Install NextCloud 11 on Fedora 25 with SaltStack

scottalanmiller

Modifying your IPTables will get rolled back the next time you apply state. This section handles the firewall...

FedoraServer:
  firewalld.present:
    - name: FedoraServer
    - block_icmp:
      - echo-reply
      - echo-request
    - default: False
    - masquerade: True
    - ports:
      - 443/tcp
      - 22/tcp
      - 9090/tcp

Just add

- 80/tcp

To the end to open port 80. And remove "the block_icmp" section completely to fix ICMP Pings.

scottalanmiller

@CrimsonKidA said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:

onse I understand. Why port 80 though?

Not sure if it will get used outside our LAN yet. If so, I will close 80 and purchase an SSL cert.

Don't purchase a cert, just use LetsEncrypt for free. It's all set up for that, including the tools already built in from the state.

CrimsonKidA

Oh very cool! I did not know that

CrimsonKidA

...in that case I may just use 443, yeah.

scottalanmiller

WIth mine, I add the certs once they are acquired to my state files and have them ensured by SaltStack so that if I need (or want) to migrate to a different server I can do so and it moves my full system, including the certs, with it. Still have to backup and restore the file data, of course.

scottalanmiller

@CrimsonKidA said in Install NextCloud 11 on Fedora 25 with SaltStack:

...in that case I may just use 443, yeah.

You CAN run any commands via Salt, too. You can avoid logging in. Except your SaltMaster is on the same host, so that doesn't work

CrimsonKidA

Would I need to add something to the salt script to enable the "LDAP user and group backend" v1.1.2 app for NextCloud? I want SSO for our AD users, but NextCloud says "This app cannot be installed because the following dependencies are not fulfilled:
The library ldap is not available."

scottalanmiller

This should be the package that is missing: php-ldap.x86_64

scottalanmiller

So you can just add it to the package list...

install_network_packages:
  pkg.installed:
    - pkgs:
      - wget
      - unzip
      - firewalld
      - net-tools
      - php-ldap

Add it into the list as above. Anywhere in the list is fine. Then run your state again. This way it is added in, but if you need to rebuild your master file is ready to make everything for you.

scottalanmiller

I added the php-ldap package to the main directions.

FATeknollogee

Can someone break this down in plain English for those of us that aren't that smart?

scottalanmiller

@FATeknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

Can someone break this down in plain English for those of us that aren't that smart?

Which part?

FATeknollogee

@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:

@FATeknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

Can someone break this down in plain English for those of us that aren't that smart?

Which part?

After the o/s is installed, how do get here? "To use nextcloud.sls you will need to copy all three files to your /srv/salt/ directory as it will pull the two configuration files from there to put them on the server.

/srv/salt/nextcloud.sls"

scottalanmiller

@FATeknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:

@FATeknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

Can someone break this down in plain English for those of us that aren't that smart?

Which part?

After the o/s is installed, how do get here? "To use nextcloud.sls you will need to copy all three files to your /srv/salt/ directory as it will pull the two configuration files from there to put them on the server.

/srv/salt/nextcloud.sls"

This is a SaltStack state file (hence "with SaltStack" in the title.) So you would need to install SaltStack to do this. If you use the SaltStack tag here on the community, there are guides to installing a Salt Master and a Salt Minion (the minion is the server on which you would install NextCloud, for example.) I'm turning out guides regularly which basically completely manage your servers, so this can be worthwhile as building servers becomes pretty much zero work this way.

FATeknollogee

The Master/Minion part is simple, that I figured out.

Getting to the NextCloud install is where I got lost.

scottalanmiller

@FATeknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

The Master/Minion part is simple, that I figured out.

Getting to the NextCloud install is where I got lost.

You put the NextCloud state file onto your Salt master and state.apply it to the minion in question. The minion will build itself automatically.

scottalanmiller

So for example here, there are three files to save. Just save them to the locations specified for each file (literally just copy and paste them.) This is on the master, you never log into the minion.

Then from the master (and assuming your minion's name is minion1) you would run a command like this...

salt 'minion1' state.apply nextcloud

And wait as the magic happens and your blank minion turns into a fully working NextCloud 11 instance.

FATeknollogee

In /srv/salt/ I need to create nextcloud.sls, ssl.conf & redis.conf
Copy & paste the contents
state.apply = magic?

scottalanmiller

@FATeknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

In /srv/salt/ I need to create nextcloud.sls, ssl.conf & redis.conf
Copy & paste the contents
state.apply = magic?

Yes, create those files and yes, salt is magic.

FATeknollogee

@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:

@FATeknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

In /srv/salt/ I need to create nextcloud.sls, ssl.conf & redis.conf
Copy & paste the contents
state.apply = magic?

Yes, create those files and yes, salt is magic.

That's so easy even a caveman :clown: like me could do it.
I was over-thinking & kept "googling" for a NextCloud.sls download