membuat nextcloud server dengan podman (rootles) di gnu linux os yang mudah dan sederhana

=====================================


Assalamualaikum

salam floss (free libre open source software ) gnu linux


========================================


kali ini kita akan mencoba membuat nextcloud server dengan podman (rootles) yang mudah dan sederhana versi lite dan sedikit vibe code dengan ai gemini


====================

alat dan bahan

1. komputer / laptop os gnu linux untuk server nextcloud podman

minimal dual core , ram 4gb, hdd 120gb ke atas yah


2. hp android untuk client

3. modem dan router wifi serta koneksi internet yg stabil



==================

cara membuat membuat nextcloud server dengan podman (rootles) yang mudah dan sederhana


1. install gnu linux di pc / komputer atau laptop

distro / distrubtuin/ jenis gnu linux yg direkomendsaikan biar stabil dan mudah adalah gnu linux debian testing kde plasma


2. update dan upgrade gnu linux

sudo apt update && sudo apt full-upgrade


jangan rupa reboot




3. install podman

sudo apt podman*  -y

jangan lupa biar mantap reboot



4. install opensll

sudo apt install openssl


ini untuk membantu kita membuat self sertikat untuk nextcloud podman






5. buat folder untuk podman nextcloud


cd ~

mkdir nextcloud-podman

cd nextcloud-podman


6. buat self sertifikat

openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
-keyout certs/caddy.key -out certs/caddy.crt \
-subj "/CN=NextcloudLocal"


7. buat file compose.yml


aku pakai kate

jadi

sudo apt install kate


kate compose.yml

pakai nano atau teks editor lain juga bisa



8. masukan ini ke dalam file compose.yml tersebut


services:
  nextcloud:
    image: docker.io/library/nextcloud:latest
    container_name: nextcloud
    restart: always
    environment:
      - NEXTCLOUD_TRUSTED_DOMAINS=*
      - OVERWRITEPROTOCOL=https
      - TRUSTED_PROXIES=0.0.0.0/0
    volumes:
      - nextcloud_data:/var/www/html:Z
    networks:
      - nc_net

  caddy:
    image: docker.io/library/caddy:alpine
    container_name: caddy
    restart: always
    ports:
      - "8443:443"
    volumes:
      - ~/certs:/certs:Z
    command:
      - /bin/sh
      - -c
      - |
        printf ":443 {\n  tls /certs/caddy.crt /certs/caddy.key\n  reverse_proxy nextcloud:80\n}" > /etc/caddy/Caddyfile && caddy run --config /etc/caddy/Caddyfile
    networks:
      - nc_net

volumes:
  nextcloud_data:

networks:
  nc_net:
    driver: bridge




    jangan lupa disave / disimpan yah



9. bersihakan podman biar aman


podman-compose down

podman rm -fa

podman volume prune -fa




10 .Jalankan sistem, tunggu 3 menit, lalu jalankan perintah "pemaksa" agar Nextcloud menerima semua IP.


podman-compose up -d




11.  Paksa Trusted Domain

podman exec --user www-data nextcloud php occ config:system:set trusted_domains 0 --value="*"

podman exec --user www-data nextcloud php occ config:system:set overwriteprotocol --value="https"



12. untuk mengetahui ai nextcloud podman kita bisa ketik ip a di komputer server  jangan lupa portnya 8433

ip a

contoh

192.168.244.39


jadi alamat nextcloud podman


https://192.168.244.39 :8443



nb


kalau pengin lebih mantap lagi bisa pakai ip static


-------------------------------------------

13. buka nextcloud podman ip di client komputer / laptop hp android pada jaringan yg sama  pakai web browser firefox


https://192.168.244.39 :8443

ingat2

**Wajib:** Klik **Advanced/Lanjutan** -> **Proceed/Lanjutkan** (karena menggunakan Self-Signed Certificate).





14. ikuti langkah berikutnya seperti biasa untuk mengatur nexcloud server

a. atur admin, user dan password server nextcloud

b. install apps untuk nextloud seperti talk, nextcloud office dll

c. dll


================

demikianlah cara sederhana membuat nextcloud server dengan podman (rootles) yang mudah



insya Allah bermanfaat. amiin ya Allah


==============================================



tulisan ini menggunakan lisensi penuh creative common (cc)


plus dibantu AI Collaborator (Gemini)


=============================================

================

jangan lupa yang ingin donasi ke sifo (anton wibowo)

