一尘网官网：Nextcloud是一套用于创建网络硬盘的客户端－服务器软件。其功能与Dropbox相近，但Nextcloud是自由及开放源代码软件，每个人都可以在私人服务器上安装并运行它。

与Dropbox等专有服务相比，Nextcloud的开放架构让用户可以利用应用程序的方式在服务器上新增额外的功能，并让用户可以完全掌控自己的资料。

ownCloud原先的开发者弗兰克·卡利切创建了ownCloud的分支——Nextcloud，继而让卡利切与其他原先的ownCloud团队成员持续积极地开发。

1、部署NextCloud

1）创建docker-compose部署NextCloud需要的目录和文件

[root@localhost ~]# cd /srv/
[root@localhost srv]# mkdir nextcloud
[root@localhost srv]# cd nextcloud/
[root@localhost nextcloud]# docker pull nextcloud:21.0.2
[root@localhost nextcloud]# mkdir nextcloud-compose
[root@localhost nextcloud]# mkdir init_secrets
[root@localhost nextcloud]# cd init_secrets/
[root@localhost init_secrets]# vim nextcloud_admin_password.txt
#输入nextcloud的管理员密码
[root@localhost init_secrets]# vim nextcloud_admin_user.txt
#输入nextcloud的管理员账号
[root@localhost init_secrets]# vim postgres_db.txt
#输入nextcloud的数据库名称
[root@localhost init_secrets]# vim postgres_password.txt
#输入nextcloud的数据库密码
[root@localhost init_secrets]# vim postgres_user.txt
#输入nextcloud的数据库用户

2）创建docker-compose.yml文件，在这里使用的是外置Postgres数据库，如果需要为nextcloud单独配置数据库，可以在docker-compose自行增加postgres服务

[root@localhost nextcloud]# cd nextcloud-compose/
[root@localhost nextcloud-compose]# vim docker-compose.yml
version: '3.2'
services:
  app:
    image: nextcloud:21.0.2
    container_name: linuxer-nextcloud
    restart: always
    ports:
      - 10.11.10.110:19080:80
    volumes:
      - ../app:/var/www/html
    environment:
      - POSTGRES_HOST=10.11.10.110
      - POSTGRES_DB_FILE=/run/secrets/postgres_db
      - POSTGRES_USER_FILE=/run/secrets/postgres_user
      - POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
      - NEXTCLOUD_ADMIN_PASSWORD_FILE=/run/secrets/nextcloud_admin_password
      - NEXTCLOUD_ADMIN_USER_FILE=/run/secrets/nextcloud_admin_user
    secrets:
      - nextcloud_admin_password
      - nextcloud_admin_user
      - postgres_db
      - postgres_password
      - postgres_user
secrets:
  nextcloud_admin_password:
    file: ../init_secrets/nextcloud_admin_password.txt # put admin password to this file
  nextcloud_admin_user:
    file: ../init_secrets/nextcloud_admin_user.txt # put admin username to this file
  postgres_db:
    file: ../init_secrets/postgres_db.txt # put postgresql db name to this file
  postgres_password:
    file: ../init_secrets/postgres_password.txt # put postgresql password to this file
  postgres_user:
    file: ../init_secrets/postgres_user.txt # put postgresql username to this file

[root@localhost nextcloud-compose]# docker-compose up -d

3）修改nextcloud配置文件

[root@localhost nextcloud-compose]# vim ../app/config/config.php
'overwriteprotocol' => 'https',
#添加此行代码的目的是在使用https时访问，用户登录后能自动跳转到管理界面
'trusted_domains' =>
array (
0 => 'nextcloud.Linuxer.org',
1 => '10.11.10.110',
),

2、配置Nginx反向代理

[root@extranet-nginxproxy ~]#  cd /etc/nginx/cert/
[root@extranet-nginxproxy cert]# 
#将证书文件上传至此目录
[root@extranet-nginxproxy conf.d]# vim nextcloud.conf
server {
  listen 80;
  listen [::]:80;
  server_name nextcloud.linuxer.org;
  # redirect all HTTP requests to HTTPS with a 301 Moved Permanently response.
  return 301 https://nextcloud.linuxer.org$request_uri;
}
server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
  server_name nextcloud.linuxer.org;
  ssl_certificate /etc/nginx/cert/5915249_nextcloud.linuxer.org.pem;
  ssl_certificate_key /etc/nginx/cert/5915249_nextcloud.linuxer.org.key;
  client_max_body_size 10G;
  add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";
  location = /.well-known/carddav {
    return 301  $scheme://$ host: $server_port/remote.php/dav; } location = /.well-known/caldav { return 301$ scheme:// $host:$ server_port/remote.php/dav;
  }
  location / {
    proxy_pass http://10.11.10.110:19080;
    proxy_set_header Host $http_host;
  }
  location = /.htaccess {
    return 404;
  }
}

[root@extranet-nginxproxy ~]# nginx -s reload

3、集成AD域

在应用中启用LDAP user and group backend插件，然后点击“设置”，在管理菜单中点击“LDAP/AD整合”，如下图所示：