Luu Tru File An Toan: Giai Phap Luu Tru Rieng Tu tren VPS

Nextcloud la phan mem cloud storage tu cai dat pho bien nhat, co day du tinh nang tuong tu Google Drive nhung hoan toan trong tam kiem soat cua ban.

Yeu cau he thong de chay Nextcloud:

• VPS it nhat 2GB RAM (4GB khuyen nghi)
• Dung luong tuy nhu cau luu tru (Anubiz Host cung cap len den 250GB NVMe)
• PHP 8.1+ va MySQL/MariaDB hoac PostgreSQL

apt update && apt install -y apache2 mariadb-server     php8.2 php8.2-gd php8.2-mysql php8.2-curl php8.2-mbstring     php8.2-intl php8.2-gmp php8.2-bcmath php8.2-xml php8.2-imagick     php8.2-zip php8.2-fpm

# Tao database
mysql -u root -p
CREATE DATABASE nextcloud;
CREATE USER 'ncuser'@'localhost' IDENTIFIED BY 'strong_password';
GRANT ALL ON nextcloud.* TO 'ncuser'@'localhost';
FLUSH PRIVILEGES;
EXIT;

# Tai Nextcloud
cd /tmp
wget https://download.nextcloud.com/server/releases/latest.tar.bz2
tar xjf latest.tar.bz2
mv nextcloud /var/www/
chown -R www-data:www-data /var/www/nextcloud

Cau hinh Apache vhost cho Nextcloud:

nano /etc/apache2/sites-available/nextcloud.conf

Alias /nextcloud "/var/www/nextcloud/"

    Options +FollowSymlinks
    AllowOverride All
    Require all granted
    SetEnv HOME /var/www/nextcloud
    SetEnv HTTP_HOME /var/www/nextcloud

a2ensite nextcloud
a2enmod rewrite headers env dir mime ssl
certbot --apache -d cloud.yourdomain.com
systemctl restart apache2

Hoan tat cai dat qua trinh duyet tai https://cloud.yourdomain.com/nextcloud, nhap thong tin admin va database.

Cau hinh bo nho dem (Redis) de tang toc:

apt install -y redis-server php8.2-redis

# Them vao /var/www/nextcloud/config/config.php:
'memcache.local' => '\OC\Memcache\Redis',
'redis' => [
    'host' => 'localhost',
    'port' => 6379,
],

Nextcloud co tinh nang ma hoa phia server nhung de dat muc bao mat cao nhat, nen ma hoa file truoc khi upload (client-side encryption):

Cryptomator - Ma hoa truoc khi upload: Cryptomator la phan mem mien phi tao mot vault ma hoa tren may tinh cua ban. Moi file duoc ma hoa truoc khi dong bo len Nextcloud:

• Tai Cryptomator tai cryptomator.org (Windows/Mac/Linux/iOS/Android)
• Tao vault moi trong thu muc Nextcloud dong bo
• Dat mat khau manh cho vault
• Moi file ban them vao vault tu dong duoc ma hoa truoc khi len may chu

Ngay ca admin Nextcloud (ban) cung khong the doc noi dung cac file duoc ma hoa bang Cryptomator ma khong co mat khau vault.

Xac thuc hai yeu to (2FA) cho Nextcloud:

# Trong Nextcloud admin panel:
# Apps -> Security -> TOTP Second Factor -> Enable
# User settings -> Security -> Enable TOTP

Su dung Aegis (Android) hoac Raivo (iOS) lam app xac thuc TOTP, khong phai Google Authenticator.

Cloud storage rieng tu can duoc bao tri va sao luu thuong xuyen:

Sao luu Nextcloud database:

# Them vao crontab (crontab -e)
0 2 * * * mysqldump -u root nextcloud | gzip > /var/backups/nextcloud_db_$(date +%Y%m%d).sql.gz

Sao luu thu muc data:

rsync -avz /var/www/nextcloud/data/ /var/backups/nextcloud-data/

Cap nhat Nextcloud dinh ky:

cd /var/www/nextcloud
sudo -u www-data php occ maintenance:mode --on
sudo -u www-data php updater/updater.phar
sudo -u www-data php occ maintenance:mode --off

Giam sat dung luong:

df -h /var/www/nextcloud/data
sudo -u www-data php occ files:scan --all

AnubizHost cung cap VPS voi NVMe SSD dung luong lon tai Iceland, la nen tang ly tuong cho cloud storage rieng tu voi hieu suat cao va do tre thap den chau Au. Tat ca du lieu cua ban o Iceland, duoc bao ve boi luat phap bao ve quyen rieng tu cua nuoc nay.