Geek Rewind

How to install Nextcloud with Nginx on Ubuntu 24.04

Richard

·

This article provides a guide on installing Nextcloud with Nginx support on Ubuntu 24.04, emphasizing enhanced security and performance. It covers the installation of Nginx, MariaDB, PHP-FPM, downloading Nextcloud files, configuring Nginx, setting up Let’s Encrypt SSL/TLS, and completing the Nextcloud installation. The step-by-step instructions ensure a reliable and secure Nextcloud deployment.

This article explains how to install Nextcloud with Nginx support on Ubuntu 24.04.

Installing Nextcloud with Nginx support on Ubuntu is a secure choice. Nginx, a lightweight, high-performance web server, efficiently handles Nextcloud’s demands. It also offers better resource utilization and, most importantly, improved security features.

This setup allows you to manage many concurrent connections, ensuring better performance and scalability for your Nextcloud instance. It is a reliable, secure option for hosting and accessing your files and data.

The steps below walk you through installing Nextcloud with Nginx support on Ubuntu 24.04.

Install Nginx HTTP server on Ubuntu

Nginx requires a web server. This post will install and use the Nginx web server to run Nginx.

To do that, open the Ubuntu terminal and run the commands below to install the Nginx web server.

sudo apt update
sudo apt install nginx

Once Nginx is installed, the commands below can start, stop, and enable the Nginx web server to start automatically when your server boots up.

sudo systemctl stop nginx
sudo systemctl start nginx
sudo systemctl enable nginx

You can test the Nginx web server by opening your web browser and browsing to the server’s localhost or IP address.

http://localhost

When you see “Welcome to nginx!” the Nginx HTTP server has been installed.

Additional help on installing Nginx on Ubuntu is in the link below.

How to install Nginx on Ubuntu

Install MariaDB database server on Ubuntu Linux

The next component required to run Nextcloud is a database server. This post will install and use the MariaDB database server to run Nextcloud.

To install and use the MariaDB database server, use the instructions below.

Open the Ubuntu terminal and run the commands below to install the MariaDB database server.

sudo apt update
sudo apt install mariadb-server

Once the MariaDB database server is installed, use the commands below to stop, start, and enable the MariaDB server to start automatically when the server boots.

sudo systemctl stop mariadb
sudo systemctl start mariadb
sudo systemctl enable mariadb

Run the following commands to validate and test if the MariaDB database server is installed successfully.

sudo mariadb

Once you run the commands above, it will log you onto the MariaDB console and display a message similar to the one below.

Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 32
Server version: 10.11.2-MariaDB-1 Ubuntu 23.04

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]>

The message tells you that the server is installed successfully.

Additional help on installing MariaDB.

Create a Nextcloud database

Upon successfully installing the MariaDB database server, create a blank database on the server specifically for the Nextcloud application.

As part of the setup, we will create a database named ‘nextclouddb‘ and a corresponding user account called ‘nextclouddbuser.’

Finally, we’ll grant the nextclouddbuser full access to the nextclouddb database.

All the database steps above can be done using the commands below:

But first, log on to the MariaDB database server:

sudo mariadb

Then run the commands below to complete the steps:

CREATE DATABASE nextclouddb CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;
CREATE USER nextclouddbuser@localhost IDENTIFIED BY 'type_your_password_here';
GRANT ALL ON nextclouddb.* TO nextclouddbuser@localhost WITH GRANT OPTION;
FLUSH PRIVILEGES;
exit

Ensure to replace ‘type_your_password_here ‘with your password.

Install PHP-FPM on Ubuntu Linux

The last component you will need to run on your Nextcloud is PHP-FPM. The Nextcloud application is PHP-based and supports the latest versions of PHP.

sudo apt install php-fpm php-intl php-mysql php-curl php-cli php-zip php-xml php-gd php-gmp php-common php-mbstring php-xmlrpc php-json php-sqlite3 php-ldap php-imap php-pgsql php-ssh2 php-soap php-zip

Additional help on installing PHP

How to install PHP on Ubuntu Linux

Download Nextcloud files

Let’s begin by downloading and configuring Nextcloud files on Ubuntu Linux.

Nextcloud download page

Always check the download page for the latest release. Replace the download link below with the current so you have the latest version.

First, navigate to the /tmp/ directory and download Nextcloud files. After unzipping the file, move the content into the Nextcloud folder in the Nginx root directory.

The final step is to change the permissions. This will allow the Nginx web server to safely interact with the files, ensuring a secure environment for your Nextcloud installation.

wget https://download.nextcloud.com/server/releases/latest.zip -P /tmp
sudo unzip /tmp/latest.zip -d /var/www
sudo chown -R www-data:www-data /var/www/nextcloud/

Once all the steps are done, configure the Nginx webserver to serve the Nextcloud content.

