CentOS 7 安裝 Nextcloud + Collabora Office

參考來源  https://kknews.cc/zh-tw/news/92jelv5.html

# 更新並安裝 Nginx + PHP 7
yum update
yum -y install epel-release
yum -y install nginx
rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
yum -y install php70w-fpm php70w-cli php70w-gd php70w-mcrypt php70w-mysql \
 php70w-pear php70w-xml php70w-mbstring php70w-pdo php70w-json \
 php70w-pecl-apcu php70w-pecl-apcu-devel php70w-pecl-memcached \
 php70w-opcache php70w-ldap


# 編輯 php-fpm 設定檔
vi /etc/php-fpm.d/www.conf
# 修改下面內容
user = nginx
group = nginx
listen = 127.0.0.1:9000
env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp

# 建立 session 目錄
mkdir -p /var/lib/php/session
chown nginx:nginx -R /var/lib/php/session/

# 啟動服務並設定開機自動啟動
sudo systemctl start php-fpm
sudo systemctl enable php-fpm

# 安裝 mariadb
yum -y install mariadb mariadb-server

# 啟動服務並設定開機自動啟動
systemctl start mariadb
systemctl enable mariadb

# 設定 mysql 的 root 密碼
mysql_secure_installation

# 建立資料庫
mysql -u root -p

create database nextcloud_db;
create user ncuser@localhost identified by 'password';
grant all privileges on nextcloud_db.* to ncuser@localhost identified by 'password';
flush privileges;
quit


# 建立憑證檔
mkdir -p /etc/nginx/cert/
openssl req -new -x509 -days 365 -nodes -out /etc/nginx/cert/nc.crt -keyout /etc/nginx/cert/nc.key

# 安裝 nextcloud
yum -y install wget unzip
cd
wget https://download.nextcloud.com/server/releases/nextcloud-12.0.0.zip
unzip nextcloud-12.0.0.zip
mv nextcloud/ /usr/share/nginx/html/
cd /usr/share/nginx/html/
mkdir -p nextcloud/data/
chown nginx:nginx -R nextcloud/


# 在 nginx 設定 nextcloud
vi /etc/nginx/conf.d/nextcloud.conf
#### nextcloud.conf start ####
server {
        listen 80;
server_name nc.test;
        return 301 https://$http_host$request_uri;
}

server {
        listen 443 ssl;
        server_name nc.test;
        ssl_certificate /etc/nginx/cert/nc.crt;
        ssl_certificate_key /etc/nginx/cert/nc.key;
        add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
        add_header X-Content-Type-Options nosniff;
        add_header X-XSS-Protection "1; mode=block";
        add_header X-Robots-Tag none;
        add_header X-Download-Options noopen;
        add_header X-Permitted-Cross-Domain-Policies none;

        root /usr/share/nginx/html/nextcloud/;

        location = /.well-known/carddav {
                return 301 $scheme://$host/remote.php/dav;
        }

        location = /.well-known/caldav {
                return 301 $scheme://$host/remote.php/dav;
        }

        client_max_body_size 512M;
        fastcgi_buffers 64 4K;
        gzip off;
        error_page 403 /core/templates/403.php;
        error_page 404 /core/templates/404.php;

        location / {
                rewrite ^ /index.php$uri;
        }

        location /updater/ {
                rewrite ^ /updater/index.php;
        }

        location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
                deny all;
        }

        location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {

                deny all;
        }

        location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\.php(?:$|/) {
                include fastcgi_params;
                fastcgi_split_path_info ^(.+\.php)(/.*)$;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                fastcgi_param PATH_INFO $fastcgi_path_info;
                fastcgi_param HTTPS on;
                fastcgi_param modHeadersAvailable true;
                fastcgi_param front_controller_active true;
                fastcgi_pass 127.0.0.1:9000;
                fastcgi_intercept_errors on;
                fastcgi_request_buffering off;
                fastcgi_read_timeout 120;
        }

        location ~* \.(?:css|js)$ {
                try_files $uri /index.php$uri$is_args$args;
                add_header Cache-Control "public, max-age=7200";
                access_log off;
        }

        location ~* \.(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$ {
                try_files $uri /index.php$uri$is_args$args;
                access_log off;
        }
}
#### nextcloud.conf end ####

