nextcloud和onlyoffice docker-compose 部署

「爱情、让人受尽委屈。」 2022-03-28 10:14 1023阅读 0赞

# **docker-compose.yml** #

version: '3'  
services:  
  web:  
    hostname: web  
    image: nginx  
    ports:  
      - 8080:80  
    networks:  
      - cloud\_net  
    restart: always  
    volumes:  
      - ./nextcloud:/var/www/html  
      - ./nginx.conf:/etc/nginx/nginx.conf:ro  
    depends\_on:  
      - app

app:  
    hostname: app  
    image: nextcloud:14.0.3-fpm-alpine  
    restart: always  
    networks:  
      - cloud\_net  
    volumes:  
      - ./nextcloud:/var/www/html

db:  
    hostname: db  
    image: mysql:8.0  
    restart: always  
    networks:  
      - cloud\_net  
    volumes:  
      - ./db/data:/var/lib/mysql  
    command: --character-set-server=utf8  
    environment:  
      MYSQL\_ROOT\_PASSWORD: root123456  
      MYSQL\_DATABASE: nextcloud  
      MYSQL\_USER: nextcloud  
      MYSQL\_PASSWORD: nextcloud123  
    ports:  
      - 3306:3306

onlyoffice:  
    hostname: onlyoffice  
    image: onlyoffice/documentserver  
    restart: always  
    ports:  
      - 6060:80  
    networks:  
      - cloud\_net

networks:  
  cloud\_net:

# **nginx.conf** #

user  www-data;  
worker\_processes  1;

error\_log  /var/log/nginx/error.log warn;  
pid        /var/run/nginx.pid;

events \{  
    worker\_connections  1024;  
\}

http \{  
    include       /etc/nginx/mime.types;  
    default\_type  application/octet-stream;

log\_format  main  '$remote\_addr - $remote\_user \[$time\_local\] "$request" '  
                      '$status $body\_bytes\_sent "$http\_referer" '  
                      '"$http\_user\_agent" "$http\_x\_forwarded\_for"';

access\_log  /var/log/nginx/access.log  main;

sendfile        on;  
    \#tcp\_nopush     on;

keepalive\_timeout  65;

set\_real\_ip\_from  10.0.0.0/8;  
    set\_real\_ip\_from  172.16.0.0/12;  
    set\_real\_ip\_from  192.168.0.0/16;  
    real\_ip\_header    X-Real-IP;

\#gzip  on;

upstream php-handler \{  
        server app:9000;  
    \}

server \{  
        listen 80;  
        add\_header X-Content-Type-Options nosniff;  
        add\_header X-XSS-Protection "1; mode=block";  
        add\_header X-Robots-Tag none;  
        add\_header X-Download-Options noopen;  
        add\_header X-Permitted-Cross-Domain-Policies none;  
        add\_header Referrer-Policy no-referrer;

root /var/www/html;

location = /robots.txt \{  
            allow all;  
            log\_not\_found off;  
            access\_log off;  
        \}

location = /.well-known/carddav \{  
            return 301 $scheme://$host/remote.php/dav;  
        \}  
        location = /.well-known/caldav \{  
            return 301 $scheme://$host/remote.php/dav;  
        \}

\# set max upload size  
        client\_max\_body\_size 10G;  
        fastcgi\_buffers 64 4K;

\# Enable gzip but do not remove ETag headers  
        gzip on;  
        gzip\_vary on;  
        gzip\_comp\_level 4;  
        gzip\_min\_length 256;  
        gzip\_proxied expired no-cache no-store private no\_last\_modified no\_etag auth;  
        gzip\_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;

location / \{  
            rewrite ^ /index.php$request\_uri;  
        \}

location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ \{  
            deny all;  
        \}  
        location ~ ^/(?:\\.|autotest|occ|issue|indie|db\_|console) \{  
            deny all;  
        \}

location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v\[12\]|updater/.+|ocs-provider/.+)\\.php(?:$|/) \{  
            fastcgi\_split\_path\_info ^(.+\\.php)(/.\*)$;  
            include fastcgi\_params;  
            fastcgi\_param SCRIPT\_FILENAME $document\_root$fastcgi\_script\_name;  
            fastcgi\_param PATH\_INFO $fastcgi\_path\_info;  
            \# fastcgi\_param HTTPS on;  
            \#Avoid sending the security headers twice  
            fastcgi\_param modHeadersAvailable true;  
            fastcgi\_param front\_controller\_active true;  
            fastcgi\_pass php-handler;  
            fastcgi\_intercept\_errors on;  
            fastcgi\_request\_buffering off;  
        \}

location ~ ^/(?:updater|ocs-provider)(?:$|/) \{  
            try\_files $uri/ =404;  
            index index.php;  
        \}

\# Adding the cache control header for js and css files  
        \# Make sure it is BELOW the PHP block  
        location ~ \\.(?:css|js|woff|svg|gif)$ \{  
            try\_files $uri /index.php$request\_uri;  
            add\_header Cache-Control "public, max-age=15778463";

add\_header X-Content-Type-Options nosniff;  
            add\_header X-XSS-Protection "1; mode=block";  
            add\_header X-Robots-Tag none;  
            add\_header X-Download-Options noopen;  
            add\_header X-Permitted-Cross-Domain-Policies none;  
            add\_header Referrer-Policy no-referrer;

