mirror of
https://github.com/casjaysdevdocker/nextcloud
synced 2025-01-18 00:34:24 -05:00
🦈🏠🐜❗ Initial Commit ❗🐜🦈🏠
This commit is contained in:
casjay
commit
4954dce9b1
4
.dockerignore
Normal file
4
.dockerignore
Normal file
@ -0,0 +1,4 @@
|
||||
# Files to ignore
|
||||
.gitkeep
|
||||
.gitignore
|
||||
.node_modules/**
|
||||
93
.gitignore
vendored
Normal file
93
.gitignore
vendored
Normal file
@ -0,0 +1,93 @@
|
||||
# gitignore created on 10/04/22 at 21:47
|
||||
# Disable reminder in prompt
|
||||
ignoredirmessage
|
||||
|
||||
# OS generated files
|
||||
### Linux ###
|
||||
*~
|
||||
|
||||
# temporary files which can be created if a process still has a handle open of a deleted file
|
||||
.fuse_hidden*
|
||||
|
||||
# KDE directory preferences
|
||||
.directory
|
||||
|
||||
# Linux trash folder which might appear on any partition or disk
|
||||
.Trash-*
|
||||
|
||||
# .nfs files are created when an open file is removed but is still being accessed
|
||||
.nfs*
|
||||
|
||||
### macOS ###
|
||||
# General
|
||||
.DS_Store
|
||||
.AppleDouble
|
||||
.LSOverride
|
||||
|
||||
# Thumbnails
|
||||
._*
|
||||
|
||||
# Files that might appear in the root of a volume
|
||||
.DocumentRevisions-V100
|
||||
.fseventsd
|
||||
.Spotlight-V100
|
||||
.TemporaryItems
|
||||
.Trashes
|
||||
.VolumeIcon.icns
|
||||
.com.apple.timemachine.donotpresent
|
||||
|
||||
# Directories potentially created on remote AFP share
|
||||
.AppleDB
|
||||
.AppleDesktop
|
||||
Network Trash Folder
|
||||
Temporary Items
|
||||
.apdisk
|
||||
|
||||
### macOS Patch ###
|
||||
# iCloud generated files
|
||||
*.icloud
|
||||
|
||||
### Windows ###
|
||||
# Windows thumbnail cache files
|
||||
Thumbs.db
|
||||
Thumbs.db:encryptable
|
||||
ehthumbs.db
|
||||
ehthumbs_vista.db
|
||||
|
||||
# Dump file
|
||||
*.stackdump
|
||||
|
||||
# Folder config file
|
||||
[Dd]esktop.ini
|
||||
|
||||
# Recycle Bin used on file shares
|
||||
$RECYCLE.BIN/
|
||||
|
||||
# Windows Installer files
|
||||
*.cab
|
||||
*.msi
|
||||
*.msix
|
||||
*.msm
|
||||
*.msp
|
||||
|
||||
# Windows shortcuts
|
||||
*.lnk
|
||||
|
||||
# Other
|
||||
**/.installed
|
||||
|
||||
# ignore commit message
|
||||
**/.gitcommit
|
||||
|
||||
#ignore .failed
|
||||
**/.build_failed
|
||||
|
||||
# ignore .bak files
|
||||
**/*.bak
|
||||
|
||||
# ignore .no_push files
|
||||
**/.no_push
|
||||
|
||||
# ignore .no_git files
|
||||
**/.no_git
|
||||
|
||||
148
Dockerfile
Normal file
148
Dockerfile
Normal file
@ -0,0 +1,148 @@
|
||||
FROM casjaysdevdocker/alpine:latest as build
|
||||
|
||||
ARG LICENSE=WTFPL \
|
||||
IMAGE_NAME=nextcloud \
|
||||
TIMEZONE=America/New_York \
|
||||
PORT=8000 \
|
||||
NEXTCLOUD_VERSION=24.0.5 \
|
||||
ALPINE_VERSION=3.16 \
|
||||
SMBCLIENT_VERSION=1.0.6
|
||||
|
||||
ENV SHELL=/bin/bash \
|
||||
TERM=xterm-256color \
|
||||
HOSTNAME=${HOSTNAME:-casjaysdev-$IMAGE_NAME} \
|
||||
TZ=$TIMEZONE
|
||||
|
||||
RUN mkdir -p /bin/ /config/ /data/ && \
|
||||
rm -Rf /bin/.gitkeep /config/.gitkeep /data/.gitkeep && \
|
||||
apk update -U --no-cache \
|
||||
apk add --no-cache curl gnupg tar unzip xz \
|
||||
apk --update --no-cache add \
|
||||
s6 \
|
||||
bash \
|
||||
ca-certificates \
|
||||
curl \
|
||||
ffmpeg \
|
||||
imagemagick \
|
||||
ghostscript \
|
||||
libsmbclient \
|
||||
libxml2 \
|
||||
nginx \
|
||||
openssl \
|
||||
php8 \
|
||||
php8-bcmath \
|
||||
php8-bz2 \
|
||||
php8-cli \
|
||||
php8-ctype \
|
||||
php8-curl \
|
||||
php8-dom \
|
||||
php8-exif \
|
||||
php8-fileinfo \
|
||||
php8-fpm \
|
||||
php8-ftp \
|
||||
php8-gd \
|
||||
php8-gmp \
|
||||
php8-iconv \
|
||||
php8-intl \
|
||||
php8-json \
|
||||
php8-ldap \
|
||||
php8-mbstring \
|
||||
php8-opcache \
|
||||
php8-openssl \
|
||||
php8-pcntl \
|
||||
php8-pecl-apcu \
|
||||
php8-pecl-imagick \
|
||||
php8-pecl-mcrypt \
|
||||
php8-pecl-memcached \
|
||||
php8-pdo \
|
||||
php8-pdo_mysql \
|
||||
php8-pdo_pgsql \
|
||||
php8-pdo_sqlite \
|
||||
php8-posix \
|
||||
php8-redis \
|
||||
php8-session \
|
||||
php8-simplexml \
|
||||
php8-sqlite3 \
|
||||
php8-xml \
|
||||
php8-xmlreader \
|
||||
php8-xmlwriter \
|
||||
php8-zip \
|
||||
php8-zlib \
|
||||
python3 \
|
||||
py3-pip \
|
||||
tzdata && \
|
||||
apk --update --no-cache add -t build-dependencies \
|
||||
autoconf \
|
||||
automake \
|
||||
build-base \
|
||||
libtool \
|
||||
pcre-dev \
|
||||
php8-dev \
|
||||
php8-pear \
|
||||
samba-dev \
|
||||
tar \
|
||||
wget && \
|
||||
pip3 install --upgrade pip && \
|
||||
pip3 install nextcloud_news_updater && \
|
||||
mv /etc/php8 /etc/php && ln -s /etc/php /etc/php8 && \
|
||||
mv /etc/init.d/php-fpm8 /etc/init.d/php-fpm && ln -s /etc/init.d/php-fpm /etc/init.d/php-fpm8 && \
|
||||
mv /etc/logrotate.d/php-fpm8 /etc/logrotate.d/php-fpm && ln -s /etc/logrotate.d/php-fpm /etc/logrotate.d/php-fpm8 && \
|
||||
mv /var/log/php8 /var/log/php && ln -s /var/log/php /var/log/php8 && \
|
||||
ln -s /usr/sbin/php-fpm8 /usr/sbin/php-fpm && \
|
||||
cd /tmp && \
|
||||
wget -q https://pecl.php.net/get/smbclient-${SMBCLIENT_VERSION}.tgz && \
|
||||
pecl8 install smbclient-${SMBCLIENT_VERSION}.tgz && \
|
||||
apk del build-dependencies && \
|
||||
rm -rf /tmp/* /var/www/*
|
||||
|
||||
WORKDIR /tmp
|
||||
RUN curl -SsOL "https://download.nextcloud.com/server/releases/nextcloud-${NEXTCLOUD_VERSION}.tar.bz2" && \
|
||||
curl -SsOL "https://download.nextcloud.com/server/releases/nextcloud-${NEXTCLOUD_VERSION}.tar.bz2.asc" && \
|
||||
curl -SsOL "https://nextcloud.com/nextcloud.asc"
|
||||
|
||||
RUN gpg --import "nextcloud.asc" && \
|
||||
gpg --verify --batch --no-tty "nextcloud-${NEXTCLOUD_VERSION}.tar.bz2.asc" "nextcloud-${NEXTCLOUD_VERSION}.tar.bz2"
|
||||
|
||||
WORKDIR /dist/nextcloud
|
||||
RUN tar -xjf "/tmp/nextcloud-${NEXTCLOUD_VERSION}.tar.bz2" --strip 1 -C .
