• Centos7.9 脚本一键部署nextcloud，配置Nginx代理Https。

    目录

     一键安装nextcloud

    出现错误TypeError Cannot read properties of undefined (reading ‘writeText‘)

    生成自签名SSL证书

    编辑Nginx配置文件

    启动Nginx

     一键安装nextcloud

    本脚本参考文章，本文较长建议先看完在操作！！！

    全网最详细CentOS 7下部署最新版nextcloud教程_centos7 安装nextcloud-CSDN博客


    Nginx服务配置篇·第三课：NextCloud部署安装-腾讯云开发者社区-腾讯云

    此安装脚本不包含安装数据库，且默认授权/var/www/html    为nextcloud的数据目录

    并且使用官方推荐的Apache httpd代理/var/www/html 即代理nextcloud（这种方式非https 在v26+版本中会出现无法自动复制分享链接的问题）

    且安装后最好重启下 确认SELinux已经关闭

    1. #!/bin/bash
    2.  
    3. # 确保脚本以root权限运行
    4. if [ "$EUID" -ne 0 ]; then
    5.   echo "请以root用户运行此脚本"
    6.   exit
    7. fi
    8.  
    9. # 检查并卸载旧版本的PHP
    10. echo "检查并卸载旧版本的PHP..."
    11. if php -v > /dev/null 2>&1; then
    12.   yum remove -y php*
    13. fi
    14.  
    15. # 安装EPEL仓库和Remi仓库
    16. echo "安装EPEL仓库和Remi仓库..."
    17. yum install -y epel-release
    18. yum install -y https://rpms.remirepo.net/enterprise/remi-release-7.rpm
    19.  
    20. # 安装yum-utils，如果尚未安装
    21. echo "检查并安装yum-utils..."
    22. if ! command -v yum-config-manager &> /dev/null; then
    23.   yum install -y yum-utils
    24. fi
    25.  
    26. # 启用PHP 8.0仓库并安装PHP及其扩展
    27. echo "启用PHP 8.0仓库并安装PHP..."
    28. yum-config-manager --enable remi-php80
    29. yum install -y php php-bcmath php-cli php-common php-devel php-fpm php-gd php-intl php-ldap php-mbstring php-mysqlnd php-odbc php-pdo php-pear php-pecl-xmlrpc php-pecl-zip php-process php-snmp php-soap php-sodium php-xml
    30.  
    31. # 启动PHP-FPM服务并设置开机自启
    32. echo "启动PHP-FPM服务并设置开机自启..."
    33. systemctl start php-fpm
    34. systemctl enable php-fpm
    35.  
    36. # 安装Apache服务器
    37. echo "安装Apache服务器..."
    38. yum remove httpd*
    39. yum install httpd
    40. systemctl start httpd
    41. systemctl enable httpd
    42.  
    43. # 开放CentOS 7的80端口并配置防火墙
    44. echo "开放80端口并配置防火墙..."
    45. systemctl stop firewalld
    46. firewall-cmd --zone=public --add-port=80/tcp --permanent
    47. firewall-cmd --reload
    48.  
    49. # 获取Nextcloud安装包并解压
    50. echo "获取Nextcloud安装包并解压..."
    51. wget https://download.nextcloud.com/server/release/latest.zip
    52. yum install -y unzip
    53. unzip latest.zip -d /var/www/html
    54.  
    55. # 将Nextcloud文件转移到Apache根目录并设置权限
    56. echo "设置Nextcloud文件权限..."
    57. chown -R apache:apache /var/www/html
    58. chmod -R 755 /var/www/html
    59.  
    60. # 关闭SELinux
    61. echo "关闭SELinux..."
    62. sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
    63. setenforce 0
    64.  
    65. echo "Nextcloud安装准备完成，现在可以进行前端配置。"
    66.  
    67. # 注意：以上脚本不包含数据库安装和配置步骤，需要用户自行配置数据库。

    上述安装完成后存在一个新的问题

    无法正常复制分享链接

    出现错误TypeError Cannot read properties of undefined (reading ‘writeText‘)

    原因是没有https 导致的，修复此问题的脚本为（依赖于上述步骤）

    1. # 关闭httpd的代理 关闭自启动
    2. systemctl stop httpd
    3. systemctl disable httpd
    4.  
    5. # 安装nginx
    6. yum -y install nginx
    7.

