I was about to report back that mine worked and send you my Nginx settings, lol.

@black3dynamite said in NextCloud Update Issues:

Another SELinux issue?

Would not be likely as SELinux issues would not be intermittent.

@scottalanmiller said in How can I check what Nextcloud user is active:

That's a lot of updates over the years!

And now upgrading to 20.0.7. Still the original installed CentOS 7 base system.
7f04cf59-bc1b-400a-bbb8-d2bb33ddb0de-image.png

Is there anything new with updating the script? 🙂

@WindowsGuy said in Install Nextcloud 13.0.0 on Fedora 27:

The Apache vhost file location is no longer available. Do you have another location where I can find it or steps to configure it manually?

here:

wget https://raw.githubusercontent.com/sorvani/scripts/master/Nextcloud/nextcloud.conf

@chiefplato said in Nextcloud OPCache warning:

Hello,

I run Nextcloud 13.01 on nginx and Centos 7 and was able to get the opcache warnings removed by adding the following to my /etc/php.d/opcache.ini file (below) then restarting php-fpm

opcache.enable_cli=1
opcache.max_accelerated_files=10000
opcache.save_comments=1
opcache.revalidate_freq=1

Awesome, thanks.

Do you have some sort of intrusion detection service running right now? (Wazuh, OSSIM, or one of the paid for solutions?) If you do, between that and the ClamAV, you should be as well protected as you could possibly by.

Edit: I should specify to never skimp on user training! KnowB4 is a great tool.

@dbeato no, I don't think so. It's not happening after a "move to a different server". Files were not moved manually, they were done by the client. I reindexed (occ) in case it helped, but no difference.

@black3dynamite Not windows, Ubuntu 17.10.

The team are great with their constant development of Nextcloud.

@dashrender said in Do not let your Nextcloud 12 instance upgrade to PHP 7.2:

@black3dynamite said in Do not let your Nextcloud 12 instance upgrade to PHP 7.2:

@dashrender said in Do not let your Nextcloud 12 instance upgrade to PHP 7.2:

Is there a reason that people aren't upgrading to version 13?

Nextcloud 13 is still beta3. I'm not comfortable with using beta for production use.

aww.. that totally makes sense!

Also this PHP issue has been around for 3 months with zero action by Nextcloud.

@travisdh1 said in Securing NextCloud:

@zachary715 said in Securing NextCloud:

@travisdh1 said in Securing NextCloud:

I forgot before: You can also login to the admin interface and looking at the settings page. It'll give you a list of performance and security optimizations with links to instructions on how to make the changes.

Yeah that's where this all started. It only states that I need to...

Modify/enable the HSTS header to at least 15552000 seconds PHP OPcache not properly configured and to make changes to the php.ini.

From that though, I got to the hardening and security guide and started to go even deeper down the rabbit hole.

I know you're doing this to learn, so this probably isn't needed at the moment. @scottalanmiller's guide to installing NextCloud with Salt has all the settings correct already according to that settings page.

Nice. Good going @scottalanmiller.

Pinging @jospoortvliet

@black3dynamite said in Installing NextCloud Sync Client on Deepin Linux 15.4.1:

@dbeato said in Installing NextCloud Sync Client on Deepin Linux 15.4.1:

@jackcpickup said in Installing NextCloud Sync Client on Deepin Linux 15.4.1:

NextCloud client is available in the Deepin Store now.

Yep!
0_1520448979618_DeepinScreenshot_select-area_20180307135611.png

The latest version is 2.3.3

Yeah, the packages are outdated, I usually update through command line. The underlying system is debain so in the end I can use packages from Debian.

@stuartjordan said in NextCloud Introduces a Ransomware Protection App:

That is Great to hear, they are constantly developing on the project.

They really are. It's very busy.

@dashrender said in UK To Fine Some Service Agencies if Found with Inadequate Security:

@irj said in UK To Fine Some Service Agencies if Found with Inadequate Security:

@scottalanmiller said in UK To Fine Some Service Agencies if Found with Inadequate Security:

@irj said in UK To Fine Some Service Agencies if Found with Inadequate Security:

Most of the time it is just cheaper to pay the fine rather than practice good security. I recently read about a health organization that had a million records compromised. They were fined $3.5 million, so about $3.50 a record. Alot of companies figure it is better to just take the chance and even if you do get hacked it is still cost less than having a good security program.

That's often the case. Same thing with credit cards. Cheaper to pay for bad transactions than to pay for better security in the cards.

Yeah. These companies get rewarded for not having security. Just because you have terrible security, doesnt mean you will get breached either. How many are flying under the radar that we don't know about?

No the bigger question is, how many have been breached that they aren't aware of it, and the effects are low enough that it's not tripping any alarms?

Any good breach will be that way - no one knows except that data is out there, somewhere.

@travisdh1 said in NextCloud: Insuffienct Storage:

Which base OS is being used? Debian/Ubuntu or RedHat/CentOS/Fedora? Log files will be different between the two that I'd want to look at. Either way probably looking for the apache/httpd log.

Fedora -

@stacksofplates said in Permission error attempting to update ownCloud to Nextcloud:

What's crazy to me is they haven't built SELinux operations into their update scripts.

Yes. And upgrade completed. Such a simple thing to check and tell people.