Alpine Linux - User contributions [en]

Hyprland

2026-01-12T01:46:57Z

Earboxer: /* Plugins */

This wiki page is about [https://hyprland.org Hyprland], a [[wayland]] based tiling compositor with all the eyecandy, powerful plugins and much more.

Refer to [https://wiki.hyprland.org/Getting-Started/Master-Tutorial/ hyprland Tutorial] to get started on using Hyprland.

== Prerequisites ==
{{:Include:Desktop prerequisites}}
* Install [[Alpine_setup_scripts#setup-wayland-base|wayland-base]].This enables [[elogind]] as [[Seat manager|seat manager]], enables [[Repositories#Community|community repository]] and enables [[eudev]].

== Installation ==

To run the {{Pkg|hyprland|arch=}} nicely, it is likely that you will need at least those packages: {{Cmd|# apk add hyprland hyprland-plugin-manager hyprland-protocols \
hyprland-wallpapers wayland xwayland elogind elogind-openrc \
polkit-elogind polkit-openrc openrc-user-pam eudev \
eudev-openrc dbus dbus-openrc dbus-daemon-launch-helper pipewire \
pipewire-openrc pipewire-pulse pipewire-pulse-openrc \
wireplumber wireplumber-openrc
}}

Optionally {{Cmd|# apk add waybar hyprland-wallpapers \
hyprutils hyprcursor wlroots grim slurp \
wofi kitty dolphin
}}
Obviously there are other choices: `rofi`, `alacritty`, etc...

== Setup ==
As a bare minimum: {{Cmd|#setup-wayland-base}}

{{Pkg|openrc|arch=}} comes with "user services" so we can use it
to start required services when you login.

1) add user to ''seat'' group - required for elogind

2) add user to ''audio'', ''video'', ''pipewire'', ''input'' groups

3) create a symbolic link for user service {{Cmd|# /etc/init.d/user.$YOUR_USERNAME_HERE -> /etc/init.d/user}}

4) enable linger for your user
{{Cmd|# loginctl enable-linger $YOUR_USERNAME_HERE}}

5) Add required services to your user services
{{Cmd|$ ls -la /etc/user/init.d/}}
{{Cmd|$ rc-status --user}}
{{Cmd|$ for service in dbus wireplumber pipewire pipewire-pulse; do rc-update --user add "$service" && rc-service --user "$service" start; done}}

== Configuration ==

The default config is in {{Cmd|/usr/share/hypr/hyprland.conf}}
and based on that you may want to customize yours {{Cmd|~/.config/hypr/hyprland.conf}}

=== consistent icon theme ===

Depending on what applications you are running, you only need the HYPRCURSOR_THEME environment, it should work for all modern applications. But since you are reading this, you probably found an incompatible application. You have the option to disable hyprcursors, then you need only one theme. Otherwise you need to download a theme that is available as hyprcursors and xcursors (e.g. rose-pine-hyprcursor).

{{Cat|~/.config/hypr/hyprland.conf|<nowiki># Set the theme for most applications
env = HYPRCURSOR_THEME,$your_hyprcursor_theme
env = HYPRCURSOR_SIZE,24
# Set the theme for some Qt applications
env = XCURSOR_THEME,$your_xcursor_theme
env = XCURSOR_SIZE,24
# Set the theme for some GTK applications
exec-once = gsettings set org.gnome.desktop.interface cursor-theme $your_xcursor_theme
exec-once = gsettings set org.gnome.desktop.interface cursor-size 24</nowiki>}}

If you use gsettings make sure you have installed {{pkg|gsettings-desktop-schemas}} package.

== Plugins ==

=== hyprland-plugin-manager ===

In Alpine v3.22, the ''hyprland-plugin-manager'' package is available. It installs the complete development-tree of hyprland, since it requires to compile hyprland. It is possible to uninstall ''hyprland-plugin-manager'' after the plugin is compiled. This is broken in Alpine v3.23 and is slated to be removed in the future due to trouble maintaining it. See [https://gitlab.alpinelinux.org/alpine/aports/-/issues/17576 the Gitlab issue] for more information.

=== hyrpland-plugins ===

From Alpine v3.23 on or on ''edge'' it is possible to install the [https://github.com/hyprwm/hyprland-plugins official plugins] as a [https://pkgs.alpinelinux.org/package/edge/community/x86_64/hyprland-plugins package]. Check out the subpackages to install individual plugins.

=== loading plugins ===

For example, to load the ''hyprland-plugins-hyprexpo'' plugin after installing in, edit your hyprland.conf like so:

{{Cat|~/.config/hypr/hyprland.conf|<nowiki>plugin = /usr/lib/libhyprexpo.so
plugin {
hyprexpo {
columns = 3
gap_size = 0
workspace_method = first 1
}
}
</nowiki>}}

This is also useful if you have uninstalled ''hyprland-plugin-manager'' and you can't load the plugin via it.

== Troubleshooting ==

=== Black/Magenta checkerboard background: Hyprland failed to load 1 essential asset ===

As of Hyprland 0.45.0, upstream shows a scary message (and an ugly graphic) if you don't have their wallpapers installed.

The ugly graphic goes away when you've launched a [https://wiki.hyprland.org/Useful-Utilities/Wallpapers/ wallpaper utility], but the scary message remains.

The canonical way to solve this is to install {{pkg|hyprland-wallpapers}} package using the command:

{{Cmd|# apk add hyprland-wallpapers}}

Or you can just have some file at {{Path|/usr/share/hypr/wall0.png}} or {{Path|/usr/local/share/hypr/wall0.png}} and modify your config file to have a line as follows: {{Cat|~/.config/hypr/hyprland.conf|<nowiki>misc {
force_default_wallpaper = 0
}</nowiki>}}

=== Hyprland crashes almost immediately ===

Hyprland 0.46 has a bug where the default configuration will crash if Xwayland is not installed. You can either install {{pkg|xwayland}}, or disable in your config:

{{Cat|~/.config/hypr/hyprland.conf|<nowiki>xwayland:enabled = false</nowiki>}}

This should be fixed in the next update.

=== warning message about hyprland-qtutils/hyprland-guiutils ===

Hyprland 0.46.x to 0.51.x suggest you install hyprland-qtutils, which is not available in alpine 3.22, but is available in edge onward.

<blockquote>Your system does not have hyprland-qtutils installed. This is a runtime dependency for some dialogs. Consider installing it.</blockquote>

You can disable the check in your config like so:

{{Cat|~/.config/hypr/hyprland.conf|<nowiki>misc:disable_hyprland_qtutils_check = true</nowiki>}}

Hyprland 0.52.x and newer have changed this suggestion to install hyprland-guiutils. You can still install hyprland-qtutils to satisfy the warning, or hyprland-guiutils when it becomes available. Or you can disable the check in your config, which has been renamed:

{{Cat|~/.config/hypr/hyprland.conf|<nowiki>misc:disable_hyprland_guiutils_check = true</nowiki>}}

=== DBUS_SESSION_BUS_ADDRESS unset ===

If you're using login manager, create a copy of {{ic|/usr/share/wayland-sessions/hyprland.desktop}} that starts Hyprland within D-Bus session:

Exec=dbus-run-session -- Hyprland

Also make sure that D-Bus is started as a system service.

== See Also ==

* [https://wiki.hyprland.org Official Hyprland wiki]

[[Category:compositor]]

Hyprland

2025-11-15T02:38:51Z

Earboxer: /* warning message about hyprland-qtutils */

This wiki page is about [https://hyprland.org Hyprland], a [[wayland]] based tiling compositor with all the eyecandy, powerful plugins and much more.

Refer to [https://wiki.hyprland.org/Getting-Started/Master-Tutorial/ hyprland Tutorial] to get started on using Hyprland.

== Prerequisites ==
{{:Include:Desktop prerequisites}}
* Install [[Alpine_setup_scripts#setup-wayland-base|wayland-base]].This enables [[elogind]] as [[Seat manager|seat manager]], enables [[Repositories#Community|community repository]] and enables [[eudev]].

== Installation ==

To run the {{Pkg|hyprland|arch=}} nicely, it is likely that you will need at least those packages: {{Cmd|# apk add hyprland hyprland-plugin-manager hyprland-protocols \
hyprland-wallpapers wayland xwayland elogind elogind-openrc \
polkit-elogind polkit-openrc openrc-user-pam eudev \
eudev-openrc dbus dbus-openrc dbus-daemon-launch-helper pipewire \
pipewire-openrc pipewire-pulse pipewire-pulse-openrc \
wireplumber wireplumber-openrc
}}

Optionally {{Cmd|# apk add waybar hyprland-wallpapers \
hyprutils hyprcursor wlroots grim slurp \
wofi kitty dolphin
}}
Obviously there are other choices: `rofi`, `alacritty`, etc...

== Setup ==
As a bare minimum: {{Cmd|#setup-wayland-base}}

{{Pkg|openrc|arch=}} comes with "user services" so we can use it
to start required services when you login.

1) add user to ''seat'' group - required for elogind

2) add user to ''audio'', ''video'', ''pipewire'', ''input'' groups

3) create a symbolic link for user service {{Cmd|# /etc/init.d/user.$YOUR_USERNAME_HERE -> /etc/init.d/user}}

4) enable linger for your user
{{Cmd|# loginctl enable-linger $YOUR_USERNAME_HERE}}

5) Add required services to your user services
{{Cmd|$ ls -la /etc/user/init.d/}}
{{Cmd|$ rc-status --user}}
{{Cmd|$ for service in dbus wireplumber pipewire pipewire-pulse; do rc-update --user add "$service" && rc-service --user "$service" start; done}}

== Configuration ==

The default config is in {{Cmd|/usr/share/hypr/hyprland.conf}}
and based on that you may want to customize yours {{Cmd|~/.config/hypr/hyprland.conf}}

=== consistent icon theme ===

Depending on what applications you are running, you only need the HYPRCURSOR_THEME environment, it should work for all modern applications. But since you are reading this, you probably found an incompatible application. You have the option to disable hyprcursors, then you need only one theme. Otherwise you need to download a theme that is available as hyprcursors and xcursors (e.g. rose-pine-hyprcursor).

{{Cat|~/.config/hypr/hyprland.conf|<nowiki># Set the theme for most applications
env = HYPRCURSOR_THEME,$your_hyprcursor_theme
env = HYPRCURSOR_SIZE,24
# Set the theme for some Qt applications
env = XCURSOR_THEME,$your_xcursor_theme
env = XCURSOR_SIZE,24
# Set the theme for some GTK applications
exec-once = gsettings set org.gnome.desktop.interface cursor-theme $your_xcursor_theme
exec-once = gsettings set org.gnome.desktop.interface cursor-size 24</nowiki>}}

If you use gsettings make sure you have installed {{pkg|gsettings-desktop-schemas}} package.

== Plugins ==

=== hyprland-plugin-manager ===

From Alpine v3.22 on the ''hyprland-plugin-manager'' package is available. It installs the complete development-tree of hyprland, since it requires to compile hyprland. It is possible to uninstall ''hyprland-plugin-manager'' after the plugin is compiled.

=== hyrpland-plugins ===

From Alpine v3.23 (not yet released) on or on ''edge'' it is possible to install the [https://github.com/hyprwm/hyprland-plugins official plugins] as a [https://pkgs.alpinelinux.org/package/edge/community/x86_64/hyprland-plugins package]. Checkout the subpackages to install individual plugins.

=== loading plugins ===

{{Cat|~/.config/hypr/hyprland.conf|<nowiki>plugin = /usr/lib/libhyprexpo.so
plugin {
hyprexpo {
columns = 3
gap_size = 0
workspace_method = first 1
}
}
</nowiki>}}

This is also useful if you have uninstalled ''hyprland-plugin-manager'' and you can't load the plugin via it.

== Troubleshooting ==

=== Black/Magenta checkerboard background: Hyprland failed to load 1 essential asset ===

As of Hyprland 0.45.0, upstream shows a scary message (and an ugly graphic) if you don't have their wallpapers installed.

The ugly graphic goes away when you've launched a [https://wiki.hyprland.org/Useful-Utilities/Wallpapers/ wallpaper utility], but the scary message remains.

The canonical way to solve this is to install {{pkg|hyprland-wallpapers}} package using the command:

{{Cmd|# apk add hyprland-wallpapers}}

Or you can just have some file at {{Path|/usr/share/hypr/wall0.png}} or {{Path|/usr/local/share/hypr/wall0.png}} and modify your config file to have a line as follows: {{Cat|~/.config/hypr/hyprland.conf|<nowiki>misc {
force_default_wallpaper = 0
}</nowiki>}}

=== Hyprland crashes almost immediately ===

Hyprland 0.46 has a bug where the default configuration will crash if Xwayland is not installed. You can either install {{pkg|xwayland}}, or disable in your config:

{{Cat|~/.config/hypr/hyprland.conf|<nowiki>xwayland:enabled = false</nowiki>}}

This should be fixed in the next update.

=== warning message about hyprland-qtutils/hyprland-guiutils ===

Hyprland 0.46.x to 0.51.x suggest you install hyprland-qtutils, which is not available in alpine 3.22, but is available in edge onward.