    首先，我们需要创建一个自签名证书。在你的主机上运行以下命令：

    1. sudo mkdir -p /etc/nginx/certs
    2. sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/certs/nextcloud.key -out /etc/nginx/certs/nextcloud.crt

    这个随便填写一下即可。

    然后检查这两个文件是否存在

    /etc/nginx/certs/nextcloud.crt
    /etc/nginx/certs/nextcloud.key

    然后，我们需要编辑Nginx的配置文件。在 /etc/nginx/conf.d/​ 或者 /etc/nginx/sites-available/​ 目录下创建一个新的配置文件，例如 nextcloud.conf​

    nano /etc/nginx/conf.d/nextcloud.conf

    内容如下（实例）

    1. upstream php-handler {
    2.     server 127.0.0.1:9000;
    3.     #server unix:/var/run/php/php7.4-fpm.sock;
    4. }
    5.  
    6. # Set the `immutable` cache control options only for assets with a cache busting `v` argument
    7. map $arg_v $asset_immutable {
    8.     "" "";
    9.     default "immutable";
    10. }
    11.  
    12.  
    13. server {
    14.     listen 80;
    15.     listen [::]:80;
    16.     server_name 192.168.252.74;
    17.  
    18.     # Prevent nginx HTTP Server Detection
    19.     server_tokens off;
    20.  
    21.     # Enforce HTTPS
    22.     return 301 https://$server_name$request_uri;
    23. }
    24.  
    25. server {
    26.     listen 443      ssl http2;
    27.     listen [::]:443 ssl http2;
    28.     server_name 192.168.252.74;
    29.  
    30.     # Path to the root of your installation
    31.     root /var/www/html;
    32.  
    33.     # Use Mozilla's guidelines for SSL/TLS settings
    34.     # https://mozilla.github.io/server-side-tls/ssl-config-generator/
    35.     ssl_certificate /etc/nginx/certs/nextcloud.crt;  # 与上面的相同
    36.     ssl_certificate_key /etc/nginx/certs/nextcloud.key;   # 与上面的相同
    37.  
    38.     # Prevent nginx HTTP Server Detection
    39.     server_tokens off;
    40.  
    41.     # HSTS settings
    42.     # WARNING: Only add the preload option once you read about
    43.     # the consequences in https://hstspreload.org/. This option
    44.     # will add the domain to a hardcoded list that is shipped
    45.     # in all major browsers and getting removed from this list
    46.     # could take several months.
    47.     #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
    48.  
    49.     # set max upload size and increase upload timeout:
    50.     client_max_body_size 8192M;
    51.     client_body_timeout 300s;
    52.     fastcgi_buffers 64 4K;
    53.  
    54.     # Enable gzip but do not remove ETag headers
    55.     gzip on;
    56.     gzip_vary on;
    57.     gzip_comp_level 4;
    58.     gzip_min_length 256;
    59.     gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
    60.     gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/wasm application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
    61.  
    62.     # Pagespeed is not supported by Nextcloud, so if your server is built
    63.     # with the `ngx_pagespeed` module, uncomment this line to disable it.
    64.     #pagespeed off;
    65.  
    66.     # The settings allows you to optimize the HTTP2 bandwitdth.
    67.     # See https://blog.cloudflare.com/delivering-http-2-upload-speed-improvements/
    68.     # for tunning hints
    69.     client_body_buffer_size 512k;
    70.  
    71.     # HTTP response headers borrowed from Nextcloud `.htaccess`
    72.     add_header Referrer-Policy                      "no-referrer"   always;
    73.     add_header X-Content-Type-Options               "nosniff"       always;
    74.     add_header X-Download-Options                   "noopen"        always;
    75.     add_header X-Frame-Options                      "SAMEORIGIN"    always;
    76.     add_header X-Permitted-Cross-Domain-Policies    "none"          always;
    77.     add_header X-Robots-Tag                         "none"          always;
    78.     add_header X-XSS-Protection                     "1; mode=block" always;
    79.  
    80.     # Remove X-Powered-By, which is an information leak
    81.     fastcgi_hide_header X-Powered-By;
    82.  
    83.     # Specify how to handle directories -- specifying `/index.php$request_uri`
    84.     # here as the fallback means that Nginx always exhibits the desired behaviour
    85.     # when a client requests a path that corresponds to a directory that exists
    86.     # on the server. In particular, if that directory contains an index.php file,
    87.     # that file is correctly served; if it doesn't, then the request is passed to
    88.     # the front-end controller. This consistent behaviour means that we don't need
    89.     # to specify custom rules for certain paths (e.g. images and other assets,
    90.     # `/updater`, `/ocm-provider`, `/ocs-provider`), and thus
    91.     # `try_files $uri $uri/ /index.php$request_uri`
    92.     # always provides the desired behaviour.
    93.     index index.php index.html /index.php$request_uri;
    94.  
    95.     # Rule borrowed from `.htaccess` to handle Microsoft DAV clients
    96.     location = / {
    97.         if ( $http_user_agent ~ ^DavClnt ) {
    98.             return 302 /remote.php/webdav/$is_args$args;
    99.         }
    100.     }
    101.  
    102.     location = /robots.txt {
    103.         allow all;
    104.         log_not_found off;
    105.         access_log off;
    106.     }
    107.  
    108.     # Make a regex exception for `/.well-known` so that clients can still
    109.     # access it despite the existence of the regex rule
    110.     # `location ~ /(\.|autotest|...)` which would otherwise handle requests
    111.     # for `/.well-known`.
    112.     location ^~ /.well-known {
    113.         # The rules in this block are an adaptation of the rules
    114.         # in `.htaccess` that concern `/.well-known`.
    115.  
    116.         location = /.well-known/carddav { return 301 /remote.php/dav/; }
    117.         location = /.well-known/caldav  { return 301 /remote.php/dav/; }
    118.  
    119.         location /.well-known/acme-challenge    { try_files $uri $uri/ =404; }
    120.         location /.well-known/pki-validation    { try_files $uri $uri/ =404; }
    121.  
    122.         # Let Nextcloud's API for `/.well-known` URIs handle all other
    123.         # requests by passing them to the front-end controller.
    124.         return 301 /index.php$request_uri;
    125.     }
    126.  
    127.     # Rules borrowed from `.htaccess` to hide certain paths from clients
    128.     location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)  { return 404; }
    129.     location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console)                { return 404; }
    130.  
    131.     # Ensure this block, which passes PHP files to the PHP process, is above the blocks
    132.     # which handle static assets (as seen below). If this block is not declared first,
    133.     # then Nginx will encounter an infinite rewriting loop when it prepends `/index.php`
    134.     # to the URI, resulting in a HTTP 500 error response.
    135.     location ~ \.php(?:$|/) {
    136.         # Required for legacy support
    137.         rewrite ^/(?!index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|oc[ms]-provider\/.+|.+\/richdocumentscode\/proxy) /index.php$request_uri;
    138.  
    139.         fastcgi_split_path_info ^(.+?\.php)(/.*)$;
    140.         set $path_info $fastcgi_path_info;
    141.  
    142.         try_files $fastcgi_script_name =404;
    143.  
    144.         include fastcgi_params;
    145.         fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    146.         fastcgi_param PATH_INFO $path_info;
    147.         fastcgi_param HTTPS on;
    148.  
    149.         fastcgi_param modHeadersAvailable true;         # Avoid sending the security headers twice
    150.         fastcgi_param front_controller_active true;     # Enable pretty urls
    151.         fastcgi_pass php-handler;
    152.  
    153.         fastcgi_intercept_errors on;
    154.         fastcgi_request_buffering off;
    155.  
    156.         fastcgi_max_temp_file_size 0;
    157.     }
    158.  
    159.     location ~ \.(?:css|js|svg|gif|png|jpg|ico|wasm|tflite|map)$ {
    160.         try_files $uri /index.php$request_uri;
    161.         add_header Cache-Control "public, max-age=15778463, $asset_immutable";
    162.         access_log off;     # Optional: Don't log access to assets
    163.  
    164.         location ~ \.wasm$ {
    165.             default_type application/wasm;
    166.         }
    167.     }
    168.  
    169.     location ~ \.woff2?$ {
    170.         try_files $uri /index.php$request_uri;
    171.         expires 7d;         # Cache-Control policy borrowed from `.htaccess`
    172.         access_log off;     # Optional: Don't log access to assets
    173.     }
    174.  
    175.     # Rule borrowed from `.htaccess`
    176.     location /remote {
    177.         return 301 /remote.php$request_uri;
    178.     }
    179.  
    180.     location / {
    181.         try_files $uri $uri/ /index.php$request_uri;
    182.     }
    183. }

