From e3ceb02920cd89e8d1c4ec113d133d791b2e8e4b Mon Sep 17 00:00:00 2001 From: scubamuc <54933878+scubamuc@users.noreply.github.com> Date: Fri, 28 Mar 2025 08:03:36 +0100 Subject: [PATCH] Update source_installation.rst add: encryption add: configuration add: external media Signed-off-by: scubamuc <54933878+scubamuc@users.noreply.github.com> --- .../installation/source_installation.rst | 35 +++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/admin_manual/installation/source_installation.rst b/admin_manual/installation/source_installation.rst index ffc026b5e..455bc2175 100644 --- a/admin_manual/installation/source_installation.rst +++ b/admin_manual/installation/source_installation.rst @@ -407,6 +407,12 @@ and robust technology which the Nextcloud snap team has embraced. Most importantly snaps are designed to be secure, sandboxed, containerized applications isolated from the underlying system and from other applications. +However, the snap is opinionated. + +- Nextcloud snap uses recommended Apache. +- Nextcloud snap uses recommended MySQL. +- Nextcloud snap uses recommended PHP. + Installation ------------ @@ -435,6 +441,35 @@ Upon visiting the Nextcloud installation for the first time, you will be prompte and password before Nextcloud is initialised. This may take a while depending on resources and the device. After you provide that information you will be logged in and able to install apps, create users, and upload files. +HTTPS encryption +---------------- + +Nextcloud snap includes a service for automated HTTPS encryption and automated renewal using Lets Encrypt, +or self-signed certificates. Run ``nextcloud.enable-https -h`` for more information. `Managing encryption `_. + +Configuration +------------- + +While the default Nextcloud configurations are mostly fine, it may be necessary to fine tune Nextcloud snap by +editing configuration files manually or using the management console. `Configuring Nextcloud snap `_. + +External media +-------------- + +Snap confinement is a security feature and determines the amount of access an application has to system resources, +such as files, the network, peripherals and services. Thus your Nextcloud snap is securely confined from the host +system. Unless you specifically allow the Nextcloud snap to access the ``/media`` or ``/mnt`` directories on the +host system, you will not be able to access any other directory outside of the confinement. + +Removable media or external storage must be mounted to either ``/media`` or ``/mnt`` as root with root permissions +and connected to Snap! + +The interface providing the ability to access removable media is not automatically connected upon install, to use +external storage (or otherwise use a device in ``/media`` or ``/mnt`` for data), you need to give the snap permission +to access removable media by connecting that interface: + +``sudo snap connect nextcloud:removable-media`` + Further documentation, an `extensive Wiki `_ and `FAQ's `_ can be found on the `developers GitHub `_. .. note:: The `snapd technology `_ is the core