Netcup VPS 部署生产级 Nextcloud 私有云存储实战

# 1. 查找附加的数据盘设备名（通常为 /dev/vdb 或 /dev/sdb）

lsblk

# 2. 格式化为 ext4 高性能日志文件系统

mkfs.ext4 -m 1 /dev/vdb

# 3. 创建挂载点并写入 /etc/fstab 实现开机自启

mkdir -p /mnt/storage/data

echo "$(blkid -s UUID -o value /dev/vdb) /mnt/storage ext4 defaults,noatime 0 2" >> /etc/fstab

mount -a

# 4. 关键权限修复：Nextcloud 容器内部 www-data 用户的 UID/GID 为 33

chown -R 33:33 /mnt/storage/data

chmod 750 /mnt/storage/data

server {

  listen 443 ssl http2;

  server_name cloud.yourdomain.com;

  # Let’s Encrypt 证书路径

  ssl_certificate /etc/letsencrypt/live/cloud.yourdomain.com/fullchain.pem;

  ssl_certificate_key /etc/letsencrypt/live/cloud.yourdomain.com/privkey.pem;

  # 关键安全标头（消除管理后台安全警告）

  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

  client_max_body_size 16G;

  # WebDAV 自动发现路由重定向

  location ^~ /.well-known/carddav { return 301 https://$host/remote.php/dav/; }

  location ^~ /.well-known/caldav { return 301 https://$host/remote.php/dav/; }

  location / {

    proxy_pass http://127.0.0.1:8080;

    proxy_set_header Host $host;

    proxy_set_header X-Real-IP $remote_addr;

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    proxy_set_header X-Forwarded-Proto https;

    proxy_request_buffering off;

  }

}