<blockquote>Your system does not have hyprland-qtutils installed. This is a runtime dependency for some dialogs. Consider installing it.</blockquote>

You can disable the check in your config like so:

{{Cat|~/.config/hypr/hyprland.conf|<nowiki>misc:disable_hyprland_qtutils_check = true</nowiki>}}

Hyprland 0.52.x and newer have changed this suggestion to install hyprland-guiutils. You can still install hyprland-qtutils to satisfy the warning, or hyprland-guiutils when it becomes available. Or you can disable the check in your config, which has been renamed:

{{Cat|~/.config/hypr/hyprland.conf|<nowiki>misc:disable_hyprland_guiutils_check = true</nowiki>}}

=== DBUS_SESSION_BUS_ADDRESS unset ===

If you're using login manager, create a copy of {{ic|/usr/share/wayland-sessions/hyprland.desktop}} that starts Hyprland within D-Bus session:

Exec=dbus-run-session -- Hyprland

Also make sure that D-Bus is started as a system service.

== See Also ==

* [https://wiki.hyprland.org Official Hyprland wiki]

[[Category:compositor]]

Game development on Alpine Linux

2025-02-22T21:39:40Z

Earboxer: /* Game engines */

'''Game development''' is possible on Alpine Linux.

== Learning curve ==

For programmers, it's strongly recommended that you use a [[#Game engines|game engine]] if you are starting video game programming which will handle most of the low level setup. If you have advanced knowledge in programming, you should see the [[#Multimedia libraries|multimedia section]] and [[#3D libraries|3D libraries]] section.

For artists, see [[#Tools used to work with or create art assets|Tools used to work with or create art assets]] section.

== Software libraries used in game development ==

=== Game engines ===

{| class="wikitable"
|-
! Name !! Package !! Description
|-
| [https://plib.sourceforge.net/ PLIB] || {{pkg|plib}} || game engine
|-
| [https://www.blender.org/ Blender] || {{pkg|blender}} || a 3D modeler and animator with a [https://upbge.org/ game engine]
|-
| [https://www.minetest.net/ Minetest] || {{pkg|minetest}} || both a game engine and a game
|-
| [https://love2d.org/ LÖVE] || {{pkg|love}} || 2D game engine using Lua and wrapping SDL
|}

=== Multimedia libraries ===

{| class="wikitable"
|-
! Name !! Package(s) !! Description
|-
| [https://en.wikipedia.org/wiki/Simple_DirectMedia_Layer Simple DirectMedia Layer 2.0] || {{pkg|sdl2-dev}} || has input, audio, video, opengl, touch screen, game controller support
|-
| [https://en.wikipedia.org/wiki/Simple_and_Fast_Multimedia_Library SFML (Simple and Fast Multimedia Library)] || {{pkg|sfml-dev}} {{pkg|csfml-dev}} || has input, audio, video, networking, opengl support
|-
| [http://kcat.strangesoft.net/openal.html OpenAL Soft]{{dead link}} || {{pkg|openal-soft-dev}} || can be used for 3D sound for 3D games
|-
| [http://www.glfw.org/ GLFW] || {{pkg|glfw-dev}} || To create OpenGL context quickly with input support
|-
| [https://en.wikipedia.org/wiki/FreeGLUT FreeGLUT] || {{pkg|freeglut-dev}} || To create OpenGL context quickly with input support
|-
| [http://pyopengl.sourceforge.net/ PyOpenGL] || {{pkg|py3-opengl}} || OpenGL on Python
|-
| [https://en.wikipedia.org/wiki/Simple_DirectMedia_Layer Simple DirectMedia Layer] || <code>sdl-dev</code> (dropped support for sdl 1.x . Use 2.0 instead) || has input, audio, video, joystick support
|}

=== 3D libraries ===

{| class="wikitable"
|-
! Name !! Package(s) !! Description
|-
| [https://glm.g-truc.net/0.9.8/index.html OpenGL Mathematics] || {{pkg|glm-dev}} || for 3D calculations to transform, rotate, scale stuff
|}

==== Rendering and loading assets ====

{| class="wikitable"
|-
! Name !! Package(s) !! Description
|-
| [https://en.wikipedia.org/wiki/OpenSceneGraph OpenSceneGraph] || {{pkg|openscenegraph-dev}} || can be used to load 3D models and handle complexities of rendering a 3d scene
|}

==== Fonts ====

{| class="wikitable"
|-
! Name !! Package(s) !! Description
|-
| [https://sourceforge.net/projects/ftgl/ FTGL] || {{pkg|ftgl-dev}} || to display text in OpenGL
|}

== Tools used to work with or create art assets ==

{| class="wikitable"
|-
! Name !! Package(s) !! Description
|-
| [https://en.wikipedia.org/wiki/GIMP GIMP] || {{pkg|gimp}} || edit 2D assets
|-
| [https://en.wikipedia.org/wiki/Audacity_(audio_editor) Audacity] || {{pkg|audacity}} || edit sound assets
|-
| [https://en.wikipedia.org/wiki/Inkscape Inkscape] || {{pkg|inkscape}} || edit vector 2D assets
|-
| [https://en.wikipedia.org/wiki/Blender_(software) Blender] || {{pkg|blender}} || edit 3D assets or models
|}

[[Category:Programming]]

Hyprland

2025-01-19T22:46:29Z

Earboxer: /* Troubleshooting */

Hyprland

2024-11-11T18:06:14Z

Earboxer:

This wiki page is about [https://hyprland.org Hyprland], a tiling window manager. Hyprland is available in Alpine Linux [[Repositories#Community|community repository]] for [[Repositories#Edge|edge]] release.

Refer to [https://wiki.hyprland.org/Getting-Started/Master-Tutorial/ hyprland Tutorial] to get started on using Hyprland.

== Installation ==
The package {{Pkg|hyprland|arch=}} exists in community for edge (and will be there in alpine releases >= 3.21)

== Troubleshooting ==

=== Black/Magenta checkerboard background: Hyprland failed to load 1 essential asset ===

As of Hyprland 0.45.0, upstream shows a scary message (and an ugly graphic) if you don't have their wallpapers installed.

The ugly graphic goes away when you've launched a [https://wiki.hyprland.org/Useful-Utilities/Wallpapers/ wallpaper utility], but the scary message remains.

The canonical way to solve this is to install {{pkg|hyprland-wallpapers}} package using the command:

{{Cmd|# apk add hyprland-wallpapers}}

Or you can just have some file at {{Path|/usr/share/hypr/wall0.png}} or {{Path|/usr/local/share/hypr/wall0.png}} and have

<Pre>
misc {
force_default_wallpaper = 0
}
</Pre>

in your Hyprland config file.

== See Also ==

* [https://wiki.hyprland.org Official Hyprland wiki]

[[Category:Desktop]]
[[Category:Window Managers]]
[[Category:Wayland]]

Desktop environments and Window managers

2024-11-11T17:59:16Z

Earboxer: /* Tiling window managers */

{{TOC right}}



'''Alpine Linux''' has no official desktop and setting up a graphical environment is not even part of [[Installation]]. All window managers and desktop environments that are available in Alpine Linux are listed in this page. Quick installation using [[Alpine_setup_scripts#setup-desktop|setup-desktop]] script is available for few [[Setup-desktop|desktops]]. For servers consider [[Alpine_Configuration_Framework_Design#Starting_ACF|Alpine Configuration Framework(ACF)]].

== Desktop Environments ==

* [[Xfce]]
* [[LXQt]]
* [[KDE|KDE Plasma]]
* [[GNOME]]
* [[MATE]]

== Window Managers ==

=== [https://en.wikipedia.org/wiki/Stacking_window_manager Stacking window managers] ===
(also known as '''floating window maanagers''')
* X11:
** [[Openbox]]
** [[Fluxbox]]

* Wayland:
** [[Weston]]
** [[LabWC]]
** {{Pkg|wayfire|arch=}}

=== [https://en.wikipedia.org/wiki/Tiling_window_manager Tiling window managers] ===
(also known as '''Dynamic window maanagers''')
* X11:
** {{Pkg|bspwm|arch=}}
** {{Pkg|herbstluftwm|arch=}}
** [[twm]]
** [[dwm]]
** [[I3wm|i3]]
** [[AwesomeWM|Awesome]]
** {{Pkg|ratpoison|arch=}}
** {{Pkg|spectrwm |arch=}}
** {{Pkg|qtile |arch=}}

* Wayland:
** [[Sway]]
** [[River]]
** {{Pkg|cagebreak|arch=}}
** {{Pkg|dwl|arch=}}
** [[Hyprland]]

=== Other Window Managers ===

* Wayland
** {{Pkg|cage |arch=}} ('''kiosk''' mode)

== See Also ==
* [[:Category:Desktop Environments|Desktop Environments]]
* [[:Category:Window Managers|Window Managers]]
* [[Installation#Post-Installation|Post Installation]]
* [[Seat_manager#Input_and_video_groups|Input and video groups]]
* [[Fonts]]
* [[Wayland]]
* [[:Category:Display Managers]]
* [https://wiki.archlinux.org/title/Desktop_environment Desktop environment - Archwiki]
* [https://wiki.gentoo.org/wiki/Desktop_environment Desktop environment - Gentoo Wiki]

[[Category:Desktop]]
[[Category:Newbie]]
[[Category:Desktop Environments]]
[[Category:Window Managers]]

Hyprland

2024-11-11T13:51:13Z

Earboxer: /* Troubleshooting */

Hyprland is a tiling window manager.

https://wiki.hyprland.org/Getting-Started/Master-Tutorial/

== Troubleshooting ==

=== Black/Magenta checkerboard background: Hyprland failed to load 1 essential asset ===

As of Hyprland 0.45.0, upstream shows a scary message (and an ugly graphic) if you don't have their wallpapers installed.

The ugly graphic goes away when you've launched a [https://wiki.hyprland.org/Useful-Utilities/Wallpapers/ wallpaper utility], but the scary message remains.

The canonical way to solve this is to

apk add hyprland-wallpaper

Or you can just have some file at /usr/{local/,}share/hypr/wall0.png and have

misc {
force_default_wallpaper = 0
}

in your config

Hyprland

2024-11-11T13:50:22Z

Earboxer: /* Troubleshooting */

Hyprland is a tiling window manager.

https://wiki.hyprland.org/Getting-Started/Master-Tutorial/

== Troubleshooting ==

=== Black/Magenta checkerboard background: Hyprland failed to load 1 essential asset ===

As of Hyprland 0.45.0, upstream shows a scary message (and an ugly graphic) if you don't have their wallpapers installed.

The ugly graphic goes away when you've launched a [https://wiki.hyprland.org/Useful-Utilities/Wallpapers/ wallpaper utility], but the scary message remains.

The canonical way to solve this is to

apk add hyprland-wallpaper

Or you can just have some file at /usr/{local/,}share/hypr/wall0.png and have

```
misc {
force_default_wallpaper = 0
}
```
in your config

Hyprland

2024-11-11T13:48:33Z

Earboxer: /* Black/Magenta checkerboard background: Hyprland failed to load 1 essential asset */

Hyprland

2024-11-11T01:24:20Z

Earboxer: Created page with "Hyprland is a tiling window manager. https://wiki.hyprland.org/Getting-Started/Master-Tutorial/ == Troubleshooting == === Black/Magenta checkerboard background: Hyprland failed to load 1 essential asset === apk add hyprland-wallpaper"

Wi-Fi

2023-05-26T20:15:41Z

Earboxer: Fix URL for downloading firmware

This page describes how to set up a wireless network connection with WPA encryption.

Choose a wireless daemon between {{Pkg|iwd}} and {{Pkg|wpa_supplicant}}

== Prerequisites ==

Working wireless drivers
{{Note|in most cases installing {{Pkg|linux-firmware}} should get you the required drivers. Installation of this package can produce errors on diskless or data disk modes. If such errors occur, switch to system disk mode.}}

If you are using a '''Broadcom chipset''', see the [[#Broadcom_Wi-Fi_Chipset_Users|Broadcom Wi-Fi section]].)

== iwd ==

[https://wiki.archlinux.org/title/Iwd iwd] (iNet wireless daemon) is a wireless daemon written by Intel and aiming at replacing {{Pkg|wpa_supplicant}}. The core goal of the project is to optimize resource utilization by not depending on any external libraries and instead utilizing features provided by the Linux Kernel to the maximum extent possible.

{{Pkg|iwd}} is supported since [https://alpinelinux.org/posts/Alpine-3.10.0-released.html Alpine Linux 3.10].

To get started, install {{Pkg|iwd}}:

{{Cmd|apk add iwd}}

To do anything with iwd, it has to be running:

{{Cmd|rc-service iwd start}}

If it was not running, running <code>iwctl ..</code> commands will print

The name net.connman.iwd was not provided by any .service files
Failed to retrieve IWD dbus objects, quitting...

and running just <code>iwctl</code> will say it is waiting for IWD to start.

