My reference:
https://www.samueldowling.com/2020/07/24/install-nextcloud-on-freenas-iocage-jail-with-hardened-security/
https://github.com/samuel-emrys-blogs/freebsd-nextcloud-setup-hardened
$ iocage create -n nextcloud -r 12.0-RELEASE ip4_addr="vnet0|192.168.0.54/24" defaultrouter="192.168.0.1" vnet="on" allow_raw_sockets="1" boot="on"
iocage start nextcloud$ iocage exec nextcloud mkdir -p /mnt/data
$ iocage exec nextcloud mkdir -p /var/db/mysql
$ iocage exec nextcloud mkdir -p /usr/local/www/nextcloud/config
$ iocage exec nextcloud mkdir -p /usr/local/www/nextcloud/themes
$ iocage fstab -a nextcloud /mnt/tank/cloud /mnt/data nullfs rw 0 0
$ iocage fstab -a nextcloud /mnt/tank/apps/nextcloud/db /var/db/mysql nullfs rw 0 0
$ iocage fstab -a nextcloud /mnt/tank/apps/nextcloud/config /usr/local/www/nextcloud/config nullfs rw 0 0
$ iocage fstab -a nextcloud /mnt/tank/apps/nextcloud/themes /usr/local/www/nextcloud/themes nullfs rw 0 0
zfs set primarycache=metadata tank/apps/nextcloud/dbiocage list
iocage console nextcloud
$ pkg update
$ pkg install nano
$ pkg install wget ca_root_nss
$ pkg install apache24
$ sysrc apache24_enable=yes
$ service apache24 start
$ pkg install mariadb104-server
$ sysrc mysql_enable=yes
in /usr/local/etc/mysql/my.cnf : socket = /tmp/mysql.sock
/usr/local/etc/rc.d/mysql-server start
mysql_secure_installation --socket=/tmp/mysql.sock
root@nextcloud:~ $ cd /tmp
root@nextcloud:/tmp $ wget https://download.nextcloud.com/server/releases/latest.tar.bz2
root@nextcloud:/tmp $ wget https://download.nextcloud.com/server/releases/latest.tar.bz2.sha512
shasum -a 512 -c latest.tar.bz2.sha512
tar -xf latest.tar.bz2 -C /usr/local/www
chown -R www:www /usr/local/www/nextcloud
pkg install php74 php74-bz2 php74-ctype php74-curl php74-dom php74-exif php74-fileinfo php74-filter php74-gd php74-iconv php74-intl php74-json php74-ldap php74-mbstring php74-opcache php74-openssl php74-pdo php74-pdo_mysql php74-pecl-APCu php74-pecl-imagick php74-pecl-redis php74-posix php74-session php74-simplexml php74-xml php74-xmlreader php74-xmlwriter php74-xsl php74-zip php74-zlib php74-bcmath php74-gmp
WARNING: FreeBSD 12.0-RELEASE HAS PASSED ITS END-OF-LIFE DATE.
Any security issues discovered after Sat Feb 29 08:00:00 +08 2020
will not have been corrected.
Installing updates... done.
Missing default rc.conf, creating it
nextcloud successfully created!
No default gateway found for ipv6.
* Starting nextcloud
+ Started OK
+ Using devfs_ruleset: 1000 (iocage generated default)
+ Configuring VNET OK
+ Using IP options: vnet
+ Starting services OK
+ Executing poststart OK
No comments:
Post a Comment