mirror of
https://github.com/linuxserver/docker-nextcloud.git
synced 2026-06-03 09:57:35 +00:00
Compare commits
10 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 Eric Nemchik
|
5432119b35 | ||
|
Eric Nemchik
|
93a31b92d8 | ||
|
Eric Nemchik
|
1f4892f00d | ||
 LinuxServer-CI
|
eed6caef67 | ||
|
LinuxServer-CI
|
abf0cf271a | ||
|
LinuxServer-CI
|
0bfcb8d5a9 | ||
|
LinuxServer-CI
|
fc68f42dc8 | ||
|
LinuxServer-CI
|
7c5766132f | ||
|
LinuxServer-CI
|
2dff9adc63 | ||
|
LinuxServer-CI
|
9393b12c8d |
+14
-13
@@ -5,7 +5,7 @@ activity 6.0.0-dev.0 npm
|
||||
alpine-baselayout 3.7.0-r0 apk
|
||||
alpine-baselayout-data 3.7.0-r0 apk
|
||||
alpine-keys 2.5-r0 apk
|
||||
alpine-release 3.22.2-r0 apk
|
||||
alpine-release 3.22.3-r0 apk
|
||||
alsa-lib 1.2.14-r0 apk
|
||||
amphp/amp v2.6.5 php-composer
|
||||
amphp/byte-stream v1.8.2 php-composer
|
||||
@@ -32,7 +32,7 @@ arrayvec 0.7.4 rust-crate
|
||||
av-metrics 0.9.1 rust-crate
|
||||
av1-grain 0.2.3 rust-crate
|
||||
aws/aws-crt-php v1.2.7 php-composer
|
||||
aws/aws-sdk-php 3.349.3 php-composer
|
||||
aws/aws-sdk-php 3.369.9 php-composer
|
||||
bamarni/composer-bin-plugin 1.8.3 php-composer
|
||||
bantu/ini-get-wrapper v1.0.1 php-composer
|
||||
bash 5.2.37-r0 apk
|
||||
@@ -59,7 +59,7 @@ clap_complete 4.4.6 rust-crate
|
||||
clap_derive 4.4.7 rust-crate
|
||||
clap_lex 0.6.0 rust-crate
|
||||
colorchoice 1.0.0 rust-crate
|
||||
composer 2.9.3 binary
|
||||
composer 2.9.5 binary
|
||||
console 0.15.8 rust-crate
|
||||
coreutils 9.7-r1 apk
|
||||
coreutils-env 9.7-r1 apk
|
||||
@@ -146,7 +146,7 @@ ivf 0.1.3 rust-crate
|
||||
jansson 2.14.1-r0 apk
|
||||
joomla/string 3.0.4 php-composer
|
||||
jq 1.8.1-r0 apk
|
||||
justinrainbow/json-schema 6.4.2 php-composer
|
||||
justinrainbow/json-schema 6.6.4 php-composer
|
||||
kornrunner/blurhash v1.2.2 php-composer
|
||||
lab 0.11.0 rust-crate
|
||||
lame-libs 3.100-r5 apk
|
||||
@@ -170,7 +170,7 @@ libbz2 1.0.8-r6 apk
|
||||
libc 0.2.155 rust-crate
|
||||
libc 0.2.172 rust-crate
|
||||
libcap2 2.76-r0 apk
|
||||
libcrypto3 3.5.4-r0 apk
|
||||
libcrypto3 3.5.5-r0 apk
|
||||
libcurl 8.14.1-r2 apk
|
||||
libdav1d 1.5.1-r0 apk
|
||||
libdeflate 1.23-r0 apk
|
||||
@@ -179,7 +179,7 @@ libdrm 2.4.124-r0 apk
|
||||
libeconf 0.6.3-r0 apk
|
||||
libedit 20250104.3.1-r1 apk
|
||||
libevent 2.1.12-r8 apk
|
||||
libexpat 2.7.3-r0 apk
|
||||
libexpat 2.7.4-r0 apk
|
||||
libffi 3.4.8-r0 apk
|
||||
libflac 1.4.3-r1 apk
|
||||
libformw 6.5_p20250503-r0 apk
|
||||
@@ -202,7 +202,7 @@ libopenmpt 0.7.15-r0 apk
|
||||
libpanelw 6.5_p20250503-r0 apk
|
||||
libpciaccess 0.18.1-r0 apk
|
||||
libplacebo 6.338.2-r3 apk
|
||||
libpng 1.6.53-r0 apk
|
||||
libpng 1.6.54-r0 apk
|
||||
libpq 17.7-r0 apk
|
||||
libproc2 4.0.4-r3 apk
|
||||
libpsl 0.21.5-r3 apk
|
||||
@@ -216,9 +216,9 @@ libsndfile 1.2.2-r2 apk
|
||||
libsodium 1.0.20-r1 apk
|
||||
libsrt 1.5.3-r1 apk
|
||||
libssh 0.11.2-r0 apk
|
||||
libssl3 3.5.4-r0 apk
|
||||
libssl3 3.5.5-r0 apk
|
||||
libstdc++ 14.2.0-r6 apk
|
||||
libtasn1 4.20.0-r0 apk
|
||||
libtasn1 4.21.0-r0 apk
|
||||
libtheora 1.1.1-r18 apk
|
||||
libunibreak 6.1-r0 apk
|
||||
libunistring 1.3-r0 apk
|
||||
@@ -249,7 +249,7 @@ linux-pam 1.7.0-r4 apk
|
||||
linux-raw-sys 0.4.12 rust-crate
|
||||
lmdb 0.9.33-r0 apk
|
||||
log 0.4.20 rust-crate
|
||||
logreader 6.0.0-dev.0 npm
|
||||
logreader 6.0.0 npm
|
||||
logrotate 3.21.0-r1 apk
|
||||
lz4-libs 1.10.0-r0 apk
|
||||
marc-mabe/php-enum v4.7.1 php-composer
|
||||
@@ -275,7 +275,7 @@ new_debug_unreachable 1.0.4 rust-crate
|
||||
nextcloud 1.0.0 npm
|
||||
nextcloud/lognormalizer v3.0.0 php-composer
|
||||
nghttp2-libs 1.65.0-r0 apk
|
||||
nginx 1.28.0-r3 apk
