The history of creating a home cloud. Part 4. Update 2018 - Debian 9 and Nextcloud 13

Since the publication of the last three parts, I received some feedback from people who, having never used linux, were able to successfully “raise” their home servers using the instructions provided. I was not going to make a supplement on updating the software, assuming that there is a good base, starting from which everyone will be able to completely independently, with time and desire, update their web server and cloud engine. However, after I started this myself, as always there were some moments, the coverage of which can help the newcomer save time. And I decided to write this "differential" part, departing from the principle of "all in one article." Therefore, in the first place, this material will be of interest to those who have familiarized in sufficient detail with the three previous articles and / or put them in the bookmarks. The use of new software invalidates some of the previously described instructions, and the fourth part will contain only updates of such information.

Briefly, we are building a new server on Debian 9 instead of 8, changing the SQL to MariaDB open, and PHP 5 to a faster PHP 7. The Nextcloud engine will update from version 11 to 13. I’ll also mention how much we follow the rake - first along and then across.

---

Table of contents

Part 1. Setting up a Debian environment for everyday use.
Part 2. Creating a server - setting LAMP in Debian
Part 3. Creating a personal cloud - installing and configuring Nextcloud
Part 4. Update 2018 - Debian 9 and Nextcloud 13
')

---

Quick chapter navigation

Setting up a Debian environment for everyday use
Creating a server - setting LAMP in Debian
Install and configure Nextcloud
A couple of links to read on Nextcloud

---

Setting up a Debian environment for everyday use

The basic setting is described in the first part . The graphical interface and the software suite as a whole have changed little, and these changes are intuitive.

In the control panel, you do not need to assign a button for switching languages ​​as the switch is set during the installation of the system. Instead, you should assign a shortcut key to quickly launch the console:

- Keyboard: Shortcut Keys -> Additional Combinations -> Add a new item called “Terminal” and the “x-terminal-emulator” command. After adding, click on the label "Off" and enter the combination of two keys: Super (Win) + t.

We have the ninth version of the Debian system, codenamed Stretch. Therefore, the list of repositories will now look like this:

deb security.debian.org/debian-security stretch / updates main contrib non-free
deb-src security.debian.org/debian-security stretch / updates main contrib non-free

# updates
deb httpredir.debian.org/debian stretch-updates main contrib non-free
deb-src httpredir.debian.org/debian stretch-updates main contrib non-free

# binary and source packages
deb httpredir.debian.org/debian stretch main contrib non-free
deb-src httpredir.debian.org/debian stretch main contrib non-free

# backports
# deb httpredir.debian.org/debian stretch-backports main contrib non-free
# deb-src httpredir.debian.org/debian stretch-backports main contrib non-free

At the gnome configuration stage, you should delete the file /usr/share/applications/gksu.desktop, because in this version, starting from the terminal menu of the superuser still works once, if at all. In this respect, we returned to Debian 7. In general, it is not clear why in the eight it worked stably, since in one of the explanations from the developer gnome I understood that such functionality was cut due to its insecurity. In Debian 9, to access the superuser console, you need to open a normal terminal (Win + T) and enter the command
$ su

then enter the password from the superuser.

Settings via gnome-tweak-tool have not changed. But we were able to surprise: in the new version of the gnome environment, it is impossible to configure the computer to turn off by the power button! Very controversial course of the GUI development team, I did not find a quick solution, so I set up the power section as follows:

- Power supply: when you press the power button, set the action to Nothing
- Power supply: ON "Do not put into standby mode when closing the lid"

In the first article I did not pay special attention to the feature of the work gksu. If you run Double Commander [root] from the menu and enter a password, the next calls for some time will not ask for the superuser password. This caching is not very secure, so the gnome configuration ends with the following actions:

- Open the Double Commander favorites menu [root], uncheck the "Remember password" box (now it will be removed by default for all applications) and enter the root password
- Copy shortcuts to the desktop /usr/share/applications/doublecmd.desktop and /usr/share/applications/firefox-esr.desktop and run them, allowing execution.