Run the commands below to create a Nginx server block file for your Nextcloud.

sudo nano /etc/nginx/sites-available/nextcloud.conf

Then, copy and paste the content block below into the Nginx server block.

upstream php-handler {
    server unix:/var/run/php/php8.3-fpm.sock;
}

server {
    listen 80;
    listen [::]:80;
    server_name nextcloud.example.com;
    root /var/www/nextcloud;

    location = /robots.txt {
        allow all;
        log_not_found off;
        access_log off;
    }

    # set max upload size
    client_max_body_size 512M;
    fastcgi_buffers 64 4K;

    # Enable gzip but do not remove ETag headers
    gzip on;
    gzip_vary on;
    gzip_comp_level 4;
    gzip_min_length 256;
    gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
    gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;

    location / {
        rewrite ^ /index.php;
    }

    location ~ ^\/(?:build|tests|config|lib|3rdparty|templates|data)\/ {
        deny all;
    }
    location ~ ^\/(?:\.|autotest|occ|issue|indie|db_|console) {
        deny all;
    }

    location ~ ^\/(?:index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|oc[ms]-provider\/.+|.+\/richdocumentscode\/proxy)\.php(?:$|\/) {
        fastcgi_split_path_info ^(.+?\.php)(\/.*|)$;
        set $path_info $fastcgi_path_info;
        try_files $fastcgi_script_name =404;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param PATH_INFO $path_info;
        fastcgi_param modHeadersAvailable true;
        # Enable pretty urls
        fastcgi_param front_controller_active true;
        fastcgi_pass php-handler;
        fastcgi_intercept_errors on;
        fastcgi_request_buffering off;
    }

    location ~ ^\/(?:updater|oc[ms]-provider)(?:$|\/) {
        try_files $uri/ =404;
        index index.php;
    }

    # Adding the cache control header for js, css and map files
    # Make sure it is BELOW the PHP block
    location ~ \.(?:css|js|woff2?|svg|gif|map)$ {
        try_files $uri /index.php$request_uri;
        add_header Cache-Control "public, max-age=15778463";
        add_header Referrer-Policy "no-referrer" always;
        add_header X-Content-Type-Options "nosniff" always;
        add_header X-Download-Options "noopen" always;
        add_header X-Frame-Options "SAMEORIGIN" always;
        add_header X-Permitted-Cross-Domain-Policies "none" always;
        add_header X-Robots-Tag "none" always;
        add_header X-XSS-Protection "1; mode=block" always;

        # Optional: Don't log access to assets
        access_log off;
    }

    location ~ \.(?:png|html|ttf|ico|jpg|jpeg|bcmap|mp4|webm)$ {
        try_files $uri /index.php$request_uri;
        # Optional: Don't log access to other assets
        access_log off;
    }
}

Save the file.

Then, run the commands below to enable the server block and restart the Nginx server.

sudo ln -s /etc/nginx/sites-available/nextcloud.conf /etc/nginx/sites-enabled/
sudo systemctl restart nginx.service

Setup Let’s Encrypt SSL/TLS for Nextcloud

You may want to install an SSL/TLS certificate to secure your Nextcloud site. Secure your Nextcloud installation with HTTPS from Let’s Encrypt.

Please read the post below for additional resources on installing and creating Let’s Encrypt SSL certificates for Nginx.

How to set up Let’s Encrypt SSL certificate for Nginx on Ubuntu Linux

Once you have restarted the Nginx web server, open your browser and browse to the server hostname or IP address defined in the Nginx server block.

http://nextcloud.example.com

A Nextcloud installation wizard page should appear. Create an administrator account and password, enter the database name, database account name, and password created above, and click Install.

Your Nextcloud site should be ready to use.

That should do it!

Conclusion:

  • Nginx provides a secure and efficient platform for hosting Nextcloud on Ubuntu, offering improved resource utilization and enhanced security features.
  • The installation and configuration process includes setting up Nginx, MariaDB, and PHP-FPM, creating a dedicated database for Nextcloud, and adjusting file permissions for secure interactions.
  • Let’s Encrypt SSL/TLS certificates can be installed to further enhance the security of the Nextcloud site.
  • Once completed, the Nextcloud site should be accessible immediately, providing a reliable and secure file and data management environment.
Richard Avatar
Richard
Richard, the owner and lead writer at Geek Rewind, is a tech enthusiast passionate about simplifying complex IT topics. His years of hands-on experience in system administration and enterprise IT operations have honed his ability to provide practical insights and solutions. Richard aims to make technology more accessible and actionable. He’s deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions. He enjoys watching football, cheering for the Minnesota Vikings, and spending time with his family when he’s not writing or managing Geek Rewind.
, ,

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *


Exit mobile version