Posts made by Donahue

ok, I blew it away and created it again. It only took like 20-30 minutes this time.

I think so. I think one of my biggest problems is that I can generally intuitively understand stuff and can glean a lot. This usually allows me to understand things really quickly, but there are times when I jump the gun and it bites me. This is one of those times.

I can't generate a new one because the app to do that from CLI wont enable because of DB issues.

@black3dynamite said in file sharing in the 21st century:

@Donahue said in file sharing in the 21st century:

well, I managed to lock my self out of NC, playing around with 2fa. I am unsure how to proceed, and may resort to just starting over.

Already tried disabling 2fa plugin via CLI?

yes. Apparently I did a backup code, and I cannot disable that.

well, I managed to lock my self out of NC, playing around with 2fa. I am unsure how to proceed, and may resort to just starting over.

@JaredBusch said in file sharing in the 21st century:

@Donahue said in file sharing in the 21st century:

Is there a way to point devices on the LAN to the LAN address instead of the external address?

FFS, we just had this conversation in your other thread.

You use an internal based DNS name. for clients that are only ever in the office.

This prevernt you from having to add your public domain to your internal DNS.

Sorry, I see this as a slightly different thing. I do have external access now, and I would like users who may be out of the office to prefer internal when available. This is probably not a big deal though, no need to get your panties in a bunch

Is there a way to point devices on the LAN to the LAN address instead of the external address?

Also, what are people's must have NC apps?

@scottalanmiller said in file sharing in the 21st century:

@Donahue said in file sharing in the 21st century:

The third question is similar to the second. I would like NC to create a consistent folder structure when a new user is created or when some similar event is triggered. I plan on seeing if I can treat NC like a folder redirection of sorts.

This is interesting. Why do you want this, what's the use case? Since this would be purely for the user's personal files, not shared ones, what's the end goal?

I want to sync the desktop and documents folders with NC, and I want to have a place to store personal scans that come off our network scanners. This would save me the hassle of manually creating all these. My goal is to get everything worth keeping onto a central place so it can be backed up at the VM level, and I dont ever have to worry about end points. Right now we tell employees to never keep anything valuable on their own hard drives, but they still do, and I refuse to backup endpoints.

I want to start with a big thanks to @JaredBusch for his guides on NC and Nginx. Now that the basic NC instance is setup, I want to see what I can do with it to improve its functionality or make it's integration with our workflows a more seamless one. Hopefully you guys have some experience with some of these tweaks, or have questions yourself about going beyond the base install.

The first question I have is about authentication. I think I want to setup LDAP authentication to talk with my AD, but I would also like to setup 2fa, at least for web access. I am really worried that my users have terribly insecure passwords in AD and I don't want to put my files at risk because of this. This is our first "cloud accessible" service if you discount email, and I want to start out on the right foot. Does this plan sound like a good idea, or what would any of you change? Who is using 2fa now with NC, and what do you use for it?

The second questions is about automating folder creation with NC. I would like to be able to have NC automatically create certain folders for projects, based on sql triggers coming from a external sql database. Is this possible?

The third question is similar to the second. I would like NC to create a consistent folder structure when a new user is created or when some similar event is triggered. I plan on seeing if I can treat NC like a folder redirection of sorts.

I am going to take my time and plan out how we would utilize NC, because there is a lot of opportunity to improve things for us.

Now that I've got a working NC up, I need to figure out how I can automate it and do other cool things.

I prefer 10, but it's honestly due to little things that I like better.

@Donahue said in Nginx questions:

looks like the NC thing might be a bug with just iOS and using a reverse proxy
https://github.com/nextcloud/server/issues/11464

yep, the "old method" indeed did work.

looks like the NC thing might be a bug with just iOS and using a reverse proxy
https://github.com/nextcloud/server/issues/11464

@Donahue said in Nginx questions:

I've still got a few loose ends though. I want to set my cert to auto renew, but I dont know quite what to do on this step:

@JaredBusch said in Install Nginx as a Reverse Proxy on Fedora 27:

Don't forget to automate the cert renew
Create a cron job to run the renew everyday. Certbot will not actually do anything if it does not see any certs needing renew within 30 days. So you can run this as often as you want. Cerbot themselves recommends running it twice a day with this.
Use crontab -e to edit your crontab.

0 0,12 * * * python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew 

If I try and run crontab -e, it says:

[root@nginx ~]# crontab -e
-bash: crontab: command not found

Ok, I think I got the cron job thing all figured out. I had to install cronie. One question though, I just pasted that into my cron file, and then saved. Is that all I need to do?

could this be a DNS propagation issue? like wait and see?

@scottalanmiller said in Nginx questions:

@Donahue any chance you forget the https ?

nope

I am also getting the following error on NC on my iPhone

I've still got a few loose ends though. I want to set my cert to auto renew, but I dont know quite what to do on this step:

@JaredBusch said in Install Nginx as a Reverse Proxy on Fedora 27:

Don't forget to automate the cert renew
Create a cron job to run the renew everyday. Certbot will not actually do anything if it does not see any certs needing renew within 30 days. So you can run this as often as you want. Cerbot themselves recommends running it twice a day with this.
Use crontab -e to edit your crontab.

0 0,12 * * * python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew 

If I try and run crontab -e, it says:

[root@nginx ~]# crontab -e
-bash: crontab: command not found

Its working. My DNS updated and externally, its going to https. I am not sure why telnet was not working.