently I've considered taking my instance offline or at least behind a VPN because even if only 10% is true of what AI folks are claiming about LLMs finding exploits left and right, it seems super risky to be hosting your private data on nextcloud. How do you folks deal with these massively increased threats to self-hosted open source apps?

> I've considered taking my instance offline or at least behind a VPN

The practical downside is that you won't really be able to use all the features of Nextcloud that way, such as file sharing with people outside your LAN, or Nextcloud Talk (a Zoom substitute).

That being said, I don't store sensitive documents on my Nextcloud instance exposed to the Internet. For that, I have a Samba server on a LAN.

Re: Nextcloud Hub 26 Spring: Built together, designed for the future

#72

I love nextcloud and have been using it for years. However recently I've considered taking my instance offline or at least behind a VPN because even if only 10% is true of what AI folks are claiming about LLMs finding exploits left and right, it seems super risky to be hosting your private data on nextcloud. How do you folks deal with these massively increased threats to self-hosted open source apps?

I ban almost the entire world using iptables.

Or rather, I drop all traffic other than that coming from my geo.

This has dropped my „rattling the door handle“ rate to 1/week instead of 1/second.

Re: Nextcloud Hub 26 Spring: Built together, designed for the future

#73

I love nextcloud and have been using it for years. However recently I've considered taking my instance offline or at least behind a VPN because even if only 10% is true of what AI folks are claiming about LLMs finding exploits left and right, it seems super risky to be hosting your private data on nextcloud. How do you folks deal with these massively increased threats to self-hosted open source apps?

> How do you folks deal with these massively increased threats to self-hosted open source apps?

I throw everything behind Cloudflare ZeroTrust SSO or whatever it’s called with a whitelist of Github accounts, and Cloudflare Tunnel to network the containers/VMs without exposing any ports to the outside (except SSH), enforced by both the cloud firewall and iptables/ifw.

Re: Nextcloud Hub 26 Spring: Built together, designed for the future

#74
post #50
post #18

Nextcloud is great, I self-host an instance at home. I mostly use the calendar, address book, and file sharing with links a la Google Drive. It's probably heavier and slower than it should be for what it does, but it works. Just like Home Assistant, it is a "must have" tool for self-hosters.

What's your experience like? Lot's of people say that's a mess to maintain and too broken to actively use. I often doubt if that's due to actual problems, or mix with that and bad decisions on the setup. Is dockering, keeping the data handling itself outside of it and a few other easy (or not so much) precautions enough to have a somewhat smoother sailing? Also, how much time do you need to keep things from failing a…

I have instance for couple of years. No issues for now. Never had a feeling it's going to fall apart. I host it via docker image, pull new version from time to time and that's mostly it.

Only two problems I can think of: it's bit slow - even our company instance which has reasonable resources could be bit faster. Also they could use a better UI designer.

None of it is major problem for me. As self-hosted Dropbox/calendar/cospend it's perfectly fine.

Re: Nextcloud Hub 26 Spring: Built together, designed for the future

#75

Earlier quoted context omitted.

GMKTec G9. Four NVMe slots, plus some internal memory to deploy TrueNAS. It only has 12GB of RAM, but has two ethernet cards, acceptable cooling and performance and has a small footprint. SSDs shall be single sided and gonna need heatsinks, but I believe it works well and is not tied to any manufacturer for anything. If you want go all-out get ASUSTOR's Ryzen based systems. You can use the stock firmware or disable i…

I have a g9 and cooling is fine, but not great. I ended up opening it up and placing heatsinks on hot chips

That's true. I had to raise mine on two small cardboard boxes to allow SSDs to breathe. Also mine is not under very high load.

Re: Nextcloud Hub 26 Spring: Built together, designed for the future

#76
post #61

Nextcloud has the most confusing versioning of any software I have ever used. Nextcloud Hub 26 is Nextcloud 34 and follows Nextcloud Hub 9 which is Nextcloud 33. And I could be off on those exact numbers.

When numbers are confusing, it's usually just a recalibration. Hub 9 aligns with cloud 33. But they are switching Hub to a dated numbering scheme because it's intended to be timestamped. It's not "Hub 26" its "Hub 26 Spring" -- it's not a version number, it's a time. The underlying Nextcloud keeps an incremental semver release version so it can be based on features rather than timeline. Because the Nextcloud version…

Apple did just recently have a confusing scheme. We went from iOS 18 to 26

And all other devices also went to 26

Would it be that hard for Nextcloud to just have a single version across all apps and then a separate but similar server scheme ?

Re: Nextcloud Hub 26 Spring: Built together, designed for the future

#77
post #67
post #65

Earlier quoted context omitted.

I host my entire homelab in my home and use tailscale to access it. You just connect your nextcloud instance to tailscale. Then you connect each client to tailscale. Works on iOS and android (and of course any desktop). When you're on you're home network (LAN), tailscale _should_ use the LAN IP for routing. And then when away, you'll route over derp servers usually. You could also use tailscale for auth, but i like t…

That works okay if you are the only user. I use quite a few Nextcloud features where access via tailscale is either inconvenient or impossible. My whole family uses the calendar on their phones and other devices, which means they would have to either learn about VPNs, or I would be the one managing all their devices for them. (Neither are likely to happen.) I also often share individual files or folders with external…

Cloudflare tunnel instead ?

Re: Nextcloud Hub 26 Spring: Built together, designed for the future

#78
post #51
post #12

I run Nextcloud at home with 1.5TB of files and 2 users, on a reasonably sized server. It is painfully slow. Still better than OneDrive, but only just: synscing takes forever, never reaching a fraction of available bandwidth. Upload from my phone is flaky, often hangs and needs manual intervention. It is a battery drain. The whole experience with add-ons and the general UI feels like a 2010 PHP app. I am grateful Nex…

Look into "next cloud HPB" (High performance backend) https://github.com/nextcloud/notify_push

You sure that's the right link ?

Re: Nextcloud Hub 26 Spring: Built together, designed for the future

#79
post #6

Upgraded yesterday, I only use a small amount of features (files, memories, calendar, tasks). It sucks that tasks isn't compatible yet (but I mostly use DAVx⁵/Tasks.org as front-end), and it sucks that the landing page still pulls close to 20MB or so, but besides that, nothing to report one way or another.

Is Memories working for you after the 34 update? I remember it took a long time for the community to update Memories to work with 33, and that experience has me holding off on updating to 34 with the hope that app updates come quickly.

Re: Nextcloud Hub 26 Spring: Built together, designed for the future

#80
post #51

Earlier quoted context omitted.

Look into "next cloud HPB" (High performance backend) https://github.com/nextcloud/notify_push

You sure that's the right link ?

Yup, you can read more about it from here (and follow the same link I posted earlier at the bottom of the page) https://nextcloud.com/blog/nextcloud-faster-than-ever-introd...
Post reply on HN