    其中需要更改的配置为

    原文中的修改的配置为

    server_name cloud.example.com; #更改为自己的域名

    root /var/www/nextcloud; #更改为你的nextcloud目录

    ssl_certificate /etc/ssl/nginx/cloud.example.com.crt; #SSL证书目录，一般放.pem根证书 ssl_certificate_key /etc/ssl/nginx/cloud.example.com.key; #SSL证书目录，.key私钥

    笔者修改的是

    • /var/www/html      你的代理的nextcloud的目录 这里面包含了启动的网页

    • 192.168.252.74    更改为你的IP或者域名，笔者这里是直接使用ip代替域名

    • client_max_body_size 8192M;      此设置为你的web端可以上传的文件大小的上限,笔者设置的是8G

    • ssl_certificate /etc/nginx/certs/nextcloud.crt;  # 你的秘钥文件

      ssl_certificate_key /etc/nginx/certs/nextcloud.key;   # 你的秘钥文件

    启动Nginx
    1. nginx -t  # 检查配置是否正确
    2. systemctl reload nginx  # 重新加载配置
    3. systemctl start nginx
    4. systemctl enable nginx  # 开机自启
    5. systemctl status nginx.service  # 查看运行状态

    最后使用https访问你的域名/ip   比如https://192.168.252.74/

  • 相关阅读:
    cento常用命令
    【C语言练习——打印空心上三角及其变形】
    使用grubby更改RHEL7/8/9的默认内核
    了解Docker 依赖的linux内核技术
    代码随想录Day20 回溯算法 LeetCode77 组合问题
    uni-app点击按钮弹出提示框-uni.showModal(OBJECT),选择确定和取消
    OpenCV----Adabins单目深度估计LibTorch推理
    华为云CodeArts Check代码检查插件（IntelliJ IDEA版本）使用指南
    Java并发常见面试题
    R语言—矩阵
  • 原文地址：https://blog.csdn.net/Franciz777/article/details/137920729