khanh.pndc/nextcloud-docs
1
0
Fork 0
mirror of https://github.com/nextcloud/documentation.git synced 2026-01-03 02:09:45 +07:00
Code Issues Packages Projects Releases Wiki Activity

Update harden_server.rst

Browse Source 
add fields to be submitted to Nextcloud servers

Signed-off-by: Rello <Rello@users.noreply.github.com>
This commit is contained in:
Rello
2024-05-16 10:06:25 +02:00
committed by GitHub
parent 3c5d3a6cd4
commit 219867f1d0
1 changed files with 25 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
admin_manual/installation/harden_server.rst
View File

@@ -236,20 +236,35 @@ security headers are shipped.
Connections to remote servers
-----------------------------
Some Nextcloud functionalites require connecting to remote servers. Depending on
your server setup, these are the possible connections:
Some Nextcloud functionalites require connecting to remote servers.
This pragraph also outlines the data which is transmitted to the Nextcloud GmbH.
Depending on your server setup, these are the possible connections:
- www.nextcloud.com, www.startpage.com, www.eff.org, www.edri.org for checking the internet connection
- cloud.nextcloud.com (https) for validating the enterprise subscription
- updates.nextcloud.com (https) for Nextcloud server updates
- push-notifications.nextcloud.com (https) for sending push notifications to mobile clients
- pushfeed.nextcloud.com (https) for the Nextcloud announcements app
- lookup.nextcloud.com (https) for updating and lookups to the federated sharing addressbook
- surveyserver.nextcloud.com (https) if the admin has agreed to share anonymized data
- apps.nextcloud.com (https) for available apps and their updates
- github.com (https) for downloading Nextcloud standard apps
- cloud.nextcloud.com (https)
- used for enterprise license monitoring
- submitted data: subscription key, user count
- updates.nextcloud.com (https)
- to check for available Nextcloud server updates
- submitted data: server version, subscription key, install time, instance id, instance size
- apps.nextcloud.com (https)
- to check for available apps and their updates
- submitted data: subscription key
- github.com (https)
- to download Nextcloud standard apps
- push-notifications.nextcloud.com (https)
- sending push notifications to mobile clients
- submitted data: unique device identifier, pblic key, push token
- pushfeed.nextcloud.com (https)
- for the Nextcloud announcements app
- lookup.nextcloud.com (https)
- for updating and lookups to the federated sharing addressbook
- surveyserver.nextcloud.com (https)
- if the admin has agreed to share anonymized server data
- submitted data: instance id, server versions (incl. php & db), installed apps
- Any remote Nextcloud server that is connected with federated sharing
Setup fail2ban
--------------