Nextcloud

12 readers

1 users here now

A community for discussing all things related to Nextcloud.

Federation link: Search to federate this sub to your instance

Other resources:

Official forum: https://help.nextcloud.com/

founded 1 year ago

MODERATORS

[email protected]

Nextcloud server auto update? (feddit.de)

submitted 1 year ago by [email protected] to c/[email protected]

6 comments fedilink hide all child comments

Is it possible to configure nextcloud to automatically update? At least for minor, non-breaking changes, or when all apps are compatible?

I'm not comfortable with running a public seever without the latest security updates.

If nextcloud doesn't do auto updates, is this something that managed nextcloud service providers usually do for you on a paid plan?

top 6 comments

sorted by: hot top controversial new old

[–] [email protected] 2 points 11 months ago

I went back and read this and you should be able to with docker compose and watchtower.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

I don't know to much about security, its all just a hobby for me but maybe it could help you.
As far as I know, basically only open Ports are potential security risks. \ So I would

close everything down besides 443 80 and 22,
disable password based login for ssh
use the snap version since it self updates(I don’t know when the alternatives update)
Us a “Server” OS/ LTS

I personally use OpenSuse Leap with yast2 online_update_configuration configured to update patch one a week, but you can do this in every distro with cron jobs.

[–] [email protected] 1 points 1 year ago (1 children)

Yes, but 443/80 must be open and public. This lets an attacker exploit a (pre-auth) vulnerable in php or nextcloud.

[–] [email protected] 1 points 1 year ago

I think the best you can do I stay up to date

[–] [email protected] 1 points 1 year ago

if you are using the docker stack, use watchtower to auto update the containers.