|
||||
nginx 1.28.2-r0 apk
|
||||
nom 7.1.3 rust-crate
|
||||
noop_proc_macro 0.3.0 rust-crate
|
||||
notifications 6.0.0-dev.0 npm
|
||||
@@ -292,7 +292,7 @@ openexr-libiex 3.3.2-r0 apk
|
||||
openexr-libilmthread 3.3.2-r0 apk
|
||||
openexr-libopenexr 3.3.2-r0 apk
|
||||
openexr-libopenexrcore 3.3.2-r0 apk
|
||||
openssl 3.5.4-r0 apk
|
||||
openssl 3.5.5-r0 apk
|
||||
opus 1.5.2-r1 apk
|
||||
orc 0.4.40-r1 apk
|
||||
p11-kit 0.25.5-r2 apk
|
||||
@@ -430,6 +430,7 @@ symfony/deprecation-contracts v3.6.0 php-composer (+1 dup
|
||||
symfony/dom-crawler v6.4.23 php-composer
|
||||
symfony/event-dispatcher v6.4.8 php-composer
|
||||
symfony/event-dispatcher-contracts v3.5.0 php-composer
|
||||
symfony/filesystem v7.4.0 php-composer
|
||||
symfony/http-foundation v6.4.29 php-composer
|
||||
symfony/mailer v6.4.12 php-composer
|
||||
symfony/mime v6.4.12 php-composer
|
||||
@@ -444,7 +445,7 @@ symfony/polyfill-php83 v1.33.0 php-composer
|
||||
symfony/polyfill-php84 v1.33.0 php-composer (+1 duplicate)
|
||||
symfony/polyfill-php85 v1.33.0 php-composer
|
||||
symfony/polyfill-uuid v1.29.0 php-composer
|
||||
symfony/process v6.4.15 php-composer
|
||||
symfony/process v6.4.31 php-composer
|
||||
symfony/routing v6.4.12 php-composer
|
||||
symfony/service-contracts v3.5.1 php-composer
|
||||
symfony/string v6.4.15 php-composer
|
||||
|
||||
@@ -144,6 +144,7 @@ init_diagram: |
|
||||
"nextcloud:develop" <- Base Images
|
||||
# changelog
|
||||
changelogs:
|
||||
- {date: "08.02.26:", desc: "Existing users should update: site-confs/default.conf - Deny access to all dotfiles."}
|
||||
- {date: "10.07.25:", desc: "Rebase to Alpine 3.22."}
|
||||
- {date: "12.02.25:", desc: "Rebase to Alpine 3.21."}
|
||||
- {date: "09.01.25:", desc: "Fix uploading large files. Existing users should update their nginx confs."}
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
## Version 2025/07/10 - Changelog: https://github.com/linuxserver/docker-nextcloud/commits/master/root/defaults/nginx/site-confs/default.conf.sample
|
||||
## Version 2026/05/05 - Changelog: https://github.com/linuxserver/docker-nextcloud/commits/master/root/defaults/nginx/site-confs/default.conf.sample
|
||||
|
||||
# Set the `immutable` cache control options only for assets with a cache busting `v` argument
|
||||
map $arg_v $asset_immutable {
|
||||
@@ -20,6 +20,13 @@ server {
|
||||
|
||||
root /app/www/public;
|
||||
|
||||
# deny access to all dotfiles
|
||||
location ~ /\. {
|
||||
access_log off;
|
||||
log_not_found off;
|
||||
return 404;
|
||||
}
|
||||
|
||||
# display real ip in nginx logs when connected through reverse proxy via docker network
|
||||
set_real_ip_from 172.16.0.0/12;
|
||||
real_ip_header X-Forwarded-For;
|
||||
@@ -49,12 +56,12 @@ server {
|
||||
client_body_buffer_size 512k;
|
||||
|
||||
# HTTP response headers borrowed from Nextcloud `.htaccess`
|
||||
add_header Referrer-Policy "no-referrer" always;
|
||||
add_header X-Content-Type-Options "nosniff" always;
|
||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
add_header X-Permitted-Cross-Domain-Policies "none" always;
|
||||
add_header X-Robots-Tag "noindex, nofollow" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
add_header Referrer-Policy "no-referrer" always;
|
||||
add_header X-Content-Type-Options "nosniff" always;
|
||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
add_header X-Permitted-Cross-Domain-Policies "none" always;
|
||||
add_header X-Robots-Tag "noindex, nofollow" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
|
||||
# Remove X-Powered-By, which is an information leak
|
||||
fastcgi_hide_header X-Powered-By;