List your available wifi device(s) (you probably have ''wlan0''):

{{Cmd|iwctl device list}}

If you don't know the SSID of your network you can run a scan and retrieve a list of all the detected networks:

{{Cmd|iwctl station wlan0 scan && iwctl station wlp8s0 get-networks}}

To connect to a network:

{{Cmd|iwctl station wlan0 connect <SSID>}}

 

{{Note|iwd automatically stores network passphrases in the /var/lib/iwd directory and uses them to auto-connect in the future. If you run diskless Alpine, make sure to include this directory to the apkovl and commit:
{{Cmd|lbu add /var/lib/iwd && lbu commit -d}}}}

{{Note|Since version 1.10, iwd supports IPv6, but it is disabled by default. To enable it, add the following to the configuration file:
{{Cat|/etc/iwd/main.conf|<nowiki>[Network]
EnableIPv6=true</nowiki>}}}}

 

Finally, configure {{Pkg|iwd}} and its dependency {{Pkg|dbus}} to start automatically on boot:
{{Cmd|rc-update add iwd boot && rc-update add dbus boot}}

 

Add a entry for the desired interface (e.g. {{Path|wlan0}}):
{{Cat|/etc/network/interfaces|auto wlan0
iface wlan0 inet dhcp}}

{{Note|You could instead use the iwd's built-in network configuration by setting {{Path|<nowiki>EnableNetworkConfiguration=true</nowiki>}} in {{Path|/etc/iwd/main.conf}}}}

 

Manually restart '''networking''':

{{Cmd|rc-service networking restart}}

 

Your wifi interface should now be up and have a dedicated IP adress:
{{Cmd|ip a show wlan0}}

 

Useful link: [https://wiki.archlinux.org/title/Iwd#Enable_built-in_network_configuration Archlinux wiki page] if you need more specific configuration.

== wpa_supplicant ==

To get started install {{Pkg|wpa_supplicant}}

{{Cmd|apk add wpa_supplicant}}

 

To list your available network interfaces:
{{Note|if you don't see any wireless interfaces (e.g. {{Path|wlan0}}), you probably need to load and/or install drivers/firmware.}}

 

{{Cmd|ip link}}
or
{{Cmd|ip a}}

 

Bring up the desired interface:
{{Cmd|ip link set wlan0 up}}

{{Note|If this errors with <code>ioctl 0x8914 failed: No error information</code>, that's <code>busybox ip</code>'s way of saying your wireless radio is rfkill'd. See the [[#Rfkill|Rfkill section]] for information on how to unblock your wireless radio.}}

 

Use this command to add your Wi-Fi network to wpa_supplicant:
{{Cmd|wpa_passphrase 'ExampleWifiSSID' 'ExampleWifiPassword' > /etc/wpa_supplicant/wpa_supplicant.conf}}
''(Access point not broadcasting its SSID requires additional line <code>scan_ssid=1</code> in the file <code>wpa_supplicant.conf</code>)''

{{Note|the Wi-Fi SSID and password are case sensitive and the single quote before and after the SSID and password need to be there}}

 

Start wpa_supplicant in the foreground to make sure the connection succeeds.
{{Cmd|wpa_supplicant -i wlan0 -c /etc/wpa_supplicant/wpa_supplicant.conf}}

 

If all is well, run it as a daemon in the background by setting the {{Path|-B}} option.
{{Cmd|wpa_supplicant -B -i wlan0 -c /etc/wpa_supplicant/wpa_supplicant.conf}}

 

Configure the interface with an IP address.
{{Cmd|udhcpc -i wlan0}}

Sanity check: the interface should have a {{Path|inet}} address.
{{Cmd|ip addr show wlan0}}

 

=== Automatic Configuration on System Boot ===

Add a entry for the desired interface (e.g. {{Path|wlan0}}):
{{Cat|/etc/network/interfaces|auto wlan0
iface wlan0 inet dhcp}}

{{Note|Dont remove or comment out the '''auto lo''' entry}}

Sanity check: Make sure {{Path|/etc/wpa_supplicant/wpa_supplicant.conf}} is the correct configuration for the wireless access point you want to connect to.

Bring the interface down.

{{Cmd|ip link set wlan0 down}}

 

Manually restart (or '''start''') '''networking'''.

{{Cmd|/etc/init.d/networking --quiet restart &}}

 

If all is well (feel free to confirm with the sanity checks),

Configure wpa_supplicant to start automatically on boot:

{{Cmd|# rc-update add wpa_supplicant boot}}

 

Also make sure '''networking''' is set to automatically start on boot:

{{Cmd|# rc-update add networking boot}}

 

'''Optional security precaution:'''

By default {{Pkg|wpa_supplicant}} will store your Wi-Fi password in plain text:

{{Cat|(Example) /etc/wpa_supplicant/wpa_supplicant.conf|<nowiki>network={
ssid="<YourSSIDShouldBeHere>"
#psk="<YourPasswordShouldBeHereInPlainText>"
psk=<RandomLettersAndNumbersShouldBeHere>
}</nowiki>}}

this is not necessary and {{Pkg|wpa_supplicant}} should funtion just fine without it, if you dont want your stored password in plain text just delete the line with <code>#psk="<YourPasswordShouldBeHereInPlainText>"</code> on it.

 

== Launching udhcpc through wpa_cli actions ==

{{Todo|Figure out if theses two sections are different or connected to one another}}

With the above configuration, udhcpc will only run once at boot.
If the Wifi isn't available then, or the network changes in between, it needs to be notified.
This is done through the wpa_cli action script in /etc/wpa_supplicant/wpa_cli.sh

== Automatic Reconnection when WIFI signal is lost ==
To enable automatic reconnection when wifi signal is lost add these to config:

{{Cat|/etc/wpa_supplicant/wpa_supplicant.conf|<nowiki>ap_scan=1
autoscan=periodic:10
disable_scan_offload=1
</nowiki>
}}

{{Cmd|rc-update add wpa_cli boot}}

 

== Troubleshooting ==

==== Broadcom Wi-Fi Chipset Users ====

The Broadcom chipset is quite popular among older computers. The b43 driver is included in the linux-lts or linux-edge kernel packages. However, you might need to compile the firmware manually for this chipset as it is not included in linux-firmware for some cargs.

You can check if you have a Broadcom chipset by using lspci:

{{Cmd|lspci -nn -d 14e4:}}

Now we need fwcutter:

{{Cmd|apk add b43-fwcutter}}

Now we have everything to download the proprietary driver and extract the firmware from it:

<pre>
export FIRMWARE_INSTALL_DIR="/lib/firmware"
wget http://www.lwfinger.com/b43-firmware/broadcom-wl-5.100.138.tar.bz2
tar xjf broadcom-wl-5.100.138.tar.bz2
sudo b43-fwcutter -w "$FIRMWARE_INSTALL_DIR" broadcom-wl-5.100.138/linux/wl_apsta.o
</pre>

More information can be found [http://linuxwireless.sipsolutions.net/en/users/Drivers/b43/#Other_distributions_not_mentioned_above here].

Now you need to use modprobe so the device will show up:

{{Cmd|modprobe b43}}

Now continue with the normal instructions.

 

==== Rfkill ====

''See Also: [https://wiki.archlinux.org/title/Network_configuration/Wireless#Rfkill_caveat Network configuration/Wireless#Rfkill caveat - ArchLinux Wiki]''

 

Many laptops have a hardware button (or switch) to turn off wireless card, however, the card can also be blocked by kernel. This can be changed using rfkill. To show the current of your Wi-Fi:

{{Cat|(example) $ rfkill list|0: phy0: wlan
Soft blocked: no
Hard blocked: no}}

 

If the card is hard-blocked, use the hardware button or switch to unblock it. If the card is not hard-blocked but soft-blocked, use the following command:

{{Cmd|# rfkill unblock wifi}}

 

== See Also ==

* [[Installation#Post-Install|Post Install]]
* [[Alpine setup scripts]]

[[Category:Networking]]

Fonts

2023-04-15T14:49:25Z

Earboxer: /* Changing the console font */

'''Fonts''' on Alpine Linux covers a wide range of various languages. If you can't see your language, you need to install the font that has glyphs (little picture) created for it. The square box called a substitute character or "tofu" that acts as a placeholder for missing a glyph usually with a two byte sequence. Tofu is a prepared food that is a traditional part of East Asian and Southeast Asian meals. It is often served in a white rectangular appearance.

 

{{Note|The system font directory is located at '''/usr/share/fonts''' which is reserved for the Alpine package creators and the package system. The user font location is located in '''~/.fonts''' which is the preferred install font location especially from unknown sources. Fonts have been used as a source of security exploits [https://www.cvedetails.com/vulnerability-list/vendor_id-4535/product_id-7835/Freetype-Freetype.html (See CVEs)] so to reduce the spread of attack install fonts inside '''~/.fonts'''. The trusted system fonts that Alpine LInux packages typically are from well known sources like corporations like Google, Adobe, open organizations like Xorg or well known font designers or projects licensed as either [https://en.wikipedia.org/wiki/SIL_Open_Font_License SIL], GPL, etc.}}

 

== Installation ==

Default internal fb fonts (tty console) or xorg fonts (desktops) are suitable for a default installation. {{Pkg|font-misc-misc}} is installed with Xorg, so fonts for most languages (Japanese, Korean, Latin, Cyrillic) are already covered. Exceptions are Arabic, Persian, Thai, Tamil, etc. according to the Wikipedia Page on languages for article translation.

 

These selections will cover most languages and are a good fit for most setups:

<pre>
<nowiki>
apk add font-terminus font-inconsolata font-dejavu font-noto font-noto-cjk font-awesome font-noto-extra
</nowiki>
</pre>

 

These selections add special support for '''cyrillic languages like Russian and Serbian, etc.''':

<pre>
<nowiki>
apk add font-vollkorn font-misc-cyrillic font-mutt-misc font-screen-cyrillic font-winitzki-cyrillic font-cronyx-cyrillic
</nowiki>
</pre>

 

These selections cover special '''Asiatic languages like Japanese, etc.''':

<pre>
<nowiki>
apk add font-terminus font-noto font-noto-thai font-noto-tibetan font-ipa font-sony-misc font-daewoo-misc font-jis-misc
</nowiki>
</pre>

 

The following will add some '''partially supported Chinese fonts''':

<pre>
<nowiki>
apk add font-isas-misc
</nowiki>
</pre>

 

These selection will cover, in general '''Arabic, Thai, Ethiopic, Hebrew, Romanian, Persian, Korean Hangul, Greek, Persian, Russian/Slavic Cyrillic, Macedonian/Serbian, Armenian, Georgian, Lao, Devanagari, Urdu (Hindustani as in Northern India and Pakistan), Cherokee, Thaana languages support''' for desktop setups:

<pre>
<nowiki>
apk add font-terminus font-bitstream-* font-noto font-noto-extra font-arabic-misc

apk add font-misc-cyrillic font-mutt-misc font-screen-cyrillic font-winitzki-cyrillic font-cronyx-cyrillic

apk add font-noto-arabic font-noto-armenian font-noto-cherokee font-noto-devanagari font-noto-ethiopic font-noto-georgian

apk add font-noto-hebrew font-noto-lao font-noto-malayalam font-noto-tamil font-noto-thaana font-noto-thai

</nowiki>
</pre>

 

== Configuration ==

<code>fc-cache -fv</code> can be used to display the font locations and to update the cache.

 

Some applications do not specify a specific font to use but rather say sans-serif [sans means without as in without tiny lines], serif, monospace [as in proportional square font]. This is where Fontconfig comes into place by substituting the general font type with a specific font that you like. For package developers, '''/etc/fonts/conf.avail''' contains a fontconfig configuration file. This will be symlinked into '''/etc/fonts/conf.d'''. See '''/etc/fonts/conf.d/README''' for details about the meaning behind the priority numbers.

For regular users, you want to create/edit your personal '''~/.fonts.conf'''. This is in XML and describes which preferred font to use for these general types. See [https://www.freedesktop.org/software/fontconfig/fontconfig-user.html this] for details.

 

Per-user Configuration is made in <code><nowiki>~/.fonts.conf</nowiki></code>but it's hard to configure. An easier method is to use the
<code><nowiki>~/.Xresources</nowiki></code> file.

