[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y ] [Search | Free Show | Home]

/own/ own cloud general

This is a blue board which means that it's for everybody (Safe For Work content only). If you see any adult content, please report it.

Thread replies: 79
Thread images: 8

File: ownCloud2.png (13KB, 544x217px) Image search: [Google]
ownCloud2.png
13KB, 544x217px
Would you recommend an amateur to set up his own cloud? I am generally concerned about the security.

I have a PC left that could be connected to the internet 24/7.

At first: What OS should I install for maximum security and ease to set up?

Please tell me your thoughts and experiences.
>>
b-bump
>>
>>58241973
Learning new things never hurt anyone except the jews, so i say you should go for it.

Follow the guide on their website and be happy.

Manually upgrading Owncloud/Nextcloud is insanely easy, you copy one folder and done.
>>
>>58241973

Does your 24/7 PC have a CPU that supports virtualization? If so, great. Blow out the OS and install KVM/ESXi/Hyper-V depending on your comfort level, (You can always change platforms later), and start setting up the services you want as separate VMs or containers.

Personally I'd prefer to use an OpenVPN server + File server to access my files remotely. At least that way you know the files are protected in transit.

I don't know much about OwnCloud, but if it's browser based I'd imagine you'd need a trusted certificate on the box to make sure your transfers are secure.
>>
>>58242250
>I don't know much about OwnCloud, but if it's browser based I'd imagine you'd need a trusted certificate on the box to make sure your transfers are secure.

Yes, you need a certificate, using Letsencrypt is easy and free.
>>
I just use a raspberry pi/debian with nextcloud, on Apache (forced SSL), SSH only with key auth, fail2ban, ect...
I'm not a security expert but I think it's enough for me.
>>
I find this is a quite interesting topic. It's not that I want to be NSA-secure but more RussianChinese-hacker secure.

>>58242250
It supports virtualization. Is OwnCloud used in a VM?

Installing my favorite Linux distro right now.
>>
>>58242392
its just a linux application. set it up with a letsencrypt cert, harden the OS (change ssh port, no password auth, block all unneeded ports) and you're good to go. if you dont want to fiddle with their implementation of TLS you could just put nginx or apache on the box with it and proxy the connection from 443 to whatever port the application is running locally. i do this with nginx with most everything at work because i figure i'll leave the whole proxying connections and authentication shit up to the people who write nginx, not the people who wrote whatever application i'm installing because it's typically an afterthought for them
>>
>>58242460
>>58242287
just realized this guy pretty much said the same thing i said

make sure you understand how to expose whatevers running on (what i assume to be) your home network to the internet. you'll need to set up port forwarding or NAT on your router to expose the box on your public IP
>>
>>58242496
Yup. Also, to get HTTPS, you need an hostname. Buy a domain or use a free dynamic hostname service like dtdns.net.

Also, maybe your ISP provide and long as fuck and unrememberable hostname like "c0018-1-82-245-15-182.fbx.proxad.net ", but I don't known if those are static or dynamic.
>>
>>58241973
just use sftp you fucking pleb
>>
>>58241973
Yes, but use Nextcloud instead of owncloud, it's a fork where all the original devs left to. Owncloud is dead.
>>
File: thing.png (10KB, 800x600px) Image search: [Google]
thing.png
10KB, 800x600px
>>58242460
>>58242287
>>58242264
>>58242250
>ssl
>secure
It just provides integrity tbqh. Use OpenVPN (or similar) under that.
>>58242496
Only expose a https tunnel for VPN to have some protection against port scanning and allow some firewall penetration from the remote side.
So, the whole thing would be an https+vpn+https sandwich.
>>
>>58242702
Any idea why? Also I've barely heard of Nextcloud outside of /g/ for some reason.
>>
>>58241973
>Would you recommend an amateur to set up his own cloud?

Yes, it's great to learn.

>What OS should I install for maximum security and ease to set up?

