Thomas Gräfenstein
1c2fb3c807
fix nginx redirect loop
2026-03-22 18:12:18 +01:00
Thomas Gräfenstein
b918e713e5
align nginx and Caddy config with official Nextcloud docs
...
Move security headers to Caddy (edge proxy), remove nginx gzip
(Caddy already compresses), add asset_immutable map for versioned
cache control, add missing static file extensions, fix .well-known
block, and hide X-Powered-By header.
2026-03-22 17:58:26 +01:00
Thomas Gräfenstein
ac3bff9351
fix nginx to fall through to PHP for dynamic assets like theming CSS
...
Static file locations were returning hard 404s instead of falling
through to PHP, which broke dynamically generated assets like
theming CSS files.
2026-03-22 17:49:45 +01:00
Thomas Gräfenstein
22198784d3
tune PHP and FPM for 1-core/3GB VPS performance
...
Reduce FPM workers from 12 to 5 max to stop memory thrashing on
a single-core VPS with 3GB RAM. Add OPcache and APCu tuning to
reduce filesystem stat calls and improve cache hit rates.
2026-03-22 17:31:14 +01:00
Thomas Gräfenstein
d88a8db9f1
fix nginx rewrite loop causing slow page loads and 500 errors
...
Static file locations now return 404 instead of falling through to
index.php, and the default location uses a clean rewrite to prevent
/index.php/index.php redirect cycles.
2026-03-22 17:19:34 +01:00
Thomas Gräfenstein
995dfcc099
add FPM worker tuning and architecture diagram
...
Increase PHP-FPM max_children from 5 to 12 to handle concurrent
requests without queuing, sized for a ~3GB VPS. Add Mermaid
architecture diagram to README.
2026-03-22 17:07:43 +01:00
Thomas Gräfenstein
4329cfd3f2
switch nextcloud to FPM + Nginx for better static file performance
...
Replace the all-in-one Apache image with nextcloud:33-fpm and an Nginx
sidecar that serves static assets directly with gzip compression and
cache headers, avoiding the prefork concurrency bottleneck.
2026-03-22 17:00:33 +01:00
Thomas Gräfenstein
c0c20a42ed
add gzip/zstd compression and Redis caching for Nextcloud performance
2026-03-22 16:47:02 +01:00
Thomas Gräfenstein
cdec4e3e22
fix trusted_proxies to use CIDR instead of hostname
2026-03-22 16:39:54 +01:00
Thomas Gräfenstein
0e0a6ff1eb
add trusted proxy, post-install/upgrade hooks, occ docs and admin review
...
- Add TRUSTED_PROXIES=caddy to fix reverse proxy header warning
- Add post-installation hook: maintenance window, phone region, DB indices, MIME migrations
- Add post-upgrade hook: DB indices and MIME migrations
- Add occ commands section to README
- Add nextcloud-review.md with admin warning fixes
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-22 16:33:40 +01:00
Thomas Gräfenstein
8b5c9bdbfc
bump nextcloud versions
2026-03-22 16:07:18 +01:00
Thomas Gräfenstein
89b806fd5b
fix more issues
2026-03-22 12:29:58 +01:00
Thomas Gräfenstein
befb32129f
nextcloud setup
2026-03-22 12:04:48 +01:00
