I’m new to both Linux and Owncloud, but have lots of Windows experience. I’m learning as I go. Your patience is appreciated.
Server configuration
Operating system: Raspberry Pi OS (Debian Trixie 13)
Web server: Apache 2.4.52
Database: MariaDB 10.11
PHP version: 8.0
ownCloud version: (see ownCloud admin page) 10.16.6.0 Classic
Updated from an older ownCloud or fresh install: Fresh
Where did you install ownCloud from: Not sure, but I think it was from: Raspberry Pi ownCloud: Your Personal Cloud Storage - Pi My Life Up
Signing status (ownCloud 9.0 and above):
Login as admin user into your ownCloud and access
http://example.com/index.php/settings/integrity/failed
paste the results into https://gist.github.com/ and puth the link here.
The content of config/config.php:
Log in to the web-UI with an administrator account and click on
'admin' -> 'Generate Config Report' -> 'Download ownCloud config report'
This report includes the config.php settings, the list of activated apps
and other details in a well sanitized form.
or
If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your ownCloud installation folder
*ATTENTION:* Do not post your config.php file in public as is. Please use one of the above
methods whenever possible. Both, the generated reports from the web-ui and from occ config:list
consistently remove sensitive data. You still may want to review the report before sending.
If done manually then it is critical for your own privacy to dilligently
remove *all* host names, passwords, usernames, salts and other credentials before posting.
You should assume that attackers find such information and will use them against your systems.
List of activated apps:
If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your ownCloud installation folder.
Are you using external storage, if yes which one: local/smb/sftp/…
Not yet.
Are you using encryption: yes/no
No, not yet.
Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/…
I don’t think so.
LDAP configuration (delete this part if not used)
With access to your command line run e.g.:
sudo -u www-data php occ ldap:show-config
from within your ownCloud installation folder
Without access to your command line download the data/owncloud.db to your local
computer or access your SQL server remotely and run the select query:
SELECT * FROM `oc_appconfig` WHERE `appid` = 'user_ldap';
Eventually replace sensitive data as the name/IP-address of your LDAP server or groups.
Client configuration
Browser: Brave 1.97.59
Operating system: Windows, MacOS
I am not experiencing any bugs or problems yet. I need advice on the best steps to secure my setup.
Total users: 3
No domain registered-using DDNS service on the router
I don’t want to forward any ports until I know I’ve reasonably secured this setup.
I’ve installed ufw for firewall purposes.
I read some of the wiki text on securing owncloud classic, but there’s so much info. I’m not familiar with. How do I know if should use a reverse proxy? Is there a good HOWTO somewhere for setting one up to work with Owncloud?
I’m not asking for handholding at every step, but I don’t even know where to start.
Thanks in advance for any help.