Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Nextcloud Hub 21

nextcloud.com

Post reply on HN
Print view View original

81–90 of 153 posts

Re: Nextcloud Hub 21

#81

Post by gog »

remram wrote: post #73
l72 wrote: post #14

I really wish there was an LTS release that was supported for at least 2 years (just bugfixes, no new features). I self host my own instance, and I really just want to set it and forget it. I don't mind doing low risk patches every few months or weeks, but I don't want to do a major version upgrade every 4-6 months. I did my last major version upgrade only 15 months ago, and I am now 4 major versions behind, which me…

They also raise PHP version requirements. To keep my NextCloud on supported version, I had to update the Linux distribution on my server (was not EOL or anything) to get a PHP that supported versions of NextCloud support... I just wanted to keep getting bug/security fixes for NextCloud.

If you are running Debian or Ubuntu use https://deb.sury.org/ for PHP.

Re: Nextcloud Hub 21

#82

Post by Aachen »

Does that mean it's now reliable when putting it in a public-facing place? An orga that shall not be named used nextcloud for various important things and had it connected to the Internet, which for modern open source software is usually okay. But then a friend found that you can take the whole system down from a 56k modem (pre-auth) and it had to be recommended the Orga keep it internal, which was an issue because they iirc also used it for file sharing with externals.

As far as I know it's very rare that someone bothers with exploiting denial of service bugs, but given how trivial (triggerable by hand) this was, it's still a bit risky.

The bug was of course reported to them but closed as wontfix dontcare because there were too many other ways of taking it down already. Php was blamed iirc (which really isn't the culprit).

Re: Nextcloud Hub 21

#83

Post by StavrosK »

francis-io wrote: post #11

I trialed setting up my own nextcloud instance a while back. It's still very complex to get working in docker. From memory, the card/caldav traefik rewrites are still not working. SSL was complex to setup with Collabora, and still required manual GUI steps to link into Nextcloud (my biggest pet peeve). I also remember getting the initial setup wrong a few times in the initial setup wizard, which required me to delete…

Hmm, my Docker-Compose file is much less complicated:

https://www.pastery.net/zykzva/

Though I do have a 4-line Caddy config and a Postgres server on the host.

Re: Nextcloud Hub 21

#84

Post by tcit »

l72 wrote: post #14

I really wish there was an LTS release that was supported for at least 2 years (just bugfixes, no new features). I self host my own instance, and I really just want to set it and forget it. I don't mind doing low risk patches every few months or weeks, but I don't want to do a major version upgrade every 4-6 months. I did my last major version upgrade only 15 months ago, and I am now 4 major versions behind, which me…

They can offer that with a subscription.

Re: Nextcloud Hub 21

#85

Post by 40four »

l72 wrote: post #14

I really wish there was an LTS release that was supported for at least 2 years (just bugfixes, no new features). I self host my own instance, and I really just want to set it and forget it. I don't mind doing low risk patches every few months or weeks, but I don't want to do a major version upgrade every 4-6 months. I did my last major version upgrade only 15 months ago, and I am now 4 major versions behind, which me…

This has spawned a huge thread that I honestly didn't read all of, but someone else mentioned to me they use the 'Community' Snap package.

I did not set mine up with this, but it apparently requires a lot less hands on maintenance. In your case you might be interested.

https://docs.nextcloud.com/server/21/admin_manual/installati...

https://snapcraft.io/nextcloud

Apparently it auto-updates for you, but I'm not sure if it will upgrade major versions, or only security patches.

Re: Nextcloud Hub 21

#86

Post by kentonv »

adkadskhj wrote: post #74
jerf wrote: post #43

Earlier quoted context omitted.

"It's way simpler but you'd only get a yesterday's copy in case of problem." I have a restic backup running on that plan instead of rsync, which means I get true backups. The nice thing about that it is that this can be integrated into any "docker compose" pipeline that you like. I'm generally not as hot on Docker as a lot of people but it does do a nice job of containing household services into a text file that can…

Wasn't Sandstorm a bit incompatible with Docker? Notably it didn't just containerize apps, it communicated over a custom protocol to fully isolate and limit their permissions. Eg network/disk access was tightly controlled. Though perhaps there was a shim layer? Eg over normal containers, it shimmed network/disk from the container over the Sandstorm RPC buffer? Really cool tech regardless, but it had a big tech mainte…

The old blog post on this: https://sandstorm.io/news/2014-08-19-why-not-run-docker-apps

Re: Nextcloud Hub 21

#87

Post by 40four »

Aachen wrote: post #82

Does that mean it's now reliable when putting it in a public-facing place? An orga that shall not be named used nextcloud for various important things and had it connected to the Internet, which for modern open source software is usually okay. But then a friend found that you can take the whole system down from a 56k modem (pre-auth) and it had to be recommended the Orga keep it internal, which was an issue because t…

I'm really not sure why you are asking this question? Nextcloud is used by thousands of enterprise level & small private users on public facing servers.

Can you be more clear about what you mean by "a friend found that you can take that whole system down from a 56k modem"?

I have no idea what you mean by that. You mention denial of service. Are you claiming a Nextcloud instance can be DoS'ed by a single computer with a 56k internet connection?

Respectfully, that is quite a sensational claim/ stance to take.

Re: Nextcloud Hub 21

#88

Post by achempion »

The project is great and I made simple setup in docker to play around with it. There is official docker image you can use https://hub.docker.com/_/nextcloud.

The problem I see with similar services is they all trying to pack everything. You can also install external components into your system.

What it means in practice is huge area for security vulnerabilities, challenge to host/upgrade it at home on weekends and very complex user interface (easy to mess up with privacy settings).

I really scared to host such systems because of all related issues. Maybe it isn't big deal at all.

Probably, most of home use cases can be resolved by simple XMPP server (video calls, group chat, image/links sharing) plus some shared folder across the network to store some files/photos.

Re: Nextcloud Hub 21

#89

Post by ev1 »

achempion wrote: post #88

The project is great and I made simple setup in docker to play around with it. There is official docker image you can use https://hub.docker.com/_/nextcloud . The problem I see with similar services is they all trying to pack everything. You can also install external components into your system. What it means in practice is huge area for security vulnerabilities, challenge to host/upgrade it at home on weekends and v…

I haven't used Nextcloud before, do you happen to know if there's an easy way to just want the file sharing?

I don't care for whiteboards or collaboration, I just want a Dropbox equivalent where I can upload files and give other people public or one-time or expiring links to download/wget.

Re: Nextcloud Hub 21

#90

Post by phant0mas »

contravariant wrote: post #26
znpy wrote: post #16

Earlier quoted context omitted.

> 1) I upgrade from 17->18->19->20->21 and hope nothing breaks! I did a similar path (started from 18 iirc) and nothing broke. But there's a catch, because I have some safeguards in place: 1. Nextcloud has its own dataset in a ZFS zpool. I take snapshots hourly, and I took a snapshot just before upgrading 2. I run nextcloud and its own postgreql via docker-compose. the docker-compose file along with the configuration…

I don't disagree but as a hobbyist I don't really want system administration problems. Well and I was mostly interested in Nextcloud as a possible alternative to Dropbox/Google drive with versioning and, I hoped, backups. However the only proper backup solution that I could confidently state would allow me to recover should disaster strike was the one you just explained e.g. putting everything in docker and snapshott…

Have you thought about using something like https://www.hetzner.com/storage/storage-share

Pretty cheap, it takes away the administration burden and you are the one in control :)

Post reply on HN