With the assembly of the new Double Commander, the rake field turned out, which I was full of. Generally speaking, collecting it is not necessary at all - you can download and install ready-made packages. The point is, if you definitely need a fresh version of the program. The problems began with the fact that the previously configured IDE did not want to compile the downloaded project. I had to read the development page and find out that for Double Commander 0.9.x branches it was recommended to use the Lazarus 1.6.4 development environment (the link for downloading packages is listed in the first part):

# dpkg -i fpc_3.0.2-170225_amd64.deb
# dpkg -i fpc-src_3.0.2-170225_amd64.deb
# dpkg -i lazarus-project_1.6.4-0_amd64.deb

Further the source code is downloaded and compiled. It should be noted that, starting with version 0.8.x, a new component has appeared, so now their list is as follows:

- chsdet / chsdet.lpk
- CmdLine / cmdbox.lpk
- multithreadprocs / multithreadprocslaz.lpk
- dcpcrypt / dcpcrypt.lpk
- doublecmd / doublecmd_common.lpk
- KASToolBar / kascomp.lpk
- gifanim / pkg_gifanim.lpk
- synunihighlighter / synuni.lpk
- viewer / viewerpackage.lpk

After assembling and installing the package, an unattractive picture opens: there is no list of languages, toolbar icons and file labels in the file panels are not displayed, everything looks crooked. At first, I thought that somewhere I was wrong with the IDE or the build setup. After the effect was reproduced a couple of times on a clean system (here it is - the advantage of using stored virtual machines) I had to return to Debian 8.x Wednesday, but even there I had a failure. I tried to build in Lazarus 1.8.0 / 1.8.2 on Debian 8/9, but it was the same everywhere, except once (!), When I got a normal package. At the program forum I was not particularly helped, I had to figure it out myself. If you put assembled “bad” and “good” packages on two identical systems, you can notice some interesting things that suggest that when you build a package, checkinstall somehow works incorrectly.

In / usr / lib / doublecmd there should be symbolic links doc, highlighters, language, pixmaps. But in reality, these links are located in the same daddy: doc / doc, highlighters / highlighters, etc. If you manually restore links from these folders to / usr / lib / doublecmd and delete the folders, you get a fully working Double Commander.

I resolved this situation by repacking the package with the changes I needed. Not the best option, frank crutch, but it works.

Suppose I got a “bad” package doublecmd_0.9.0-1.gtk2_amd64.deb. First you need to open (unzip) the resulting package:

# mkdir dir | dpkg-deb -R doublecmd_0.9.0-1.gtk2_amd64.deb dir

Follow the path dir / usr / lib / doublecmd and see instead of symbolic links to doc, highlighters, language, pixmaps there are real directories that contain the links we need - the package is definitely going to be crooked and you need to copy symbolic links from the appropriate folders, delete folders and transfer links back:

# cp -P dir / usr / lib / doublecmd / {doc / doc, highlighters / highlighters, language / language, pixmaps / pixmaps} dir /
# rm -R dir / usr / lib / doublecmd / {doc, highlighters, language, pixmaps}
# cp -P dir / {doc, highlighters, language, pixmaps} dir / usr / lib / doublecmd /
# rm dir / {doc, highlighters, language, pixmaps}

Build the package back and delete the working directory:

# dpkg -b dir doublecmd_0.9.0-1.gtk2_amd64.deb_good.deb
# rm -R dir

---

Creating a server - setting LAMP in Debian

Detailed server setup is described in the second part . The principle of setting and working with a web server has not changed, since its main components have changed little. Apache has just been updated. The SQL update on MariaDB is seamless, which is not surprising given the high compatibility with MySQL that is being laid. PHP, though much prettier, but is updated completely unnoticed. Perhaps it would be worth changing apache to nginx and abandon the self-signed certificate in favor of the free Let's Encrypt, but, apparently, not this time.

