docker 部署 nextcloud

个人云存储，nextcloud 可能是最好的选择了，下面我讲述下我的部署历程。

## docker 运行 nextcloud php apache 版本

```
docker run --name next-cloud -p 6100:80 \
--network dockerNetwork --ip 172.27.4.10 \
--add-host mariadb:172.27.1.10 --add-host redis:172.27.1.20 \
-v /opt/data/soft/next-cloud/html:/var/www/html \
-v /opt/data/soft/next-cloud/custom_apps:/var/www/html/custom_apps \
-v /opt/data/soft/next-cloud/config:/var/www/html/config \
-v /opt/data/soft/next-cloud/data:/var/www/html/data \
-itd nextcloud:24.0.4
```

这里，我假设你已经有 redis  和 mariadb 了

## nginx 配置

```
server {
    listen 80;
    listen [::]:80;
    server_name cloud.kpromise.top;
    server_tokens off;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name cloud.kpromise.top;
    charset uft-8;
    location / {
        proxy_pass http://localhost:6100/;
        proxy_connect_timeout 60s;
        proxy_read_timeout 60s;
        proxy_send_timeout 60s;
        gzip off;
        proxy_redirect off;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header x-wiz-real-ip $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    ssl_certificate_key /root/.acme.sh/kpromise.top/kpromise.top.key;
    ssl_certificate /root/.acme.sh/kpromise.top/fullchain.cer;
    ssl_session_timeout 5m;
    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;    
    ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256::!MD5;    
    ssl_prefer_server_ciphers on;
}
```

## 后台任务使用 cron

在主机里，执行 `crontab -e` 然后输入：

```
*/5     *       *       *       *       /usr/bin/docker exec --user www-data next-cloud /usr/local/bin/php /var/www/html/cron.php
```

至此，nextcloud 搭建完毕，且性能 OK！

## because it violates the following Content Security Policy directive: "form-action 'self'"

里 /opt/data/soft/next-cloud/config/config.php 添加一行

```
'overwriteprotocol' => 'https'
```