Nextcloud with Veracrypt

This project automates the deployment of Nextcloud using Docker, with NGINX as a reverse proxy configured to support HTTP/3 and Google Brotli compression. It ensures data security by storing all data within Veracrypt volumes.

The project uses two Veracrypt volumes as the Nextcloud needs to be mounted in a filesystem with restrictive permissions.

stateDiagram-v2
direction LR

classDef nextcloud_style fill:#0082c9
classDef veracrypt_style fill:#13c185

state "Reverse Proxy" as reverse_proxy {
    state "Nginx" as nginx
}
reverse_proxy:::nextcloud_style

[*] --> reverse_proxy

state "Nextcloud" as nextcloud {
    state "Application" as nextcloud_app
    state "Cron" as nextcloud_cron
}
nextcloud:::nextcloud_style

nginx --> nextcloud

state "Services" as services {
    state "Database" as database
    state "Cache" as cache
    state "Imaginary" as imaginary
}
services:::nextcloud_style

nextcloud --> services

state "Veracrypt" as veracrypt {
    state "Data Volume" as veracrypt_data {
        state "Nextcloud data" as veracrypt_nextcloud
    }
    state "Stack Volume" as veracrypt_stack {
        state "Database data" as veracrypt_database
        state "Nginx config" as veracrypt_nginx
        state "PHP config" as veracrypt_php
        state "SSL certificates" as veracrypt_certs
    }
}
veracrypt:::veracrypt_style

nextcloud_app --> veracrypt_data
nextcloud_app --> veracrypt_stack
nextcloud_cron --> veracrypt_data
database --> veracrypt_stack

Loading

The WHY of the project

This project began with a simple need: I wanted to browse and organize my photos locally using folders. I needed the ability to securely store the files on an external drive with encryption, but I needed to access it across both Windows and Linux. Beyond storage, I also wanted features like a timeline view, map view, album organization, and automatic backup from my phone.

Veracrypt allowed me to create encrypted containers that could be mounted as virtual drives to browse and manage my files. This gave me the security of encryption without sacrificing the ease of access and flexibility I needed.

Nextcloud provide the same tools that cloud storage services offer, but in a self-hosted, private environment. It allowed me to seamlessly access, share, and sync my files across multiple devices, while also giving me the ability to create albums and manage my data just as I would on a typical cloud service.

Docker images

This project uses:

• Nginx with a custom compiled version to support HTTP/3 and Brotli
• Nexcloud with a custom extended version to include ffmpeg, zip, and others
• MariaDB as database
• Redis as cache
• Imaginary to process images

Documentation

• How to deploy