BISA LEWAT DANA

088806190316

yang udah donasi saya ucapkan bnyk terima kasih

===================================================


ss

















ss di clint hp android os











===============================
************************************
=======================================

pelengkap kalau pengin lengkap dengan server pendukung  nextcloud talk file compose.yml nya

-------------------------------------------------------------


services:
  # =========================================================================
  # ARIA2 DOWNLOADER (Koneksi Paralel x8)
  # =========================================================================
  downloader:
    image: public.ecr.aws/docker/library/alpine:latest
    container_name: nc_aria2_downloader
    privileged: true
    command: >
      /bin/sh -c "
      apk add --no-cache aria2 &&
      echo '=== MEMULAI DOWNLOAD COMPONENT NEXTCLOUD DENGAN ARIA2 X8 ===' &&
      aria2c -x 8 -s 8 -d /downloads https://github.com/nextcloud/server/...ads/master.zip&&
      echo '=== DOWNLOAD SELESAI ==='
      "
    volumes:
      - nextcloud_data:/downloads:Z
    networks:
      - nc_net

  # =========================================================================
  # DATABASE (Mirror AWS ECR)
  # =========================================================================
  db:
    image: public.ecr.aws/docker/library/postgres:16-alpine
    container_name: nc_db
    restart: always
    privileged: true
    shm_size: '256mb'
    environment:
      - POSTGRES_DB=nextcloud
      - POSTGRES_USER=nc_admin
      - POSTGRES_PASSWORD=RahasiaPostgres2026
    volumes:
      - db_data:/var/lib/postgresql/data:Z
    networks:
      - nc_net
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U nc_admin -d nextcloud"]
      interval: 5s
      timeout: 5s
      retries: 10

  # =========================================================================
  # NEXTCLOUD (Menunggu DB & Fix Trusted Domains)
  # =========================================================================
  nextcloud:
    image: public.ecr.aws/docker/library/nextcloud:latest
    container_name: nextcloud
    restart: always
    privileged: true
    depends_on:
      db:
        condition: service_healthy
    environment:
      - POSTGRES_HOST=db
      - POSTGRES_DB=nextcloud
      - POSTGRES_USER=nc_admin
      - POSTGRES_PASSWORD=RahasiaPostgres2026
      # TWEAK: Mengizinkan semua rentang IP Local Network secara spesifik
      - NEXTCLOUD_TRUSTED_DOMAINS='192.168.*.* 10.*.*.* 172.*.*.* localhost'
      - OVERWRITEPROTOCOL=https
      - TRUSTED_PROXIES='0.0.0.0/0'
    volumes:
      - nextcloud_data:/var/www/html:Z
    networks:
      - nc_net

  # =========================================================================
  # SIGNALING (GitHub Container Registry)
  # =========================================================================
  signaling:
    image: ghcr.io/strukturag/nextcloud-spreed-signaling:latest
    container_name: signaling
    restart: always
    privileged: true
    networks:
      - nc_net
    entrypoint: /bin/sh
    command:
      - -c
      - |
        printf "[http]\nlisten = 0.0.0.0:8080\n\n[app]\ndebug = false\n[sessions]\nhashkey = a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2\nblockkey = c4d5e6f7a8b9c4d5e6f7a8b9c4d5e6f7\n\n[backend]\nbackends = default\n\n[default]\nurl = http://nextcloud:80\nsecret = RahasiaHPB2026\n" > /server.conf
        exec signaling --config /server.conf

  # =========================================================================
  # WEB SERVER CADDY (Mirror AWS ECR)
  # =========================================================================
  caddy:
    image: public.ecr.aws/docker/library/caddy:alpine
    container_name: caddy
    restart: always
    privileged: true
    ports:
      - "8443:443"
    volumes:
      - ~/certs:/certs:Z
    command:
      - /bin/sh
      - -c
      - |
        printf ":443 {\n  tls /certs/caddy.crt /certs/caddy.key\n  reverse_proxy nextcloud:80\n  handle_path /standalone-signaling/* {\n    reverse_proxy signaling:8080\n  }\n}" > /etc/caddy/Caddyfile && caddy run --config /etc/caddy/Caddyfile
    networks:
      - nc_net

volumes:
  nextcloud_data:
  db_data:

networks:
  nc_net:
    driver: bridge


=============================================

jangan lupa download aria2

sudo apt update


sudo apt install skopeo aria2 -y



podman-compose down -v
podman network rm -f podman-nextcloud_nc_net
podman network prune -f

podman exec --user www-data nextcloud php occ config:system:set trusted_domains 1 --value="*"

===============================
************************************
=======================================
==================================