Difference between revisions of "User:Pineadmin/OpenMediaVault"

From PINE64
Jump to navigation Jump to search
m (Fxc moved page OpenMediaVault to User:Pineadmin/OpenMediaVault: stub and outdated)
 
(26 intermediate revisions by 2 users not shown)
Line 1: Line 1:
'''<span style="color:#FF0000">If you are dealing with confidential files transfer/sharing, please make sure your setup is secured with long and hard to guess random password or PKI keys. Make sure you use DUMMY folders/files for testing first to get yourself familiar and comfortable with the settings.</span>'''
Please go through the [http://files.syabas.com/popcornhour/download/PopcornHourTransformerNAS_UserManual-20180122.pdf OpenMediaVault Basic Setup and all following chapters about OpenMediaVault] before proceed to the more advance setup below.


== Dynamic DNS ==
[YOU CAN SKIP THIS IF YOU ARE USING STATIC IP ON YOUR INTERNET WAN OR YOU ALREADY KNOW HOW TO SETUP DYNAMIC DNS ON YOUR INTERNET MODEM/ROUTER]


== Basic Setup ==
1. SSH to the device


<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
2. # apt-get install ddclient  (no-ip.com example)
1. If no output on HDMI, you need to find the IP Address with tools (e.g. [https://www.softperfect.com/products/networkscanner/ netscan]) (hostname: ROCK64, PINE64, PINE64SO)
* Dynamic DNS service provider: other
* Dynamic DNS server: dynupdate.no-ip.com
* Dynamic DNS update protocol: dyndns2
* Username for dynamic DNS service: <<<USERNAME/EMAIL>>>
* Password for dynamic DNS service: <<<PASSWORD>>>
* Re-enter password to verify: <<<PASSWORD>>>
* Network interface used for dynamic DNS service: web
* DynDNS fully qualified domain names: <<<CNAME>>>.ddns.net
* Run ddclient on PPP connect? No
* Run ddclient as daemon? Yes
* Interval between ddclient runs: 300


2. Use the IP Address on PC browser to login to the Web Admin Pages: admin / openmediavault (Remember to change the default password: System -> General Settings -> Web Administrator Password)
# dpkg-reconfigure ddclient (To Re-run configuration wizard above)


3. You may want to use Static IP for easy access in future: System -> Network -> Interfaces -> Edit or Add(Ethernet)
3. # nano /etc/ddclient.conf
</pre>


Change: use=if, if=web
To:    use=web, web=checkip.dyndns.com, web-skip='Current IP Address'


== Shared Folders ==
##########
protocol=dyndns2
use=web, web=checkip.dyndns.com, web-skip='Current IP Address'
server=dynupdate.no-ip.com
login=<<<USERNAME/EMAIL>>>
password='<<<PASSWORD>>>'
<<<CNAME>>>.ddns.net
##########


<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
After edit, press [CTRL+x]  => press [y]  => press [Enter] to exit
1. Plug Hard Drive


2. Go to Storage -> Physical Disks -> Scan
4. # systemctl restart ddclient  (Restart ddclient after changed in configuration)


3. Go to Storage -> File Systems -> select the Partition to mount -> Mount -> Apply
5. Diagnostics:


4. Access Right Management -> User -> Add (Make sure it is under "users" Group)
# ddclient -daemon=0 -debug -verbose -noquiet
# systemctl status ddclient


5. Access Right Management -> Shared Folders -> Add
== NextCloud ==
    - select newly added Shared Folder -> Privileges -> tick Read/Write -> Save -> Apply
Reference: https://forum.openmediavault.org/index.php/Thread/17738-NextCloud-Installation/
                                      -> ACL (for ext3/ext4 filesystem) -> tick Read/Write -> Save -> Close
</pre>


1. SSH to the device


== FTP ==
# apt-get update
# apt-get upgrade
* Configuring openmediavault  =>  Press [Tab]  =>  Press [Enter] on Ok
# apt-get install php5-curl php5-gd


<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
2. Create the Shared Folders for all your Nginx's web pages
1. Go through the "[[#Basic_Setup|Basic Setup]]" and "[[#Shared Folders|Shared Folders]]" above
*  Name: www
*  Path: www/
*  Click on the ACL
** User/Groups permissions: Tick Read/Write for both www-data user and group
** Set Owner / Group to Read/Write/Execute and Others to None