|
||||
|
||||
RUN addgroup -g ${PGID} nextcloud && adduser -D -h /home/nextcloud -u ${PUID} -G nextcloud -s /bin/sh nextcloud
|
||||
|
||||
RUN rm -rf /tmp/*
|
||||
|
||||
COPY ./bin/. /usr/local/bin/
|
||||
COPY ./config/. /config/
|
||||
COPY ./data/. /data/
|
||||
|
||||
FROM scratch
|
||||
ARG BUILD_DATE="$(date +'%Y-%m-%d %H:%M')"
|
||||
|
||||
LABEL org.label-schema.name="nextcloud" \
|
||||
org.label-schema.description="Containerized version of nextcloud" \
|
||||
org.label-schema.url="https://hub.docker.com/r/casjaysdevdocker/nextcloud" \
|
||||
org.label-schema.vcs-url="https://github.com/casjaysdevdocker/nextcloud" \
|
||||
org.label-schema.build-date=$BUILD_DATE \
|
||||
org.label-schema.version=$BUILD_DATE \
|
||||
org.label-schema.vcs-ref=$BUILD_DATE \
|
||||
org.label-schema.license="$LICENSE" \
|
||||
org.label-schema.vcs-type="Git" \
|
||||
org.label-schema.schema-version="latest" \
|
||||
org.label-schema.vendor="CasjaysDev" \
|
||||
maintainer="CasjaysDev <docker-admin@casjaysdev.com>"
|
||||
|
||||
ENV SHELL="/bin/bash" \
|
||||
TERM="xterm-256color" \
|
||||
HOSTNAME="casjaysdev-nextcloud" \
|
||||
TZ="${TZ:-America/New_York}"
|
||||
|
||||
WORKDIR /root
|
||||
|
||||
VOLUME ["/root","/config","/data"]
|
||||
|
||||
EXPOSE $PORT
|
||||
|
||||
COPY --from=build /. /
|
||||
|
||||
ENTRYPOINT [ "tini", "--" ]
|
||||
HEALTHCHECK CMD [ "/usr/local/bin/entrypoint-nextcloud.sh", "healthcheck" ]
|
||||
CMD [ "/usr/local/bin/entrypoint-nextcloud.sh" ]
|
||||
13
LICENSE.md
Normal file
13
LICENSE.md
Normal file
@ -0,0 +1,13 @@
|
||||
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
|
||||
Version 2, December 2004
|
||||
|
||||
Copyright (C) 2022 casjay <git-admin@casjaysdev.com>
|
||||
|
||||
Everyone is permitted to copy and distribute verbatim or modified
|
||||
copies of this license document, and changing it is allowed as long
|
||||
as the name is changed.
