====== Nextcloud ======

===== Poznámky k provozu =====

==== Povolení všech domén hostovaných na nextcloudu ====

Pridejte do config.php
<code>
 'trusted_domains' => 
  array (
    0 => '77.87.246.252',
    1 => 's1.spojenet.cz',
    2 => '*.spoje.net',
    3 => '*.spojenet.cz',
</code>

Nezapomente rozsirit SSL certifikát o další donény, které na nextcloudu hostujeme:

<code>
root@s1:~# certbot certonly --webroot --webroot-path /var/www/nextcloud/        --renew-hook "systemctl reload-or-try-restart apache2"  --rsa-key-size 4096     -d s1.spojenet.cz -d vysehrad.spoje.net
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
An RSA certificate named s1.spojenet.cz already exists. Do you want to update
its key type to ECDSA?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(U)pdate key type/(K)eep existing key type: u

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
You have an existing certificate that contains a portion of the domains you
requested (ref: /etc/letsencrypt/renewal/s1.spojenet.cz.conf)

It contains these names: s1.spojenet.cz

You requested these names for the new certificate: s1.spojenet.cz,
vysehrad.spoje.net.

Do you want to expand and replace this existing certificate with the new
certificate?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(E)xpand/(C)ancel: e
Renewing an existing certificate for s1.spojenet.cz and vysehrad.spoje.net

Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/s1.spojenet.cz/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/s1.spojenet.cz/privkey.pem
This certificate expires on 2024-08-20.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
 * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
 * Donating to EFF:                    https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

</code>

V konfiguraci Apache vyplnime i SSL pouze primarni domenu (ta prvni v parametru -d), ostatni neuvadime

<code>
<IfModule mod_ssl.c>
        <VirtualHost _default_:443>


    ServerName s1.spojenet.cz
    DocumentRoot /var/www/nextcloud

</code>