當我看見nextcloud這個開源軟件第一眼的時候，我就覺得很神奇。原來還有和百度雲盤差不多功能的開源軟件。確實讓我很歡喜。
我也開始折磨着要怎么安裝好這個軟件，經過我幾天幾夜的奮斗，確實安裝成功了。但是網上面的教程，實在是太亂了。隱形里給我留了太多的坑。
為了防止后來人上當受坑，我也編寫一下我安裝nextcloud的詳細教程。
首先，說一說這款開源軟件的原理，主要核心是PHP，網頁的代碼也全部都是PHP的。雖然我PHP小白，但是我還是按照教程，安裝成功了。
其次，就是要安裝nginx和mysql數據庫。
本人Linux也是剛入門，所以所有軟件都均采用yum的方式，這樣也比較適合我這樣的新手。
這里面特提一下一個坑，就是一定記得要關閉 selinux。
首先安裝nginx 和php.
一、# 先刪除系統可能自帶的PHP和nginx，用來面命令查找是否有安裝
$ rpm -qa |grep php
$ rpm -qa |grep nginx
如果沒有數據出來，就代表是干凈的。
二、其實安裝# 安裝yum的epel源，這個是必須的 。
$ yum -y install epel-release
# 安裝nginx
$ yum install -y nginx
# 安裝php的源
$ rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
# 安裝php已經會用到擴展(擴展我這里提一句，已經要安裝完，不然會有一些莫名其妙的報錯)
$ yum install -y php70w-devel php70w-pear php70w-pecl php70w-gd php70w-opcache php70w-cli php70w-pdo php70w-process php70w-pecl-apcu php70w-mcrypt php70w-mysql php70w-fpm php70w-pecl-memcached php70w-common php70w-xml php70w-mbstring php70w-pecl-igbinary php70w-json php70w-pecl-apcu-devel php70w-intl
# 檢查是否安裝成功
# nginx -v
nginx version: nginx/1.12.2
# php -v
PHP 7.0.31 (cli) (built: Jul 20 2018 08:55:22) ( NTS )
Copyright (c) 1997-2017 The PHP Group
Zend Engine v3.0.0, Copyright (c) 1998-2017 Zend Technologies
with Zend OPcache v7.0.31, Copyright (c) 1999-2017, by Zend Technologies
到此，這兩個重要組件就安裝成功了，然后我們來安裝mysql.
三、nextcloud 還需要數據庫，這里我使用的mysql，mysql提前安裝好或使用已有的數據庫服務器在mysql種創建一個新的databse用於nextcloud使用.
mysql 的安裝我基本提一下，我安裝的5.6的版本，建議小白也不要安裝太高的版本。5.7以上需要去日志文件找隨機的管理員密碼，5.6默認管理員密碼為空。
首先去mysql官網下載一個mysql80-community-release-el7-1.noarch.rpm 的鏈接，
然后 $ rpm -ivh mysql80-community-release-el7-1.noarch.rpm
開始可以安裝mysql了，安裝步驟：
Shell> vim /etc/yum.repos.d/mysql-community.repo
# Enable to use MySQL 5.6
[mysql56-community]
name=MySQL 5.6 Community Server
baseurl=http://repo.mysql.com/yum/mysql-5.6-community/el/6/$basearch/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-mysql
查看選擇要使用的版本
#yum repolist all | grep mysql
查看已經開啟需要安裝的版本
#yum repolist enabled | grep mysql
Shell> yum clean all
Shell> yum makecache fast
Shell> yum install mysql-community-server mysql-community-devel mysql-community-client –y
Shell> service mysqld start
Shell> chkconfig mysqld on
Shell> mysql_secure_installation
建議在修改yum源的時候，默認選一種數據庫就好了。
然后進去mysql里面做一個向導就可以建庫了。
四、
# 在裝有mysql的服務器上執行
$ mysql -u root -p
> create database nextcloud_db;
# 授權給自定義用戶，這里以用戶名：nextclouduser，密碼：nextcloudpasswd，代替。
> grant all privileges on nextcloud_db.* to nextclouduser@localhost identified by 'nextcloudpasswd';
> flush privileges;
五、
為nextcloud 生成自簽名ssl證書
$ cd /etc/nginx/cert/ # 沒有則創建此文件夾
$ openssl req -new -x509 -days 365 -nodes -out /etc/nginx/cert/nextcloud.crt -keyout /etc/nginx/cert/nextcloud.key #這里默認是365天，我本來想多搞幾年，忘記了。還不知道下次怎么續訂證書。呵呵
# 會出現下面的選項需要填寫，可以隨便填。
Country Name (2 letter code) [XX]:cn //國家
State or Province Name (full name) []:guangdong //省份
Locality Name (eg, city) [Default City]:guangzhou //地區名字
Organization Name (eg, company) [Default Company Ltd]:Amos //公司名
Organizational Unit Name (eg, section) []:Technology //部門
Common Name (eg, your name or your server's hostname) []:Amos //CA主機名
Email Address []:Amos@Amos.com //Email地址
# 修改證書和文件夾權限
$ chmod 600 /etc/nginx/cert/*
$ chmod 700 /etc/nginx/cert
六、
下載nextcloud，並配置php和nginx(這里我說一下，你也可以直接官網下載這個zip的包，然后直接放在服務器解壓出來然后給相對應的權限)
# 下載nextcloud，官網地址為: https://nextcloud.com/install/#instructions-server
$ cd /usr/local/src
$ yum install -y wget unzip
$ wget https://download.nextcloud.com/server/releases/nextcloud-13.0.2.zip # 下載（這里雖然是13.0.2，后續會自動更新版本）
$ unzip nextcloud-13.0.2.zip # 解壓
$ mv nextcloud /usr/share/nginx/html/ # 移動到指定文件夾內
$ cd /usr/share/nginx/html/nextcloud # 進行nextcloud 目錄中
$ mkdir data # 創建數據文件夾
$ chown nginx:nginx -R nextcloud/ # 將nextcloud文件授權給nginx
# 配置php-fpm
$ vim /etc/php-fpm.d/www.conf
-----------------------------------------------------------------------------------------
user = nginx //將用戶和組都改為nginx
group = nginx
listen = 127.0.0.1:9000
env[HOSTNAME] = $HOSTNAME //將以下幾行，去掉注釋
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp
------------------------------------------------------------------------------------------
# 為php創建session文件夾
$ mkdir -p /var/lib/php/session
$ chown nginx:nginx -R /var/lib/php/session/
# 配置nginx
$ cd /etc/nginx/conf.d/
$ vim nextcloud.conf （這里說一下，這個代碼一定要copy,我親測過，沒有報錯）
-------------------------------------------------------------------------------------------
upstream php-handler {
server 127.0.0.1:9000;
#server unix:/var/run/php5-fpm.sock;
}
server {
listen 80;
server_name localhost;
# enforce https
rewrite ^(.*)$ https://$host$1 permanent;
}
server {
listen 443 ssl;
server_name localhost;
ssl_certificate /etc/nginx/cert/nextcloud.crt;
ssl_certificate_key /etc/nginx/cert/nextcloud.key;
# Add headers to serve security related headers
# Before enabling Strict-Transport-Security headers please read into this
# topic first.
add_header Strict-Transport-Security "max-age=15768000;
includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
# Path to the root of your installation
root /usr/share/nginx/html/nextcloud/;
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
# The following 2 rules are only needed for the user_webfinger app.
# Uncomment it if you're planning to use this app.
#rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
#rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json
# last;
location = /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location = /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
# set max upload size
client_max_body_size 10240M; # 上傳文件最大限制，php.ini中也要修改，最后優化時會提及。
fastcgi_buffers 64 4K;
# Disable gzip to avoid the removal of the ETag header
gzip on;
gzip_vary on;
gzip_comp_level 4;
gzip_min_length 256;
gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
# Uncomment if your server is build with the ngx_pagespeed module
# This module is currently not supported.
#pagespeed off;
error_page 403 /core/templates/403.php;
error_page 404 /core/templates/404.php;
location / {
rewrite ^ /index.php$uri;
}
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
deny all;
}
location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {
deny all;
}
location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\.php(?:$|/) {
include fastcgi_params;
fastcgi_split_path_info ^(.+\.php)(/.*)$;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param HTTPS on;
#Avoid sending the security headers twice
fastcgi_param modHeadersAvailable true;
fastcgi_param front_controller_active true;
fastcgi_pass php-handler;
fastcgi_intercept_errors on;
fastcgi_request_buffering off;
}
location ~ ^/(?:updater|ocs-provider)(?:$|/) {
try_files $uri/ =404;
index index.php;
}
# Adding the cache control header for js and css files
# Make sure it is BELOW the PHP block
location ~* \.(?:css|js)$ {
try_files $uri /index.php$uri$is_args$args;
add_header Cache-Control "public, max-age=7200";
# Add headers to serve security related headers (It is intended to
# have those duplicated to the ones above)
# Before enabling Strict-Transport-Security headers please read into
# this topic first.
add_header Strict-Transport-Security "max-age=15768000;includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
# Optional: Don't log access to assets
access_log off;
}
location ~* \.(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$ {
try_files $uri /index.php$uri$is_args$args;
# Optional: Don't log access to other assets
access_log off;
}
}
-------------------------------------------------------------------------------------------
# 修改nginx原配置中80端口的配置
$ vim /etc/nginx/nginx.conf （這里我原來遇到一個坑，我是刪除了80，但是不行，后來別人給我一份conf文件就行了，我把原來的文件代碼貼出來。）
--------------------------------------------------------
算了太長了，我有源文件，需要可以找我要，可以留言。或者關注微信公眾號
--------------------------------------------------------
七、啟動nginx和php-fpm
$ nginx -t # 檢查nginx配置是否正確，出現下面輸入則正確。
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
# 啟動並設為開機啟動 nginx，php-fpm
$ systemctl start nginx
$ systemctl enable nginx
$ systemctl start php-fpm
$ systemctl enable php-fpm
# 配置防火牆，開放http和https的端口。
$ firewall-cmd --add-port=80/tcp --permanent
$ firewall-cmd --add-port=443/tcp --permanent
$ firewall-cmd --reload
PS： 這里我的selinux是關閉的，如果selinux沒有關閉，則執行下面命令關閉selinux
$ setenforce 0 # 關閉selinux
$ vim /etc/selinux/config # 修改配置，永久關閉。
------------------------------------------------------
SELINUX=disabled(添加這句話寫在中間)
------------------------------------------------------
訪問網頁界面，完成安裝。訪問搭建nextcloud服務器的ip地址。（如果有域名就訪問域名） 按照實際情況進行配置，配置完成后，點擊安裝完成。上圖中mysql的主機名，使用上面我們自己的數據庫服務器地址和端口
到此，如果一步一步安裝，應該就可以看到成果了，也能進入到這個畫面了。
下面我開始介紹我遇到的各種坑。