In this post, I’ll walk you through how to set up ownCloud with Caddy for a secure, personal cloud service. I wrote this guide while configuring on Ubuntu 14.<\/p>\n
A quick introduction to ownCloud<\/a> for those who never heard about it (as found on Wikipedia):<\/p>\n OwnCloud (stylized ownCloud) is a suite of client-server software for creating file hosting services and using them. OwnCloud is functionally very similar to the widely used Dropbox, with the primary functional difference being that OwnCloud is free and open-source, and thereby allowing anyone to install and operate it without charge on a private server, with no limits on storage space (except for disk capacity or account quota) or the number of connected clients.<\/p><\/blockquote>\n ownCloud requires a database server, so we’ll start by installing MariaDB. Once you have MariaDB installed you need to secure your installation. This will guide you through some steps.<\/p>\n Now you need to login to the MySQL command line with the root credentials. Once logged in we create a new database for ownCloud:<\/p>\n and a new user:<\/p>\n and give that user access to the newly created database:<\/p>\n Now you have a user Since PHP 7 was released a couple of months ago, there is no reason not to install this newer version.<\/p>\n First we need to add the repository which contains PHP 7:<\/p>\n Now we can install PHP:<\/p>\n Simply installing PHP isn’t enough, in order to have ownCloud working properly, you also need some extra PHP extensions. A list of all ownCloud requirements can be found here<\/a>. The extensions below are recommended for ownCloud and not included in the default PHP installation:<\/p>\n You can install them all at once:<\/p>\n If you need previews for videos and documents you also need to install the following (non-PHP) packages:<\/p>\n For optimal integration with Caddy, accepting PHP-FPM request on a TCP socket instead of a Unix socket is better: Don’t forget to restart PHP-FPM: I made the following Caddyfile together with mholt<\/em> and dprandzioch<\/em>. The config contains everything you need for hosting ownCloud server and also supports the desktop and mobile clients.<\/p>\nInstalling MariaDB<\/h2>\n
\nThe following command will install MariaDB server and client:<\/p>\n$ sudo apt-get install mariadb-server<\/code><\/pre>\n$ sudo \/usr\/bin\/mysql_secure_installation<\/code><\/pre>\nCreating the ownCloud user and database<\/h2>\n
\nUse the following command, and type your root password.<\/p>\n$ mysql -u root -p<\/code><\/pre>\nMariaDB [(none)]> create database owncloud;<\/code><\/pre>\nMariaDB [(none)]> grant usage on *.* to owncloud@localhost identified by 'somepassword';<\/code><\/pre>\nMariaDB [(none)]> grant all privileges on owncloud.* to owncloud@localhost;<\/code><\/pre>\nowncloud<\/code> with password somepassword<\/code> which has access to the database called owncloud<\/code>.<\/p>\nInstalling PHP-FPM<\/h2>\n
$ sudo add-apt-repository ppa:ondrej\/php\r\n$ sudo apt-get update<\/code><\/pre>\n$ sudo apt-get install php7.0-fpm<\/code><\/pre>\n\n
$ sudo apt-get install php7.0-mysql php7.0-gd php7.0-curl php7.0-intl php7.0-mcrypt <\/code><\/pre>\n\n
\nReplace listen = \/run\/php\/php7.0-fpm.soc<\/code> to listen = 127.0.0.1:9000<\/code> in \/etc\/php\/7.0\/fpm\/pool.d\/www.conf<\/code>.<\/p>\nsudo service php7.0-fpm restart<\/code> after installing all extensions.<\/em><\/p>\nCaddyfile<\/h2>\n
my-owncloud-site.com {\r\n\r\n root owncloud\r\n log owncloud\/access.log\r\n errors owncloud\/access.log\r\n\r\n fastcgi \/ 127.0.0.1:9000 php {\r\n env PATH \/bin\r\n }\r\n\r\n rewrite {\r\n r ^\/index.php\/.*$\r\n to \/index.php?{query}\r\n }\r\n\r\n # client support (e.g. os x calendar \/ contacts)\r\n redir \/.well-known\/carddav \/remote.php\/carddav 301\r\n redir \/.well-known\/caldav \/remote.php\/caldav 301\r\n\r\n # remove trailing \/ as it causes errors with php-fpm\r\n rewrite {\r\n r ^\/remote.php\/(webdav|caldav|carddav)(\\\/?)$\r\n to \/remote.php\/{1}\r\n }\r\n\r\n rewrite {\r\n r ^\/remote.php\/(webdav|caldav|carddav)\/(.+)(\\\/?)$\r\n to \/remote.php\/{1}\/{2}\r\n }\r\n\r\n status 403 \/forbidden\r\n\r\n # .htacces \/ data \/ config \/ ... shouldn't be accessible from outside\r\n rewrite {\r\n r ^\/(?:\\.htaccess|data|config|db_structure\\.xml|README)\r\n to \/forbidden\r\n }\r\n \r\n header \/ Strict-Transport-Security \"15768000\"\r\n \r\n}<\/code><\/pre>\n