ansible-nextcloud

Ansible role to install a docker containerized Nextcloud instance

Components :

• wonderfall/nextcloud docker image
• Official mariadb docker image
• Official nginx docker image
• Minimal Let's Encrypt webroot docker image

Assumes the target machine does not have any web server.

Any firewall should open ports 80 (for Let's Encrypt verification process) and 443 (HTTPS access to the Nextcloud instance)

Current installation steps:

1. apt-get install python python-docker docker.io
2. Run ansible playbook using this role
3. docker run -d --name nextcloud-db -e MYSQL_ROOT_PASSWORD=supersecretpassword -v /data/mysql/data:/var/lib/mysql -v /data/mysql/conf.d:/etc/mysql/conf.d -e MYSQL_DATABASE=nextcloud -e MYSQL_USER=nextcloud -e MYSQL_PASSWORD=supersecretdatabasepassword mariadb:10.1
4. docker run -d --name nextcloud-php -v /data/nextcloud/apps:/apps2 -v /data/nextcloud/config:/config -v /data/nextcloud/data:/data --link nextcloud-db:nextcloud-db -e ADMIN_USER=rlejolivet -e ADMIN_PASSWORD=verysecretpassword -e DB_TYPE=mysql -e DB_NAME=nextcloud -e DB_USER=nextcloud -e DB_PASSWORD=supersecretdatabasepassword -e DB_HOST=nextcloud-db wonderfall/nextcloud:11.0
5. Generating a certificate for the server :
   • docker run -d --name letsencrypt-proxy -p 80:80 -v /data/nginx/log:/var/log/nginx -v /data/letsencrypt/www:/usr/share/nginx/html nginx:1.11 && docker run --rm -v /data/letsencrypt/www:/var/www -v /data/letsencrypt/certs:/etc/letsencrypt -e DOMAINS=example.com -e [email protected] letsencrypt-webroot && docker stop letsencrypt-proxy && docker rm letsencrypt-proxy
6. docker run -d --name nextcloud-proxy -p 80:80 -p 443:443 --link nextcloud-php:nextcloud-php -v /data/nginx/log:/var/log/nginx -v /data/nginx/conf.d:/etc/nginx/conf.d -v /data/letsencrypt/certs:/etc/letsencrypt -v /data/letsencrypt/www:/var/www nginx:1.11
7. Add the server name to the "trusted_domaines" array in /data/nextcloud/config/config.php
8. docker stop nextcloud-php
9. docker start nextcloud-php

Adding collabora online office

1. Creating the collabora online office container:

   docker run -t -d --name nextcloud-office -e 'domain=example\\.com' --restart always --cap-add MKNOD collabora/code

2. docker run --rm -v /data/letsencrypt/www:/var/www -v /data/letsencrypt/certs:/etc/letsencrypt -e DOMAINS=office.example.com -e [email protected] letsencrypt-webroot

3. docker stop nextcloud-proxy && docker rm nextcloud-proxy

4. docker run -d --name nextcloud-proxy -p 80:80 -p 443:443 --link nextcloud-php:nextcloud-php --link nextcloud-office:nextcloud-office -v /data/nginx/log:/var/log/nginx -v /data/nginx/conf.d:/etc/nginx/conf.d -v /data/letsencrypt/certs:/etc/letsencrypt -v /data/letsencrypt/www:/var/www nginx:1.11

Auto cert renewal:

1. Create a script that runs :

   docker run --rm ... letsencrypt-webroot docker stop nextcloud-proxy docker start nextcloud-proxy

2. Put that script into a cron that runs every week