I 简易部署和使用 cloudreve 网盘#

简单思路是使用docker 部署cloudreve, 在服务器通过nginx 反向代理映射到公网端口和使用https.
进阶想法是借助onlyoffice或collabora online实现office 文档在线预览和编辑

安装 docker#

Windows#

在低版本Windows 下使用 Docker-Toolbox windows 11使用docker desktop for Windows

Linux#

直接apt安装 sudo apt install docker, linux 下所有docker操作必须sudo提权

常用命令#

命令	操作
`docker ps`	查看运行容器
`docker exec <container name> -it /bin/bash`	进入容器
`docker run`	启动容器
`docker container stop <container name>`	停止某个容器
`docker container rm <container name>`	移除某个容器
`docker pull <images>`	拉取镜像
`docker-machine start`	启动docker虚拟机 (docker-toolbox 专用)
`docker-machine stop`	停止docker虚拟机 (docker-toolbox 专用)

部署 cloudreve#

下载cloudreve

安装和配置 nginx#

部署 collabora online 或 onlyoffice#

拒绝施工

II Nextcloud docker部署 (自用)#

使用环境#

机器: Mac Mini M4

OS: MacOS Sequoia

容器: Orb Stack

配置文件#

docker-compose.yaml#

1
services:
2
  app:
3
    image: nextcloud:latest
4
    volumes:
5
      - nextcloud:/var/www/html
6
      - ./config/config.php:/var/www/html/config/config.php
7
    environment:
8
      - MYSQL_DATABASE=nextcloud
9
      - MYSQL_USER=nextcloud
10
      - MYSQL_PASSWORD=your_db_password
11
      - MYSQL_HOST=db
12
      - REDIS_HOST=redis
13
      - REDIS_HOST_PASSWORD=your_redis_password
14
      - NEXTCLOUD_TRUSTED_DOMAINS=localhost
15
    command: >
16
      sh -c "
17
      chmod -R 755 /var/www/html/config &&
18
      chown -R www-data:www-data /var/www/html/config &&
19
      chown -R www-data:www-data /var/www/html/apps &&
20
      su -s /bin/bash www-data -c 'php occ upgrade' &&
21
      apache2-foreground
22
      "
23
    depends_on:
24
      - db
25
      - redis
26
      - nginx
27

28
  db:
29
    image: mariadb:11.4.4-ubi9
30
    environment:
31
      MYSQL_ROOT_PASSWORD: your_root_password
32
      MYSQL_DATABASE: nextcloud
33
      MYSQL_USER: nextcloud
34
      MYSQL_PASSWORD: your_db_password
35
    volumes:
36
      - db:/var/lib/mysql
37
    restart: always
38

39
  redis:
40
    image: redis:alpine
41
    command: redis-server --requirepass your_redis_password
42
    restart: always
43
    environment:
44
      - REDIS_PASSWORD=your_redis_password
45
    volumes:
46
      - redis:/data
47

48
  nginx:
49
    image: nginx:latest
50
    container_name: nginx
51
    restart: always
52
    ports:
53
      - "80:80"   # 映射标准 HTTP 端口
54
      - "443:443" # 映射标准 HTTPS 端口
55
    volumes:
56
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf
57
      - ./nginx/ssl/origin.pem:/etc/nginx/ssl/origin.pem
58
      - ./nginx/ssl/origin-key.pem:/etc/nginx/ssl/origin-key.pem
59

60
volumes:
61
  nextcloud:
62
  db:
63
  redis:

ps. 应该还要配置cron, 晚点继续研究

nginx.conf#

1
# nginx.conf 文件的基本结构
2

3
user  nginx;
4
worker_processes  1;
5

6
# 事件配置
7
events {
8
    worker_connections 1024;
9
}
10

11
http {
12
    include       mime.types;
13
    default_type  application/octet-stream;
14

15
    # 日志格式
16
    access_log  /var/log/nginx/access.log;
17
    error_log   /var/log/nginx/error.log;
18

19
    # 配置 HTTP 相关设置
20
    sendfile        on;
21
    tcp_nopush      on;
22
    tcp_nodelay     on;
23
    keepalive_timeout  65;
24
    types_hash_max_size 2048;
25

26
    # 这里开始是你的 server 配置块
27
    server {
28
        listen 80;
29
        server_name your.domain.com;
30

31
        # 强制重定向到 HTTPS
32
        return 301 https://$host$request_uri;
33
    }
34

35
    server {
36
        listen 443 ssl;
37
        server_name your.domain.com;
38

39
        # SSL 配置
40
        ssl_certificate /etc/nginx/ssl/origin.pem;
41
        ssl_certificate_key /etc/nginx/ssl/origin-key.pem;
42

43
        ssl_protocols TLSv1.2 TLSv1.3;
44
        ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:...';  # 可根据需要调整
45

46

47
        # 启用 HSTS (Strict-Transport-Security)
48
        add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
49

50
        # 设置反向代理到 Nextcloud 容器（app）
51
        location / {
52
            proxy_pass http://app:80;  # 反向代理到 Nextcloud 容器的 80 端口
53
            proxy_set_header Host $host;
54
            proxy_set_header X-Real-IP $remote_addr;
55
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
56
            proxy_set_header X-Forwarded-Proto $scheme;
57