|
||||
|
||||
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
|
||||
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
||||
|
||||
1. You just DO WHAT THE FUCK YOU WANT TO.
|
||||
49
README.md
Normal file
49
README.md
Normal file
@ -0,0 +1,49 @@
|
||||
## 👋 Welcome to nextcloud 🚀
|
||||
|
||||
nextcloud README
|
||||
|
||||
|
||||
## Run container
|
||||
|
||||
```shell
|
||||
dockermgr update nextcloud
|
||||
```
|
||||
|
||||
### via command line
|
||||
|
||||
```shell
|
||||
docker pull casjaysdevdocker/nextcloud:latest && \
|
||||
docker run -d \
|
||||
--restart always \
|
||||
--name casjaysdevdocker-nextcloud \
|
||||
--hostname casjaysdev-nextcloud \
|
||||
-e TZ=${TIMEZONE:-America/New_York} \
|
||||
-v $HOME/.local/share/srv/docker/nextcloud/files/data:/data:z \
|
||||
-v $HOME/.local/share/srv/docker/nextcloud/files/config:/config:z \
|
||||
-p 80:80 \
|
||||
casjaysdevdocker/nextcloud:latest
|
||||
```
|
||||
|
||||
### via docker-compose
|
||||
|
||||
```yaml
|
||||
version: "2"
|
||||
services:
|
||||
nextcloud:
|
||||
image: casjaysdevdocker/nextcloud
|
||||
container_name: nextcloud
|
||||
environment:
|
||||
- TZ=America/New_York
|
||||
- HOSTNAME=casjaysdev-nextcloud
|
||||
volumes:
|
||||
- $HOME/.local/share/srv/docker/nextcloud/files/data:/data:z
|
||||
- $HOME/.local/share/srv/docker/nextcloud/files/config:/config:z
|
||||
ports:
|
||||
- 80:80
|
||||
restart: always
|
||||
```
|
||||
|
||||
## Authors
|
||||
|
||||
🤖 casjay: [Github](https://github.com/casjay) [Docker](https://hub.docker.com/r/casjay) 🤖
|
||||
⛵ CasjaysDevDocker: [Github](https://github.com/casjaysdevdocker) [Docker](https://hub.docker.com/r/casjaysdevdocker) ⛵
|
||||
0
bin/.gitkeep
Normal file
0
bin/.gitkeep
Normal file
131
bin/entrypoint-nextcloud.sh
Executable file
131
bin/entrypoint-nextcloud.sh
Executable file
@ -0,0 +1,131 @@
|
||||
#!/usr/bin/env bash
|
||||
# shellcheck shell=bash
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
##@Version : 202210042049-git
|
||||
# @@Author : Jason Hempstead
|
||||
# @@Contact : jason@casjaysdev.com
|
||||
# @@License : WTFPL
|
||||
# @@ReadME : entrypoint-nextcloud.sh --help
|
||||
# @@Copyright : Copyright: (c) 2022 Jason Hempstead, Casjays Developments
|
||||
# @@Created : Tuesday, Oct 04, 2022 20:49 EDT
|
||||
# @@File : entrypoint-nextcloud.sh
|
||||
# @@Description :
|
||||
# @@Changelog : New script
|
||||
# @@TODO : Better documentation
|
||||
# @@Other :
|
||||
# @@Resource :
|
||||
# @@Terminal App : no
|
||||
# @@sudo/root : no
|
||||
# @@Template : other/docker-entrypoint
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
APPNAME="$(basename "$0" 2>/dev/null)"
|
||||
VERSION="202210042049-git"
|
||||
HOME="${USER_HOME:-$HOME}"
|
||||
USER="${SUDO_USER:-$USER}"
|
||||
RUN_USER="${SUDO_USER:-$USER}"
|
||||
SCRIPT_SRC_DIR="${BASH_SOURCE%/*}"
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Set bash options
|
||||
[ "$1" == "--debug" ] && set -xo pipefail && export SCRIPT_OPTS="--debug" && export _DEBUG="on"
|
||||
[ "$1" == "--raw" ] && export SHOW_RAW="true"
|
||||
set -o pipefail
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Set functions
|
||||
__version() { echo -e ${GREEN:-}"$VERSION"${NC:-}; }
|
||||
__find() { ls -A "$*" 2>/dev/null; }
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# colorization
|
||||
[ -n "$SHOW_RAW" ] || printf_color() { echo -e '\t\t'${2:-}"${1:-}${NC}"; }
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
__exec_bash() {
|
||||
local cmd="${*:-/bin/bash}"
|
||||
local exitCode=0
|
||||
echo "Executing command: $cmd"
|
||||
$cmd || exitCode=10
|
||||
return ${exitCode:-$?}
|
||||
}
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Define default variables
|
||||
TZ="${TZ:-America/New_York}"
|
||||
HOSTNAME="${HOSTNAME:-casjaysdev-bin}"
|
||||
BIN_DIR="${BIN_DIR:-/usr/local/bin}"
|
||||
DATA_DIR="${DATA_DIR:-$(__find /data/ 2>/dev/null | grep '^' || false)}"
|
||||
CONFIG_DIR="${CONFIG_DIR:-$(__find /config/ 2>/dev/null | grep '^' || false)}"
|
||||
CONFIG_COPY="${CONFIG_COPY:-false}"
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Additional variables
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Export variables
|
||||
export TZ HOSTNAME
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# import variables from file
|
||||
[ -f "/root/env.sh" ] && . "/root/env.sh"
|
||||
[ -f "/config/.env.sh" ] && . "/config/.env.sh"
|
||||
[ -f "/root/env.sh" ] && [ ! -f "/config/.env.sh" ] && cp -Rf "/root/env.sh" "/config/.env.sh"
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Set timezone
|
||||
[ -n "${TZ}" ] && echo "${TZ}" >/etc/timezone
|
||||
[ -f "/usr/share/zoneinfo/${TZ}" ] && ln -sf "/usr/share/zoneinfo/${TZ}" "/etc/localtime"
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Set hostname
|
||||
if [ -n "${HOSTNAME}" ]; then
|
||||
echo "${HOSTNAME}" >/etc/hostname
|
||||
echo "127.0.0.1 ${HOSTNAME} localhost ${HOSTNAME}.local" >/etc/hosts
|
||||
fi
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Delete any gitkeep files
|
||||
[ -n "${CONFIG_DIR}" ] && { [ -d "${CONFIG_DIR}" ] && rm -Rf "${CONFIG_DIR}/.gitkeep" || mkdir -p "/config/"; }
|
||||
[ -n "${DATA_DIR}" ] && { [ -d "${DATA_DIR}" ] && rm -Rf "${DATA_DIR}/.gitkeep" || mkdir -p "/data/"; }
|
||||
[ -n "${BIN_DIR}" ] && { [ -d "${BIN_DIR}" ] && rm -Rf "${BIN_DIR}/.gitkeep" || mkdir -p "/bin/"; }
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Copy config files to /etc
|
||||
if [ -n "${CONFIG_DIR}" ] && [ "${CONFIG_COPY}" = "true" ]; then
|
||||
for config in ${CONFIG_DIR}; do
|
||||
if [ -d "/config/$config" ]; then
|
||||
[ -d "/etc/$config" ] || mkdir -p "/etc/$config"
|
||||
cp -Rf "/config/$config/." "/etc/$config/"
|
||||
elif [ -f "/config/$config" ]; then
|
||||
cp -Rf "/config/$config" "/etc/$config"
|
||||
fi
|
||||
done
|
||||
fi
|
||||
[ -f "/etc/.env.sh" ] && rm -Rf "/etc/.env.sh"
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Additional commands
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
case "$1" in
|
||||
--help) # Help message
|
||||
echo 'Docker container for '$APPNAME''
|
||||
echo "Usage: $APPNAME [healthcheck, bash, command]"
|
||||
echo "Failed command will have exit code 10"
|
||||
echo
|
||||
exitCode=$?
|
||||
;;
|
||||
|
||||
healthcheck) # Docker healthcheck
|
||||
/usr/local/bin/healthcheck
|
||||
exitCode=$?
|
||||
;;
|
||||
|
||||
*/bin/sh | */bin/bash | bash | shell | sh) # Launch shell
|
||||
shift 1
|
||||
__exec_bash "${@:-/bin/bash}"
|
||||
exitCode=$?
|
||||
;;
|
||||
|
||||
*) # Execute primary command
|
||||
if [ $# -eq 0 ]; then
|
||||
__exec_bash "/bin/bash"
|
||||
else
|
||||
__exec_bash "/bin/bash"
|
||||
fi
|
||||
exitCode=$?
