Nextcloud is a robust solution for self hosted file synchronization and collaboration. However, because it relies heavily on a relational database to track the state of the physical filesystem, discrepancies between the two can occasionally occur. When the database believes a fil...
This article provides a detailed walkthrough of the complete process for using GPG to digitally sign commits in Git, with the goal of preventing others from forging commit history. It first explains the role of GPG signatures in verifying the authenticity and integrity of documents, and guides users on installing GPG tools based on their operating system. Next, it demonstrates generating a key pair via the command line, retrieving the long-form Key ID, and configuring Git global settings to enable automatic signing. Key steps include exporting the public key and adding it to a GitHub or GitLab account, so that the platform trusts the signature, thereby ensuring that only users holding the private key can generate recognized commits. The article also explores convenient solutions for synchronizing keys across devices, suggesting storing the private key file on cloud storage services such as Nextcloud, and importing and configuring it on new devices with a one-click script. It simultaneously emphasizes the importance of enabling two-factor authentication (2FA) and protecting the private key passphrase to avoid security risks. Finally, it points out that after configuration, the public key should be shared with trusted colleagues or friends, who should also trust the public key. This ensures that GPG signatures truly deliver their security protection value in team collaboration, preventing the signature mechanism from becoming a mere formality.
On October 4, 2022, Aiursoft Nextcloud experienced a severe incident that resulted in a two-hour service interruption and partial data loss. The root cause was the accidental loss of the NFS backup disk mount following the storage and compute separation migration. This caused the backup task to write large amounts of data to the system disk, instantly filling up the 64GB system disk, which led to system process paralysis and failed restarts. During the investigation, by mounting the hard drive to another server for analysis, it was discovered that system disk space was being abnormally occupied. It was ultimately confirmed that the backup script had erroneously written data to the local path when the mount failed. This incident revealed potential risks in the backup mechanism when configuration errors occur, as well as the lack of monitoring for mount point status. Improvement measures include enforcing mount status verification before backups, establishing real-time alert mechanisms for disk remaining space and mount status, and optimizing the backup script to prevent accidental writes to the local disk, thereby enhancing system stability and data security.
This article details the complete deployment process for a Nextcloud server, from basic configuration to advanced optimization. First, it is necessary to modify `overwrite.cli.url` in `config.php` and set up Cron mode to automate background tasks. Second, it is recommended to install practical plugins such as two-factor authentication, task management, and notes. To expand storage capacity, create a new partition, format it, and mount a large-capacity hard drive, while ensuring that the data directory migration and permission settings are correctly configured. Additionally, the article covers region settings, preview feature optimization, and mail server configuration. It focuses on installing and configuring the Redis caching system, including APCu local caching and distributed lock settings, to resolve performance warnings and improve system efficiency. To prevent data loss, write an automated backup script to regularly sync the application directory, data files, and database to independent storage. Finally, a Caddy reverse proxy configuration solution is provided for specific needs, along with a guide for setting up a GPU acceleration environment if using the Recognize app, aiming to build a high-performance, secure, and easy-to-maintain private cloud environment.