The following will set up for all users, a minimal resource usage for fonts. No antialiasing. No hint, etc:

<pre>
<nowiki>
cat > /home/*/.Xresources << EOF
Xft.antialias: 0
Xft.rgba: rgb
Xft.autohint: 0
Xft.hinting: 1
Xft.hintstyle: hintslight
EOF
</nowiki>
</pre>

 

== List of fonts in Alpine Linux ==

* [https://en.wikipedia.org/wiki/Utopia_(typeface) Utopia] - font-adobe-utopia-*
* [https://en.wikipedia.org/wiki/Noto_fonts Noto] - font-noto-* -- These fonts can cover different glyphs for your language. If you go to https://fonts.google.com/noto , you can try to search for your language to see if it is supported. If Alpine doesn't have it, you can download it from Google into your {{path|~/.font}} . As hinted in the introduction, noto comes from '''no to'''fu or gradual elimination of these substitute characters off the web.
font-noto
font-noto-adlam
font-noto-adlamunjoined
font-noto-arabic
font-noto-armenian
font-noto-avestan
font-noto-bamum
font-noto-bengali
font-noto-buhid
font-noto-carian
font-noto-chakma
font-noto-cherokee
font-noto-cypriot
font-noto-deseret
font-noto-devanagari (Hindi / Sanskrit)
font-noto-emoji
font-noto-ethiopic
font-noto-extra
font-noto-georgian
font-noto-glagolitic
font-noto-gothic
font-noto-gujarati
font-noto-gurmukhi
font-noto-hebrew
font-noto-kannada
font-noto-kayahli
font-noto-khmer
font-noto-lao
font-noto-lisu
font-noto-malayalam
font-noto-mandaic
font-noto-myanmar
font-noto-nko
font-noto-olchiki
font-noto-oldturkic
font-noto-oriya
font-noto-osage
font-noto-osmanya
font-noto-shavian
font-noto-sinhala
font-noto-tamil
font-noto-telugu
font-noto-thaana
font-noto-thai
font-noto-tibetan
font-noto-tifinagh
font-noto-vai
* [http://terminus-font.sourceforge.net/ Terminus] - font-terminus -- Monospace font
* [https://mirrors.ibiblio.org/CTAN/systems/win32/bakoma/fonts/fonts.html BaKoMa] font-bakoma-* -- Fonts for TeX typesetting system (for academics in the math and sciences and book writers) and TeX (WYSIWYG) editors
* [https://en.wikipedia.org/wiki/Bitstream_Speedo_Fonts Bitstream Speedo] - font-bitstream-speedo
* [https://en.wikipedia.org/wiki/Bitstream_Vera Bitstream Vera] font-bitstream-*
* [https://en.wikipedia.org/wiki/Bitstream_Vera Bera (Bitstream Vera Type 1)] - font-bitstream-type1 -- Use for LaTeX
* [https://fontawesome.com/ Font Awesome] - font-awesome -- It was used in Twitter Bootstrap. It is a font representing things and brands as Icons.
* [https://www.gnu.org/software/freefont/ GNU FreeFont] - font-freefont -- See link for support for different writing systems/languages
* [https://savannah.gnu.org/projects/unifont/ GNU Unifont] - unifont -- It contains glyphs of every codepoint
* font-misc-cyrillic -- Cyrillic fonts (Russian/Slavic Style)
* font-screen-cyrillic -- X.org public domain Cyrillic fonts for screen use
* font-misc-ethiopic -- Ethiopic fonts used in Ethiopia and Eritrea
* font-misc-meltho -- For the Syriac language
* font-misc-misc -- Bitmap fonts in PCF format (shows glyphs of many types and installed by default by xorg-server package)
* [https://www.rockbox.org/mail/archive/rockbox-dev-archive-2005-12/0029.shtml ClearlyU fonts] - font-mutt-misc -- Thai, Ethiopic, Hebrew, Romanian, Persian, Korean Hangul, Greek, Persian, Russian/Slavic Cyrillic, Macedonian/Serbian, Armenian, Georgian, Lao, Devanagari, Urdu (Hindustani as in Northern India and Pakistan), Cherokee, Thaana. See link to changelog for full list of languages supported.
* [https://github.com/lucy/tewi-font tewi font] font-tewi - A tiny bitmap font that contains braille glyphs
* [https://en.wikipedia.org/wiki/Overpass_(typeface) Overpass] - font-overpass
* [https://en.wikipedia.org/wiki/Luxi_fonts Luxi fonts] - font-bh-* -- designed by Kris Holmes and Charles Bigelow which bh is refers to the last name
* [https://en.wikipedia.org/wiki/Lucida#Lucida_Typewriter_Serif Lucida Typewriter] - font-bh-lucidatypewriter-*
* [https://directory.fsf.org/wiki/IPAfont IPA Font] - font-ipa -- A Japanese font
* [https://en.wikipedia.org/wiki/Croscore_fonts Chrome OS core fonts] - font-croscore
* [http://vollkorn-typeface.com/ Vollkorn] - font-vollkorn - A serif font with glyphs for Cyrillic (Russian/Slavic), Greek, Polish, Dutch, Bulgarian, Serbian, and small capitals
* [https://en.wikipedia.org/wiki/Open_Sans Open Sans] - font-opensans
* [https://en.wikipedia.org/wiki/Cantarell_(typeface) Cantarell] - font-cantarell -- Designed for reading and the default GNOME font
* [https://en.wikipedia.org/wiki/DejaVu_fonts DejaVu] - font-dejavu -- A modified Bitstream Vera with more styles and unicode coverage
* [https://en.wikipedia.org/wiki/Linux_Libertine Linux Libertine] - font-linux-libertine -- A free alternative to Times New Roman
* [https://en.wikipedia.org/wiki/Liberation_fonts Liberation] font-liberation -- A free alternative to Helvetica and Arial
* [https://en.wikipedia.org/wiki/Inconsolata Inconsolata] - font-inconsolata -- A monospace font designed for terminals and reading source code
* [https://madmalik.github.io/mononoki/ mononoki] - font-mononoki -- A font for programming and code review
* [https://en.wikipedia.org/wiki/Droid_fonts Droid] - font-droid / font-droid-nonlatin -- Designed for small screens and was used in older Android
* font-schumacher-misc -- Fixed width fonts by Dale Schumacher
* font-sony-misc -- Japanese Kana fonts by Sony Electronics
* font-daewoo-misc -- JIS (Japanese Industrial Standards) Kanji and Korean Hangul fonts by Daewoo Electronics
* font-cursor-misc -- A standard cursor font
* font-sun-misc -- Cursor and glyph fonts by Sun Microsystems
* font-winitzki-cyrillic -- A Cyrillic (Russian) font by Serge Winitzki designed for proofreading mixed Russian-English text
* font-isas-misc -- Chinese Song Ti style fonts (thinner horizontal lines compared to vertical)
* font-jis-misc -- A Japanese International Standard font
* [https://en.wikipedia.org/wiki/Courier_(typeface)#IBM_Courier IBM Courier] font-ibm-type1
* font-dec-misc -- A Digital Equipment Corporation cursor and session fonts
* font-cronyx-cyrillic -- A Russian font for X11 by Cronyx
* font-arabic-misc -- A bitmap and proportional Arabic font in newspaper style [https://unicode.org/mail-arch/unicode-ml/Archives-Old/UML010/0237.html ]

==Non-free fonts==

* [https://en.wikipedia.org/wiki/Core_fonts_for_the_Web Core fonts for the Web] ({{Pkg|msttcorefonts-installer}}) - For installing non-free proprietary Microsoft fonts like [https://en.wikipedia.org/wiki/Comic_Sans Comic Sans]. Not recommended for commercial or open source projects. See their [https://web.archive.org/web/20091208063245/http://www.microsoft.com/typography/fontpack/eula.htm licensing].
Arial
Arial Black
Andalé Mono
Courier New
Comic Sans MS
Georgia
Impact
Times New Roman
Trebuchet MS
Verdana
Webdings

== Changing the console font ==

The default font may be too small on high-resolution monitors, e.g. 4K ones. To change the default font, e.g. to the 32px ISO Latin-1 Terminus font:

# <code>apk add terminus-font</code>
# try out fonts in a virtual console using <code>setfont /usr/share/consolefonts/ter-132n.psf.gz</code>
# edit <code>/etc/conf.d/consolefont</code>, set it to the font you choose, e.g. <code>consolefont="ter-132n.psf.gz"</code>
# enable this using <code>rc-update add consolefont boot</code>

== See Also ==

* [[Emojis]]

[[Category:Infographics]]

Nextcloud

2022-05-31T14:52:06Z

Earboxer: Add new section for upgrading

[https://nextcloud.com/ Nextcloud] is WedDAV-based solution for storing and sharing on-line your data, files, images, video, music, calendars and contacts. [http://karlitschek.de/2016/06/nextcloud/ Nextcloud is a fork of ownCloud with enterprise features included].

= Installation =
{{pkg|nextcloud}} is available from Alpine 3.5 and greater.

Before you start installing anything, make sure you have the latest packages available. Make sure you are using an 'http' repository in your {{path|/etc/apk/repositories}} file, then:
{{cmd|apk update}}
{{tip|Detailed information is found in [[Include:Upgrading_to_latest_release|this]] doc.}}

== Database ==
First you have to decide which database to use. Use one of the databases listed below.

=== Sqlite ===
All you need to do is to install the package:
{{cmd|apk add nextcloud-sqlite}}

=== PostgreSQL ===
Install the package:
{{cmd|apk add nextcloud-pgsql postgresql postgresql-client}}

Next thing is to configure and start the database:
{{cmd|/etc/init.d/postgresql setup
/etc/init.d/postgresql start}}

Next, you need to create a user and temporarily grant the CREATEDB privilege:
{{cmd|psql -U postgres
CREATE USER mycloud WITH PASSWORD 'test123';
ALTER ROLE mycloud CREATEDB;
\q}}
{{Note|Replace the above username 'mycloud' and password 'test123' with something secure. Remember these settings. You will need them later when setting up nextcloud.}}

Set postgresql to start on boot:
{{cmd|rc-update add postgresql}}

=== MariaDB ===
Install the package:
{{cmd|apk add nextcloud-mysql mariadb mariadb-client}}

Now configure and start {{pkg|mariadb}}:
{{cmd|<nowiki>mysql_install_db --user=mysql --datadir=/var/lib/mysql</nowiki>
service mariadb start
rc-update add mariadb
mysql_secure_installation}}
Follow the wizard to setup passwords, etc.
{{Note|Remember the usernames/passwords that you set using the wizard. You will need them later.}}

Next, you need to create a user and database and set permissions:
{{cmd|mysql -u root -p
CREATE DATABASE nextcloud;
GRANT ALL ON nextcloud.* TO 'mycloud'@'localhost' IDENTIFIED BY 'test123';
GRANT ALL ON nextcloud.* TO 'mycloud'@'localhost.localdomain' IDENTIFIED BY 'test123';
FLUSH PRIVILEGES;
EXIT}}
{{Note|Replace the above username 'mycloud' and password 'test123' with something secure. Remember these settings. You will need them later when setting up nextcloud.}}

{{pkg|mariadb-client}} is not needed anymore. Let's uninstall it:
{{cmd|apk del mariadb-client}}

== Webserver ==
Next thing is to choose, install, and configure a webserver. In this example we will install {{pkg|nginx}} or {{pkg|lighttpd}}. ''Nginx'' is preferred over ''Lighttpd'' since the latter will consume a lot of memory when working with large files (see [http://redmine.lighttpd.net/issues/1283 lighty bug #1283]). You are free to install any other webserver of your choice as long as it supports PHP and FastCGI. Generating an SSL certificate for your webserver is outside of the scope of this document.

{{pkg|nextcloud-initscript}} facilitates running the webserver with php-fpm.

{{cmd|apk add nextcloud-initscript}}

=== Nginx ===
Install the needed packages:
{{cmd|apk add nginx php8-fpm}}

Delete the default nginx website configuration:
{{cmd|rm /etc/nginx/http.d/default.conf}}

Create a configuration file for your site in {{path|/etc/nginx/http.d/mysite.mydomain.com.conf}}:
{{Cat|/etc/nginx/http.d/mysite.mydomain.com.conf|server {
#listen [::]:80; #uncomment for IPv6 support
listen 80;
return 301 https://$host$request_uri;
server_name mysite.mydomain.com;
}

server {
#listen [::]:443 ssl; #uncomment for IPv6 support
listen 443 ssl;
server_name mysite.mydomain.com;

root /usr/share/webapps/nextcloud;
index index.php index.html index.htm;
disable_symlinks off;

ssl_certificate /etc/ssl/cert.pem;
ssl_certificate_key /etc/ssl/key.pem;
ssl_session_timeout 5m;

#Enable Perfect Forward Secrecy and ciphers without known vulnerabilities
#Beware! It breaks compatibility with older OS and browsers (e.g. Windows XP, Android 2.x, etc.)
#ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA;
#ssl_prefer_server_ciphers on;

location / {
try_files $uri $uri/ /index.html;
}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
if (!-f $document_root$fastcgi_script_name) {
return 404;
}
#fastcgi_pass 127.0.0.1:9000;
#fastcgi_pass unix:/run/php-fpm/socket;
fastcgi_pass unix:/run/nextcloud/fastcgi.sock; # From the nextcloud-initscript package
fastcgi_index index.php;
include fastcgi.conf;
}

# Help pass nextcloud's configuration checks after install:
# Per https://docs.nextcloud.com/server/22/admin_manual/issues/general_troubleshooting.html#service-discovery
location ^~ /.well-known/carddav { return 301 /remote.php/dav/; }
location ^~ /.well-known/caldav { return 301 /remote.php/dav/; }
location ^~ /.well-known/webfinger { return 301 /index.php/.well-known/webfinger; }
location ^~ /.well-known/nodeinfo { return 301 /index.php/.well-known/nodeinfo; }
}
}}

If you plan to enable uploads - and you probably do) - then you need to modify the default:
<pre>
client_max_body_size 1m;'
</pre>
setting in {{path|/etc/nginx/nginx.conf}}. For testing purposes, I disabled the limit by changing it to:

<pre>
client_max_body_size 0;
</pre>

This enabled large file uploads and auto-uploads to work. Note, this is a file-size restriction in addition to the restriction set in {{path|/etc/php8/php-fpm.d/nextcloud.conf}}. That second restriction defaults to:

<pre>
; Maximal size of a file that can be uploaded via web interface.
php_admin_value[memory_limit] = 512M
php_admin_value[post_max_size] = 513M
php_admin_value[upload_max_filesize] = 513M
</pre>

Another setting that may limit file-size is in configuration file {{path|/etc/php8/php.ini}}, where I set the restriction to to:
<pre>
upload_max_filesize = 513M
</pre>
to match the {{path|/etc/php8/php-fpm.d/nextcloud.conf}} file-size restriction.