\# Optional: Don't log access to assets  
            access\_log off;  
        \}

location ~ \\.(?:png|html|ttf|ico|jpg|jpeg)$ \{  
            try\_files $uri /index.php$request\_uri;  
            \# Optional: Don't log access to other assets  
            access\_log off;  
        \}  
    \}

# 代表初始化结束 #

app\_1\_c45be1513b3f | Initializing finished  
app\_1\_c45be1513b3f | New nextcloud instance  
app\_1\_c45be1513b3f | \[10-Jan-2019 02:03:14\] NOTICE: fpm is running, pid 1  
app\_1\_c45be1513b3f | \[10-Jan-2019 02:03:14\] NOTICE: ready to handle connections

# mysql 密码验证改变 #

ALTER USER 'nextcloud'@'%' IDENTIFIED WITH mysql\_native\_password BY 'nextcloud123';

ALTER USER 'root'@'%' IDENTIFIED WITH mysql\_native\_password BY 'root123456';

# [数据目录权限错误消息（Windows的docker）][Windows_docker]  #

/**
     * Check for correct file permissions of data directory
     *
     * @param string $dataDirectory
     * @return array arrays with error messages and hints
     */
    public static function checkDataDirectoryPermissions($dataDirectory) {
       if(\OC::$server->getConfig()->getSystemValue('check_data_directory_permissions', false) === false) {
          return  [];
       }
       $l = \OC::$server->getL10N('lib');
       $errors = [];
       $permissionsModHint = $l->t('Please change the permissions to 0770 so that the directory'
          . ' cannot be listed by other users.');
       $perms = substr(decoct(@fileperms($dataDirectory)), -3);
       if (substr($perms, -1) !== '0') {
          chmod($dataDirectory, 0770);
          clearstatcache();
          $perms = substr(decoct(@fileperms($dataDirectory)), -3);
          if ($perms[2] !== '0') {
             $errors[] = [
                'error' => $l->t('Your data directory is readable by other users'),
                'hint' => $permissionsModHint
             ];
          }
       }
       return $errors;
    }

配置插件

注意要设置网络层在同一层

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTI4MjM5Nw_size_16_color_FFFFFF_t_70][]

上面部署启动没问题,然后开始安装。1.浏览器打开:[http://10.0.0.20:8080][http_10.0.0.20_8080]

![在这里插入图片描述][70]

2.安装onlyoffice插件—>应用—>安装ONLYOFFICE插件

![在这里插入图片描述][70 1]

3.设置onlyoffice

![在这里插入图片描述][70 2]

![在这里插入图片描述][70 3]

4.打开个文件测试看看

语言设置中文

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTI4MjM5Nw_size_16_color_FFFFFF_t_70 1][]

文件分享

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTI4MjM5Nw_size_16_color_FFFFFF_t_70 2][]

脑图部署

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTI4MjM5Nw_size_16_color_FFFFFF_t_70 3][]

# 看板 #

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTI4MjM5Nw_size_16_color_FFFFFF_t_70 4][]

参考文献：

[https://blog.csdn.net/Maggie\_up/article/details/83310021][https_blog.csdn.net_Maggie_up_article_details_83310021]

[https://laravel-china.org/articles/10736/some-craters-in-mysql-8011][https_laravel-china.org_articles_10736_some-craters-in-mysql-8011]

[https://github.com/nextcloud/docker/issues/70][https_github.com_nextcloud_docker_issues_70]

[https://askubuntu.com/questions/380767/please-change-the-permissions-to-0770-so-that-the-directory][https_askubuntu.com_questions_380767_please-change-the-permissions-to-0770-so-that-the-directory]

[Windows_docker]: https://github.com/nextcloud/docker/issues/70#
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTI4MjM5Nw_size_16_color_FFFFFF_t_70]: /images/20220328/50133dfd6655428f98cd89e341d9853a.png
[http_10.0.0.20_8080]: http://10.0.0.20:8080/
[70]: /images/20220328/0a50f614696b494fadd183571c87fe90.png
[70 1]: /images/20220328/44a9dca1a0bc4fdf9070d1cab94ac8a7.png
[70 2]: /images/20220328/d41e8b3e10864dbfac5a406a3ed57122.png
[70 3]: /images/20220328/02c937002b77483eb8c092664c246c78.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTI4MjM5Nw_size_16_color_FFFFFF_t_70 1]: /images/20220328/8be1575cdf5e42d8b41cd42e1ccb192d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTI4MjM5Nw_size_16_color_FFFFFF_t_70 2]: /images/20220328/199ff1a95e14456d9930e54f0a2545ec.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTI4MjM5Nw_size_16_color_FFFFFF_t_70 3]: /images/20220328/62ca8d7462aa485bb216229f4f92bca9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTI4MjM5Nw_size_16_color_FFFFFF_t_70 4]: /images/20220328/1fb10bb498524b28a9a4225e82321d8c.png
[https_blog.csdn.net_Maggie_up_article_details_83310021]: https://blog.csdn.net/Maggie_up/article/details/83310021
[https_laravel-china.org_articles_10736_some-craters-in-mysql-8011]: https://laravel-china.org/articles/10736/some-craters-in-mysql-8011
[https_github.com_nextcloud_docker_issues_70]: https://github.com/nextcloud/docker/issues/70
[https_askubuntu.com_questions_380767_please-change-the-permissions-to-0770-so-that-the-directory]: https://askubuntu.com/questions/380767/please-change-the-permissions-to-0770-so-that-the-directory