|
||||
;;
|
||||
esac
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# end of entrypoint
|
||||
exit ${exitCode:-$?}
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
10
bin/healthcheck
Executable file
10
bin/healthcheck
Executable file
@ -0,0 +1,10 @@
|
||||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
if [ "$SIDECAR_NEWSUPDATER" = "1" ]; then
|
||||
pgrep -f "/usr/bin/nextcloud-news-updater -c /etc/news_updater.ini"
|
||||
elif [ "$SIDECAR_CRON" = "1" ] || [ "$SIDECAR_PREVIEWGEN" = "1" ]; then
|
||||
pgrep -f "busybox crond -f -L /dev/stdout"
|
||||
else
|
||||
curl --fail http://127.0.0.1:12345/ping || exit 1
|
||||
fi
|
||||
3
bin/occ
Executable file
3
bin/occ
Executable file
@ -0,0 +1,3 @@
|
||||
#!/bin/sh
|
||||
|
||||
yasu nextcloud:nextcloud php -f /var/www/occ "$@"
|
||||
0
config/.gitkeep
Normal file
0
config/.gitkeep
Normal file
5
config/cont-init.d/00-fix-logs.sh
Normal file
5
config/cont-init.d/00-fix-logs.sh
Normal file
@ -0,0 +1,5 @@
|
||||
#!/usr/bin/with-contenv sh
|
||||
# shellcheck shell=sh
|
||||
|
||||
# Fix access rights to stdout and stderr
|
||||
chown ${PUID}:${PGID} /proc/self/fd/1 /proc/self/fd/2 || true
|
||||
12
config/cont-init.d/01-fix-uidgid.sh
Normal file
12
config/cont-init.d/01-fix-uidgid.sh
Normal file
@ -0,0 +1,12 @@
|
||||
#!/usr/bin/with-contenv sh
|
||||
# shellcheck shell=sh
|
||||
|
||||
if [ -n "${PGID}" ] && [ "${PGID}" != "$(id -g nextcloud)" ]; then
|
||||
echo "Switching to PGID ${PGID}..."
|
||||
sed -i -e "s/^nextcloud:\([^:]*\):[0-9]*/nextcloud:\1:${PGID}/" /etc/group
|
||||
sed -i -e "s/^nextcloud:\([^:]*\):\([0-9]*\):[0-9]*/nextcloud:\1:\2:${PGID}/" /etc/passwd
|
||||
fi
|
||||
if [ -n "${PUID}" ] && [ "${PUID}" != "$(id -u nextcloud)" ]; then
|
||||
echo "Switching to PUID ${PUID}..."
|
||||
sed -i -e "s/^nextcloud:\([^:]*\):[0-9]*:\([0-9]*\)/nextcloud:\1:${PUID}:\2/" /etc/passwd
|
||||
fi
|
||||
17
config/cont-init.d/02-fix-perms.sh
Normal file
17
config/cont-init.d/02-fix-perms.sh
Normal file
@ -0,0 +1,17 @@
|
||||
#!/usr/bin/with-contenv sh
|
||||
# shellcheck shell=sh
|
||||
|
||||
echo "Fixing perms..."
|
||||
mkdir -p /data \
|
||||
/var/run/nginx \
|
||||
/var/run/php-fpm
|
||||
chown nextcloud. \
|
||||
/data
|
||||
chown -R nextcloud. \
|
||||
/home/nextcloud \
|
||||
/etc/tpls \
|
||||
/var/lib/nginx \
|
||||
/var/log/nginx \
|
||||
/var/log/php* \
|
||||
/var/run/nginx \
|
||||
/var/run/php-fpm
|
||||
175
config/cont-init.d/03-config.sh
Normal file
175
config/cont-init.d/03-config.sh
Normal file
@ -0,0 +1,175 @@
|
||||
#!/usr/bin/with-contenv bash
|
||||
# shellcheck shell=bash
|
||||
|
||||
runas_user() {
|
||||
yasu nextcloud:nextcloud "$@"
|
||||
}
|
||||
|
||||
# From https://github.com/docker-library/mariadb/blob/master/docker-entrypoint.sh#L21-L41
|
||||
# usage: file_env VAR [DEFAULT]
|
||||
# ie: file_env 'XYZ_DB_PASSWORD' 'example'
|
||||
# (will allow for "$XYZ_DB_PASSWORD_FILE" to fill in the value of
|
||||
# "$XYZ_DB_PASSWORD" from a file, especially for Docker's secrets feature)
|
||||
file_env() {
|
||||
local var="$1"
|
||||
local fileVar="${var}_FILE"
|
||||
local def="${2:-}"
|
||||
if [ "${!var:-}" ] && [ "${!fileVar:-}" ]; then
|
||||
echo >&2 "error: both $var and $fileVar are set (but are exclusive)"
|
||||
exit 1
|
||||
fi
|
||||
local val="$def"
|
||||
if [ "${!var:-}" ]; then
|
||||
val="${!var}"
|
||||
elif [ "${!fileVar:-}" ]; then
|
||||
val="$(<"${!fileVar}")"
|
||||
fi
|
||||
export "$var"="$val"
|
||||
unset "$fileVar"
|
||||
}
|
||||
|
||||
TZ=${TZ:-UTC}
|
||||
MEMORY_LIMIT=${MEMORY_LIMIT:-512M}
|
||||
UPLOAD_MAX_SIZE=${UPLOAD_MAX_SIZE:-512M}
|
||||
CLEAR_ENV=${CLEAR_ENV:-yes}
|
||||
OPCACHE_MEM_SIZE=${OPCACHE_MEM_SIZE:-128}
|
||||
LISTEN_IPV6=${LISTEN_IPV6:-true}
|
||||
APC_SHM_SIZE=${APC_SHM_SIZE:-128M}
|
||||
REAL_IP_FROM=${REAL_IP_FROM:-0.0.0.0/32}
|
||||
REAL_IP_HEADER=${REAL_IP_HEADER:-X-Forwarded-For}
|
||||
LOG_IP_VAR=${LOG_IP_VAR:-remote_addr}
|
||||
|
||||
HSTS_HEADER=${HSTS_HEADER:-max-age=15768000; includeSubDomains}
|
||||
XFRAME_OPTS_HEADER=${XFRAME_OPTS_HEADER:-SAMEORIGIN}
|
||||
RP_HEADER=${RP_HEADER:-strict-origin}
|
||||
|
||||
DB_TYPE=${DB_TYPE:-sqlite}
|
||||
DB_HOST=${DB_HOST:-db}
|
||||
DB_NAME=${DB_NAME:-nextcloud}
|
||||
DB_USER=${DB_USER:-nextcloud}
|
||||
|
||||
SIDECAR_CRON=${SIDECAR_CRON:-0}
|
||||
SIDECAR_NEWSUPDATER=${SIDECAR_NEWSUPDATER:-0}
|
||||
|
||||
# Timezone
|
||||
echo "Setting timezone to ${TZ}..."
