Securing ownCloud
-
How do I go about securing ownCloud? What are the steps?
-
You start by hardening your web server. For Apache you could start at Techmint
Make sure you have a valid SSL certificate. The software from Letsencrypt will even automate the process on most systems, and it's free.
Move the file storage as @JaredBusch describes in this thread. That same thread is a good resource if you have problems with selinux (leave it turned on!)
Finally, turn on encryption in the settings page of your owncloud install.
-
If you're using MySQL or MongoDB, then you should secure that as well. Digital Ocean has a decent guide for MongoDB/MySQL.
-
@travisdh1 said in Securing ownCloud:
If you're using MySQL or MongoDB, then you should secure that as well. Digital Ocean has a decent guide for MongoDB/MySQL.
Do you mean MariaDB? MongoDB is a very different toolset and I don't think that ownCloud can use it. MariaDB is its standard database.
-
@alex.olynyk said in Securing ownCloud:
How do I go about securing ownCloud? What are the steps?
Well, the first thing you have to do is define WTF that statement means.
Then once you know what you are actually trying to do, you can begin to secure things.
-
@scottalanmiller said in Securing ownCloud:
@travisdh1 said in Securing ownCloud:
If you're using MySQL or MongoDB, then you should secure that as well. Digital Ocean has a decent guide for MongoDB/MySQL.
Do you mean MariaDB? MongoDB is a very different toolset and I don't think that ownCloud can use it. MariaDB is its standard database.
Yep, I was thinking MariaDB and MongoDB is what the fingers typed. Doh!
-
I like SusanDB better, personally (sorry, couldn't help it!).