For a cloud server? Ubuntu... Easy to setup and comes with all tools to make it secure.
>>
>>58242759
I can't remember, there's articles about it though if you search.
I think most people probably haven't heard of it because it's a new fork, and there seems to be some weird licensing/legal issues between them. If you go to the Nextcloud about page, they've censored out every instance of "owncloud" so it doesn't appear anywhere on their site.
>>
I've used Owncloud for a few years. It's okay, it should only get better with time. The Phone App is pretty shit, but on a whole it's pretty handy.
>>
>>58242816
Download the Nextcloud app, it's much better and allows sharing mgmt.

The nextcloud app works with owncloud server.
>>
what are you using it for?

if i want to sync files between devices, i use syncthing (for example, camera photos between my phone/desktop/laptop, or documents between my desktop/laptop)

if i want to access arbitrary files from anything to anything, i use ssh (sftp)
>>
>>58242816
Thanks for the tip.
>>
>>58242852
>if i want to sync files between devices, i use syncthing (for example, camera photos between my phone/desktop/laptop, or documents between my desktop/laptop)
>if i want to access arbitrary files from anything to anything, i use ssh (sftp)

The PC / MAC / Linux app can synic files between machines. Problem is it creates copies on all machines, rather than being passively stored on the server.

Install it anyway (it's easy) and see if it meets your needs.
>>
>>58242496
Okay, will see and ask here if I don't come further. Installing now.


Installed the repository and owncloud server on Ubuntu. H-How do I start it now? P-Please no bully. :(
>>
>>58242916
i did once, but failed to find a use for it, which is why i'm asking
>>
>>58242852
or just use owncloud/nextcloud for both.

It's only great or sharing stuff with people because you'll just send them a link and they have access.

I shared a link with my family and friends to an image folder when i went to japan last summer for 14days, i would upload picture i took to owncloud and then people at home could follow it, private and secure.
>>
>>58242916
>it creates copies on all machines
That's great for offline access, and why we use it at my company
>>
>>58242938
Oh, found out...
>>
File: 1444989227222.png (202KB, 500x333px) Image search: [Google]
1444989227222.png
202KB, 500x333px
>>58242938
>P-Please no bully. :(
>>
>>58242968
Cool.
>>
>>58242664
Toi t'as Free mais t'as rien compris™
Il fait quel temps à La Rochelle ?
>>
>>58242995
keke
>>No bully pls
>>
Holy shit this is a great thread. I had a shoddy cloud setup in the past (barely worked because I had never setup a server before) but I am going to set it back up now with all the tips I learned here. Thanks anons
>>
>>58243037
Also I used owncloud and can confirm it was pretty dead simple to setup and upgrade
>>
Don't get how I set up the server now. Sorry for nazi language.
>>
>>58242976
Starting and stopping the service depends on your init system. I would write a short script to start/stop it properly. Not sure exactly what I used to do because this was a while ago but iirc sending raw sigterms to the server seemed to cause issues
>>
File: 1481793043685.jpg (45KB, 500x492px) Image search: [Google]
1481793043685.jpg
45KB, 500x492px
>>58242946
>It's only great or sharing stuff with people because you'll just send them a link and they have access.
oh, so it's of no use for a loner, then.
>>
>>58243083
It is if you're out and about and don't always have access to your server
>>
>>58243266
>f you're out and about and don't always have access to your s
The whole point of a server..... hmmmmmmmmmmmmmm
>>
>>58243266
but i use syncthing/sftp for that
>>
I would like to have all my music accessible when I'm away, but not just to download it elsewhere but play/stream it. Would owncloud be a good option for this? What user interface would I use for playback?
>>
>>58243291
Then the issue is that you already have something just as useful for your case, not that it isn't useful :)
>>
I FOUND OUT. Thats fucking easy with the VM I could download.
>>
>>58243320
idk, i figured it must have some purpose outside of that, considering it's fucking huge and uses a ton of resources, relatively speaking
>>
>>58243289
The key word is >always. You may have scenarios where you're on a remote site without cheap internet access, or want to save bandwidth, so you sync when you are in the network, or through VPN when you're outside but have connectivity, and then when you're offline you still have access.
>inb4 but google drive
Indeed, but without (((them))) in the middle.
>>
>>58243302
Plex for that. You can put it on the same server that yhou have your owncloud running on.
>>
>>58243359
so, syncthing
it uses much less resources, and is easier to setup than owncloud
not to mention it's serverless, it will work with any two devices that have a synced folder configured on them

