Install NextCloud 11 on Fedora 25 with SaltStack

FATeknollogee

@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

I needed to add "salt.domain.com" to /etc/hostname

Firewalld is still blocking access, did I somehow miss that setting?

When I "systemctl stop firewalld" I am able to connect

Those settings are in the salt confi files.

OK, port 443 is already open (per config file)?

You copied the files instead of using Salt, though, right?

Yes I copied the 3 files.
Was that not the right way?

scottalanmiller

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

I needed to add "salt.domain.com" to /etc/hostname

Firewalld is still blocking access, did I somehow miss that setting?

When I "systemctl stop firewalld" I am able to connect

Those settings are in the salt confi files.

OK, port 443 is already open (per config file)?

You copied the files instead of using Salt, though, right?

Yes I copied the 3 files.
Was that not the right way?

This is the part that would have opened the firewall. Are you getting any errors when running the Salt state apply?

FedoraServer:
  firewalld.present:
    - name: FedoraServer
    - block_icmp:
      - echo-reply
      - echo-request
    - default: False
    - masquerade: True
    - ports:
      - 443/tcp

FATeknollogee

@scottalanmiller No errors, the install completes fine.

I'm doing this install on NC v12.0.3 (not 11.0.2)

scottalanmiller

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller No errors, the install completes fine.

I'm doing this install on v12.0.3

And if you check iptables -L it doesn't show Port 443 as being open?

FATeknollogee

@scottalanmiller Let me check, brb

FATeknollogee

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller No errors, the install completes fine.

I'm doing this install on NC v12.0.3 (not 11.0.2)

o/s if Fedora 26

scottalanmiller

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller No errors, the install completes fine.

I'm doing this install on NC v12.0.3 (not 11.0.2)

o/s if Fedora 26

That should be fine.

FATeknollogee

@scottalanmiller

Reid Cooper

Yeah, port 443 is definitely missing.

FATeknollogee

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

Yeah, port 443 is definitely missing.

Question is why?
The conf file "says" to open up 443?

Reid Cooper

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

Yeah, port 443 is definitely missing.

Question is why?
The conf file "says" to open up 443?

Don't know. But you can always open it manually.

FATeknollogee

@reid-cooper I know it can be done manually, but, it would be nice to find out if I messed something up!

FATeknollogee

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

stacksofplates

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

FATeknollogee

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

How do I do that?
Remember, this was a "copy/paste" operation of @scottalanmiller files.
"FedoraServer" is the zone used in the original files.

Reid Cooper

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

That is for CentOS. Default on Fedora is not public.

Reid Cooper

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

This is on Fedora, you said?

FATeknollogee

@reid-cooper Yes, this is on Fedora

FATeknollogee

Why is firewalld not using the "FedoraServer" zone as specified in the salt config ?

stacksofplates

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

That is for CentOS. Default on Fedora is not public.

On the server default is public. On the workstation it's FedoraWorkstation.

These are default and haven't been modified: