giteaadmin
/
HomeLabDocs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
HomeLabDocs/nextcloud-aio.md

4.0 KiB
Raw Blame History

🧰 Container Overview and Internal Ports

Container Role Internal Ports Notes
nextcloud-aio-nextcloud Main web application 9000 Responds to Apache proxy
nextcloud-aio-apache Internal reverse proxy 80, 11000, 8000 Proxies all incoming requests
nextcloud-aio-database PostgreSQL 17.5 5432 Secured with password, stored in env
nextcloud-aio-redis Redis caching 6379 Password-protected
nextcloud-aio-collabora WOPI doc editor 9980 Connected via richdocuments app
nextcloud-aio-whiteboard Real-time whiteboard 3002 Enabled
nextcloud-aio-imaginary Image processor 9005, internal only Speeds up thumbnails/previews
nextcloud-aio-notify-push WebSocket push server 7867 (internal) Push for mobile and browser
nextcloud-aio-mastercontainer Orchestrator 8080, 80, 8443, 9876 Admin UI and internal mgmt
cloudflared Tunnel client N/A Provides secure remote access

🧠 Useful OCC Commands for Admins

# List installed apps
docker exec -u www-data nextcloud-aio-nextcloud php occ app:list

# Enable maintenance mode
docker exec -u www-data nextcloud-aio-nextcloud php occ maintenance:mode --on

# Disable maintenance mode
docker exec -u www-data nextcloud-aio-nextcloud php occ maintenance:mode --off

# Check system status
docker exec -u www-data nextcloud-aio-nextcloud php occ status

# Clear all file cache entries
docker exec -u www-data nextcloud-aio-nextcloud php occ files:cleanup

# Update Nextcloud (should be done via AIO normally)
docker exec -u www-data nextcloud-aio-nextcloud php occ upgrade

🔧 Apache Proxy Configuration (internal)

Apache container proxies internal ports:

Proxy Route Target
/ → 127.0.0.1:9000 Nextcloud app
/loleaflet, /hosting/discovery, etc. → 127.0.0.1:9980 Collabora
WebSocket and push → notify-push container
Optional: rewrite rules enabled for overwritehost/protocol logic

📡 Collabora Integration Details

  • Container: nextcloud-aio-collabora
  • Hostname: nextcloud-aio-collabora
  • Secrets Used:
    • COLLABORA_ENABLED=yes
    • COLLABORA_HOST=nextcloud-aio-collabora
    • ONLYOFFICE_SECRET, SIGNALING_SECRET present but unused unless OnlyOffice/Talk is enabled
  • SSL Termination: Handled upstream (SSL disabled in Collabora)
  • Font sync: Uses remote fonts config JSON:
    • https://drive.whatsolutions.us/apps/richdocuments/settings/fonts.json

📋 Additional AIO Environment Variables (Internal Use)

Variable Purpose
THIS_IS_AIO=true Confirms this is a full AIO setup
REMOVE_DISABLED_APPS=yes Prunes unused built-in apps
IMAGINARY_SECRET Secures internal image requests
WHITEBOARD_SECRET Secures whiteboard sessions
STARTUP_APPS=deck ... First-time auto-install apps
FULLTEXTSEARCH_* Present, but currently unused
AIO_URL=192.168.1.50:8080 Admin Panel endpoint
PHP_UPLOAD_LIMIT, PHP_MEMORY_LIMIT, etc. Performance tuning
ADDITIONAL_APKS=imagemagick Installed at build time
ADDITIONAL_PHP_EXTENSIONS=imagick Enabled at runtime

🧪 Debugging Tips

  • Restart a specific container: 
    docker restart nextcloud-aio-nextcloud
  • Get container logs: 
    docker logs nextcloud-aio-nextcloud --tail 50
  • Check AIO health: 
    docker exec -it nextcloud-aio-mastercontainer /healthcheck.sh

✅ Additional Recommendations

Area Suggestion
DNS Use short TTL for CF-hosted subdomains
Backups Regularly copy /mnt/nc_data, PostgreSQL dump volume, and /mnt/docker-aio-config
Monitoring Run Uptime Kuma or add healthchecks for cron and ZFS snapshot
Updates Always use AIO Admin UI or docker restart nextcloud-aio-mastercontainer after docker pull