|
||||
ln -snf /usr/share/zoneinfo/${TZ} /etc/localtime
|
||||
echo ${TZ} >/etc/timezone
|
||||
|
||||
# PHP-FPM
|
||||
echo "Setting PHP-FPM configuration..."
|
||||
sed -e "s/@MEMORY_LIMIT@/$MEMORY_LIMIT/g" \
|
||||
-e "s/@UPLOAD_MAX_SIZE@/$UPLOAD_MAX_SIZE/g" \
|
||||
-e "s/@CLEAR_ENV@/$CLEAR_ENV/g" \
|
||||
/etc/tpls/etc/php/php-fpm.d/www.conf >/etc/php/php-fpm.d/www.conf
|
||||
|
||||
# PHP
|
||||
echo "Setting PHP configuration..."
|
||||
sed -e "s/@APC_SHM_SIZE@/$APC_SHM_SIZE/g" \
|
||||
/etc/tpls/etc/php/conf.d/apcu.ini >/etc/php/conf.d/apcu.ini
|
||||
sed -e "s/@OPCACHE_MEM_SIZE@/$OPCACHE_MEM_SIZE/g" \
|
||||
/etc/tpls/etc/php/conf.d/opcache.ini >/etc/php/conf.d/opcache.ini
|
||||
sed -e "s/@MEMORY_LIMIT@/$MEMORY_LIMIT/g" \
|
||||
-e "s#@TIMEZONE@#$TZ#g" \
|
||||
/etc/tpls/etc/php/conf.d/override.ini >/etc/php/conf.d/override.ini
|
||||
|
||||
# Nginx
|
||||
echo "Setting Nginx configuration..."
|
||||
sed -e "s/@UPLOAD_MAX_SIZE@/$UPLOAD_MAX_SIZE/g" \
|
||||
-e "s#@REAL_IP_FROM@#$REAL_IP_FROM#g" \
|
||||
-e "s#@REAL_IP_HEADER@#$REAL_IP_HEADER#g" \
|
||||
-e "s#@LOG_IP_VAR@#$LOG_IP_VAR#g" \
|
||||
-e "s/@HSTS_HEADER@/$HSTS_HEADER/g" \
|
||||
-e "s/@XFRAME_OPTS_HEADER@/$XFRAME_OPTS_HEADER/g" \
|
||||
-e "s/@RP_HEADER@/$RP_HEADER/g" \
|
||||
-e "s#@SUBDIR@#$SUBDIR#g" \
|
||||
/etc/tpls/etc/nginx/nginx.conf >/etc/nginx/nginx.conf
|
||||
|
||||
if [ "$LISTEN_IPV6" != "true" ]; then
|
||||
sed -e '/listen \[::\]:/d' -i /etc/nginx/nginx.conf
|
||||
fi
|
||||
|
||||
# Init Nextcloud
|
||||
echo "Initializing Nextcloud files/folders..."
|
||||
mkdir -p /data/config /data/data /data/session /data/tmp /data/userapps
|
||||
if [ ! -d /data/themes ]; then
|
||||
if [ -d /var/www/themes ]; then
|
||||
mv -f /var/www/themes /data/
|
||||
chown -R nextcloud. /data/themes
|
||||
fi
|
||||
mkdir -p /data/themes
|
||||
elif [ -d /var/www/themes ]; then
|
||||
rm -rf /var/www/themes
|
||||
fi
|
||||
chown nextcloud. /data/config /data/data /data/session /data/tmp /data/userapps /data/themes
|
||||
ln -sf /data/config/config.php /var/www/config/config.php &>/dev/null
|
||||
ln -sf /data/themes /var/www/themes &>/dev/null
|
||||
ln -sf /data/userapps /var/www/userapps &>/dev/null
|
||||
|
||||
file_env 'DB_PASSWORD'
|
||||
if [ -z "$DB_PASSWORD" ]; then
|
||||
echo >&2 "ERROR: Either DB_PASSWORD or DB_PASSWORD_FILE must be defined"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Install Nextcloud if config not found
|
||||
if [ ! -f /data/config/config.php ]; then
|
||||
# https://docs.nextcloud.com/server/stable/admin_manual/configuration_server/automatic_configuration.html
|
||||
touch /tmp/first-install
|
||||
echo "Creating automatic configuration..."
|
||||
cat >/var/www/config/autoconfig.php <<EOL
|
||||
<?php
|
||||
\$AUTOCONFIG = array(
|
||||
'directory' => '/data/data',
|
||||
'dbtype' => '${DB_TYPE}',
|
||||
'dbname' => '${DB_NAME}',
|
||||
'dbuser' => '${DB_USER}',
|
||||
'dbpass' => '${DB_PASSWORD}',
|
||||
'dbhost' => '${DB_HOST}',
|
||||
'dbtableprefix' => '',
|
||||
);
|
||||
EOL
|
||||
runas_user cat >/data/config/config.php <<EOL
|
||||
<?php
|
||||
\$CONFIG = array(
|
||||
'datadirectory' => '/data/data',
|
||||
'tempdirectory' => '/data/tmp',
|
||||
'supportedDatabases' => array(
|
||||
'sqlite',
|
||||
'mysql',
|
||||
'pgsql'
|
||||
),
|
||||
'logtimezone' => '${TZ}',
|
||||
'logdateformat' => 'Y-m-d H:i:s',
|
||||
'memcache.local' => '\\\OC\\\Memcache\\\APCu',
|
||||
'apps_paths' => array(
|
||||
array(
|
||||
'path'=> '/var/www/apps',
|
||||
'url' => '/apps',
|
||||
'writable' => false,
|
||||
),
|
||||
array(
|
||||
'path'=> '/data/userapps',
|
||||
'url' => '/userapps',
|
||||
'writable' => true,
|
||||
),
|
||||
),
|
||||
'mail_smtpmode' => 'smtp'
|
||||
);
|
||||
EOL
|
||||
fi
|
||||
unset DB_USER
|
||||
unset DB_PASSWORD
|
||||
|
||||
# https://docs.nextcloud.com/server/stable/admin_manual/configuration_server/config_sample_php_parameters.html#proxy-configurations
|
||||
if [ -n "$SUBDIR" ]; then
|
||||
cat >/var/www/config/subdir.config.php <<EOL
|
||||
<?php
|
||||
\$CONFIG = array(
|
||||
'overwritewebroot' => '${SUBDIR}',
|
||||
);
|
||||
EOL
|
||||
fi
|
||||
|
||||
# config directory must be writable
|
||||
chown -R nextcloud. /var/www/config
|
||||
51
config/cont-init.d/04-svc-main.sh
Normal file
51
config/cont-init.d/04-svc-main.sh
Normal file
@ -0,0 +1,51 @@
|
||||
#!/usr/bin/with-contenv sh
|
||||
# shellcheck shell=sh
|
||||
|
||||
SIDECAR_CRON=${SIDECAR_CRON:-0}
|
||||
SIDECAR_PREVIEWGEN=${SIDECAR_PREVIEWGEN:-0}
|
||||
SIDECAR_NEWSUPDATER=${SIDECAR_NEWSUPDATER:-0}
|
||||
|
||||
if [ "$SIDECAR_CRON" = "1" ] || [ "$SIDECAR_PREVIEWGEN" = "1" ] || [ "$SIDECAR_NEWSUPDATER" = "1" ]; then
|
||||
exit 0
|
||||
fi
|
||||
|
||||
# Override several config values of Nextcloud
|
||||
echo "Bootstrapping configuration..."
