Install NextCloud 11 on Fedora 25 with SaltStack

Reid Cooper

Yeah, port 443 is definitely missing.

FATeknollogee

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

Yeah, port 443 is definitely missing.

Question is why?
The conf file "says" to open up 443?

Reid Cooper

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

Yeah, port 443 is definitely missing.

Question is why?
The conf file "says" to open up 443?

Don't know. But you can always open it manually.

FATeknollogee

@reid-cooper I know it can be done manually, but, it would be nice to find out if I messed something up!

FATeknollogee

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

stacksofplates

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

FATeknollogee

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

How do I do that?
Remember, this was a "copy/paste" operation of @scottalanmiller files.
"FedoraServer" is the zone used in the original files.

Reid Cooper

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

That is for CentOS. Default on Fedora is not public.

Reid Cooper

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

This is on Fedora, you said?

FATeknollogee

@reid-cooper Yes, this is on Fedora

FATeknollogee

Why is firewalld not using the "FedoraServer" zone as specified in the salt config ?

stacksofplates

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

That is for CentOS. Default on Fedora is not public.

On the server default is public. On the workstation it's FedoraWorkstation.

These are default and haven't been modified:

stacksofplates

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

That is for CentOS. Default on Fedora is not public.

On the server default is public. On the workstation it's FedoraWorkstation.

These are default and haven't been modified:

I'm building one from the ISO to check. 99% of my stuff is built with virt-builder so it is possible they changed the default zone in the image. The normal cloud image doesn't have firewalld installed so I can't check on my OpenStack images.

stacksofplates

So looks like ISO has it as FedoraServer, some other images (like virt-builder) are public. It would be best to get the default zone and use that when you set the services. I have no idea how to do that with Salt. Here's how you would with Ansible in case anyone cares:

  tasks:
    - name: get default zone
      shell: "firewall-cmd --get-default-zone"
      register: zone
    
    - name: set firewall services
      firewalld:
        service: https
        permanent: true
        state: enabled
        zone: "{{ zone.stdout }}"

FATeknollogee

The default zone on my Fedora server install is "public"

stacksofplates

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone on my Fedora server install is "public"

Where did you install from?

FATeknollogee

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone on my Fedora server install is "public"

Where did you install from?

Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso

stacksofplates

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone on my Fedora server install is "public"

Where did you install from?

Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso

Ah ok. So the net install uses public. The ISO with defaults sets it to FedoraServer.

FATeknollogee

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

..The ISO with defaults sets it to FedoraServer.

Which ISO is that, this one? https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-dvd-x86_64-26-1.5.iso

Reid Cooper

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone on my Fedora server install is "public"

Where did you install from?

Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso

Ah ok. So the net install uses public. The ISO with defaults sets it to FedoraServer.

That's an odd difference for them to have introduced.