Software installation:

# apt-get install apache2 apache2-doc
# apt-get install mariadb-client mariadb-server phpmyadmin
# apt-get install php7.0 php7.0-mysql libapache2-mod-php7.0

When installing phpmyadmin, you need to select a preset for the apache2 server. When asked to set up the base for the first time, answer affirmatively and set a password for the future phpmyadmin user.

Further adjustment occurs in exactly the same way as described in the second part. Versions of apache2 and openssl have changed slightly, so the SSL configuration code is almost the same:

# 29-04-2018 / for apache2 2.4.25 & openssl 1.0.1f
# from mozilla.imtqy.com/server-side-tls/ssl-config-generator
# parametrs help: raymii.org/s/tutorials/Strong_SSL_Security_On_Apache2.html
# modern configuration, tweak to your needs
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384: ECDHE-RSA-AES256-GCM-SHA384: ECDHE-ECDSA-CHACHA20-POLY1305: ECDHE-RSA-CHACHA20-POLY1305; -AES128-GCM-SHA256: ECDHE-ECDSA-AES256-SHA384: ECDHE-RSA-AES256-SHA384: ECDHE-ECDSA-AES128-SHA256: ECDHE-RSA-AES128-SHA256
SSLHonorCipherOrder on
SSLCompression off
SSLSessionTickets off

# OCSP Stapling, only in httpd 2.3.3 and later
SSLUseStapling on
SSLStaplingResponderTimeout 5
SSLStaplingReturnResponderErrors off
SSLStaplingCache shmcb: / var / run / ocsp (128000)

When configuring PHP for data caching, I installed not only Memcached, but Redis, which is not necessary to customize (the Memcached setting is in the second part):

# apt-get install memcached php7.0-memcached php7.0-apcu
# apt-get install redis-server, php-redis

At the end of the second part, I provided a useful reference material. Despite the high compatibility between MySQL and MariaDB, the MySQL reference material becomes somewhat incorrect and requires updating.

You should start with the fact that when working from the superuser to the mariadb terminal, it lets us under any password! By default, when you start the mysql client under the system root user, and when specifying the login -u root, it connects by default through the so-called UNIX Sockets, and does not check the password, even if it is and / or specified. This situation is corrected as follows.

Log into mysql (password - any!):

# mysql -u root

Switch base:

MariaDB [(none)]> use mysql;

Disable UNIX Sockets:

MariaDB [mysql]> update user set plugin = '' where User = 'root';

Exit mysql:

MariaDB [mysql]> quit;

If you now try to enter the mysql terminal, the system will ask for a password. To enable such functionality back you need to repeat the same actions, but instead of disabling, enable UNIX Sockets:

MariaDB [mysql]> update user set plugin = 'unix_socket' where User = 'root';

Changing user passwords has become somewhat more complicated. To install the new password pass123 user user123 (for the root user changes the same way), you must perform the following steps.

Log in to mysql:

# mysql -u root -p

Set a new password:

MariaDB [(none)]> SET PASSWORD FOR 'user123' @ 'localhost' = PASSWORD ('pass123');

Update Privilege Table:

MariaDB [(none)]> FLUSH PRIVILEGES;

Quit mysql:

MariaDB [(none)]> exit

---

Install and configure Nextcloud

The server preparation and installation principle are completely identical to the description of the third part , unless you additionally need to install some modules for PHP7:

