Example installation on OpenBSD

Warning

Nextcloud does not have official OpenBSD or other BSDs support

In this install tutorial we will be deploying Nextcloud on a minimal OpenBSD with our own httpd(8), PHP, PostgreSQL and redis (for -stable or -current are the same steps).

From a base installed OpenBSD system you can just do:

# pkg_add nextcloud

The extra packages:

# pkg_add postgresql-server redis pecl74-redis php-pdo_pgsql

This will take care of your dependencies and give you the options to choose which PHP version do you want.

HTTPD(8)

Create a virtualhost in /etc/httpd.conf and add the following content to it:

  server "domain.tld" {
      listen on egress tls port 443
      hsts max-age 15768000

        tls {
                  certificate "/etc/ssl/domain.tld_fullchain.pem"
                  key "/etc/ssl/private/domain.tld_private.pem"
        }

        # Set max upload size to 513M (in bytes)
        connection max request body 537919488
        connection max requests 1000
        connection request timeout 3600
        connection timeout 3600

        block drop

        # Ensure that no '*.php*' files can be fetched from these directories
        location "/nextcloud/config/*" {
                block drop
        }

        location "/nextcloud/data/*" {
                block drop
        }

        # Note that this matches "*.php*" anywhere in the request path.
        location "/nextcloud/*.php*" {
                root "/nextcloud"
                request strip 1
                fastcgi socket "/run/php-fpm.sock"
                pass
        }

        location "/nextcloud/apps/*" {
                root "/nextcloud"
                request strip 1
                pass
        }

        location "/nextcloud/core/*" {
                root "/nextcloud"
                request strip 1
                pass
        }

        location "/nextcloud" {
                block return 301 "$DOCUMENT_URI/index.php"
        }

        location "/nextcloud/" {
                block return 301 "$DOCUMENT_URI/index.php"
        }

        location "/.well-known/carddav" {
                block return 301 "https://$SERVER_NAME/nextcloud/remote.php/dav"
        }

        location "/.well-known/caldav" {
                block return 301 "https://$SERVER_NAME/nextcloud/remote.php/dav"
        }

        location "/.well-known/webfinger" {
                block return 301 "https://$SERVER_NAME/nextcloud/public.php?service=webfinger"
        }

        location match "/nextcloud/ocs-provider/*" {
                directory index index.php
                pass
        }
}

Make sure that httpd(8) is enabled and started:

# rcctl enable httpd
# rcctl start httpd

PHP

Assuming that you are on OpenBSD -current (or >= 6.8-stable) you could use PHP 7.4 so I will keep this version, but the concept is the same for other version.

The PHP packages will be available since you installed Nextcloud with pkg_add, so you just need to adjust a bit your php.ini.

It is recommended to add opcache to it:

[opcache]
opcache.enable=1
opcache.enable_cli=1
opcache.memory_consumption=512
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.revalidate_freq=1
opcache.save_comments=1

And increase some limits:

post_max_size = 513M
upload_max_filesize = 513M

We can enable the PHP modules with:

# cd /etc/php-7.4.sample
# for i in *; do ln -sf ../php-7.4.sample/$i ../php-7.4/; done

And then we just enable and start PHP:

# rcctl enable php74_fpm
# rcctl start php74_fpm

Database

As mentioned, we will be using PostgreSQL as our database, and we already installed it, now we need to initialised:

$ su - _postgresql
$ mkdir /var/postgresql/data
$ initdb -D /var/postgresql/data -U postgres -A md5 -E UTF8 -W
...
Enter new superuser password: PASSWORD
Enter it again: PASSWORD
...
Success. You can now start the database server using:

pg_ctl -D /var/postgresql/data -l logfile start

$ pg_ctl -D /var/postgresql/data -l logfile start
server starting
$ exit

We need to check, enable and start postgres:

# rcctl check postgresql
# rcctl enable postgresql
# rcctl start postgresql

You can follow the README on /usr/local/share/doc/pkg-readmes/postgresql-server to create users and permission.

Redis

We installed redis before, we need to enable it and start it and also add it to the Nextcloud conf:

# rcctl enable redis
# rcctl start redis
# mg /var/www/nextcloud/config/config.php
...
  'memcache.local' => '\OC\Memcache\Redis',
  'redis' => array(
  'host' => 'localhost',
  'port' => 6379,
  'timeout' => 0.0,
),
...

Cron job

We need to add the Nextcloud cron job to get some tasks done by adding this entry on your cronjob:

*/5 * * * * /usr/bin/ftp -Vo - https://domain.tld/cron.php >/dev/null

Chroot

Since in OpenBSD httpd(8) works with a chroot(8) by default, we need to be sure that we have the relevant files into the /var/www jail:

# mkdir -p /var/www/etc/ssl
# install -m 444 -o root -g bin /etc/ssl/cert.pem /etc/ssl/openssl.cnf \
        /var/www/etc/ssl/
# cp /etc/resolv.conf /var/www/etc

Nextcloud final steps

Now that we have all in place, you should go to your browser with your URL (I am asuming you have an SSL already installed):

https://domain.tld

Now you just need to follow the steps and put in place your DB name, usr and passwords.

Keep in mind that the upgrades for Nextcloud you can do it by running on -current:

# pkg_add -u -Dsnap

And on -stable:

# pkg_add -u

Then you just follow the steps from your browser.

NOTE

Remember always to read all the READMES from the OpenBSD packages on:

/usr/local/share/doc/pkg-readmes/

All this information and more is available for you there.