# 啟動服務
systemctl start nginx
systemctl enable nginx

# 瀏覽 https://nc.test 看看是否正常

# 安裝 memcached 並啟動服務
yum -y install memcached
systemctl start memcached
systemctl enable memcached

vi /usr/share/nginx/html/nextcloud/config/config.php
# 加入下面這行
'memcache.local' => '\OC\Memcache\APCu',

# 設定 opcache
vi /etc/php.d/opcache.ini
# 加入下列內容
opcache.enable=1
opcache.enable_cli=1
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.memory_consumption=128
opcache.save_comments=1
opcache.revalidate_freq=1

# 重啟 php-fpm
systemctl restart php-fpm


# 安裝 CODE
rpm --import https://collaboraoffice.com/repos/CollaboraOnline/CODE-centos7/repodata/repomd.xml.key
yum-config-manager --add-repo https://collaboraoffice.com/repos/CollaboraOnline/CODE-centos7
yum -y --nogpgcheck install loolwsd CODE-brand


# 依照 https://nextcloud.com/collaboraonline/ 的官方說明
# 設定 loolwsd 所使用的憑證必須要有效的，不能使用自己簽發的憑證
# 因為除了自己的瀏覽器會去連 loolwsd，NextCloud也會在背後自己去連 loolwsd
# 若使用無效的憑證就會出錯  Internal Server Error


vi /etc/loolwsd/loolwsd.xml
# 修改下列內容 (其中的 code.crt & code.key 請自行換成有效的憑證檔)
<cert_file_path desc="Path to the cert file" relative="false">/etc/nginx/cert/code.crt</cert_file_path>
<key_file_path desc="Path to the key file" relative="false">/etc/nginx/cert/code.key</key_file_path>
<ca_file_path desc="Path to the ca file" relative="false"></ca_file_path>

# 啟動服務
systemctl restart loolwsd
systemctl enable loolwsd


進 NextCloud Admin 安裝 APP (Collabora Online)
Collabora Online 設定伺服器 https://nc.test:9980
測試是否可編輯 Office 檔案

vi /etc/nginx/conf.d/nextcloud.conf
# 加入下列內容
server {
        listen 443 ssl;
        server_name code.test;
        ssl_certificate /etc/nginx/cert/code.crt;
        ssl_certificate_key /etc/nginx/cert/code.key;
        location / {
                proxy_pass https://localhost:9980;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "Upgrade";
                proxy_set_header Host $http_host;
                proxy_read_timeout 36000s;
        }
}

# 重啟服務
systemctl restart nginx


進 NextCloud Admin
Collabora Online 設定伺服器 https://code.test
測試是否可編輯 Office 檔案



2017/08/11 補充

# 手動升級 NextCloud 至 12.0.1
cd /usr/share/nginx/html/
wget https://download.nextcloud.com/server/releases/nextcloud-12.0.1.zip
mv nextcloud nextcloud.old
unzip nextcloud-12.0.1.zip
cp nextcloud.old/config/config.php nextcloud/config/
mv nextcloud.old/data/ nextcloud/ #若 data 有另外指定路徑則不需要搬移
chown -R nginx:nginx nextcloud
cd nextcloud
sudo -u nginx php occ upgrade


# 為了使用 External storage support 支援 SMB， 變更 PHP 安裝來源
yum install -y http://rpms.famillecollet.com/enterprise/remi-release-7.rpm
yum install -y php70-php-fpm php70-php-cli php70-php-gd php70-php-mcrypt php70-php-mysql php70-php-pear php70-php-xml php70-php-mbstring php70-php-pdo php70-php-json php70-php-pecl-apcu php70-php-pecl-apcu-devel php70-php-pecl-memcached php70-php-opcache php70-php-ldap php70-php-pecl-zip php70-php-smbclient
systemctl stop php-fpm
systemctl disable php-fpm
vi /etc/opt/remi/php70/php.d/10-opcache.ini      #內容請參考上面
vi /etc/opt/remi/php70/php-fpm.d/www.conf        #內容請參考上面
systemctl stop php-fpm
systemctl disable php-fpm
systemctl start php70-php-fpm
systemctl enable php70-php-fpm