# apt-get install curl libcurl3 libcurl3-dev php7.0-curl

Next, deploy the engine and organize a permanent place to connect content. And here we are waiting for a good rake. The fact is that if a folder connected via VMWare Shared Folders is used as a place, the previously used command to “correctly” mount this folder, as well as the nxcdata_automount.sh script, will refuse to work. It was unexpected and had to deal with it for some time. The reason was that for some reason the vmhgfs module was not installed. Initially, I thought that the problem was that I did not install linux-headers and the vmhgfs module did not compile, but it would be immediately noticeable and ... the VMWare Shared Folders folders are somehow automatically mounted in the system! Then there was a series of experiments with Debian 8/9 and different versions of vmware-tools, but everything was in vain - it was this module that never appeared in the installed packages in Debian 9. You can find out which packages are installed with a name starting with vm like this:

# lsmod | grep -i vm

After searching the Internet, which was already pretty broken by the Roskomnadzor, when the technical reference information you need is clearly not terrorist, not extremist or other similarly targeted, a link appears like “The site is blocked by the decision ...”, I found the instruction on the VMWare website, in which it was suggested to first install open-vmtools, and then “roll in” the original vmware-tools set. But it did not help. The reason was completely different. On the githaba, I found a topic, from which it was possible to understand that the kernel uses 4.9 instead of 3.16 in Debian 8 and the Shared Folders client was transferred to the connection via FUSE , so now the mount command will look like this:

# mount -t fuse.vmhgfs-fuse -o allow_other, umask = 007 .host: / vmw-nxcdata / mnt / vmw-nxcdata

Accordingly, my script will also undergo changes:

#!/bin/sh # nxcdata_automount.sh 1.1 ### BEGIN INIT INFO # Provides: myscript # Required-Start: # Required-Stop: # Default-Start: 1 2 3 4 5 # Default-Stop: 0 6 # Short-Description: nxcdata_automount.sh 1.1 # Description: nxcdata_automount.sh 1.1 ### END INIT INFO . /lib/lsb/init-functions # Start actions perform_start() { log_daemon_msg «Start nxcdata_automount» sleep 30 mount -t fuse.vmhgfs-fuse -o allow_other,umask=007 .host:/vmw-nxcdata /mnt/vmw-nxcdata #mount -t ntfs-3g -o uid=www-data,gid=www-data,fmask=007,dmask=007 /dev/sdb1 /mnt/sdb1 #mount -t ext4 /dev/sdb1 /mnt/sdb1 log_end_msg 0 return 0 } # Stop actions perform_stop() { log_daemon_msg «Stop nxcdata_automount» umount /mnt/vmw-nxcdata log_end_msg 0 return 0 } case $1 in start) perform_start ;; stop) perform_stop ;; *) echo “Usage: /etc/init.d/myscript {start|stop}” exit 3 ;; esac 

After organizing the content storage and initial configuration of the service through the browser, you need to make changes in the config.php. These changes I will describe fully below.

Please note that the nxcdata_automount.sh 1.1 script has failed to restart the service fail2ban. The fact is that earlier the service was crookedly started due to the fact that when the system was booted, the place where the content was stored was not mounted, which made the nextcloud.log log file unavailable. The logical solution to the problem is to transfer the log to the / var / log directory. The problem is that in Nextcloud 11 for some reason I did not manage to transfer the log to another location, but in Nextcloud 13 there were no problems with this.

Create a file:

# touch /var/log/nextcloud.log

Configuring access:

# chmod 644 /var/log/nextcloud.log

We change the rights:

# chown www-data /var/log/nextcloud.log

Open the file:

# nano /var/www/nextcloud/config/config.php

Add the following before “);”:

'log_type' => 'file',
'logtimezone' => '/ Europe / Moscow',
'logfile' => '/var/log/nextcloud.log',
'loglevel' => '2',

Turn on caching - add the following before “);”:

'memcache.local' => '\\ OC \\ Memcache \\ Redis',
'redis' =>
array (
'host' => 'localhost',
'port' => 6379,
),
'memcache.distributed' => '\\ OC \\ Memcache \\ Memcached',
'memcached_servers' =>
array (
0 =>
array (
0 => 'localhost',
1 => 11211,
),
),

Please note that we replaced caching with Redis, which will now be used for local caching. However, Memcached will be used for a distributed cloud storage system.