If you are running from RAM and you're dealing with large files you might need to move the FastCGI temp file from {{path|/tmp}} to {{path|/var/tmp}} or to a directory that is mounted on hdd:
<pre>
fastcgi_temp_path /var/tmp/nginx/fastcgi 1 2;
</pre>

Large file uploads take some time to be processed by php-fpm, so you need to bump the Nginx default read timeout:

<pre>
fastcgi_read_timeout 300s;
</pre>

{{Note|If you are serving several users make sure to tune the *''pm.max_children'' setting in {{path|/etc/php8/php-fpm.d/nextcloud.conf}}}}

{{path|/etc/nginx/nginx.conf}} should already be configured to load your site config from this directory:
<pre>
...
# Includes virtual hosts configs.
include /etc/nginx/http.d/*;
...
</pre>

Start services:
{{cmd|service nginx start
service nextcloud start}}

Enable automatic startup of services:
{{cmd|rc-update add nginx
rc-update add nextcloud}}

=== Lighttpd ===
Install the package:
{{cmd|apk add lighttpd php5-cgi}}

Make sure you have FastCGI enabled in {{pkg|lighttpd}}:
{{cat|/etc/lighttpd/lighttpd.conf|...
include "mod_fastcgi.conf"
...}}

Start up the webserver:
{{cmd|/etc/init.d/lighttpd start}}

{{tip|You might want to follow the [http://wiki.alpinelinux.org/wiki/Lighttpd_Https_access Lighttpd_Https_access] doc in order to configure lighttpd to use https ''(securing your connections to your nextcloud server)''.}}

Link {{pkg|nextcloud}} installation to web server directory:
{{cmd|ln -s /usr/share/webapps/nextcloud /var/www/localhost/htdocs}}

== Other settings ==
=== Hardening ===
Consider updating the variable <code>url.access-deny</code> in {{path|/etc/lighttpd/lighttpd.conf}} for additional security. Add <code>"config.php"</code> to the variable ''(that's where the database is stored)'' so it looks something like this:
{{cat|/etc/lighttpd/lighttpd.conf|...
url.access-deny {{=}} ("~", ".inc", "config.php")
...}}
Restart {{pkg|lighttpd}} to activate the changes:
{{cmd|/etc/init.d/lighttpd restart}}

=== Additional packages ===
Some large apps, such as pdfviewer, texteditor, notifications and videoplayer are in separate packages:
{{cmd|apk add nextcloud-files_pdfviewer nextcloud-text nextcloud-notifications nextcloud-files_videoplayer nextcloud-files_external}}
You can also install a [https://pkgs.alpinelinux.org/package/v3.15/community/x86_64/nextcloud-default-apps meta-package] which installs all 30 core Nextcloud apps (listed as dependencies under aforementioned link):
{{cmd|apk add nextcloud-default-apps}}

=== How To Create a Self-Signed SSL Certificate ===
Install openssl:
{{cmd|apk add openssl}}
Generate your self signed certificate and its private key:
{{cmd|<nowiki>openssl req -x509 -nodes -days 365 -newkey rsa:4096 -keyout /etc/ssl1.1/private/nextcloud-selfsigned.key -out /etc/ssl1.1/certs/nextcloud-selfsigned.crt</nowiki>}}
Edit your nginx configuration:
{{cat|/etc/nginx/http.d/mysite.mydomain.com.conf|
ssl_certificate /etc/ssl1.1/certs/nextcloud-selfsigned.crt;
ssl_certificate_key /etc/ssl1.1/private/nextcloud-selfsigned.key;
}}

=== How To Install and Set Up Auto-Renewing LetsEncrypt SSL Certificate ===
After first setting up the Nextcloud server using the instructions in the 'Configure and use Nextcloud' section below, I then followed the SSL-setup instructions at: [[https://techjogging.com/create-letsencrypt-certificate-alpine-nginx.html Tech Jogging]].

I also had to add my Nextcloud servers Fully Qualified Domain Name (FQDN) to the list of trusted domains in /etc/nextcloud/config.php. In the section labelled: 'trusted_domains':

<pre>
'trusted_domains' =>
array (
0 => '<machine's local IP address>',
1 => 'nextcloud.mydomain.com',
),
}}
</pre>

= Configure and use Nextcloud =

== Configure ==
Point your browser at <code><nowiki>https://mysite.mydomain.com</nowiki></code> and follow the on-screen instructions to complete the installation, supplying the database user and password created before.

== Hardening PostgreSQL ==
If you have chosen PGSQL backend, revoke CREATEDB privilege from 'mycloud' user:
{{cmd|psql -U postgres
ALTER ROLE mycloud NOCREATEDB;
\q}}

== Increase upload size ==
{{path|/etc/php8/php-fpm.d/nextcloud.conf}} has overridden default file sizes, but they can be modified further to suit your needs:
<pre>
; Maximal size of a file that can be uploaded via web interface.
php_admin_value[memory_limit] = 512M
php_admin_value[post_max_size] = 513M
php_admin_value[upload_max_filesize] = 513M
</pre>

== enable opcache for nginx/php8 ==
To increase performace install
{{cmd|apk add php8-opcache}}

Now uncomment/edit lines in /etc/php8/php.ini:
<pre>
...
opcache.enable=1
opcache.enable_cli=1
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.memory_consumption=128 //you can reduce this slightly when short on RAM
opcache.save_comments=1
opcache.revalidate_freq=1
...
</pre>

Restart php-fpm8
{{cmd|rc-service php-fpm8 restart}}

== Clients ==
There are clients available for many platforms, Android included:
* http://nextcloud.org/sync-clients/ ''(nextcloud Sync clients)''
* http://nextcloud.org/support/android/ ''(Android client)''

[http://pkgs.alpinelinux.org/packages?name=nextcloud-client&branch=&repo=&arch=&maintainer= nextcloud-client] is currently available in the testing repo.

= Video Communication =
One of the major features of Nextcloud 11, available on Alpine 3.6 (currently edge) is a [https://nextcloud.com/webrtc/ WebRTC app], which relies on Spreed WebRTC server, which is available in the Alpine testing repository. Everything is still beta, so be aware of it :-). If you want a private video conferencing server install Nextcloud using Nginx and do the following (you can use Apache as well and follow the ''Apache config'' instructions [https://nextcloud.com/webrtc/ nextcloud.com]):

Put the following config in the ''server'' section of Nginx:
<pre>
# Spreed WebRTC
location ^~ /webrtc {
proxy_pass http://127.0.0.1:8080;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_buffering on;
proxy_ignore_client_abort off;
proxy_redirect off;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
proxy_next_upstream error timeout invalid_header http_502 http_503 http_504;
}
</pre>

Put the following section in the ''http'' section of Nginx:
<pre>
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
</pre>

Reload Nginx:
{{cmd|rc-service nginx reload}}

Install Spreed WedRTC server (make sure you have the testing [https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management#Packages_and_Repositories repository] enabled):
{{cmd|apk add spreed-web-server}}

Using the configuration file in ''/etc/spreed-webrtc/spreed-webrtc-server.conf'' follow the instructions at [https://nextcloud.com/webrtc/ nextcloud.com] to configure Spreed WebRTC server. Then start the server:
{{cmd|rc-service spreed-web-server start}}
{{cmd|rc-update add spreed-web-server}}

Install the ''Spreed video calls'' app in Nextcloud and enjoy your private video calls.

[[Category:Server]]

= Upgrading =

If you're using alpine stable, rather than edge, be aware when an upgrade skips a major release version: Nextcloud doesn't support skipping a major release version in its upgrade path. For this reason, alpine also packages the previous nextcloud release as a separate package.

AppStream

2021-11-06T19:03:10Z

Earboxer: Start AppStream page

AppStream is a collaborative effort between Linux distributions to produce shared metadata for the creation of appstores.

Alpine's appstream data can be found at https://appstream.alpinelinux.org/

It's generated by appstream-generator

Nextcloud

2021-09-30T23:24:20Z

Earboxer: some configurations are already set in /etc/php7/php-fpm.d/nextcloud.conf

[http://nextcloud.com/ Nextcloud] is WedDAV-based solution for storing and sharing on-line your data, files, images, video, music, calendars and contacts. [http://karlitschek.de/2016/06/nextcloud/ Nextcloud is a fork of ownCloud with enterprise features included].

= Installation =
{{pkg|nextcloud}} is available from Alpine 3.5 and greater.

Before you start installing anything, make sure you have the latest packages available. Make sure you are using an 'http' repository in your {{path|/etc/apk/repositories}} file, then:
{{cmd|apk update}}
{{tip|Detailed information is found in [[Include:Upgrading_to_latest_release|this]] doc.}}

== Database ==
First you have to decide which database to use. Use one of the databases listed below.

=== Sqlite ===
All you need to do is to install the package:
{{cmd|apk add nextcloud-sqlite}}

=== PostgreSQL ===
Install the package:
{{cmd|apk add nextcloud-pgsql postgresql postgresql-client}}

Next thing is to configure and start the database:
{{cmd|/etc/init.d/postgresql setup
/etc/init.d/postgresql start}}

Next, you need to create a user and temporarily grant the CREATEDB privilege:
{{cmd|psql -U postgres
CREATE USER mycloud WITH PASSWORD 'test123';
ALTER ROLE mycloud CREATEDB;
\q}}
{{Note|Replace the above username 'mycloud' and password 'test123' with something secure. Remember these settings. You will need them later when setting up nextcloud.}}

=== MariaDB ===
Install the package:
{{cmd|apk add nextcloud-mysql mariadb mariadb-client}}

Now configure and start {{pkg|mariadb}}:
{{cmd|<nowiki>mysql_install_db --user=mysql --datadir=/var/lib/mysql</nowiki>
/etc/init.d/mariadb start
/usr/bin/mysql_secure_installation}}
Follow the wizard to setup passwords, etc.
{{Note|Remember the usernames/passwords that you set using the wizard. You will need them later.}}

Next, you need to create a user and database and set permissions:
{{cmd|mysql -u root -p
CREATE DATABASE nextcloud;
GRANT ALL ON nextcloud.* TO 'mycloud'@'localhost' IDENTIFIED BY 'test123';
GRANT ALL ON nextcloud.* TO 'mycloud'@'localhost.localdomain' IDENTIFIED BY 'test123';
FLUSH PRIVILEGES;
EXIT}}
{{Note|Replace the above username 'mycloud' and password 'test123' with something secure. Remember these settings. You will need them later when setting up nextcloud.}}

{{pkg|mariadb-client}} is not needed anymore. Let's uninstall it:
{{cmd|apk del mariadb-client}}

== Webserver ==
Next thing is to choose, install, and configure a webserver. In this example we will install {{pkg|nginx}} or {{pkg|lighttpd}}. ''Nginx'' is preferred over ''Lighttpd'' since the latter will consume a lot of memory when working with large files (see [http://redmine.lighttpd.net/issues/1283 lighty bug #1283]). You are free to install any other webserver of your choice as long as it supports PHP and FastCGI. Generating an SSL certificate for your webserver is outside of the scope of this document.

{{pkg|nextcloud-initscript}} facilitates running the webserver with php-fpm.

{{cmd|apk add nextcloud-sqlite}}

=== Nginx ===
Install the needed packages:
{{cmd|apk add nginx php7-fpm}}

'''Remove/comment''' any section like this in {{path|/etc/nginx/nginx.conf}}:
{{cat|/etc/nginx/nginx.conf|
server {
listen ...
}
}}

Create a configuration file for your site in {{path|/etc/nginx/http.d/mysite.mydomain.com}}:
<pre>
server {
#listen [::]:80; #uncomment for IPv6 support
listen 80;
return 301 https://$host$request_uri;
server_name mysite.mydomain.com;
}

server {
#listen [::]:443 ssl; #uncomment for IPv6 support
listen 443 ssl;
server_name mysite.mydomain.com;

root /usr/share/webapps/nextcloud;
index index.php index.html index.htm;
disable_symlinks off;

ssl_certificate /etc/ssl/cert.pem;
ssl_certificate_key /etc/ssl/key.pem;
ssl_session_timeout 5m;

#Enable Perfect Forward Secrecy and ciphers without known vulnerabilities
#Beware! It breaks compatibility with older OS and browsers (e.g. Windows XP, Android 2.x, etc.)
#ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA;
#ssl_prefer_server_ciphers on;

location / {
try_files $uri $uri/ /index.html;
}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
if (!-f $document_root$fastcgi_script_name) {
return 404;
}
#fastcgi_pass 127.0.0.1:9000;
#fastcgi_pass unix:/run/php-fpm/socket;
fastcgi_pass unix:/run/nextcloud/fastcgi.sock; # From the nextcloud-initscript package
fastcgi_index index.php;
include fastcgi.conf;
}
}
</pre>

If you are running from RAM and you're dealing with large files you might need to move the FastCGI temp file from {{path|/tmp}} to {{path|/var/tmp}} or to a directory that is mounted on hdd:
<pre>
fastcgi_temp_path /var/tmp/nginx/fastcgi 1 2;
</pre>

Large file uploads take some time to be processed by php-fpm, so you need to bump the Nginx default read timeout:

<pre>
fastcgi_read_timeout 300s;
</pre>

{{Note|If you are serving serveral users make sure to tune the *''pm.max_children'' settings in {{path|/etc/php7/php-fpm.d/nextcloud.conf}}}}

