Comment on Searching advice for selfhosting critical data

themachine@lemmy.world ⁨21⁩ ⁨hours⁩ ago

• hamsda@lemm.ee ⁨21⁩ ⁨hours⁩ ago

  Oh, it’s nice to hear somebody already did that, thank you!

  Did you have any hiccups or general problems with nextcloud or calendar/contacts/photos sync? Did you do any specific thing to harden security, other than using ufw, fail2ban and changing sshd config?

  source

  • themachine@lemmy.world ⁨21⁩ ⁨hours⁩ ago

    Haven’t had any issues whatsoever.

    I’ve done nothing special regarding security and have it exposed to the public internet. I intend on having fail2ban look at its logs but I’ve not yet set that up (entirely out of laziness).

    If you want to be very secure I would recommend having it entirely behind a VPN. I personally use tailscale+headscale for my internal only services but like I said I have Nextcloud publicly exposed as I want to be able to access it from potentially any device.

    source

    • hamsda@lemm.ee ⁨5⁩ ⁨hours⁩ ago

      I’ve done nothing special regarding security and have it exposed to the public internet. I intend on having fail2ban look at its logs but I’ve not yet set that up

      That sounds kinda dangerous. I remember years ago, when I rented my first vcloud-server, within the first 10 minutes I had bots trying to get in via SSH. I’d be way too paranoid.

      I would recommend having it entirely behind a VPN

      Yes, that’s my plan. I intend to create a new OpenVPN server on my pfSense with access only to the nextcloud VM. This would also allow me to share the vpn config files with my friends without a password, as the authentication is done by inline-cert vpn config.

      source

      • themachine@lemmy.world ⁨33⁩ ⁨minutes⁩ ago

        You’ll always have bots knocking on your doors. In general keep the doors locked and you are fine.

        I highly recommend trying tailscale with headscale over openvpn.

        source
  • MajesticElevator@lemmy.zip ⁨21⁩ ⁨hours⁩ ago

    Nextcloud does have a problem with the online editor. It frequently bugs out and moves things out of order or just doesn’t feel snappy.

    Some time ago there was also saving issues

    source

    • hamsda@lemm.ee ⁨21⁩ ⁨hours⁩ ago

      Are the documents you edit with the online editor files which are visible in the online drive? Does nextcloud use the open document specifications for saving documents (e.g. .odt, .ods)? Can you view these files without opening them in the editor (like the preview in google drive)?

      If so, that is acceptable. The document thing is more for completion, I don’t handle documents all too often. And if the online editor is bad or not working but the files are visible and offline-syncable in the drive to some desktop client and they are using the open document format, I can edit them with libreoffice.

      Thanks for the heads-up!

      source

      • themachine@lemmy.world ⁨21⁩ ⁨hours⁩ ago

        There is a somewhat native file editor in nextcloud but for your needs I would recommend setting up integration with either OnlyOffice or Collabora (LibreOffice). I am currently using OnlyOffice and while my utilization isn’t much or often it seems to do what it should without any fuss.

        source

        • -> View More Comments
      • MajesticElevator@lemmy.zip ⁨20⁩ ⁨hours⁩ ago

        • Are the documents you edit with the online editor files which are visible in the online drive?: Yes. It works like Google drive basically, and yea, I don’t use an external editor or something. I just create or upload a file to the cloud, and edit it there using the built in web editor (you just open the file and it opens the editor)

        • Does nextcloud use the open document specifications for saving documents (e.g. .odt, .ods)?: Yes. I believe they use a modified version of Collabora or something. By default, you use the same extensions you’d use with libre software like collabora or libreoffice. It supports opening documents from word, PowerPoint and excel… but often fucks up the formatting in some parts (much like libreoffice)

        • Can you view these files without opening them in the editor (like the preview in google drive)?: No. You view them only via the editor. It should respect permissions though, so if you share a file with read access only, they won’t be able to edit it in the editor.

        You can use any format you want in Nextcloud, it’s just that they might not be supported by their built in editors, but they’ll work fine.

        The reason I use the built in editors is that multiple people can work on a single file at the same time

        source

        • -> View More Comments