2. Services -> FTP -> Settings -> Enable -> Save -> Apply
3. Create the sub shared folder for your NextCloud web pages
                  -> Shares -> Add -> Apply
* Name: nextcloud
* Path: www/nextcloud
* Click on the ACL
** User/Groups permissions: Tick Read/Write for both www-data user and group
** Set Owner / Group to Read/Write/Execute and Others to None


If you constantly hit by "Permission denied", then you may consider a less secure solution: Services -> FTP -> Settings -> Permit root login (enable)
4. Go to System  => Plugins  => Tick openmediavault-nginx  => Install
This may happen when your hard drive is using FAT/FAT32 file system where permission cannot be set and after reboot, the default read only permission is used
</pre>


5. Services  =>  Nginx  =>  Settings  =>  Enable  =>  Save  =>  Apply


== SAMBA (Windows Share) ==
6. Services  =>  Nginx  =>  Pools  =>  Add
* Name: pool_nextcloud
* User: www-data
* Group: www-data
* Extra options: <<<Copy Texts In Between ########## Below>>>


<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
##########
1. Go through the "[[#Basic_Setup|Basic Setup]]" and "[[#Shared Folders|Shared Folders]]" above
clear_env = no
env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp
##########


2. Services -> SMB/CIFS -> Settings -> Enable -> Save -> Apply
* Save => Apply
                        -> Shares -> Add -> Apply
</pre>


7. Services  =>  Nginx  =>  Servers  =>  Add
* General
** Directory: nextcloud
* SSL
** Enable SSL: Enable
** Port: 91
** Certificate: <<<Select Created SSL Certificate>>>
* System  =>  Certificates  =>  SSL  =>  Add  =>  Create (Set longer "Period of validity" if you do not want to renew the certificate too frequently)  =>  Save  =>  Apply
** Only use SSL: Enable
* PHP
** Enable PHP: Enable
** PHP-FPM Pool: pool_nextcloud
* Extra options: <<<Copy Texts In Between ########## Below>>>


== NFS ==
##########
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
location = /robots.txt {
log_not_found off;
allow all;
access_log off;
}
# The following 2 rules are only needed for the user_webfinger app.
# Uncomment it if you're planning to use this app.
#rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
#rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json
# last;
location = /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location = /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
# set max upload size
client_max_body_size 50G;
fastcgi_buffers 64 4K;
# Disable gzip to avoid the removal of the ETag header
gzip off;
# Uncomment if your server is build with the ngx_pagespeed module
# This module is currently not supported.
#pagespeed off;
error_page 403 /core/templates/403.php;
error_page 404 /core/templates/404.php;
location / {
rewrite ^ /index.php$uri;
}
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
deny all;
}
location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {
deny all;
}
location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\.php(?:$|/) {
fastcgi_split_path_info ^(.+\.php)(/.*)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param HTTPS on;
#Avoid sending the security headers twice
fastcgi_param modHeadersAvailable true;
fastcgi_param front_controller_active true;
fastcgi_pass $socket;
fastcgi_intercept_errors on;
}
location ~ ^/(?:updater|ocs-provider)(?:$|/) {
try_files $uri/ =404;
index index.php;
}
# Adding the cache control header for js and css files
# Make sure it is BELOW the PHP block
location ~* \.(?:css|js|woff|svg|gif)$ {
try_files $uri /index.php$uri$is_args$args;
add_header Cache-Control "public, max-age=7200";
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
# Optional: Don't log access to assets
access_log off;
}
location ~* \.(?:png|html|ttf|ico|jpg|jpeg)$ {
try_files $uri /index.php$uri$is_args$args;
# Optional: Don't log access to other assets
access_log off;
}
##########


<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
8. Go to System  => Plugins  => Tick openmediavault-mysql  => Install
1. Go through the "[[#Basic_Setup|Basic Setup]]" and "[[#Shared Folders|Shared Folders]]" above


2. Services -> NFS -> Settings -> Enable -> Save -> Apply
9. Services => MySQL  => Enable => Save => Apply => Reset Password
                  -> Shares -> Add -> Apply


To access from Kodi/XBMC, use "insecure" instead of "secure" on "Extra options"
10. Go to https://nextcloud.com/  =>  Download  =>  Get Nextcloud Server  =>  Download  =>  Web Installer (Bottom Tab)  => Download setup-nextcloud.php to your PC
</pre>


11. Use FTP/SAMBA/etc to transfer setup-nextcloud.php to www/nextcloud/


== Rsync Clone/Backup ==
12. Go to https://<<<DEVICE_IP>>>:91/setup-nextcloud.php
* Please add exception for the self-signed certificate if your browser prompt you to do so
* Next
* Dependency check: Enter a single "."  =>  Next
* Wait until: 504 Gateway Time-out