58
            # 适用于 WebSocket 和 Nextcloud 的一些优化
59
            proxy_http_version 1.1;
60
            proxy_set_header Upgrade $http_upgrade;
61
            proxy_set_header Connection 'upgrade';
62
        }
63
    }
64
}

写完上面的yaml文件后, docker-compose pull 拉取镜像, 继续配置nginx.conf, 启动容器docker-compose up -d

/var/www/html/config/config.php#

下面这个配置文件可以考虑外挂在物理机上, 覆盖容器内的文件

1
<?php
2
$CONFIG = array (
3
  'htaccess.RewriteBase' => '/',
4
  'memcache.local' => '\\OC\\Memcache\\APCu',
5
  'apps_paths' =>
6
  array (
7
    0 =>
8
    array (
9
      'path' => '/var/www/html/apps',
10
      'url' => '/apps',
11
      'writable' => false,
12
    ),
13
    1 =>
14
    array (
15
      'path' => '/var/www/html/custom_apps',
16
      'url' => '/custom_apps',
17
      'writable' => true,
18
    ),
19
  ),
20
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
21
  'memcache.locking' => '\\OC\\Memcache\\Redis',
22
  'redis' =>
23
  array (
24
    'host' => 'redis',
25
    'password' => 'your_redis_password',
26
    'port' => 6379,
27
  ),
28
  'upgrade.disable-web' => true,
29
  'instanceid' => '',
30
  'passwordsalt' => '',
31
  'secret' => '',
32
  'trusted_domains' =>
33
  array (
34
    0 => 'localhost',
35
    1 => 'https://your.domain.com',
36
  ),
37
  'datadirectory' => '/var/www/html/data',
38
  'dbtype' => 'mysql',
39
  'version' => '30.0.4.1',
40
  'overwriteprotocol' => 'https',
41
  'overwrite.cli.url' => 'https://your.domain.com',
42
  'dbname' => 'nextcloud',
43
  'dbhost' => 'db',
44
  'dbport' => '',
45
  'dbtableprefix' => 'oc_',
46
  'mysql.utf8mb4' => true,
47
  'dbuser' => 'nextcloud',
48
  'dbpassword' => 'your_db_password',
49
  'installed' => true,
50
  'config_is_read_only' => false,
51
  'default_language' => 'CN',
52
  'default_phone_region' => 'CN',
53
  'mail_smtpmode' => 'smtp',
54
  'mail_sendmailmode' => 'smtp',
55
  'mail_smtphost' => 'smtp.domain.com',
56
  'mail_smtpport' => '587',
57
  'mail_from_address' => 'name',
58
  'mail_domain' => 'mail.com',
59
  'mail_smtpauth' => 1,
60
  'mail_smtpname' => 'name@mail.com',
61
  'mail_smtppassword' => 'passwd',
62
  'defaultapp' => '',
63
  'loglevel' => 2,
64
  'maintenance' => false,
65
  'appstoreenabled' => false,
66
);

怎么数据备份?#

数据存放的数据卷nextcloud_nextcloud中, /var/www/html/_data目录下, 考虑以下脚本备份

1
#!/bin/bash
2

3
# 设置路径
4
SOURCE_DIR="$HOME/OrbStack/docker/volumes"
5
BACKUP_DIR="$HOME/Backup/OrbStack"
6
SCRIPT_DIR="$BACKUP_DIR"
7
DATE=$(date +"%Y-%m-%d_%H-%M-%S")
8
BACKUP_FILE="${BACKUP_DIR}/orbstack_volumes_backup_${DATE}.tar.gz"
9

10
# 检查目标备份目录是否存在
11
if [ ! -d "${BACKUP_DIR}" ]; then
12
    echo "目标备份目录不存在，创建中..."
13
    mkdir -p "${BACKUP_DIR}"
14
fi
15

16
# 计算数据大小
17
echo "正在计算待备份目录的大小..."
18
TOTAL_SIZE=$(gfind "${SOURCE_DIR}" -type f -exec stat -f "%z" {} + | awk '{s+=$1} END {print s}')
19

20
if [ -z "${TOTAL_SIZE}" ] || [ "${TOTAL_SIZE}" -eq 0 ]; then
21
    echo "无法计算目录大小或目录为空，请检查路径：${SOURCE_DIR}"
22
    exit 1
23
fi
24

25
# 备份数据卷
26
echo "开始备份 OrbStack volumes（共 $(echo ${TOTAL_SIZE} | numfmt --to=iec)）..."
27
tar -cf - -C "${SOURCE_DIR}" . | pv -s "${TOTAL_SIZE}" | gzip > "${BACKUP_FILE}"
28

29
if [ $? -eq 0 ]; then
30
    echo "备份完成！文件已保存至：${BACKUP_FILE}"
31
else
32
    echo "备份失败，请检查错误信息。"
33
    exit 1
34
fi
35

36
# 删除超过 30 天的备份文件
37
echo "清理超过 30 天的备份文件..."
38
find "${BACKUP_DIR}" -type f -name "orbstack_volumes_backup_*.tar.gz" -mtime +30 -exec rm -v {} \;
39
echo "清理完成！"