like say if my (>>58242916) desktop is unavailable, my phone and laptop will still sync between themselves

it's p2p
>>
>>58243406
Thanks. What about a web UI, so I can play it on anyone's device?
>>
>>58243302
mpd
>>
>>58243054
Read the installation docs, also use command line instead of GUI
>>
>>58243408
>>58243357
Indeed. We use it because we have multiple people sharing files with each other.
>>58243426
>>58243302
Nextcloud supports media playback and previews on its web gui, with a video example out of the box in the default installation,
>>
>>58243426
If you don't want to pay you need to install a VPN on your edge router too (Raspberry Pi?) Else, yea you can stream from anywhere bro.
>>
>>58243458
Do right now. Changed the password, keyboard language etc. But one thing is not clear for me right now. Where are the files going to be hosted? In the VM? Would rather like use a shared folder in the host system.
>>
>>58243467
>Indeed. We use it because we have multiple people sharing files with each other.
hmm, suppose it's pretty pointless when i have 1mbps upload, if i want to share something with someone, i employ the sneakernet
>>
File: plex.png (52KB, 750x1334px) Image search: [Google]
plex.png
52KB, 750x1334px
>>58243426
you can stream
>>
>>58243509
Why not IPoAC? RFC6214 could do quite fine when using jumbograms
>>
>>58243506
Okay, It works so far in my home network. When I upload many files now, will they be stored in the VM? Isn't it getting bigger and bigger or is it okay?
>>
>>58243655
Yes. You may want to expose a raw disk or partition to the VM if you're concerned about the performance.
>>
I ran one for a bit.

Shits insecure, the apps suck, and better services are free so there is no reason to fuck around hosting it.
>>
>>58243706
The VM has 40GB space and does exactly what I want. It should sync folders in my home network. I can up- and download with 12,4MB,so performance is good. Basically I want to auto-sync my lurking folder between my PC and notebook. It's like 5GB and maybe for a backup for my software folder (so I can download software to my notebook.) So, it's perfect. But is my server now accessible from the internet? (I want it not to.)

Used MEGAsync before but it's slow and I don't trust the chink who owns it now.
>>
>>58243849
goto >>58242722
>>
File: bateman.jpg (58KB, 600x327px) Image search: [Google]
bateman.jpg
58KB, 600x327px
>>58243835
Yeah... I liked Nextcloud a lot and I still do but the whole managing my own cloud server with a web terminal bit sort of felt drab to me, especially with no actual API for the system to check from.

Syncthing has identifying codes for every system connected to it, that must be approved from the host machine before anyone can access it. Better security, even if the features are less useful.

Nextcloud/Owncloud lets anyone in with a username and password, and that's the only way to access it... sort of... shit. Means I'm responsible for the iptables horseshit and SSL hounding and security.

So nah. Fuck it.
>>
>>58243892
I felt the same way.
If I'm that paranoid about snooping on a file I will just gpg encrypt it before I use box/dropbox/google drive
>>
>>58243570
training and upkeep of such a network is bit prohibitive, i'm afraid
>>
>>58243942
Indeed, but the frames can serve as emergency UPS for layer-8 equipment
>>
File: 1454300863909.gif (568KB, 240x291px) Image search: [Google]
1454300863909.gif
568KB, 240x291px
>>58243987
damn that's creative
>>
>>58243013
Tu pense bien que j'ai pas mis le mien. Je l'ai trouvé sur un forum. Je suis ni chez free, ni de la Rochelle.
Par contre, ayant remplacé certains chiffres par des numéros random, je suis quand même étonné que ça pointe quelque-part.
>>
>>58241973
Why don't you setup chiomikuj?
>>
>>58244128
ben vu qu'il n'y a plus d'IPV4 de libre...
moi ce qui m'étonne c'est que ce soit tombé en France !
>>
>>58244521
Normal, proxad.net appartient à Free.
Plus précisément, c'est le nom du réseau de free.
Si t'es chez orange, ton hostname sera sur *.abo.wanadoo.fr
>>
>>58244803
oui non ça je sais bien
j'ai fait un lookup de l'ip:
>c0018-1-82-245-15-182.fbx.proxad.net
>82-245-15-182
>82.245.15.182
>>
>>58244960
>>c0018-1-82-245-15-182.fbx.proxad.net
>>82-245-15-182
>>82.245.15.182
Oh yeah, I only changed the c0018 and that 182 at the end, so its still on the same 82.245.15.0/(24?) network.
>>
>>58242250
>use a VM for every single service
What the fuck.