|
||||
yasu nextcloud:nextcloud php -f /etc/tpls/bootstrap.php >/tmp/config.php
|
||||
yasu nextcloud:nextcloud cp /tmp/config.php /data/config/config.php
|
||||
yasu nextcloud:nextcloud sed -i -e "s#@TZ@#$TZ#g" /data/config/config.php
|
||||
|
||||
# Upgrade Nextcloud if installed
|
||||
if [ "$(occ status --no-ansi | grep 'installed: true')" != "" ]; then
|
||||
echo "Upgrading Nextcloud..."
|
||||
occ upgrade --no-ansi
|
||||
fi
|
||||
|
||||
# First install ?
|
||||
if [ -f /tmp/first-install ]; then
|
||||
echo "Installing Nextcloud ${NEXTCLOUD_VERSION}..."
|
||||
yasu nextcloud:nextcloud php /var/www/index.php &>/dev/null
|
||||
rm -f /tmp/first-install
|
||||
|
||||
echo ">>"
|
||||
echo ">> Open your browser to configure your admin account"
|
||||
echo ">>"
|
||||
fi
|
||||
|
||||
mkdir -p /etc/services.d/nginx
|
||||
cat >/etc/services.d/nginx/run <<EOL
|
||||
#!/usr/bin/execlineb -P
|
||||
with-contenv
|
||||
s6-setuidgid ${PUID}:${PGID}
|
||||
nginx -g "daemon off;"
|
||||
EOL
|
||||
chmod +x /etc/services.d/nginx/run
|
||||
|
||||
mkdir -p /etc/services.d/php-fpm
|
||||
cat >/etc/services.d/php-fpm/run <<EOL
|
||||
#!/usr/bin/execlineb -P
|
||||
with-contenv
|
||||
s6-setuidgid ${PUID}:${PGID}
|
||||
php-fpm -F
|
||||
EOL
|
||||
chmod +x /etc/services.d/php-fpm/run
|
||||
40
config/cont-init.d/05-svc-cron.sh
Normal file
40
config/cont-init.d/05-svc-cron.sh
Normal file
@ -0,0 +1,40 @@
|
||||
#!/usr/bin/with-contenv sh
|
||||
# shellcheck shell=sh
|
||||
|
||||
CRONTAB_PATH="/var/spool/cron/crontabs"
|
||||
SIDECAR_CRON=${SIDECAR_CRON:-0}
|
||||
|
||||
# Continue only if sidecar cron container
|
||||
if [ "$SIDECAR_CRON" != "1" ]; then
|
||||
exit 0
|
||||
fi
|
||||
|
||||
echo ">>"
|
||||
echo ">> Sidecar cron container detected for Nextcloud"
|
||||
echo ">>"
|
||||
|
||||
# Init
|
||||
rm -rf ${CRONTAB_PATH}
|
||||
mkdir -m 0644 -p ${CRONTAB_PATH}
|
||||
touch ${CRONTAB_PATH}/nextcloud
|
||||
|
||||
# Cron
|
||||
if [ -n "$CRON_PERIOD" ]; then
|
||||
echo "Creating Nextcloud cron task with the following period fields : $CRON_PERIOD"
|
||||
echo "${CRON_PERIOD} php -f /var/www/cron.php" >> ${CRONTAB_PATH}/nextcloud
|
||||
else
|
||||
echo "CRON_PERIOD env var empty..."
|
||||
fi
|
||||
|
||||
# Fix perms
|
||||
echo "Fixing crontabs permissions..."
|
||||
chmod -R 0644 ${CRONTAB_PATH}
|
||||
|
||||
# Create service
|
||||
mkdir -p /etc/services.d/cron
|
||||
cat > /etc/services.d/cron/run <<EOL
|
||||
#!/usr/bin/execlineb -P
|
||||
with-contenv
|
||||
exec busybox crond -f -L /dev/stdout
|
||||
EOL
|
||||
chmod +x /etc/services.d/cron/run
|
||||
40
config/cont-init.d/06-svc-previewgen.sh
Normal file
40
config/cont-init.d/06-svc-previewgen.sh
Normal file
@ -0,0 +1,40 @@
|
||||
#!/usr/bin/with-contenv sh
|
||||
# shellcheck shell=sh
|
||||
|
||||
CRONTAB_PATH="/var/spool/cron/crontabs"
|
||||
SIDECAR_PREVIEWGEN=${SIDECAR_PREVIEWGEN:-0}
|
||||
|
||||
# Continue only if previewgen container
|
||||
if [ "$SIDECAR_PREVIEWGEN" != "1" ]; then
|
||||
exit 0
|
||||
fi
|
||||
|
||||
echo ">>"
|
||||
echo ">> Sidecar previews generator container detected for Nextcloud"
|
||||
echo ">>"
|
||||
|
||||
# Init
|
||||
rm -rf ${CRONTAB_PATH}
|
||||
mkdir -m 0644 -p ${CRONTAB_PATH}
|
||||
touch ${CRONTAB_PATH}/nextcloud
|
||||
|
||||
# Cron
|
||||
if [ -n "$PREVIEWGEN_PERIOD" ]; then
|
||||
echo "Creating Previews Generator cron task with the following period fields : $PREVIEWGEN_PERIOD"
|
||||
echo "${PREVIEWGEN_PERIOD} php -f /var/www/occ preview:pre-generate" >> ${CRONTAB_PATH}/nextcloud
|
||||
else
|
||||
echo "PREVIEWGEN_PERIOD env var empty..."
|
||||
fi
|
||||
|
||||
# Fix perms
|
||||
echo "Fixing crontabs permissions..."
