Freenas 建置NextCloud 12

先使用UI介面加入jail

設定SSH

指令:

vi /etc/ssh/sshd_config

修改內容 :
將前方#符號去除

PermitRootLogin yes

RSAAuthentication yes

PasswordAuthentication yes

指令:

vi /etc/inetd.conf

將前方#符號去除

ssh stream tcp nowait root /usr/sbin/sshd sshd -i -4
ssh stream tcp6 nowait root /usr/sbin/sshd sshd -i -6

設定開機後自動啟動SSH service
指令:

vi /etc/rc.conf

修改內容 :

sshd_enable="YES"

重新產生RSA:

ssh-keygen -A

重開SSH服務

/etc/rc.d/sshd restart

安裝NextCloud

Source = /mnt/Cloud/files
Destination = /mnt/files

Source = /mnt/Cloud/db
Destination = /var/db/mysql 

安裝更新

portsnap fetch extract
pkg install nano wget sudo

安裝PHP7.1

pkg install redis php71-ctype php71-dom php71-gd php71-iconv php71-json php71-mbstring php71-posix php71-simplexml  php71-xmlreader php71-xmlwriter php71-zip php71-zlib php71-pdo_mysql php71-hash php71-xml php71-session php71-mysqli php71-wddx php71-xsl php71-filter php71-curl php71-fileinfo php71-bz2 php71-intl php71-mcrypt php71-openssl php71-ldap php71-ftp php71-imap php71-exif php71-gmp php71-memcache php71-opcache php71-pcntl php71 mod_php71

安裝SQL

pkg install mysql56-client mysql56-server php71-mysqli
sysrc mysql_enable="yes"
service mysql-server start
mysql_secure_installation

建立資料庫

mysql -u root -p

CREATE DATABASE nextcloud;

CREATE USER 'nextcloud'@'localhost' IDENTIFIED BY 'MAKEUP-YOUR-OWN-PASSWORD';

GRANT ALL ON nextcloud.* TO 'nextcloud'@'localhost';

FLUSH PRIVILEGES;

exit

安裝Apache

pkg install apache24
sysrc apache24_enable=yes
service apache24 start

安裝phpmyadmin

cd /usr/local/www/
fetch https://files.phpmyadmin.net/phpMyAdmin/4.7.8/phpMyAdmin-4.7.8-all-languages.zip
tar xvzf phpMyAdmin-4.7.8-all-languages.zip
mv phpMyAdmin-4.7.8-all-languages phpMyAdmin
cd phpMyAdmin
chown -R www:www .
chmod -R 755 .
cp /usr/local/www/phpMyAdmin/config.sample.inc.php /usr/local/www/phpMyAdmin/config.inc.php

編輯設定

vi /usr/local/etc/apache24/httpd.conf

將前方#符號去除

LoadModule ssl_module     libexec/apache24/mod_ssl.so
LoadModule rewrite_module libexec/apache24/mod_rewrite.so
LoadModule php7_module    libexec/apache24/libphp7.so

於"LoadModule php7_module libexec/apache24/libphp7.so" 此行後下一行新增

<IfModule php7_module>
   <FilesMatch "\.(php|phps|php7|phtml)$">
       SetHandler php7-script
   </FilesMatch>
   DirectoryIndex index.php
</IfModule>

設定phpMyAdmin

Alias /phpmyadmin /usr/local/www/phpMyAdmin
Alias /phpMyAdmin /usr/local/www/phpMyAdmin

<Directory "/usr/local/www/phpMyAdmin">
    AllowOverride All
    Order allow,deny
    Allow from all
</Directory>

尋找<IFModule mime_module>區段，並且加入下列兩行

AddType application/x-httpd-php-source .phps
AddType application/x-httpd-php        .php

vi /usr/local/etc/apache24/modules.d/001_mod_php.conf

<FilesMatch "\.php$">
    SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch "\.phps$">
    SetHandler application/x-httpd-php-source
</FilesMatch>

安裝NextCloud

cd /usr/local/www/
fetch https://download.nextcloud.com/server/releases/nextcloud-13.0.0.zip
tar xvzf nextcloud-13.0.0.zip

修改apache

vi /usr/local/etc/apache24/Includes/nextcloud.xxxx.com.conf

<VirtualHost *:443>
    ServerAdmin nextcloud@nextcloud.xxxx.com
    ServerName nextcloud.xxxx.com
    DirectoryIndex index.php
    DocumentRoot /usr/local/www/nextcloud

    SSLCertificateFile /usr/local/etc/apache24/ssl/nextcloud.xxxx.com.cer
    SSLCertificateKeyFile /usr/local/etc/apache24/ssl/nextcloud.xxxx.com.key
    SSLEngine on
    # Intermediate configuration, tweak to your needs
    SSLProtocol             all -SSLv2 -SSLv3
    SSLCipherSuite          ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
    SSLHonorCipherOrder     on
    SSLCompression          off
    SSLOptions +StrictRequire

    <Directory /usr/local/www/nextcloud>
      AllowOverride all
    </Directory>

    <IfModule mod_headers.c>
      Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
    </IfModule>
</VirtualHost>

<VirtualHost *:80>
  DocumentRoot "/usr/local/www/nextcloud"
  ServerName nextcloud.xxxx.com
     RewriteEngine on
     RewriteCond %{SERVER_NAME} =nextcloud.xxxx.com
     RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]
  #ErrorLog ${APACHE_LOG_DIR}/error.log
  #CustomLog ${APACHE_LOG_DIR}/access.log combined

  <Directory /usr/local/www/nextcloud/>
    Options +FollowSymlinks
    AllowOverride All
    <IfModule mod_dav.c>
      Dav off
    </IfModule>
    SetEnv HOME /usr/local/www/nextcloud
    SetEnv HTTP_HOME /usr/local/www/nextcloud
    Satisfy Any
  </Directory>
</VirtualHost>