NC 18 With S3 as Primary Storage and Collabora usage

ddo · April 23, 2020, 3:36pm

Hi Community,

We would like to install a new instance of collabora 18 with an S3 bucket as primary storage.
We have already tested the deployment of an instance on our bucket and it works perfectly.

But two questions arise and we have not been able to find a really clear answer:

Can we safely activate the default encryption module with a S3 storage ?
Can we use Collabora in this situation ?

Thank you in advance for your answers

Paradox551 · April 23, 2020, 3:47pm

Test it and find out.

Most likely yes.

Reiner_Nippes · April 23, 2020, 6:05pm

@ddo start an ec2. ubuntu 18.04 ami.

but your aws credentials here:

github.com

ReinerNippes/nextcloud/blob/aa756c712ce4c5917c76166a6f027e53fae9af4d/inventory#L71


      
          
          # webserver type nginx or apache
          nextcloud_webserver_type    = nginx
          
          # php version
          php_version                 = '7.4'
          
          # optional php packages see: roles/php/var/main.yml
          php_install_optional_packages = false
          
          # Use S3 Bucket as primary storage
          objectstore_s3_key            = ''
          objectstore_s3_secret         = ''
          # objectstore_s3_bucket_name    = ''
          # objectstore_s3_hostname       = 's3.amazonaws.com'
          # objectstore_s3_port           = '443'
          # objectstore_s3_use_ssl        = 'true'
          # objectstore_s3_region         = 'us-east-1'
          # objectstore_s3_use_path_style = 'true'
          
          # Install turn server for Nextcloud Talk

set this to true:

github.com

ReinerNippes/nextcloud/blob/aa756c712ce4c5917c76166a6f027e53fae9af4d/inventory#L101


      
          # configure also rclone_remote in group_vars/all.yml
          # restic_repo         = "rclone:backup-selfhosted:selfhosted-{{ lookup('password', '{{ credential_store }}/restic_backup_s3_bucket_uid chars=ascii_lowercase,digits length=12') }}/backup"
          
          # crontab setings for the backup script - default daily at 3pm
          restic_backup_day    = '*'
          restic_backup_minute = '0'
          restic_backup_hour:  = '3'
          
          # Install Collabra Online
          # more info about collabora office: https://www.collaboraoffice.com/
          install_collabora     = false
          
          # Install Online Office
          # more info about onlyoffice office: https://www.onlyoffice.com
          install_onlyoffice    = false
          onlyoffice_ssl_port   = 8443
          
          # Install fulltextsearch
          install_fulltextsearch = false
          
          #

and test.

which one? nextcloud or aws s3 encryption? the later should be transparent.

ddo · April 24, 2020, 7:42am

Thank you for your answers.
An important clarification that I forgot: the bucket will be an S3 Ceph bucket and not an AWS Amazon bucket.
To answer your question @Reiner_Nippes we would like to activate the Nextcloud encryption module by default and not that of Amazon.

Reiner_Nippes · April 24, 2020, 8:09am

i think you just have to set the variables in line 74 to 79 as well. in the inventory. i only tested it with aws s3 since i don’t have anything else around. feedback welcome.

you can setup a test instance in one script:

#!/bin/bash

apt install curl sudo -y

curl -s https://raw.githubusercontent.com/ReinerNippes/nextcloud/nextcloud-reloaded/prepare_system.sh | DEBIAN_FRONTEND=noninteractive /bin/bash
HOME=/root ansible-pull --clean --force --checkout nextcloud-reloaded -d /root/nextcloud -U https://github.com/ReinerNippes/nextcloud.git nextcloud.yml \
-e "\
nextcloud_fqdn='$(curl ifconfig.me)' \
nextcloud_passwd=strenggeheim \
install_collabora=true \
nextcloud_archive=https://download.nextcloud.com/server/prereleases/nextcloud-19.0.0beta5.tar.bz2 \
"

just put all variables you want to change in the -e " " block. hope you get the point.

I use '$(curl ifconfig.me)' when i run this in a cloud maschine using cloud-init to provide a valid server_name for nginx and the selfsigned certificate. if you have a fqdn for your server just replace it.