|
||||
chmod -R 0644 ${CRONTAB_PATH}
|
||||
|
||||
# Create service
|
||||
mkdir -p /etc/services.d/cron
|
||||
cat > /etc/services.d/cron/run <<EOL
|
||||
#!/usr/bin/execlineb -P
|
||||
with-contenv
|
||||
exec busybox crond -f -L /dev/stdout
|
||||
EOL
|
||||
chmod +x /etc/services.d/cron/run
|
||||
38
config/cont-init.d/07-svc-news-updater.sh
Normal file
38
config/cont-init.d/07-svc-news-updater.sh
Normal file
@ -0,0 +1,38 @@
|
||||
#!/usr/bin/with-contenv sh
|
||||
# shellcheck shell=sh
|
||||
|
||||
SIDECAR_NEWSUPDATER=${SIDECAR_NEWSUPDATER:-0}
|
||||
NC_NEWSUPDATER_THREADS=${NC_NEWSUPDATER_THREADS:-10}
|
||||
NC_NEWSUPDATER_TIMEOUT=${NC_NEWSUPDATER_TIMEOUT:-300}
|
||||
NC_NEWSUPDATER_INTERVAL=${NC_NEWSUPDATER_INTERVAL:-900}
|
||||
NC_NEWSUPDATER_LOGLEVEL=${NC_NEWSUPDATER_LOGLEVEL:-error}
|
||||
|
||||
# Continue only if sidecar news updater container
|
||||
if [ "$SIDECAR_NEWSUPDATER" != "1" ]; then
|
||||
exit 0
|
||||
fi
|
||||
|
||||
echo ">>"
|
||||
echo ">> Sidecar news updater container detected for Nextcloud"
|
||||
echo ">>"
|
||||
|
||||
# Nextcloud News Updater config file (https://github.com/nextcloud/news-updater#usage)
|
||||
cat > /etc/news_updater.ini <<EOL
|
||||
[updater]
|
||||
threads = ${NC_NEWSUPDATER_THREADS}
|
||||
timeout = ${NC_NEWSUPDATER_TIMEOUT}
|
||||
interval = ${NC_NEWSUPDATER_INTERVAL}
|
||||
loglevel = ${NC_NEWSUPDATER_LOGLEVEL}
|
||||
url = /var/www
|
||||
mode = endless
|
||||
EOL
|
||||
|
||||
# Create service
|
||||
mkdir -p /etc/services.d/news-updater
|
||||
cat > /etc/services.d/news-updater/run <<EOL
|
||||
#!/usr/bin/execlineb -P
|
||||
with-contenv
|
||||
s6-setuidgid ${PUID}:${PGID}
|
||||
/usr/bin/nextcloud-news-updater -c /etc/news_updater.ini
|
||||
EOL
|
||||
chmod +x /etc/services.d/news-updater/run
|
||||
1
config/php/conf.d/smbclient.ini
Normal file
1
config/php/conf.d/smbclient.ini
Normal file
@ -0,0 +1 @@
|
||||
extension=smbclient.so
|
||||
10
config/tpls/bootstrap.php
Normal file
10
config/tpls/bootstrap.php
Normal file
@ -0,0 +1,10 @@
|
||||
<?php
|
||||
|
||||
include '/data/config/config.php';
|
||||
|
||||
$CONFIG['logtimezone'] = '@TZ@';
|
||||
$CONFIG['logdateformat'] = 'Y-m-d H:i:s';
|
||||
|
||||
echo "<?php\n\n\$CONFIG = ";
|
||||
var_export($CONFIG);
|
||||
echo ";\n";
|
||||
182
config/tpls/etc/nginx/nginx.conf
Normal file
182
config/tpls/etc/nginx/nginx.conf
Normal file
@ -0,0 +1,182 @@
|
||||
pid /var/run/nginx/nginx.pid;
|
||||
worker_processes auto;
|
||||
error_log /proc/self/fd/2 info;
|
||||
|
||||
events {
|
||||
worker_connections 2048;
|
||||
use epoll;
|
||||
multi_accept on;
|
||||
}
|
||||
|
||||
http {
|
||||
include mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
aio threads;
|
||||
sendfile on;
|
||||
keepalive_timeout 15;
|
||||
keepalive_disable msie6;
|
||||
keepalive_requests 100;
|
||||
gzip off;
|
||||
|
||||
## Temp folders
|
||||
client_body_temp_path /tmp/nginx 1 2;
|
||||
proxy_temp_path /tmp/nginx-proxy;
|
||||
fastcgi_temp_path /tmp/nginx-fastcgi;
|
||||
uwsgi_temp_path /tmp/nginx-uwsgi;
|
||||
scgi_temp_path /tmp/nginx-scgi;
|
||||
|
||||
## Handling of IPs in proxied and load balancing situations
|
||||
set_real_ip_from @REAL_IP_FROM@;
|
||||
real_ip_header @REAL_IP_HEADER@;
|
||||
|
||||
# Log
|
||||
log_format main '$@LOG_IP_VAR@ - $remote_user [$time_local] '
|
||||
'"$request" $status $body_bytes_sent '
|
||||
'"$http_referer" "$http_user_agent"';
|
||||
access_log /proc/self/fd/1 main;
|
||||
|
||||
## TCP options
|
||||
tcp_nopush on;
|
||||
tcp_nodelay on;
|
||||
|
||||
## Hide the Nginx version number
|
||||
server_tokens off;
|
||||
|
||||
server {
|
||||
listen 127.0.0.1:12345;
|
||||
server_name _;
|
||||
|
||||
access_log off;
|
||||
error_log /dev/null;
|
||||
|
||||
location / {
|
||||
return 500;
|
||||
}
|
||||
|
||||
location ~ ^/(status|ping)$ {
|
||||
allow 127.0.0.1;
|
||||
deny all;
|
||||
fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
|
||||
fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
|
||||
include fastcgi_params;
|
||||
fastcgi_param SERVER_SOFTWARE "";
|
||||
}
|
||||
}
|
||||
|
||||
# https://docs.nextcloud.com/server/stable/admin_manual/installation/nginx.html
|
||||
server {
|
||||
listen 8000;
|
||||
listen [::]:8000;
|
||||
|
||||
root /var/www;
|
||||
index index.php index.html;
|
||||
|
||||
client_max_body_size @UPLOAD_MAX_SIZE@;
|
||||
client_body_buffer_size 128k;
|
||||
fastcgi_buffers 64 4K;
|
||||
large_client_header_buffers 4 16k;
|
||||
|
||||
# https://docs.nextcloud.com/server/stable/admin_manual/installation/harden_server.html
|
||||
add_header Strict-Transport-Security "@HSTS_HEADER@";
|
||||
add_header Referrer-Policy "@RP_HEADER@" always;
|
||||
add_header X-Content-Type-Options "nosniff" always;
|
||||
add_header X-Download-Options "noopen" always;
|
||||
add_header X-Frame-Options "@XFRAME_OPTS_HEADER@" always;
|
||||
add_header X-Permitted-Cross-Domain-Policies "none" always;
|
||||
add_header X-Robots-Tag "none" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
|
||||
# Remove X-Powered-By, which is an information leak
|