<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
13. Go to https://<<<DEVICE_IP>>>:91/ (Retry again if you get 404)
You required 2 devices (e.g. 2 ROCK64, PINE64, SOPINE or etc) to Clone/Backup from master to slave or bidirectional
* Click on Storage & database  => MySQL/MariaDB
** Database user: root
** Database password: <<<Password Reset On Step #10>>>
** Database name: nextcloud
** Database host: localhost
* Finish setup


1. Go through the "[[#Basic_Setup|Basic Setup]]" and "[[#Shared Folders|Shared Folders]]" above
14. Services  =>  Nginx  =>  Servers  =>  Edit
* PHP  =>  Default config: Disable


2. Setup the [[#Dynamic DNS|Dynamic DNS]] if you need to rsync clone/backup through internet
15. Go to https://<<<DEVICE_IP>>>:91/


3. [On slave/destination device]
16. If installation failed on step #12 onwards:
    Services -> Rsync -> Server -> Settings -> Enable -> Save -> Apply
* Remove all the folders/files/hidden files in www/nextcloud/* through FTP/SAMBA/etc (Note that, removing 13,000+ files may take a while)
                                -> Modules -> Add -> General
** Services =MySQL => SQL management site  => Enable => Save => Apply => Show
    - Make sure to choose correct "User"
* Tools  => Database Manager  => tick "nextcloud" and "DROP selected databases"  =>  Submit
    - Enable "Authenticate users"
** Start over again from step #12
    - Fill in "Hosts allow" for more security
                                                  -> User -> Add
 
4. Services -> Rsync -> Jobs -> Add (Type: Remote, Mode: Push, Destination server: [USER]@[HOST]::[Rsync Server Module Name])
    - [HOST] can be <<<CNAME>>>.ddns.net for [[#Dynamic DNS|Dynamic DNS]]
    - for testing: select Job -> Run
    - for bidirectional Rsync: Add another Job to Pull from slave/destination device (Don't enable Delete because deleted file/folder may be copied over again)
 
5. Diagnostics -> System Logs
</pre>
 
 
== SSH ==
 
<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
1. Go through the "[[#Basic_Setup|Basic Setup]]" above
 
2. Services -> SSH -> Permit root login (enable) (Remember to always disable it back for security reason)
 
3. SSH to the device with Putty: root / openmediavault (Remember to change the default password)
</pre>
 
 
== System Monitoring ==
 
<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
1. Go through the "[[#Basic_Setup|Basic Setup]]" above
 
2. System -> Monitoring -> Enable -> Save -> Apply
 
3. Diagnostics -> System Information -> Performance statistics
</pre>
 
 
== Notification ==
 
<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
1. Go through the "[[#Basic_Setup|Basic Setup]]" above
 
2. System -> Notification -> Settings
    - Enable
    - for GMAIL
      - SMTP server: smtp.gmail.com
      - SMTP port: 587
      - Use SSL/TLS secure connection: Enable
      - Sender email: <<<Your GMAIL Address>>>
      - Authentication required: Enable
      - Username: <<<Your GMAIL Address>>>
      - Password: <<<Your GMAIL Password>>>
      - Recipient: <<<Your Recipient Emails>>>
      - at your GMAIL account, you also need to enable: GMAIL -> Settings -> Accounts and Import -> Change account settings -> Other Google Account settings -> Sign-in & security -> Apps with account access -> Allow less secure apps: ON
    - Save -> Apply
    - use "Send a test email" for testing
</pre>
 
 
== Wi-Fi ==
 
<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
1. Go through the "[[#Basic_Setup|Basic Setup]]" above
 
2. While Ethernet network cable is still plugged, plug in the USB Wi-Fi dongle and reboot the board
 
3. Login to the Web Admin Pages and go to System -> Network -> Interfaces -> Add(Wi-Fi)
    - General settings
      - Name: <<<Select wlan0>>>
    - Wi-Fi
      - SSID: <<<Your Wireless Router Wi-Fi SSID>>>
      - Password: <<<Your Wireless Router Wi-Fi Password>>>
    - IPv4
      - Method: DHCP or Static
      - ...
 