{{path|/etc/nginx/nginx.conf}} should already be configured to load your site config from this directory:
<pre>
...
# Includes virtual hosts configs.
include /etc/nginx/http.d/*;
...
</pre>

Start services:
{{cmd|rc-service php-fpm7 start
rc-service nginx start
rc-service nextcloud start}}

Enable automatic startup of services:
{{cmd|rc-update add php-fpm7
rc-update add nginx
rc-update add nextcloud}}

=== Lighttpd ===
Install the package:
{{cmd|apk add lighttpd php5-cgi}}

Make sure you have FastCGI enabled in {{pkg|lighttpd}}:
{{cat|/etc/lighttpd/lighttpd.conf|...
include "mod_fastcgi.conf"
...}}

Start up the webserver:
{{cmd|/etc/init.d/lighttpd start}}

{{tip|You might want to follow the [http://wiki.alpinelinux.org/wiki/Lighttpd_Https_access Lighttpd_Https_access] doc in order to configure lighttpd to use https ''(securing your connections to your nextcloud server)''.}}

Link {{pkg|nextcloud}} installation to web server directory:
{{cmd|ln -s /usr/share/webapps/nextcloud /var/www/localhost/htdocs}}

== Other settings ==
=== Hardening ===
Consider updating the variable <code>url.access-deny</code> in {{path|/etc/lighttpd/lighttpd.conf}} for additional security. Add <code>"config.php"</code> to the variable ''(that's where the database is stored)'' so it looks something like this:
{{cat|/etc/lighttpd/lighttpd.conf|...
url.access-deny {{=}} ("~", ".inc", "config.php")
...}}
Restart {{pkg|lighttpd}} to activate the changes:
{{cmd|/etc/init.d/lighttpd restart}}

=== Additional packages ===
Some large apps, such as pdfviewer, texteditor, notifications and videoplayer are in separate packages:
{{cmd|apk add nextcloud-pdfviewer nextcloud-texteditor nextcloud-notifications nextcloud-videoplayer}}

=== How To Create a Self-Signed SSL Certificate ===
Install openssl:
{{cmd|apk add openssl}}
Generate your self signed certificate and its private key:
{{cmd|<nowiki>openssl req -x509 -nodes -days 365 -newkey rsa:4096 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt</nowiki>}}
Edit your nginx configuration:
{{cat|/etc/nginx/nginx.conf|
ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;
}}

= Configure and use Nextcloud =
== Configure ==
Point your browser at <code><nowiki>https://mysite.mydomain.com</nowiki></code> and follow the on-screen instructions to complete the installation, supplying the database user and password created before.

== Hardening PostgreSQL ==
If you have chosen PGSQL backend, revoke CREATEDB privilege from 'mycloud' user:
{{cmd|psql -U postgres
ALTER ROLE mycloud NOCREATEDB;
\q}}

== Increase upload size ==
{{path|/etc/php/php-fpm.d/nextcloud.conf}} has overridden default file sizes, but they can be modified further to suit your needs:
<pre>
; Maximal size of a file that can be uploaded via web interface.
php_admin_value[memory_limit] = 512M
php_admin_value[post_max_size] = 513M
php_admin_value[upload_max_filesize] = 513M
</pre>

== enable opcache for nginx/php7 ==
To increase performace install
{{cmd|apk add php7-opcache}}

Now uncomment/edit lines in /etc/php7/php.ini:
<pre>
...
opcache.enable=1
opcache.enable_cli=1
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.memory_consumption=128
opcache.save_comments=1
opcache.revalidate_freq=1
...
</pre>

Restart php-fpm7
{{cmd|rc-service php-fpm7 restart}}

== Clients ==
There are clients available for many platforms, Android included:
* http://nextcloud.org/sync-clients/ ''(nextcloud Sync clients)''
* http://nextcloud.org/support/android/ ''(Android client)''

[http://pkgs.alpinelinux.org/packages?name=nextcloud-client&branch=&repo=&arch=&maintainer= nextcloud-client] is currently available in the testing repo.

= Video Communication =
One of the major features of Nextcloud 11, available on Alpine 3.6 (currently edge) is a [https://nextcloud.com/webrtc/ WebRTC app], which relies on Spreed WebRTC server, which is available in the Alpine testing repository. Everything is still beta, so be aware of it :-). If you want a private video conferencing server install Nextcloud using Nginx and do the following (you can use Apache as well and follow the ''Apache config'' instructions [https://nextcloud.com/webrtc/ nextcloud.com]):

Put the following config in the ''server'' section of Nginx:
<pre>
# Spreed WebRTC
location ^~ /webrtc {
proxy_pass http://127.0.0.1:8080;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_buffering on;
proxy_ignore_client_abort off;
proxy_redirect off;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
proxy_next_upstream error timeout invalid_header http_502 http_503 http_504;
}
</pre>

Put the following section in the ''http'' section of Nginx:
<pre>
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
</pre>

Reload Nginx:
{{cmd|rc-service nginx reload}}

Install Spreed WedRTC server (make sure you have the testing [https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management#Packages_and_Repositories repository] enabled):
{{cmd|apk add spreed-web-server}}

Using the configuration file in ''/etc/spreed-webrtc/spreed-webrtc-server.conf'' follow the instructions at [https://nextcloud.com/webrtc/ nextcloud.com] to configure Spreed WebRTC server. Then start the server:
{{cmd|rc-service spreed-web-server start}}
{{cmd|rc-update add spreed-web-server}}

Install the ''Spreed video calls'' app in Nextcloud and enjoy your private video calls.

[[Category:Server]]

Nextcloud

2021-09-30T23:16:26Z

Earboxer: nginx in alpine loads http.d rather than sites-enabled

[http://nextcloud.com/ Nextcloud] is WedDAV-based solution for storing and sharing on-line your data, files, images, video, music, calendars and contacts. [http://karlitschek.de/2016/06/nextcloud/ Nextcloud is a fork of ownCloud with enterprise features included].

= Installation =
{{pkg|nextcloud}} is available from Alpine 3.5 and greater.

Before you start installing anything, make sure you have the latest packages available. Make sure you are using an 'http' repository in your {{path|/etc/apk/repositories}} file, then:
{{cmd|apk update}}
{{tip|Detailed information is found in [[Include:Upgrading_to_latest_release|this]] doc.}}

== Database ==
First you have to decide which database to use. Use one of the databases listed below.

=== Sqlite ===
All you need to do is to install the package:
{{cmd|apk add nextcloud-sqlite}}

=== PostgreSQL ===
Install the package:
{{cmd|apk add nextcloud-pgsql postgresql postgresql-client}}

Next thing is to configure and start the database:
{{cmd|/etc/init.d/postgresql setup
/etc/init.d/postgresql start}}

Next, you need to create a user and temporarily grant the CREATEDB privilege:
{{cmd|psql -U postgres
CREATE USER mycloud WITH PASSWORD 'test123';
ALTER ROLE mycloud CREATEDB;
\q}}
{{Note|Replace the above username 'mycloud' and password 'test123' with something secure. Remember these settings. You will need them later when setting up nextcloud.}}

=== MariaDB ===
Install the package:
{{cmd|apk add nextcloud-mysql mariadb mariadb-client}}

Now configure and start {{pkg|mariadb}}:
{{cmd|<nowiki>mysql_install_db --user=mysql --datadir=/var/lib/mysql</nowiki>
/etc/init.d/mariadb start
/usr/bin/mysql_secure_installation}}
Follow the wizard to setup passwords, etc.
{{Note|Remember the usernames/passwords that you set using the wizard. You will need them later.}}

Next, you need to create a user and database and set permissions:
{{cmd|mysql -u root -p
CREATE DATABASE nextcloud;
GRANT ALL ON nextcloud.* TO 'mycloud'@'localhost' IDENTIFIED BY 'test123';
GRANT ALL ON nextcloud.* TO 'mycloud'@'localhost.localdomain' IDENTIFIED BY 'test123';
FLUSH PRIVILEGES;
EXIT}}
{{Note|Replace the above username 'mycloud' and password 'test123' with something secure. Remember these settings. You will need them later when setting up nextcloud.}}

{{pkg|mariadb-client}} is not needed anymore. Let's uninstall it:
{{cmd|apk del mariadb-client}}

== Webserver ==
Next thing is to choose, install, and configure a webserver. In this example we will install {{pkg|nginx}} or {{pkg|lighttpd}}. ''Nginx'' is preferred over ''Lighttpd'' since the latter will consume a lot of memory when working with large files (see [http://redmine.lighttpd.net/issues/1283 lighty bug #1283]). You are free to install any other webserver of your choice as long as it supports PHP and FastCGI. Generating an SSL certificate for your webserver is outside of the scope of this document.

{{pkg|nextcloud-initscript}} facilitates running the webserver with php-fpm.

{{cmd|apk add nextcloud-sqlite}}

=== Nginx ===
Install the needed packages:
{{cmd|apk add nginx php7-fpm}}

'''Remove/comment''' any section like this in {{path|/etc/nginx/nginx.conf}}:
{{cat|/etc/nginx/nginx.conf|
server {
listen ...
}
}}

Create a configuration file for your site in {{path|/etc/nginx/http.d/mysite.mydomain.com}}:
<pre>
server {
#listen [::]:80; #uncomment for IPv6 support
listen 80;
return 301 https://$host$request_uri;
server_name mysite.mydomain.com;
}

server {
#listen [::]:443 ssl; #uncomment for IPv6 support
listen 443 ssl;
server_name mysite.mydomain.com;

root /usr/share/webapps/nextcloud;
index index.php index.html index.htm;
disable_symlinks off;

ssl_certificate /etc/ssl/cert.pem;
ssl_certificate_key /etc/ssl/key.pem;
ssl_session_timeout 5m;

#Enable Perfect Forward Secrecy and ciphers without known vulnerabilities
#Beware! It breaks compatibility with older OS and browsers (e.g. Windows XP, Android 2.x, etc.)
#ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA;
#ssl_prefer_server_ciphers on;

location / {
try_files $uri $uri/ /index.html;
}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
if (!-f $document_root$fastcgi_script_name) {
return 404;
}
#fastcgi_pass 127.0.0.1:9000;
#fastcgi_pass unix:/run/php-fpm/socket;
fastcgi_pass unix:/run/nextcloud/fastcgi.sock; # From the nextcloud-initscript package
fastcgi_index index.php;
include fastcgi.conf;
}
}
</pre>

If you are running from RAM and you're dealing with large files you might need to move the FastCGI temp file from {{path|/tmp}} to {{path|/var/tmp}} or to a directory that is mounted on hdd:
<pre>
fastcgi_temp_path /var/tmp/nginx/fastcgi 1 2;
</pre>

Large file uploads take some time to be processed by php-fpm, so you need to bump the Nginx default read timeout:

<pre>
fastcgi_read_timeout 300s;
</pre>

Set user and group for php-fpm in {{path|/etc/php7/php-fpm.d/www.conf}}:
<pre>
...
user = nginx
group = www-data
...
</pre>

{{Note|If you are serving serveral users make sure to tune the *''children'' settings in {{path|/etc/php7/php-fpm.d/www.conf}}}}

Also enable $PATH by uncommenting the following lines in {{path|/etc/php7/php-fpm.d/www.conf}}:

<pre>
...
env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp
...
</pre>

{{path|/etc/nginx/nginx.conf}} should be configured to load your site config from this directory:
<pre>
...
# Includes virtual hosts configs.
include /etc/nginx/http.d/*;
...
</pre>

Start services:
{{cmd|rc-service php-fpm7 start
rc-service nginx start
rc-service nextcloud start}}

Enable automatic startup of services:
{{cmd|rc-update add php-fpm7
rc-update add nginx
rc-update add nextcloud}}

=== Lighttpd ===
Install the package:
{{cmd|apk add lighttpd php5-cgi}}

Make sure you have FastCGI enabled in {{pkg|lighttpd}}:
{{cat|/etc/lighttpd/lighttpd.conf|...
include "mod_fastcgi.conf"
...}}

Start up the webserver:
{{cmd|/etc/init.d/lighttpd start}}

{{tip|You might want to follow the [http://wiki.alpinelinux.org/wiki/Lighttpd_Https_access Lighttpd_Https_access] doc in order to configure lighttpd to use https ''(securing your connections to your nextcloud server)''.}}

Link {{pkg|nextcloud}} installation to web server directory:
{{cmd|ln -s /usr/share/webapps/nextcloud /var/www/localhost/htdocs}}

== Other settings ==
=== Hardening ===
Consider updating the variable <code>url.access-deny</code> in {{path|/etc/lighttpd/lighttpd.conf}} for additional security. Add <code>"config.php"</code> to the variable ''(that's where the database is stored)'' so it looks something like this:
{{cat|/etc/lighttpd/lighttpd.conf|...
url.access-deny {{=}} ("~", ".inc", "config.php")
...}}
Restart {{pkg|lighttpd}} to activate the changes:
{{cmd|/etc/init.d/lighttpd restart}}

=== Additional packages ===
Some large apps, such as pdfviewer, texteditor, notifications and videoplayer are in separate packages:
{{cmd|apk add nextcloud-pdfviewer nextcloud-texteditor nextcloud-notifications nextcloud-videoplayer}}

=== How To Create a Self-Signed SSL Certificate ===
Install openssl:
{{cmd|apk add openssl}}
Generate your self signed certificate and its private key:
{{cmd|<nowiki>openssl req -x509 -nodes -days 365 -newkey rsa:4096 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt</nowiki>}}
Edit your nginx configuration:
{{cat|/etc/nginx/nginx.conf|
ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;
}}

= Configure and use Nextcloud =
== Configure ==
Point your browser at <code><nowiki>https://mysite.mydomain.com</nowiki></code> and follow the on-screen instructions to complete the installation, supplying the database user and password created before.

