CentOS7 搭建nextcloud私有云盤

一、環境說明

  • CentOS 7以上

  • SELinux關閉

  • 防火牆關閉

 

二、安裝Nginx

添加EPEL包的倉庫源
yum -y install epel-release
通過EPEL倉庫來安裝Nginx
yum -y install nginx

 

三、安裝PHP7和PHP7-FPM

卸載原有php

yum list installed | grep php

yum remove `yum list installed | grep php`

添加 PHP7-FPM webtatic 倉庫,並安裝PHP7以及功能相關的包

rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm

yum -y install php70w-fpm php70w-cli php70w-gd php70w-mcrypt php70w-mysql php70w-pear php70w-xml php70w-mbstring php70w-pdo php70w-json php70w-pecl-apcu php70w-pecl-apcu-devel

 

四、配置PHP-FPM

我們需要配置 php-fpm 與 Nginx 協同運行。php7-fpm 將使用 nginx 用戶來運行,並監聽 9000 端口。
使用 vim 編輯默認的 php7-fpm 配置文件。

vim /etc/php-fpm.d/www.conf

修改以下不連續的記錄點,修改用戶,指定端口,啓用環境變量。

#Line 8-10

user = nginx

group = nginx

#Line 22

listen = 127.0.0.1:9000

#Line 366-370

env[HOSTNAME] = $HOSTNAME

env[PATH] = /usr/local/bin:/usr/bin:/bin

env[TMP] = /tmp

env[TMPDIR] = /tmp

env[TEMP] = /tmp

保存文件並退出 vim 編輯器.

需要在 /var/lib/ 目錄下創建一個新的文件夾 session,並將其擁有者變更爲 nginx 用戶。最後啓動 php-fpm 和 Nginx,並且將它們設置爲隨開機啓動的服務。(不創建授權無法登錄)

mkdir -p /var/lib/php/session

chown nginx:nginx -R /var/lib/php/session/

 

sudo systemctl start php-fpm

sudo systemctl start nginx

 

sudo systemctl enable php-fpm

sudo systemctl enable nginx

 

五、安裝MariaDB

這裏使用 MariaDB 作爲 Nextcloud 的數據庫。可以直接使用 yum 命令從 CentOS 默認遠程倉庫中安裝 mariadb-server包。也可以安裝mysql都可以

yum -y install mariadb mariadb-server

 

systemctl start mariadb

systemctl enable mariadb

 

六、配置MariaDB

使用MySQL初始化指令初始化root用戶,默認密碼爲空。

mysql_secure_installation

 

#配置過程

Set root password? [Y/n] Y

New password:

Re-enter new password:

 

Remove anonymous users? [Y/n] Y

Disallow root login remotely? [Y/n] Y

Remove test database and access to it? [Y/n] Y

Reload privilege tables now? [Y/n] Y

先使用命令登錄MySQL

mysql -u root -p

輸入以下 mysql 查詢語句來創建新的數據庫和用戶。

create database nextcloud;

create user nextclouduser@localhost identified by 'nextclouduser@';

grant all privileges on nextcloud_db.* to nextclouduser@localhost identified by 'nextclouduser@';

flush privileges;

exit

 

七、安裝SSL證書

我們可以自己生成SSL證書,也可以申請專業的SSL證書。
自簽名的SSL證書在使用的時候會報錯,建議使用有資質的SSL證書。
安裝過程如下:
爲 SSL 文件創建新目錄:

mkdir -p /etc/nginx/cert/

可以使用OpenSSL自簽名證書,但是更推薦使用具有官方認證的SSL證書

openssl req -new -x509 -days 365 -nodes -out /etc/nginx/cert/cloud.example.com.crt -keyout /etc/nginx/cert/cloud.example.com.key

在該目錄下儲存申請過的SSL證書,並設置證書的權限:

chmod 700 /etc/nginx/cert

chmod 600 /etc/nginx/cert/*

 

八、下載和初步安裝 Nextcloud

找到正確的官方下載庫:https://download.nextcloud.com/server/releases/

先進入目錄,然後使用 wget 從官網下載最新的 Nextcloud 13。

cd /usr/local/src/

wget https://download.nextcloud.com/server/releases/nextcloud-13.0.2.zip

unzip nextcloud-13.0.2.zip

mv nextcloud /usr/share/nginx/html/

cd /usr/share/nginx/html/

cd nextcloud/

mkdir data

cd ..

mv nextcloud /usr/share/nginx/html/

chown nginx:nginx -R nextcloud/1

 