OP use Ubuntu. Fedora and CentOS also have good support and I personally use Owncloud in a Fedora server, but red hat distros changed the own cloud directory to somewhere else (/etc/default/owncloud) and that might get confusing.

Get a separate hard drive and dm-crypt to contain a single encrypted partition. Set that drive to contain the owncloud data (not the installation, but the user data). Make apache force https and set up a let'sencrypt service.
>>
>>58241973
>Install freenas
>set up your harddrives in freenas
>download owncloud plugin
>use owncloud
>DONE
>>
OwnCloud is alright. It's easy to set up and lets you do a lot. The downsides are:
* it's not the most performant solution, and not entirely stable (it's a clusterfuck of html/javascript/php webapps)
* it's not very versatile: you depend on ownCloud's services and its apps. Most stuff is stored in an SQL database so if you ever want to export it, you'll need their tools.
* upgrading can be insecure (exposed in the webUI by default)

>>58245113
>What the fuck.
That is very good practice. If your mail server gets hacked, at least your file server won't be, etc. It also lets you create VLANS on the machine which you can use for setting up a DMZ.

I prefer FreeBSD for servers. They're simple to set up and migrate and they have a huge repo with preconfigured binary packages -- or you can use ports if you need more fine-tuning.
>>
>>58245374
I forgot to add, if you expose it to the entire Internet, install something like fail2ban.

>>58245351
FreeNAS is great, and FreeNAS 10 will be even better.
>>
>>58241973
I heard nextcloud is what's next, if you pardon the pun.
>>
>>58245392
Will it?
I haven't tried any nightly of FreeNAS 10 yet
>>
>>58245555
It would be even better if they made it on Linux so they could include KVM and native Docker, or if the FreeBSD folks would improve bhyve and jails.

here's a demo of the improvements in FreeNAS 10:
https://www.youtube.com/watch?v=FzyMAGbp6_g
>>
>>58242774
>Ubuntu
Wait I don't get it. Wasn't Debian the best OS for a server? Making a cloud server is really that different?
>>
>>58246559
>Wasn't Debian the best OS for a server?

Ubuntu is based on Debian and is basically a Debian that requires less setup.

Debian is great and have a great ecosystem, but Debian is not simple. You often have to install everything and deal with drivers and so on. And what is best depends on who you ask.

In many way Red Hat is better because you get good support if you buy a Red Hat license. Which also means that things like CentOS and Fedora which are red hat like share a similar eco system.

Debian and Red Hat is stable and made with servers in mind. Ubuntu is made for servers AND desktops which means that the software is often newer. But you don't rely on 100% uptime, if one of your harddisks fail (like harddisks sometimes do) then you don't have to load all the traffic to other servers while dealing with it and that sort of thing. Ubuntu is fine even then, and it is perfectly fine as a first server. It just lets you avoid fiddling with details.
Thread posts: 79
Thread images: 8


[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y] [Search | Top | Home]

I'm aware that Imgur.com will stop allowing adult images since 15th of May. I'm taking actions to backup as much data as possible.
Read more on this topic here - https://archived.moe/talk/thread/1694/


If you need a post removed click on it's [Report] button and follow the instruction.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com.
If you like this website please support us by donating with Bitcoins at 16mKtbZiwW52BLkibtCr8jUg2KVUMTxVQ5
All trademarks and copyrights on this page are owned by their respective parties.
Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
This is a 4chan archive - all of the content originated from that site.
This means that RandomArchive shows their content, archived.
If you need information for a Poster - contact them.