== Hardening PostgreSQL ==
If you have chosen PGSQL backend, revoke CREATEDB privilege from 'mycloud' user:
{{cmd|psql -U postgres
ALTER ROLE mycloud NOCREATEDB;
\q}}

== Increase upload size ==
Default configuration for php is limited to 2Mb file size. You might want to increase that size by editing the {{path|/etc/php/php.ini}} and change the following values to something that suits you:
<pre>
upload_max_filesize = 2M
post_max_size = 8M
</pre>

== enable opcache for nginx/php7 ==
To increase performace install
{{cmd|apk add php7-opcache}}

Now uncomment/edit lines in /etc/php7/php.ini:
<pre>
...
opcache.enable=1
opcache.enable_cli=1
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.memory_consumption=128
opcache.save_comments=1
opcache.revalidate_freq=1
...
</pre>

Restart php-fpm7
{{cmd|rc-service php-fpm7 restart}}

== Clients ==
There are clients available for many platforms, Android included:
* http://nextcloud.org/sync-clients/ ''(nextcloud Sync clients)''
* http://nextcloud.org/support/android/ ''(Android client)''

[http://pkgs.alpinelinux.org/packages?name=nextcloud-client&branch=&repo=&arch=&maintainer= nextcloud-client] is currently available in the testing repo.

= Video Communication =
One of the major features of Nextcloud 11, available on Alpine 3.6 (currently edge) is a [https://nextcloud.com/webrtc/ WebRTC app], which relies on Spreed WebRTC server, which is available in the Alpine testing repository. Everything is still beta, so be aware of it :-). If you want a private video conferencing server install Nextcloud using Nginx and do the following (you can use Apache as well and follow the ''Apache config'' instructions [https://nextcloud.com/webrtc/ nextcloud.com]):

Put the following config in the ''server'' section of Nginx:
<pre>
# Spreed WebRTC
location ^~ /webrtc {
proxy_pass http://127.0.0.1:8080;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_buffering on;
proxy_ignore_client_abort off;
proxy_redirect off;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
proxy_next_upstream error timeout invalid_header http_502 http_503 http_504;
}
</pre>

Put the following section in the ''http'' section of Nginx:
<pre>
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
</pre>

Reload Nginx:
{{cmd|rc-service nginx reload}}

Install Spreed WedRTC server (make sure you have the testing [https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management#Packages_and_Repositories repository] enabled):
{{cmd|apk add spreed-web-server}}

Using the configuration file in ''/etc/spreed-webrtc/spreed-webrtc-server.conf'' follow the instructions at [https://nextcloud.com/webrtc/ nextcloud.com] to configure Spreed WebRTC server. Then start the server:
{{cmd|rc-service spreed-web-server start}}
{{cmd|rc-update add spreed-web-server}}

Install the ''Spreed video calls'' app in Nextcloud and enjoy your private video calls.

[[Category:Server]]

Nextcloud

2021-09-30T23:05:05Z

Earboxer: nginx is already in the www-data group

[http://nextcloud.com/ Nextcloud] is WedDAV-based solution for storing and sharing on-line your data, files, images, video, music, calendars and contacts. [http://karlitschek.de/2016/06/nextcloud/ Nextcloud is a fork of ownCloud with enterprise features included].

= Installation =
{{pkg|nextcloud}} is available from Alpine 3.5 and greater.

Before you start installing anything, make sure you have the latest packages available. Make sure you are using an 'http' repository in your {{path|/etc/apk/repositories}} file, then:
{{cmd|apk update}}
{{tip|Detailed information is found in [[Include:Upgrading_to_latest_release|this]] doc.}}

== Database ==
First you have to decide which database to use. Use one of the databases listed below.

=== Sqlite ===
All you need to do is to install the package:
{{cmd|apk add nextcloud-sqlite}}

=== PostgreSQL ===
Install the package:
{{cmd|apk add nextcloud-pgsql postgresql postgresql-client}}

Next thing is to configure and start the database:
{{cmd|/etc/init.d/postgresql setup
/etc/init.d/postgresql start}}

Next, you need to create a user and temporarily grant the CREATEDB privilege:
{{cmd|psql -U postgres
CREATE USER mycloud WITH PASSWORD 'test123';
ALTER ROLE mycloud CREATEDB;
\q}}
{{Note|Replace the above username 'mycloud' and password 'test123' with something secure. Remember these settings. You will need them later when setting up nextcloud.}}

=== MariaDB ===
Install the package:
{{cmd|apk add nextcloud-mysql mariadb mariadb-client}}

Now configure and start {{pkg|mariadb}}:
{{cmd|<nowiki>mysql_install_db --user=mysql --datadir=/var/lib/mysql</nowiki>
/etc/init.d/mariadb start
/usr/bin/mysql_secure_installation}}
Follow the wizard to setup passwords, etc.
{{Note|Remember the usernames/passwords that you set using the wizard. You will need them later.}}

Next, you need to create a user and database and set permissions:
{{cmd|mysql -u root -p
CREATE DATABASE nextcloud;
GRANT ALL ON nextcloud.* TO 'mycloud'@'localhost' IDENTIFIED BY 'test123';
GRANT ALL ON nextcloud.* TO 'mycloud'@'localhost.localdomain' IDENTIFIED BY 'test123';
FLUSH PRIVILEGES;
EXIT}}
{{Note|Replace the above username 'mycloud' and password 'test123' with something secure. Remember these settings. You will need them later when setting up nextcloud.}}

{{pkg|mariadb-client}} is not needed anymore. Let's uninstall it:
{{cmd|apk del mariadb-client}}

== Webserver ==
Next thing is to choose, install, and configure a webserver. In this example we will install {{pkg|nginx}} or {{pkg|lighttpd}}. ''Nginx'' is preferred over ''Lighttpd'' since the latter will consume a lot of memory when working with large files (see [http://redmine.lighttpd.net/issues/1283 lighty bug #1283]). You are free to install any other webserver of your choice as long as it supports PHP and FastCGI. Generating an SSL certificate for your webserver is outside of the scope of this document.

{{pkg|nextcloud-initscript}} facilitates running the webserver with php-fpm.

{{cmd|apk add nextcloud-sqlite}}

=== Nginx ===
Install the needed packages:
{{cmd|apk add nginx php7-fpm}}

'''Remove/comment''' any section like this in {{path|/etc/nginx/nginx.conf}}:
{{cat|/etc/nginx/nginx.conf|
server {
listen ...
}
}}

Include the following directive in {{path|/etc/nginx/nginx.conf}}:
{{cat|/etc/nginx/nginx.conf|
http {
...
include /etc/nginx/sites-enabled/*;
...
}}

Create directories for your websites:
{{cmd|mkdir /etc/nginx/sites-available}}
{{cmd|mkdir /etc/nginx/sites-enabled}}

Create a configuration file for your site in {{path|/etc/nginx/sites-available/mysite.mydomain.com}}:
<pre>
server {
#listen [::]:80; #uncomment for IPv6 support
listen 80;
return 301 https://$host$request_uri;
server_name mysite.mydomain.com;
}

server {
#listen [::]:443 ssl; #uncomment for IPv6 support
listen 443 ssl;
server_name mysite.mydomain.com;

root /usr/share/webapps/nextcloud;
index index.php index.html index.htm;
disable_symlinks off;

ssl_certificate /etc/ssl/cert.pem;
ssl_certificate_key /etc/ssl/key.pem;
ssl_session_timeout 5m;

#Enable Perfect Forward Secrecy and ciphers without known vulnerabilities
#Beware! It breaks compatibility with older OS and browsers (e.g. Windows XP, Android 2.x, etc.)
#ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA;
#ssl_prefer_server_ciphers on;

location / {
try_files $uri $uri/ /index.html;
}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
if (!-f $document_root$fastcgi_script_name) {
return 404;
}
#fastcgi_pass 127.0.0.1:9000;
#fastcgi_pass unix:/run/php-fpm/socket;
fastcgi_pass unix:/run/nextcloud/fastcgi.sock; # From the nextcloud-initscript package
fastcgi_index index.php;
include fastcgi.conf;
}
}
</pre>

If you are running from RAM and you're dealing with large files you might need to move the FastCGI temp file from {{path|/tmp}} to {{path|/var/tmp}} or to a directory that is mounted on hdd:
<pre>
fastcgi_temp_path /var/tmp/nginx/fastcgi 1 2;
</pre>

Large file uploads take some time to be processed by php-fpm, so you need to bump the Nginx default read timeout:

<pre>
fastcgi_read_timeout 300s;
</pre>

Set user and group for php-fpm in {{path|/etc/php7/php-fpm.d/www.conf}}:
<pre>
...
user = nginx
group = www-data
...
</pre>

{{Note|If you are serving serveral users make sure to tune the *''children'' settings in {{path|/etc/php7/php-fpm.d/www.conf}}}}

Also enable $PATH by uncommenting the following lines in {{path|/etc/php7/php-fpm.d/www.conf}}:

<pre>
...
env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp
...
</pre>

Enable your website:
{{cmd|ln -s ../sites-available/mysite.mydomain.com /etc/nginx/sites-enabled/mysite.mydomain.com}}

The default configuration of nginx shows a 404 page. Therefore, we have to edit {{path|/etc/nginx/nginx.conf}}:
<pre>
...
# Includes virtual hosts configs.
# include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;
...
</pre>

Start services:
{{cmd|rc-service php-fpm7 start
rc-service nginx start
rc-service nextcloud start}}

Enable automatic startup of services:
{{cmd|rc-update add php-fpm7
rc-update add nginx
rc-update add nextcloud}}

=== Lighttpd ===
Install the package:
{{cmd|apk add lighttpd php5-cgi}}

Make sure you have FastCGI enabled in {{pkg|lighttpd}}:
{{cat|/etc/lighttpd/lighttpd.conf|...
include "mod_fastcgi.conf"
...}}

Start up the webserver:
{{cmd|/etc/init.d/lighttpd start}}

{{tip|You might want to follow the [http://wiki.alpinelinux.org/wiki/Lighttpd_Https_access Lighttpd_Https_access] doc in order to configure lighttpd to use https ''(securing your connections to your nextcloud server)''.}}

Link {{pkg|nextcloud}} installation to web server directory:
{{cmd|ln -s /usr/share/webapps/nextcloud /var/www/localhost/htdocs}}

== Other settings ==
=== Hardening ===
Consider updating the variable <code>url.access-deny</code> in {{path|/etc/lighttpd/lighttpd.conf}} for additional security. Add <code>"config.php"</code> to the variable ''(that's where the database is stored)'' so it looks something like this:
{{cat|/etc/lighttpd/lighttpd.conf|...
url.access-deny {{=}} ("~", ".inc", "config.php")
...}}
Restart {{pkg|lighttpd}} to activate the changes:
{{cmd|/etc/init.d/lighttpd restart}}

=== Additional packages ===
Some large apps, such as pdfviewer, texteditor, notifications and videoplayer are in separate packages:
{{cmd|apk add nextcloud-pdfviewer nextcloud-texteditor nextcloud-notifications nextcloud-videoplayer}}

=== How To Create a Self-Signed SSL Certificate ===
Install openssl:
{{cmd|apk add openssl}}
Generate your self signed certificate and its private key:
{{cmd|<nowiki>openssl req -x509 -nodes -days 365 -newkey rsa:4096 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt</nowiki>}}
Edit your nginx configuration:
{{cat|/etc/nginx/nginx.conf|
ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;
}}

= Configure and use Nextcloud =
== Configure ==
Point your browser at <code><nowiki>https://mysite.mydomain.com</nowiki></code> and follow the on-screen instructions to complete the installation, supplying the database user and password created before.

== Hardening PostgreSQL ==
If you have chosen PGSQL backend, revoke CREATEDB privilege from 'mycloud' user:
{{cmd|psql -U postgres
ALTER ROLE mycloud NOCREATEDB;
\q}}

== Increase upload size ==
Default configuration for php is limited to 2Mb file size. You might want to increase that size by editing the {{path|/etc/php/php.ini}} and change the following values to something that suits you:
<pre>
upload_max_filesize = 2M
post_max_size = 8M
</pre>

== enable opcache for nginx/php7 ==
To increase performace install
{{cmd|apk add php7-opcache}}

Now uncomment/edit lines in /etc/php7/php.ini:
<pre>
...
opcache.enable=1
opcache.enable_cli=1
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.memory_consumption=128
opcache.save_comments=1
opcache.revalidate_freq=1
...
</pre>

Restart php-fpm7
{{cmd|rc-service php-fpm7 restart}}

== Clients ==
There are clients available for many platforms, Android included:
* http://nextcloud.org/sync-clients/ ''(nextcloud Sync clients)''
* http://nextcloud.org/support/android/ ''(Android client)''

[http://pkgs.alpinelinux.org/packages?name=nextcloud-client&branch=&repo=&arch=&maintainer= nextcloud-client] is currently available in the testing repo.

