Deploying Production-Grade Nextcloud Hub on Netcup VPS

# 1. Identify attached block device (usually /dev/vdb or /dev/sdb)

lsblk

# 2. Format with ext4 journaling filesystem

mkfs.ext4 -m 1 /dev/vdb

# 3. Create mountpoint and persist in /etc/fstab

mkdir -p /mnt/storage/data

echo "$(blkid -s UUID -o value /dev/vdb) /mnt/storage ext4 defaults,noatime 0 2" >> /etc/fstab

mount -a

# 4. Set permissions: internal container www-data uses UID/GID 33

chown -R 33:33 /mnt/storage/data

chmod 750 /mnt/storage/data

server {

  listen 443 ssl http2;

  server_name cloud.yourdomain.com;

  # Let’s Encrypt certificate paths

  ssl_certificate /etc/letsencrypt/live/cloud.yourdomain.com/fullchain.pem;

  ssl_certificate_key /etc/letsencrypt/live/cloud.yourdomain.com/privkey.pem;

  # Security headers for Nextcloud A+ rating

  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

  client_max_body_size 16G;

  # CalDAV/CardDAV auto-discovery redirects

  location ^~ /.well-known/carddav { return 301 https://$host/remote.php/dav/; }

  location ^~ /.well-known/caldav { return 301 https://$host/remote.php/dav/; }

  location / {

    proxy_pass http://127.0.0.1:8080;

    proxy_set_header Host $host;

    proxy_set_header X-Real-IP $remote_addr;

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    proxy_set_header X-Forwarded-Proto https;

    proxy_request_buffering off;

  }

}