手動指定文件儲存位置

若想修改文件儲存的位置(比如你另外購買了一塊雲硬盤)
這時則需要編輯nextcloud的配置文件,修改datadirectory指向的文件夾。

vim /usr/share/nginx/html/nextcloud/config/config.sample.php

·         1

將'datadirectory' => '/usr/share/nginx/html/owncloud_data/'
修改爲'datadirectory' => '你的路徑'

 

九、配置Nginx轉發規則

我們需要在Nginx的配置文件下寫入有關nextcloud的轉發協議。
我們可以直接新建一個配置文件並寫入信息,當Nginx重新加載後就能使用配置文件了。

cd /etc/nginx/conf.d/

vim nextcloud.conf



upstream php-handler {

  server 127.0.0.1:9000;

  #server unix:/var/run/php5-fpm.sock;

}

server {

  listen 80;

  server_name localhost;

  # enforce https

  rewrite ^(.*)$ https://$host$1 permanent;

}

 

server {

  listen 443 ssl;

  server_name localhost;

 

  ssl_certificate /etc/nginx/cert/nextcloud.crt;

  ssl_certificate_key /etc/nginx/cert/nextcloud.key;

 

  # Add headers to serve security related headers

  # Before enabling Strict-Transport-Security headers please read into this

  # topic first.

  add_header Strict-Transport-Security "max-age=15768000;

  includeSubDomains; preload;";

  add_header X-Content-Type-Options nosniff;

  add_header X-Frame-Options "SAMEORIGIN";

  add_header X-XSS-Protection "1; mode=block";

  add_header X-Robots-Tag none;

  add_header X-Download-Options noopen;

  add_header X-Permitted-Cross-Domain-Policies none;

  # Path to the root of your installation

  root /usr/share/nginx/html/nextcloud/;

  location = /robots.txt {

    allow all;

    log_not_found off;

    access_log off;

  }

  # The following 2 rules are only needed for the user_webfinger app.

  # Uncomment it if you're planning to use this app.

  #rewrite ^/.well-known/host-meta /public.php?service=host-meta last;

  #rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json

  # last;

  location = /.well-known/carddav {

   return 301 $scheme://$host/remote.php/dav;

  }

  location = /.well-known/caldav {

   return 301 $scheme://$host/remote.php/dav;

  }

  # set max upload size

  client_max_body_size 10240M;

  fastcgi_buffers 64 4K;

  # Disable gzip to avoid the removal of the ETag header

  gzip off;

  # Uncomment if your server is build with the ngx_pagespeed module

  # This module is currently not supported.

  #pagespeed off;

  error_page 403 /core/templates/403.php;

  error_page 404 /core/templates/404.php;

  location / {

    rewrite ^ /index.php$uri;

  }

  location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {

    deny all;

  }

  location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {

    deny all;

  }

  location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\.php(?:$|/) {

    include fastcgi_params;

    fastcgi_split_path_info ^(.+\.php)(/.*)$;

    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

    fastcgi_param PATH_INFO $fastcgi_path_info;

    fastcgi_param HTTPS on;

    #Avoid sending the security headers twice

    fastcgi_param modHeadersAvailable true;

    fastcgi_param front_controller_active true;

    fastcgi_pass php-handler;

    fastcgi_intercept_errors on;

    fastcgi_request_buffering off;

  }

  location ~ ^/(?:updater|ocs-provider)(?:$|/) {

    try_files $uri/ =404;

    index index.php;

  }

  # Adding the cache control header for js and css files

  # Make sure it is BELOW the PHP block

  location ~* \.(?:css|js)$ {

    try_files $uri /index.php$uri$is_args$args;

    add_header Cache-Control "public, max-age=7200";

    # Add headers to serve security related headers (It is intended to

    # have those duplicated to the ones above)

    # Before enabling Strict-Transport-Security headers please read into

    # this topic first.

    add_header Strict-Transport-Security "max-age=15768000;

    includeSubDomains; preload;";

    add_header X-Content-Type-Options nosniff;

    add_header X-Frame-Options "SAMEORIGIN";

    add_header X-XSS-Protection "1; mode=block";

    add_header X-Robots-Tag none;

    add_header X-Download-Options noopen;

    add_header X-Permitted-Cross-Domain-Policies none;

    # Optional: Don't log access to assets

    access_log off;

  }

  location ~* \.(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$ {

    try_files $uri /index.php$uri$is_args$args;

    # Optional: Don't log access to other assets

    access_log off;

  }

}



註銷vim /etc/nginx/nginx.conf

image.png


重啓nginx

systemctl restart nginx

 

 

十、登錄

登錄輸入你自己的主機IP即可設置進入設置界面

image.png

前人栽樹後人乘涼,感謝那麼多的栽樹人


發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章