Hallo,
ich bin neu hier, und habe nextcloud noch nicht intensiv genutzt. Leider hat das Plugin in FreeNAS 11.2-U3, das einen iocage jail (ähnlich docker) mit FreeBSD 11.2 STABLE installiert und dort eine Instanz mit nextcloud einrichtet.
Die Instanz war per DynDNS bis gestern noch von außen erreichbar. Heute wollte ich wegen Federation Sharing, das ich nicht hinbekomme, von selfsigned certificate auf Let’s Encrypt per acme.sh umstellen. Dazu benötige ich externen Zugriff. Um das zu testen rief ich die fqdn der nstanz auf. Diese ist aber nicht errweichbar. unter https://172.16.240.199 funktioniert aber der Zugriff. Ich kann aber auch keine Federated Server außerhalb des LANs anlegen …
Im nginx error.log findet sich folgende Zeile (obfusicated domain floogy.selfhost.eu):
2019/04/04 12:31:51 [error] 82465#102084: *1 access forbidden by rule, client: 172.16.240.4, server: floogy.selfhost.eu, request: "GET /data/.ocdata?t=1554373910768 HTTP/2.0", host: "172.16.240.199"
root@nextcloud:~ # egrep -v ‘;|^ *$’ /usr/local/etc/php-fpm.d/www.conf
[www]
user = www
group = www
listen = 127.0.0.1:9000
pm = dynamic
pm.max_children = 5
pm.start_servers = 2
pm.min_spare_servers = 1
pm.max_spare_servers = 3
clear_env = no
env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp
root@nextcloud:~ # egrep -v '^ #|^ $’ /usr/local/etc/nginx/conf.d/nextcloud.conf
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name floogy.selfhost.eu;
ssl_certificate /usr/local/etc/ssl/nginx/nextcloud.freenas.iocage.crt;
ssl_certificate_key /usr/local/etc/ssl/nginx/nextcloud.key;
add_header Strict-Transport-Security “max-age=15768000; includeSubDomains; preload;”;
root /usr/local/www/nextcloud/;
client_max_body_size 10G;
fastcgi_buffers 64 4K;
gzip off;
rewrite ^/caldav(.)$ /remote.php/caldav$1 redirect;
rewrite ^/carddav(.)$ /remote.php/carddav$1 redirect;
rewrite ^/webdav(.)$ /remote.php/webdav$1 redirect;
index index.php;
error_page 403 /core/templates/403.php;
error_page 404 /core/templates/404.php;
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
location ~ ^/(?:.htaccess|data|config|db_structure.xml|README){
deny all;
}
location / {
rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last;
rewrite ^/.well-known/carddav /remote.php/carddav/ redirect;
rewrite ^/.well-known/caldav /remote.php/caldav/ redirect;
rewrite ^(/core/doc/[^/]+/)$ $1/index.html;
try_files $uri $uri/ =404;
}
location ~ .php(?:$|/) {
fastcgi_split_path_info ^(.+.php)(/.+)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_pass unix:/var/run/nextcloud-php-fpm.sock;
fastcgi_intercept_errors on;
}
location ~ .(?:css|js)$ {
add_header Cache-Control “public, max-age=7200”;
add_header Strict-Transport-Security “max-age=15768000; includeSubDomains; preload;”;
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options “SAMEORIGIN”;
add_header X-XSS-Protection “1; mode=block”;
add_header X-Robots-Tag none;
access_log off;
}
location ~* .(?:jpg|jpeg|gif|bmp|ico|png|swf)$ {
access_log off;
}
}
root@nextcloud:~ # egrep -v ‘^ *#|^ *$’ /usr/local/www/nextcloud/config/config.php
<?php
$CONFIG = array (
‘apps_paths’ =>
array (
0 =>
array (
‘path’ => ‘/usr/local/www/nextcloud/apps’,
‘url’ => ‘/apps’,
‘writable’ => true,
),
1 =>
array (
‘path’ => ‘/usr/local/www/nextcloud/apps-pkg’,
‘url’ => ‘/apps-pkg’,
‘writable’ => true,
),
),
‘logfile’ => ‘/var/log/nextcloud/nextcloud.log’,
‘memcache.local’ => ‘\OC\Memcache\APCu’,
‘instanceid’ => ‘ocpgd7phg0fb’,
‘passwordsalt’ => ‘dhfkläHJGIOÜHeg’,
‘secret’ => ‘iüsEGIHJSeogf’,
‘trusted_domains’ =>
array (
0 => ‘172.16.240.199’,
1 => ‘172.16.240.26’,
2 => ‘floogy.selfhost.eu’,
3 => ‘localhost’,
4 => ‘172.16.240.4’,
5 => ‘172.16.240.3’,
6 => ‘172.16.240.16’,
7 => ‘floogy.selfhost.bz’,
),
‘datadirectory’ => ‘/usr/local/www/nextcloud/data’,
‘dbtype’ => ‘mysql’,
‘version’ => ‘15.0.5.3’,
‘overwrite.cli.url’ => ‘https://172.16.240.199’,
‘overwriteprotocol’ => ‘https’,
‘dbname’ => ‘nextcloud’,
‘dbhost’ => ‘localhost:/tmp/mysql.sock’,
‘dbport’ => ‘’,
‘dbtableprefix’ => ‘bla_’,
‘dbuser’ => ‘bla_nextcloud’,
‘dbpassword’ => ‘jsdägklhÄILDGHÄSdg’,
‘installed’ => true,
‘updater.secret’ => ‘$2y$10$<ilthiäö<jshegüiohsüdgihDGIg’,
‘maintenance’ => false,
‘theme’ => ‘’,
‘loglevel’ => 2,
);
root@nextcloud:~ #