= Video Communication =
One of the major features of Nextcloud 11, available on Alpine 3.6 (currently edge) is a [https://nextcloud.com/webrtc/ WebRTC app], which relies on Spreed WebRTC server, which is available in the Alpine testing repository. Everything is still beta, so be aware of it :-). If you want a private video conferencing server install Nextcloud using Nginx and do the following (you can use Apache as well and follow the ''Apache config'' instructions [https://nextcloud.com/webrtc/ nextcloud.com]):

Put the following config in the ''server'' section of Nginx:
<pre>
# Spreed WebRTC
location ^~ /webrtc {
proxy_pass http://127.0.0.1:8080;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_buffering on;
proxy_ignore_client_abort off;
proxy_redirect off;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
proxy_next_upstream error timeout invalid_header http_502 http_503 http_504;
}
</pre>

Put the following section in the ''http'' section of Nginx:
<pre>
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
</pre>

Reload Nginx:
{{cmd|rc-service nginx reload}}

Install Spreed WedRTC server (make sure you have the testing [https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management#Packages_and_Repositories repository] enabled):
{{cmd|apk add spreed-web-server}}

Using the configuration file in ''/etc/spreed-webrtc/spreed-webrtc-server.conf'' follow the instructions at [https://nextcloud.com/webrtc/ nextcloud.com] to configure Spreed WebRTC server. Then start the server:
{{cmd|rc-service spreed-web-server start}}
{{cmd|rc-update add spreed-web-server}}

Install the ''Spreed video calls'' app in Nextcloud and enjoy your private video calls.

[[Category:Server]]

Nextcloud

2021-09-30T23:02:55Z

Earboxer: Add relevant info for nextcloud-initscript

[http://nextcloud.com/ Nextcloud] is WedDAV-based solution for storing and sharing on-line your data, files, images, video, music, calendars and contacts. [http://karlitschek.de/2016/06/nextcloud/ Nextcloud is a fork of ownCloud with enterprise features included].

= Installation =
{{pkg|nextcloud}} is available from Alpine 3.5 and greater.

Before you start installing anything, make sure you have the latest packages available. Make sure you are using an 'http' repository in your {{path|/etc/apk/repositories}} file, then:
{{cmd|apk update}}
{{tip|Detailed information is found in [[Include:Upgrading_to_latest_release|this]] doc.}}

== Database ==
First you have to decide which database to use. Use one of the databases listed below.

=== Sqlite ===
All you need to do is to install the package:
{{cmd|apk add nextcloud-sqlite}}

=== PostgreSQL ===
Install the package:
{{cmd|apk add nextcloud-pgsql postgresql postgresql-client}}

Next thing is to configure and start the database:
{{cmd|/etc/init.d/postgresql setup
/etc/init.d/postgresql start}}

Next, you need to create a user and temporarily grant the CREATEDB privilege:
{{cmd|psql -U postgres
CREATE USER mycloud WITH PASSWORD 'test123';
ALTER ROLE mycloud CREATEDB;
\q}}
{{Note|Replace the above username 'mycloud' and password 'test123' with something secure. Remember these settings. You will need them later when setting up nextcloud.}}

=== MariaDB ===
Install the package:
{{cmd|apk add nextcloud-mysql mariadb mariadb-client}}

Now configure and start {{pkg|mariadb}}:
{{cmd|<nowiki>mysql_install_db --user=mysql --datadir=/var/lib/mysql</nowiki>
/etc/init.d/mariadb start
/usr/bin/mysql_secure_installation}}
Follow the wizard to setup passwords, etc.
{{Note|Remember the usernames/passwords that you set using the wizard. You will need them later.}}

Next, you need to create a user and database and set permissions:
{{cmd|mysql -u root -p
CREATE DATABASE nextcloud;
GRANT ALL ON nextcloud.* TO 'mycloud'@'localhost' IDENTIFIED BY 'test123';
GRANT ALL ON nextcloud.* TO 'mycloud'@'localhost.localdomain' IDENTIFIED BY 'test123';
FLUSH PRIVILEGES;
EXIT}}
{{Note|Replace the above username 'mycloud' and password 'test123' with something secure. Remember these settings. You will need them later when setting up nextcloud.}}

{{pkg|mariadb-client}} is not needed anymore. Let's uninstall it:
{{cmd|apk del mariadb-client}}

== Webserver ==
Next thing is to choose, install, and configure a webserver. In this example we will install {{pkg|nginx}} or {{pkg|lighttpd}}. ''Nginx'' is preferred over ''Lighttpd'' since the latter will consume a lot of memory when working with large files (see [http://redmine.lighttpd.net/issues/1283 lighty bug #1283]). You are free to install any other webserver of your choice as long as it supports PHP and FastCGI. Generating an SSL certificate for your webserver is outside of the scope of this document.

{{pkg|nextcloud-initscript}} facilitates running the webserver with php-fpm.

{{cmd|apk add nextcloud-sqlite}}

=== Nginx ===
Install the needed packages:
{{cmd|apk add nginx php7-fpm}}

'''Remove/comment''' any section like this in {{path|/etc/nginx/nginx.conf}}:
{{cat|/etc/nginx/nginx.conf|
server {
listen ...
}
}}

Include the following directive in {{path|/etc/nginx/nginx.conf}}:
{{cat|/etc/nginx/nginx.conf|
http {
...
include /etc/nginx/sites-enabled/*;
...
}}

Create directories for your websites:
{{cmd|mkdir /etc/nginx/sites-available}}
{{cmd|mkdir /etc/nginx/sites-enabled}}

Create a configuration file for your site in {{path|/etc/nginx/sites-available/mysite.mydomain.com}}:
<pre>
server {
#listen [::]:80; #uncomment for IPv6 support
listen 80;
return 301 https://$host$request_uri;
server_name mysite.mydomain.com;
}

server {
#listen [::]:443 ssl; #uncomment for IPv6 support
listen 443 ssl;
server_name mysite.mydomain.com;

root /usr/share/webapps/nextcloud;
index index.php index.html index.htm;
disable_symlinks off;

ssl_certificate /etc/ssl/cert.pem;
ssl_certificate_key /etc/ssl/key.pem;
ssl_session_timeout 5m;

#Enable Perfect Forward Secrecy and ciphers without known vulnerabilities
#Beware! It breaks compatibility with older OS and browsers (e.g. Windows XP, Android 2.x, etc.)
#ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA;
#ssl_prefer_server_ciphers on;

location / {
try_files $uri $uri/ /index.html;
}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
if (!-f $document_root$fastcgi_script_name) {
return 404;
}
#fastcgi_pass 127.0.0.1:9000;
#fastcgi_pass unix:/run/php-fpm/socket;
fastcgi_pass unix:/run/nextcloud/fastcgi.sock; # From the nextcloud-initscript package
fastcgi_index index.php;
include fastcgi.conf;
}
}
</pre>

If you are running from RAM and you're dealing with large files you might need to move the FastCGI temp file from {{path|/tmp}} to {{path|/var/tmp}} or to a directory that is mounted on hdd:
<pre>
fastcgi_temp_path /var/tmp/nginx/fastcgi 1 2;
</pre>

Large file uploads take some time to be processed by php-fpm, so you need to bump the Nginx default read timeout:

<pre>
fastcgi_read_timeout 300s;
</pre>

Set user and group for php-fpm in {{path|/etc/php7/php-fpm.d/www.conf}}:
<pre>
...
user = nginx
group = www-data
...
</pre>

{{Note|If you are serving serveral users make sure to tune the *''children'' settings in {{path|/etc/php7/php-fpm.d/www.conf}}}}

Also enable $PATH by uncommenting the following lines in {{path|/etc/php7/php-fpm.d/www.conf}}:

<pre>
...
env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp
...
</pre>

Make nginx user a member of the www-data group:
{{cmd|addgroup nginx www-data}}

Enable your website:
{{cmd|ln -s ../sites-available/mysite.mydomain.com /etc/nginx/sites-enabled/mysite.mydomain.com}}

The default configuration of nginx shows a 404 page. Therefore, we have to edit {{path|/etc/nginx/nginx.conf}}:
<pre>
...
# Includes virtual hosts configs.
# include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;
...
</pre>

Start services:
{{cmd|rc-service php-fpm7 start
rc-service nginx start
rc-service nextcloud start}}

Enable automatic startup of services:
{{cmd|rc-update add php-fpm7
rc-update add nginx
rc-update add nextcloud}}

=== Lighttpd ===
Install the package:
{{cmd|apk add lighttpd php5-cgi}}

Make sure you have FastCGI enabled in {{pkg|lighttpd}}:
{{cat|/etc/lighttpd/lighttpd.conf|...
include "mod_fastcgi.conf"
...}}

Start up the webserver:
{{cmd|/etc/init.d/lighttpd start}}

{{tip|You might want to follow the [http://wiki.alpinelinux.org/wiki/Lighttpd_Https_access Lighttpd_Https_access] doc in order to configure lighttpd to use https ''(securing your connections to your nextcloud server)''.}}

Link {{pkg|nextcloud}} installation to web server directory:
{{cmd|ln -s /usr/share/webapps/nextcloud /var/www/localhost/htdocs}}

== Other settings ==
=== Hardening ===
Consider updating the variable <code>url.access-deny</code> in {{path|/etc/lighttpd/lighttpd.conf}} for additional security. Add <code>"config.php"</code> to the variable ''(that's where the database is stored)'' so it looks something like this:
{{cat|/etc/lighttpd/lighttpd.conf|...
url.access-deny {{=}} ("~", ".inc", "config.php")
...}}
Restart {{pkg|lighttpd}} to activate the changes:
{{cmd|/etc/init.d/lighttpd restart}}

=== Additional packages ===
Some large apps, such as pdfviewer, texteditor, notifications and videoplayer are in separate packages:
{{cmd|apk add nextcloud-pdfviewer nextcloud-texteditor nextcloud-notifications nextcloud-videoplayer}}

=== How To Create a Self-Signed SSL Certificate ===
Install openssl:
{{cmd|apk add openssl}}
Generate your self signed certificate and its private key:
{{cmd|<nowiki>openssl req -x509 -nodes -days 365 -newkey rsa:4096 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt</nowiki>}}
Edit your nginx configuration:
{{cat|/etc/nginx/nginx.conf|
ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;
}}

= Configure and use Nextcloud =
== Configure ==
Point your browser at <code><nowiki>https://mysite.mydomain.com</nowiki></code> and follow the on-screen instructions to complete the installation, supplying the database user and password created before.

== Hardening PostgreSQL ==
If you have chosen PGSQL backend, revoke CREATEDB privilege from 'mycloud' user:
{{cmd|psql -U postgres
ALTER ROLE mycloud NOCREATEDB;
\q}}

== Increase upload size ==
Default configuration for php is limited to 2Mb file size. You might want to increase that size by editing the {{path|/etc/php/php.ini}} and change the following values to something that suits you:
<pre>
upload_max_filesize = 2M
post_max_size = 8M
</pre>

== enable opcache for nginx/php7 ==
To increase performace install
{{cmd|apk add php7-opcache}}

Now uncomment/edit lines in /etc/php7/php.ini:
<pre>
...
opcache.enable=1
opcache.enable_cli=1
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.memory_consumption=128
opcache.save_comments=1
opcache.revalidate_freq=1
...
</pre>

Restart php-fpm7
{{cmd|rc-service php-fpm7 restart}}

== Clients ==
There are clients available for many platforms, Android included:
* http://nextcloud.org/sync-clients/ ''(nextcloud Sync clients)''
* http://nextcloud.org/support/android/ ''(Android client)''

[http://pkgs.alpinelinux.org/packages?name=nextcloud-client&branch=&repo=&arch=&maintainer= nextcloud-client] is currently available in the testing repo.

= Video Communication =
One of the major features of Nextcloud 11, available on Alpine 3.6 (currently edge) is a [https://nextcloud.com/webrtc/ WebRTC app], which relies on Spreed WebRTC server, which is available in the Alpine testing repository. Everything is still beta, so be aware of it :-). If you want a private video conferencing server install Nextcloud using Nginx and do the following (you can use Apache as well and follow the ''Apache config'' instructions [https://nextcloud.com/webrtc/ nextcloud.com]):

Put the following config in the ''server'' section of Nginx:
<pre>
# Spreed WebRTC
location ^~ /webrtc {
proxy_pass http://127.0.0.1:8080;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_buffering on;
proxy_ignore_client_abort off;
proxy_redirect off;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
proxy_next_upstream error timeout invalid_header http_502 http_503 http_504;
}
</pre>

Put the following section in the ''http'' section of Nginx:
<pre>
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
</pre>

Reload Nginx:
{{cmd|rc-service nginx reload}}

Install Spreed WedRTC server (make sure you have the testing [https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management#Packages_and_Repositories repository] enabled):
{{cmd|apk add spreed-web-server}}

Using the configuration file in ''/etc/spreed-webrtc/spreed-webrtc-server.conf'' follow the instructions at [https://nextcloud.com/webrtc/ nextcloud.com] to configure Spreed WebRTC server. Then start the server:
{{cmd|rc-service spreed-web-server start}}
{{cmd|rc-update add spreed-web-server}}

Install the ''Spreed video calls'' app in Nextcloud and enjoy your private video calls.

[[Category:Server]]