Comment on Getting started with NextCloud?
The_Zen_Cow_Says_Mu@infosec.pub 2 weeks ago
I run nextcloud in a podman pod because I’m coocoo bananas that way. It uses authentik as an SSO provider using the nextcloud OIDC plugin. And I use the linuxserver.io container rather than the official nextcloud one because gosh darn it , it actually works
[Pod] PodName=nextcloud PublishPort=10443:443 PublishPort=9980:9980
Nextcloud-db.container
Description=db Wants=network-online.target After=network-online.target [Service] Restart=always [Container] Pod=nextcloud.pod ContainerName=nextcloud-db Image=docker.io/library/mariadb:11 AutoUpdate=registry Volume=nextcloud-db.volume:/var/lib/mysql:Z Environment=MARIADB_HOST=nextcloud Environment=MARIADB_DATABASE=nextcloud Environment=MARIADB_USER=nextcloud Environment=MARIADB_PASSWORD=nextcloud Environment=MARIADB_ROOT_PASSWORD=nextcloud [Install] WantedBy=default.target
Nextcloud-app.container
[Unit] Description=Nextcloud Wants=network-online.target After=network-online.target [Service] Restart=always [Container] #Label=app=nextcloud ContainerName=nextcloud-app Pod=nextcloud.pod Image=lscr.io/linuxserver/nextcloud:latest AutoUpdate=registry Volume=nextcloud-config.volume:/config:Z #Volume=nextcloud-data.volume:/data:Z Volume=/home/nextcloud/:/data:Z Environment=TZ=America/New_York Environment=PUID=1000 Environment=PGID=1000 #PublishPort=10443:443 [Install] WantedBy=default.target
Nextcloud-office.container
[Unit] Description=Nextcloud-office Wants=network-online.target After=network-online.target [Service] Restart=always [Container] #Label=app=nextcloud ContainerName=nextcloud-office Pod=nextcloud.pod Image=docker.io/collabora/code:latest AutoUpdate=registry Environment=server_name=office.app.myserver.org Environment=aliasgroup1="https://nextcloud.app.myserver.org/" [Install] WantedBy=default.target
pmk@piefed.ca 2 weeks ago
Always nice to see podman used well! Do you have a dedicated user or is it rootful?
The_Zen_Cow_Says_Mu@infosec.pub 2 weeks ago
many of the linuxserver containers don’t work rootless. i didn’t have luck when i tried it as a user service
pmk@piefed.ca 2 weeks ago
Interesting, do you remember which didn’t work? I recently set up a simple service (navidrome) as rootless podman with an ansible script, but it was… there were some hoops to jump through, mainly with the uid/gid and machinectl to get it to work.
The_Zen_Cow_Says_Mu@infosec.pub 2 weeks ago
the only linuxserver containers I run are nextcloud and plex. both are running as rootful containers. I also tried their calibre-web container (no longer using it), which didn’t work as rootless, but worked fine as a rootful container.