4. Save -> Apply
 
5. Unplug Ethernet network cable and reboot the board
</pre>
 
 
== Dynamic DNS ==
 
<pre<noinclude></noinclude> style="white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">
[YOU CAN SKIP THIS IF YOU KNOW HOW TO SETUP DYNAMIC DNS ON YOUR INTERNET MODEM/ROUTER]
 
1. Go through the "[[#Basic_Setup|Basic Setup]]" above
 
2. [[#SSH|SSH]] to the board
 
3. # apt-get install ddclient  (no-ip.com example)
 
Dynamic DNS service provider: other
Dynamic DNS server: dynupdate.no-ip.com
Dynamic DNS update protocol: dyndns2
Username for dynamic DNS service: <<<USERNAME/EMAIL>>>
Password for dynamic DNS service: <<<PASSWORD>>>
Re-enter password to verify: <<<PASSWORD>>>
Network interface used for dynamic DNS service: web
DynDNS fully qualified domain names: <<<CNAME>>>.ddns.net
Run ddclient on PPP connect? No
Run ddclient as daemon? Yes
Interval between ddclient runs: 300
 
# dpkg-reconfigure ddclient (To Re-run configuration wizard above)
 
4. # vi /etc/ddclient.conf
 
Change: use=if, if=web
To:    use=web, web=checkip.dyndns.com, web-skip='Current IP Address'
 
##########
protocol=dyndns2
use=web, web=checkip.dyndns.com, web-skip='Current IP Address'
server=dynupdate.no-ip.com
login=<<<USERNAME/EMAIL>>>
password='<<<PASSWORD>>>'
<<<CNAME>>>.ddns.net
##########
 
5. # systemctl restart ddclient (Restart ddclient after changed in configuration)
 
6. Diagnostics:
 
# ddclient -daemon=0 -debug -verbose -noquiet
# systemctl status ddclient


7. On your internet modem/router: Port Forward to the slave/destination device with port 873.
17. Setup the [[#Dynamic DNS|Dynamic DNS]] if you need to access your NextCloud through internet. Then, on your internet modem/router: Port Forward to the device with port 91
</pre>

Latest revision as of 13:43, 5 February 2023

Please go through the OpenMediaVault Basic Setup and all following chapters about OpenMediaVault before proceed to the more advance setup below.

Dynamic DNS

[YOU CAN SKIP THIS IF YOU ARE USING STATIC IP ON YOUR INTERNET WAN OR YOU ALREADY KNOW HOW TO SETUP DYNAMIC DNS ON YOUR INTERNET MODEM/ROUTER]

1. SSH to the device

2. # apt-get install ddclient (no-ip.com example)

  • Dynamic DNS service provider: other
  • Dynamic DNS server: dynupdate.no-ip.com
  • Dynamic DNS update protocol: dyndns2
  • Username for dynamic DNS service: <<<USERNAME/EMAIL>>>
  • Password for dynamic DNS service: <<<PASSWORD>>>
  • Re-enter password to verify: <<<PASSWORD>>>
  • Network interface used for dynamic DNS service: web
  • DynDNS fully qualified domain names: <<<CNAME>>>.ddns.net
  • Run ddclient on PPP connect? No
  • Run ddclient as daemon? Yes
  • Interval between ddclient runs: 300
  1. dpkg-reconfigure ddclient (To Re-run configuration wizard above)

3. # nano /etc/ddclient.conf

Change: use=if, if=web To: use=web, web=checkip.dyndns.com, web-skip='Current IP Address'

##########
protocol=dyndns2
use=web, web=checkip.dyndns.com, web-skip='Current IP Address'
server=dynupdate.no-ip.com
login=<<<USERNAME/EMAIL>>>
password='<<<PASSWORD>>>'
<<<CNAME>>>.ddns.net
##########

After edit, press [CTRL+x] => press [y] => press [Enter] to exit

4. # systemctl restart ddclient (Restart ddclient after changed in configuration)

5. Diagnostics:

  1. ddclient -daemon=0 -debug -verbose -noquiet
  2. systemctl status ddclient

NextCloud

Reference: https://forum.openmediavault.org/index.php/Thread/17738-NextCloud-Installation/

1. SSH to the device

  1. apt-get update
  2. apt-get upgrade
  • Configuring openmediavault => Press [Tab] => Press [Enter] on Ok
  1. apt-get install php5-curl php5-gd

2. Create the Shared Folders for all your Nginx's web pages

  • Name: www
  • Path: www/
  • Click on the ACL
    • User/Groups permissions: Tick Read/Write for both www-data user and group
    • Set Owner / Group to Read/Write/Execute and Others to None