We include the mechanism of safe resolution of the problem of blocked files - we add the following before ");":

'filelocking.enabled' => true
'memcache.locking' => '\ OC \ Memcache \ Redis',
'redis' => array (
'host' => 'localhost',
'port' => 6379,
'timeout' => 0.0,
'password' => '', // Optional, if not defined no password will be used.
),

Allowing external access to the site - in the trusted_domains section, add the IP address of the server on which NexCloud is installed to the array, for example, for the address 192.168.233.100:

'trusted_domains' =>
array (
0 => '127.0.0.1',
1 => '192.168.233.100',
),

It must be remembered that when you start the server from a virtual machine, to access from a local network, you will need to add the IP address of the network interface of the host machine to the list.

In accordance with the recommendations on the Nextcloud help page, we enable opcache for PHP.

Open the file:

# nano /etc/php/7.0/apache2/php.ini

Add the following to the opcache section:

opcache.enable = 1
opcache.enable_cli = 1
opcache.interned_strings_buffer = 8
opcache.max_accelerated_files = 10,000
opcache.memory_consumption = 128
opcache.save_comments = 1
opcache.revalidate_freq = 1

The old fail2ban settings for Nextcloud 13 are no good - I had to adjust the description of the filter nextcloud.conf (/etc/fail2ban/filter.d/nextcloud.conf) and now it looks like this:

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)

---

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)

---

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)

---

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)

---

[INCLUDES]
failregex = {"reqId":".*","level":2,"time":".*","remoteAddr":".*","user":".*","app":"core","method":"POST","url":".*","message":"Login failed: '.*' \(Remote IP: ''\)","userAgent":".*","version":".*"}
ignoreregex =


jail.local:

# nextcloud
[nextcloud]
enabled = true
port = http,https
protocol = tcp
filter = nextcloud
logpath = /var/log/nextcloud.log
maxretry = 6


, fail2ban, maxretry, . , DEFAULT LAMP? , . fail2ban . DEFAULT . .

apache. , /var/www/.htaccess. , default-ssl.conf /var/www/nextcloud . , apache :
[Mon May 07 20:35:42.113958 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/login
[Mon May 07 20:35:43.161755 2018] [authz_core:error] [pid 3210] [client 192.168.0.2:50744] AH01630: client denied by server configuration: /var/www/apps
[Mon May 07 20:35:43.547090 2018] [authz_core:error] [pid 3212] [client 192.168.0.2:50740] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.610228 2018] [authz_core:error] [pid 3211] [client 192.168.0.2:50738] AH01630: client denied by server configuration: /var/www/js
[Mon May 07 20:35:43.618623 2018] [authz_core:error] [pid 3209] [client 192.168.0.2:50743] AH01630: client denied by server configuration: /var/www/apps
fai2ban /var/www/nextcloud. – , Nextclod . /var/www/.htaccess :
Require all granted
«» Nextcloud, . , , redis. – «Undefined index… Storage.php#757» , , . , 11 . – htaccess – . nextcloud, . , , «» admin user . «» , , user1, . , 500 ( ) . admin user, . , «» . .

– , Debian 8. - . \var\www\nextcloud\lib\private\Files\Filesystem.php, $blacklist, htaccess . , nextcloud . \core\signature.json 11, 11- , , . , 13- .

, , - . Nextcloud 13 , , -, PHP7 .

. , . , . , .


Nextcloud
Nextcloud.

- Nextcloud 12, wtigga « VPS: «» Nextcloud ». LetsEncrypt .
- , Nextcloud ? denismosolov « Nextcloud Talk » Nextcloud 13.


, .


. 4. 2018 – Debian 9 Nextcloud 13.
: 1.0.0.
: 17.05.2018.
: 17.05.2018.

1.0.0 [17-05-2018]
.


, , - . , . GT 8 2018 . - , , , 4 ;)