New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

The default installation expose all stored data #37

Open

EliasGabrielsson opened this issue Mar 29, 2021 · 1 comment

EliasGabrielsson commented Mar 29, 2021

As the security scan points out:

Your data directory and files are probably accessible from the Internet. The .htaccess file is not working. It is strongly recommended that you configure your web server so that the data directory is no longer accessible, or move the data directory outside the web server document root.

I wonder if it would make more sense to just put the data directory outside the www root.
wdyt?

Author

EliasGabrielsson commented Mar 29, 2021 •

edited

Loading

Looks like this line just needs to be changed:

iocage-plugin-nextcloud/post_install.sh

Line 109 in ff30b09

    
           su -m www -c "php /usr/local/www/nextcloud/occ maintenance:install --database=\"mysql\" --database-name=\"nextcloud\" --database-user=\"$USER\" --database-pass=\"$PASS\" --database-host=\"localhost\" --admin-user=\"$NCUSER\" --admin-pass=\"$NCPASS\" --data-dir=\"/usr/local/www/nextcloud/data\""

specific the data-dir part

EliasGabrielsson mentioned this issue

Create Nextcloud data folder outside of web root #38

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment