CentOS7 安装Nextcloud17
nextcloud是继承owncloud后的开源项目,并且跨各大平台,提供安卓、Mac、window、IOS等平台应用。
安装参考:docs.nextcloud.com
安装参考
0.搭建环境说明
因为计划在CentOS系统下运行多个应用,所以方案选择会有一点不同。
详细组成:
- Nginx 1.16.1
- MySql 5.7.27
- Redis 5.0.6
- PHP 7.2.23 (fpm-fcgi)
还有就是,赋予部署用户是pi,需要自行创建该用户。
1.安装基础环境
安装基础依赖和工具。
yum install -y epel-release yum-utils unzip curl wget \
bash-completion policycoreutils-python mlocate bzip2
1.1安装MySql
安装教程:CentOS 7 安装MySql
下面建一个nextcloud
数据库。
# 进入myql
mysql -u root -p
create database nextcloud;
# 设置超强密码!!
create user nextcloud@'%' identified by '****************';
grant all privileges on nextcloud.* to nextcloud@'%' identified by '****************';
flush privileges;
quit;
1.2安装Redis
安装教程:CentOS7 安装 redis
1.3安装PHP
PHP需要集成较多的依赖,安装会比较繁琐。
yum-config-manager --enable remi-php72
yum -y install php php-common php-opcache php-mcrypt php-cli php-gd php-curl php-mysql php-mbstring php-intl php-pecl-apcu php-mysqlnd php-pecl-redis php-imagick php-fpm php-zip php-xml php-process php-pear php-pdo php-json php-devel php-xmlrpc php-soap php-ldap
vi /etc/php-fpm.d/www.conf
user = pi
group = pi
listen = 127.0.0.1:9000
env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp
vi /etc/php.ini
max_input_time = 60
memory_limit = 4096M
upload_max_filesize = 4096M
vi /etc/php.d/10-opcache.ini
opcache.enable=1
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.memory_consumption=128
opcache.save_comments=1
opcache.revalidate_freq=1
mkdir -p /var/lib/php/session
chown pi:pi -R /var/lib/php/session/
重启:systemctl restart php-fpm
开机自启:systemctl enable php-fpm
1.4安装Nginx
安装教程:CentOS7 安装Nginx
配置参考:Nginx configuration
安装完nginx后,首先为Nextcloud
生成自签名SSL证书,如果有就不需要自己生成,拷贝到对应目录下就好。
mkdir -p /etc/nginx/cert
openssl req -new -x509 -days 365 -nodes -out /etc/nginx/cert/1_nextcloud.kioye.cn_bundle.crt -keyout /etc/nginx/cert/2_nextcloud.kioye.cn.key
chmod 700 /etc/nginx/cert
chmod 600 /etc/nginx/cert/*
配置nginx。
vi /etc/nginx/conf.d/nextcloud.conf
upstream php-handler {
server 127.0.0.1:9000;
}
server {
listen 80;
listen [::]:80;
server_name nextcloud.kioye.cn;
return 301 https://$server_name:443$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name nextcloud.kioye.cn;
ssl_certificate /etc/nginx/cert/1_nextcloud.kioye.cn_bundle.crt;
ssl_certificate_key /etc/nginx/cert/2_nextcloud.kioye.cn.key;
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains; preload;" always;
add_header Referrer-Policy "no-referrer" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Download-Options "noopen" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "none" always;
add_header X-XSS-Protection "1; mode=block" always;
fastcgi_hide_header X-Powered-By;
root /var/www/nextcloud/;
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
location = /.well-known/carddav {
return 301 $scheme://$host:$server_port/remote.php/dav;
}
location = /.well-known/caldav {
return 301 $scheme://$host:$server_port/remote.php/dav;
}
client_max_body_size 512M;
fastcgi_buffers 64 4K;
gzip on;
gzip_vary on;
gzip_comp_level 4;
gzip_min_length 256;
gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
location / {
rewrite ^ /index.php$request_uri;
}
location ~ ^\/(?:build|tests|config|lib|3rdparty|templates|data)\/ {
deny all;
}
location ~ ^\/(?:\.|autotest|occ|issue|indie|db_|console) {
deny all;
}
location ~ ^\/(?:index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|oc[ms]-provider\/.+)\.php(?:$|\/) {
fastcgi_split_path_info ^(.+?\.php)(\/.*|)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param HTTPS on;
fastcgi_param modHeadersAvailable true;
fastcgi_param front_controller_active true;
fastcgi_pass php-handler;
fastcgi_intercept_errors on;
fastcgi_request_buffering off;
}
location ~ ^\/(?:updater|oc[ms]-provider)(?:$|\/) {
try_files $uri/ =404;
index index.php;
}
location ~ \.(?:css|js|woff2?|svg|gif|map)$ {
try_files $uri /index.php$request_uri;
add_header Cache-Control "public, max-age=15778463";
add_header Referrer-Policy "no-referrer" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Download-Options "noopen" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "none" always;
add_header X-XSS-Protection "1; mode=block" always;
access_log off;
}
location ~ \.(?:png|html|ttf|ico|jpg|jpeg|bcmap)$ {
try_files $uri /index.php$request_uri;
access_log off;
}
}
重启:systemctl restart nginx
开机自启:systemctl enable nginx
2.安装Nextcloud
wget https://download.nextcloud.com/server/releases/nextcloud-17.0.0.zip
unzip nextcloud-*.zip
mv nextcloud /var/www/
chown -R pi:pi /var/www/nextcloud
关闭防火墙!
setenforce 0
vi /etc/selinux/config
SELINUX=disabled
systemctl stop firewalld
systemctl disable firewalld
自行修改一下hosts文件。
访问网站:https://nextcloud.kioye.cn
初始化完成,查看nextcloud环境状态。
初始化后,添加redis缓存。
vi /var/www/nextcloud/config/config.php
'memcache.distributed' => '\OC\Memcache\Redis',
'memcache.locking' => '\OC\Memcache\Redis',
'memcache.local' => '\OC\Memcache\APCu',
'redis' => array(
'host' => 'localhost',
'port' => 6379,
'password' => '1234',
'database' => 15,
),
安装smbclient扩展模块
yum -y install libsmbclient libsmbclient-devel php-smbclient
pecl install smbclient
3.集成onlyoffice
onlyOffice服务使用docker安装。所以需要提前安装好docker环境。
docker环境安装: CentOS7下安装docker
nextcloud下的onlyoffice插件:ONLYOFFICE
onlyoffice的GitHub:onlyoffice docker
wget https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v3.0.2/onlyoffice.tar.gz
tar zxvf onlyoffice.tar.gz
mv onlyoffice /var/www/nextcloud/apps/
chown -R pi:pi /var/www/nextcloud/apps/onlyoffice
mkdir -p /home/pi/onlyoffice/certs
chown -R pi:pi /home/pi/onlyoffice
chmod 700 /home/pi/onlyoffice
chmod 600 /home/pi/onlyoffice/*
docker run -i -t -d -p 9300:443 -v /home/pi/onlyoffice/:/var/www/onlyoffice/Data onlyoffice/documentserver
docker update --restart=always xxx
本文内容由网友自发贡献,版权归原作者所有,本站不承担相应法律责任。如您发现有涉嫌抄袭侵权的内容,请联系:hwhale#tublm.com(使用前将#替换为@)