|
||||
@@ -92,11 +99,19 @@ server {
|
||||
# The rules in this block are an adaptation of the rules
|
||||
# in `.htaccess` that concern `/.well-known`.
|
||||
|
||||
location = /.well-known/carddav { return 301 /remote.php/dav/; }
|
||||
location = /.well-known/caldav { return 301 /remote.php/dav/; }
|
||||
location = /.well-known/carddav {
|
||||
return 301 /remote.php/dav/;
|
||||
}
|
||||
location = /.well-known/caldav {
|
||||
return 301 /remote.php/dav/;
|
||||
}
|
||||
|
||||
location /.well-known/acme-challenge { try_files $uri $uri/ =404; }
|
||||
location /.well-known/pki-validation { try_files $uri $uri/ =404; }
|
||||
location /.well-known/acme-challenge {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
location /.well-known/pki-validation {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
|
||||
# Let Nextcloud's API for `/.well-known` URIs handle all other
|
||||
# requests by passing them to the front-end controller.
|
||||
@@ -104,8 +119,12 @@ server {
|
||||
}
|
||||
|
||||
# Rules borrowed from `.htaccess` to hide certain paths from clients
|
||||
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/) { return 404; }
|
||||
location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) { return 404; }
|
||||
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/) {
|
||||
return 404;
|
||||
}
|
||||
location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {
|
||||
return 404;
|
||||
}
|
||||
|
||||
# Ensure this block, which passes PHP files to the PHP process, is above the blocks
|
||||
# which handle static assets (as seen below). If this block is not declared first,
|
||||
@@ -124,8 +143,8 @@ server {
|
||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||
fastcgi_param PATH_INFO $path_info;
|
||||
|
||||
fastcgi_param modHeadersAvailable true; # Avoid sending the security headers twice
|
||||
fastcgi_param front_controller_active true; # Enable pretty urls
|
||||
fastcgi_param modHeadersAvailable true; # Avoid sending the security headers twice
|
||||
fastcgi_param front_controller_active true; # Enable pretty urls
|
||||
fastcgi_pass 127.0.0.1:9000;
|
||||
|
||||
fastcgi_intercept_errors on;
|
||||
@@ -138,7 +157,7 @@ server {
|
||||
location ~ \.(?:css|js|mjs|svg|gif|png|jpg|ico|wasm|tflite|map|ogg|flac)$ {
|
||||
try_files $uri /index.php$request_uri;
|
||||
add_header Cache-Control "public, max-age=15778463, $asset_immutable";
|
||||
access_log off; # Optional: Don't log access to assets
|
||||
access_log off; # Optional: Don't log access to assets
|
||||
|
||||
location ~ \.wasm$ {
|
||||
default_type application/wasm;
|
||||
@@ -148,8 +167,8 @@ server {
|
||||
|
||||
location ~ \.woff2?$ {
|
||||
try_files $uri /index.php$request_uri;
|
||||
expires 7d; # Cache-Control policy borrowed from `.htaccess`
|
||||
access_log off; # Optional: Don't log access to assets
|
||||
expires 7d; # Cache-Control policy borrowed from `.htaccess`
|
||||
access_log off; # Optional: Don't log access to assets
|
||||
}
|
||||
|
||||
# Rule borrowed from `.htaccess`
|
||||
@@ -157,6 +176,14 @@ server {
|
||||
return 301 /remote.php$request_uri;
|
||||
}
|
||||
|
||||
# Support for the Client Push (notify_push) plugin, needs mod installed https://github.com/linuxserver/docker-mods/tree/nextcloud-notify-push
|
||||
location ^~ /push/ {
|
||||
proxy_pass http://127.0.0.1:7867/;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "Upgrade";
|
||||
}
|
||||
|
||||
location / {
|
||||
# enable for basic auth
|
||||
#auth_basic "Restricted";
|
||||
@@ -164,9 +191,4 @@ server {
|
||||
|
||||
try_files $uri $uri/ /index.php$request_uri;
|
||||
}
|
||||
|
||||
# deny access to .htaccess/.htpasswd files
|
||||
location ~ /\.ht {
|
||||
deny all;
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user