3. Create the sub shared folder for your NextCloud web pages

  • Name: nextcloud
  • Path: www/nextcloud
  • Click on the ACL
    • User/Groups permissions: Tick Read/Write for both www-data user and group
    • Set Owner / Group to Read/Write/Execute and Others to None

4. Go to System => Plugins => Tick openmediavault-nginx => Install

5. Services => Nginx => Settings => Enable => Save => Apply

6. Services => Nginx => Pools => Add

  • Name: pool_nextcloud
  • User: www-data
  • Group: www-data
  • Extra options: <<<Copy Texts In Between ########## Below>>>
##########
clear_env = no
env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp
##########
  • Save => Apply

7. Services => Nginx => Servers => Add

  • General
    • Directory: nextcloud
  • SSL
    • Enable SSL: Enable
    • Port: 91
    • Certificate: <<<Select Created SSL Certificate>>>
  • System => Certificates => SSL => Add => Create (Set longer "Period of validity" if you do not want to renew the certificate too frequently) => Save => Apply
    • Only use SSL: Enable
  • PHP
    • Enable PHP: Enable
    • PHP-FPM Pool: pool_nextcloud
  • Extra options: <<<Copy Texts In Between ########## Below>>>
##########
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;

location = /robots.txt {
log_not_found off;
allow all;
access_log off;
}

# The following 2 rules are only needed for the user_webfinger app.
# Uncomment it if you're planning to use this app.
#rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
#rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json
# last;
location = /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}

location = /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}

# set max upload size
client_max_body_size 50G;
fastcgi_buffers 64 4K;

# Disable gzip to avoid the removal of the ETag header
gzip off;

# Uncomment if your server is build with the ngx_pagespeed module
# This module is currently not supported.
#pagespeed off;

error_page 403 /core/templates/403.php;
error_page 404 /core/templates/404.php;
location / {
rewrite ^ /index.php$uri;
}

location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
deny all;
}

location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {
deny all;
}

location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\.php(?:$|/) {
fastcgi_split_path_info ^(.+\.php)(/.*)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param HTTPS on;
#Avoid sending the security headers twice
fastcgi_param modHeadersAvailable true;
fastcgi_param front_controller_active true;
fastcgi_pass $socket;
fastcgi_intercept_errors on;
}

location ~ ^/(?:updater|ocs-provider)(?:$|/) {
try_files $uri/ =404;
index index.php;
}

# Adding the cache control header for js and css files
# Make sure it is BELOW the PHP block
location ~* \.(?:css|js|woff|svg|gif)$ {
try_files $uri /index.php$uri$is_args$args;
add_header Cache-Control "public, max-age=7200";
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
# Optional: Don't log access to assets
access_log off;
}

location ~* \.(?:png|html|ttf|ico|jpg|jpeg)$ {
try_files $uri /index.php$uri$is_args$args;
# Optional: Don't log access to other assets
access_log off;
}
##########

8. Go to System => Plugins => Tick openmediavault-mysql => Install

9. Services => MySQL => Enable => Save => Apply => Reset Password

10. Go to https://nextcloud.com/ => Download => Get Nextcloud Server => Download => Web Installer (Bottom Tab) => Download setup-nextcloud.php to your PC

11. Use FTP/SAMBA/etc to transfer setup-nextcloud.php to www/nextcloud/

12. Go to https://<<<DEVICE_IP>>>:91/setup-nextcloud.php

  • Please add exception for the self-signed certificate if your browser prompt you to do so
  • Next
  • Dependency check: Enter a single "." => Next
  • Wait until: 504 Gateway Time-out

13. Go to https://<<<DEVICE_IP>>>:91/ (Retry again if you get 404)

  • Click on Storage & database => MySQL/MariaDB
    • Database user: root
    • Database password: <<<Password Reset On Step #10>>>
    • Database name: nextcloud
    • Database host: localhost
  • Finish setup

14. Services => Nginx => Servers => Edit

  • PHP => Default config: Disable

15. Go to https://<<<DEVICE_IP>>>:91/

16. If installation failed on step #12 onwards:

  • Remove all the folders/files/hidden files in www/nextcloud/* through FTP/SAMBA/etc (Note that, removing 13,000+ files may take a while)
    • Services => MySQL => SQL management site => Enable => Save => Apply => Show
  • Tools => Database Manager => tick "nextcloud" and "DROP selected databases" => Submit
    • Start over again from step #12

17. Setup the Dynamic DNS if you need to access your NextCloud through internet. Then, on your internet modem/router: Port Forward to the device with port 91