ownCloud Guides

Install ownCloud on Debian Machine

The ownCloud_Project documentation

Installation

export OWNCLOUD_URL="https://data.havlas.me"

sudo wget -O /usr/local/bin/owncloud https://github.com/owncloud/ocis/releases/download/v8.0.0/ocis-8.0.0-linux-amd64
sudo chmod 0755 /usr/local/bin/owncloud
sudo mkdir -p /etc/owncloud
sudo mkdir -p /var/lib/owncloud
sudo useradd --system --no-create-home --shell /usr/sbin/nologin owncloud
sudo chown owncloud:owncloud /var/lib/owncloud
sudo chmod 0700 /var/lib/owncloud

cat << EOF | sudo tee /etc/default/owncloud
# https://doc.owncloud.com/ocis/next/deployment/services/env-vars-special-scope.html#global-environment-variables

OCIS_URL=${OWNCLOUD_URL}
OCIS_INSECURE=false

OCIS_LOG_LEVEL=ERROR

OCIS_CONFIG_DIR=/etc/owncloud
OCIS_BASE_DATA_PATH=/var/lib/owncloud
EOF

cat << EOF | sudo tee /etc/systemd/system/owncloud.service
[Unit]
Description=ownCloud

[Service]
Type=simple
User=owncloud
Group=owncloud
EnvironmentFile=/etc/default/owncloud
ExecStart=/usr/local/bin/owncloud server
Restart=always
LimitNOFILE=65536

NoNewPrivileges=yes
ProtectSystem=full
ProtectHome=yes
PrivateTmp=yes

[Install]
WantedBy=multi-user.target
EOF

set -a
source /etc/default/owncloud
set +a
sudo -E owncloud init
sudo chown owncloud /etc/owncloud/ocis.yaml

sudo systemctl daemon-reload
sudo systemctl enable --now owncloud.service

Installing Radicale on Debian

Installation

sudo apt update
sudo apt install radicale python3-ldap3

sudo chown -R radicale:root /var/lib/radicale
sudo chmod 750 /var/lib/radicale

Configuration

[server]
hosts = 0.0.0.0:5232

[auth]
type = ldap

ldap_uri = ldaps://10.30.30.30:9235
ldap_base = ou=users,o=libregraph-idm

ldap_reader_dn = uid=reva,ou=sysusers,o=libregraph-idm
ldap_reader_password = YOUR_REVA_PASSWORD

ldap_filter = (uid={0})

[rights]
type = owner_only

Use ownCloud LDAP

lxc network create radicale-ldap \
    ipv4.address=10.30.30.1/24 \
    ipv4.dhcp=true \
    ipv6.address=none

lxc network set radicale-ldap ipv4.nat false
lxc network set radicale-ldap ipv4.routing true
lxc network set net30 raw.dnsmasq "dhcp-option=3"

lxc network attach radicale-ldap data eth1
lxc network attach radicale-ldap contacts eth1
lxc config device set data eth1 ipv4.address 10.30.30.30
lxc config device set data eth1 ipv4.address 10.30.30.32

IDM_LDAPS_ADDR=10.30.30.30:9235
OCIS_LDAP_URI=ldaps://10.30.30.30:9235

nft add table inet isolate
nft add chain inet isolate fwd.radicale-ldap '{ type filter hook forward priority -10; policy accept; }'
nft add rule inet isolate fwd.radicale-ldap ip saddr 10.30.30.0/24 ip daddr != 10.30.30.0/24 drop
nft add rule inet isolate fwd.radicale-ldap ip daddr 10.30.30.0/24 ip saddr != 10.30.30.0/24 drop