||||
fastcgi_hide_header X-Powered-By;
|
||||
|
||||
# Enable gzip but do not remove ETag headers
|
||||
gzip on;
|
||||
gzip_vary on;
|
||||
gzip_comp_level 4;
|
||||
gzip_min_length 256;
|
||||
gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
|
||||
gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
|
||||
|
||||
# Handle Microsoft DAV clients
|
||||
location = / {
|
||||
if ( $http_user_agent ~ ^DavClnt ) {
|
||||
return 302 @SUBDIR@/remote.php/webdav/$is_args$args;
|
||||
}
|
||||
}
|
||||
|
||||
location = /robots.txt {
|
||||
allow all;
|
||||
log_not_found off;
|
||||
access_log off;
|
||||
}
|
||||
|
||||
location ^~ /.well-known {
|
||||
location = /.well-known/carddav {
|
||||
return 301 @SUBDIR@/remote.php/dav/;
|
||||
}
|
||||
location = /.well-known/caldav {
|
||||
return 301 @SUBDIR@/remote.php/dav/;
|
||||
}
|
||||
location /.well-known/acme-challenge {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
location /.well-known/pki-validation {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
return 301 @SUBDIR@/index.php$request_uri;
|
||||
}
|
||||
|
||||
location / {
|
||||
rewrite ^ /index.php;
|
||||
}
|
||||
|
||||
location ~ ^\/(?:build|tests|config|lib|3rdparty|templates|data)\/ {
|
||||
deny all;
|
||||
}
|
||||
|
||||
location ~ ^\/(?:\.|autotest|occ|issue|indie|db_|console) {
|
||||
deny all;
|
||||
}
|
||||
|
||||
location ~ ^\/(?:index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|oc[ms]-provider\/.+|.+\/richdocumentscode\/proxy)\.php(?:$|\/) {
|
||||
fastcgi_split_path_info ^(.+?\.php)(\/.*|)$;
|
||||
set $path_info $fastcgi_path_info;
|
||||
try_files $fastcgi_script_name =404;
|
||||
include fastcgi_params;
|
||||
fastcgi_param SERVER_SOFTWARE "";
|
||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||
fastcgi_param PATH_INFO $path_info;
|
||||
fastcgi_param modHeadersAvailable true;
|
||||
fastcgi_param front_controller_active true;
|
||||
fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
|
||||
fastcgi_intercept_errors on;
|
||||
fastcgi_request_buffering off;
|
||||
fastcgi_read_timeout 1200;
|
||||
}
|
||||
|
||||
location ~ ^\/(?:updater|oc[ms]-provider)(?:$|\/) {
|
||||
try_files $uri/ =404;
|
||||
index index.php;
|
||||
}
|
||||
|
||||
location ~ \.(?:css|js|woff2?|svg|gif|map)$ {
|
||||
try_files $uri /index.php$request_uri;
|
||||
add_header Cache-Control "public, max-age=15778463";
|
||||
add_header Strict-Transport-Security "@HSTS_HEADER@";
|
||||
add_header Referrer-Policy "@RP_HEADER@" always;
|
||||
add_header X-Content-Type-Options "nosniff" always;
|
||||
add_header X-Download-Options "noopen" always;
|
||||
add_header X-Frame-Options "@XFRAME_OPTS_HEADER@" always;
|
||||
add_header X-Permitted-Cross-Domain-Policies "none" always;
|
||||
add_header X-Robots-Tag "none" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
access_log off;
|
||||
}
|
||||
|
||||
location ~ \.(?:png|html|ttf|ico|jpg|jpeg|bcmap|mp4|webm)$ {
|
||||
try_files $uri /index.php$uri$is_args$args;
|
||||
access_log off;
|
||||
}
|
||||
}
|
||||
}
|
||||
5
config/tpls/etc/php/conf.d/apcu.ini
Normal file
5
config/tpls/etc/php/conf.d/apcu.ini
Normal file
@ -0,0 +1,5 @@
|
||||
extension=apcu.so
|
||||
apc.enabled=1
|
||||
apc.enable_cli=1
|
||||
apc.shm_size=@APC_SHM_SIZE@
|
||||
apc.ttl=7200
|
||||
7
config/tpls/etc/php/conf.d/opcache.ini
Normal file
7
config/tpls/etc/php/conf.d/opcache.ini
Normal file
@ -0,0 +1,7 @@
|
||||
opcache.enable=1
|
||||
opcache.enable_cli=1
|
||||
opcache.interned_strings_buffer=32
|
||||
opcache.max_accelerated_files=10000
|
||||
opcache.memory_consumption=@OPCACHE_MEM_SIZE@
|
||||
opcache.save_comments=1
|
||||
opcache.revalidate_freq=1
|
||||
2
config/tpls/etc/php/conf.d/override.ini
Normal file
2
config/tpls/etc/php/conf.d/override.ini
Normal file
@ -0,0 +1,2 @@
|
||||
memory_limit=@MEMORY_LIMIT@
|
||||
date.timezone=@TIMEZONE@
|
||||
30
config/tpls/etc/php/php-fpm.d/www.conf
Normal file
30
config/tpls/etc/php/php-fpm.d/www.conf
Normal file
@ -0,0 +1,30 @@
|
||||
[global]
|
||||
pid = /var/run/php-fpm/php-fpm.pid
|
||||
daemonize = no
|
||||
error_log = /proc/self/fd/2
|
||||
|
||||
[www]
|
||||
listen = /var/run/php-fpm/php-fpm.sock
|
||||
access.log = /dev/null
|
||||
|
||||
pm = dynamic
|
||||
pm.max_children = 15
|
||||
pm.start_servers = 2
|
||||
pm.min_spare_servers = 1
|
||||
pm.max_spare_servers = 6
|
||||
request_terminate_timeout = 0
|
||||
clear_env = @CLEAR_ENV@
|
||||
|
||||
ping.path = /ping
|
||||
ping.response = pong
|
||||
|
||||
env[PATH] = /usr/local/bin:/usr/bin:/bin
|
||||
|
||||
php_admin_value[always_populate_raw_post_data] = -1
|
||||
php_admin_value[post_max_size] = @UPLOAD_MAX_SIZE@
|
||||
php_admin_value[upload_max_filesize] = @UPLOAD_MAX_SIZE@
|
||||
php_admin_value[max_execution_time] = 10800
|
||||
php_admin_value[max_input_time] = 3600
|
||||
php_admin_value[expose_php] = Off
|
||||
php_admin_value[memory_limit] = @MEMORY_LIMIT@
|
||||
php_admin_value[session.save_path] = /data/session
|
||||
0
data/.gitkeep
Normal file
0
data/.gitkeep
Normal file
Loading…
x
Reference in New Issue
Block a user