====== Owncloud ======
export ADMINMAIL="admin@liberasys.com"
export ROOTSSLURL="https://owncloud.liberasys.com"
export SSLCERTFILE="/etc/ssl/certs/STAR_liberasys_com.chain.pem"
export SSLCERTKEY="/etc/ssl/private/STAR_liberasys_com.key"
echo 'deb http://download.opensuse.org/repositories/isv:/ownCloud:/community/Debian_8.0/ /' >> /etc/apt/sources.list.d/owncloud.list
wget http://download.opensuse.org/repositories/isv:ownCloud:community/Debian_8.0/Release.key
apt-key add - < Release.key
rm Release.key
apt-get update
apt-get install owncloud php5-apcu
Nouveau mot de passe du superutilisateur de MySQL : créer un mot de passe dans keepass (mysql/root) et le coller
got tu http://FQDI/
===== owncloud as host http root =====
Follow apache staging
sed -i 's|Alias /owncloud "/var/www/owncloud/"|#Alias /owncloud "/var/www/owncloud/"|g' /etc/apache2/conf-enabled/owncloud.conf
cat << 'EOF' > /etc/apache2/sites-available/000-default.conf
ServerAdmin _ADMINMAIL_
DocumentRoot /var/www/apache2-default/
Options None
Redirect permanent / _ROOTSSLURL_
EOF
sed -i "s|_ADMINMAIL_|${ADMINMAIL}|g" /etc/apache2/sites-available/000-default.conf
sed -i "s|_ROOTSSLURL_|${ROOTSSLURL}|g" /etc/apache2/sites-available/000-default.conf
cat << 'EOF' > /etc/apache2/sites-available/default-ssl.conf
# Intermediate configuration, tweak to your needs
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
SSLHonorCipherOrder on
SSLCompression off
# OCSP Stapling, only in httpd 2.3.3 and later
SSLUseStapling On
SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(32768)
SSLStaplingResponderTimeout 5
SSLStaplingReturnResponderErrors off
# Enable this if your want HSTS (recommended)
Header add Strict-Transport-Security "max-age=15768000"
ServerAdmin _ADMINMAIL_
DocumentRoot /var/www/owncloud/
Options None
ErrorLog ${APACHE_LOG_DIR}/error.log
LogLevel warn
CustomLog ${APACHE_LOG_DIR}/access.log combined
SSLEngine on
SSLCertificateFile _SSLCERTFILE_
SSLCertificateKeyFile _SSLCERTKEY_
SSLOptions +StdEnvVars
SSLOptions +StdEnvVars
BrowserMatch "MSIE [2-6]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
EOF
sed -i "s|_ADMINMAIL_|${ADMINMAIL}|g" /etc/apache2/sites-available/default-ssl.conf
sed -i "s|_ROOTSSLURL_|${ROOTSSLURL}|g" /etc/apache2/sites-available/default-ssl.conf
sed -i "s|_SSLCERTFILE_|${SSLCERTFILE}|g" /etc/apache2/sites-available/default-ssl.conf
sed -i "s|_SSLCERTKEY_|${SSLCERTKEY}|g" /etc/apache2/sites-available/default-ssl.conf
a2enmod ssl
a2enmod autoindex
a2enmod headers
a2enmod rewrite
a2ensite default-ssl
Installer les certificats
service apache2 stop
service apache2 start
Créer une nouvelle base de données MySQL
vi /var/www/owncloud/config/config.php
'default_language' => 'fr',
'enable_avatars' => false,
'logtimezone' => 'Europe/Paris'
__RQ :__ cache apcu not working in debian jessie, waiting ownCloud team finds solution for easy user cache
cat << 'EOF' > /etc/cron.d/owncloud
# crontab -u www-data -e
*/15 * * * * www-data php -f /var/www/owncloud/cron.php > /dev/null 2>&1
EOF
chown root:root /etc/cron.d/owncloud
chmod 644 /etc/cron.d/owncloud
service cron stop
service cron start
Go to http://FQDN/
===== Configuration française : admin owncloud =====
- cocher "//Autoriser les utilisateurs à envoyer des notifications par courriel concernant les partages//"
- décocher "//Autoriser les utilisateurs de ce serveur à envoyer des partages vers d'autres serveurs//"
- décocher "//Autoriser les utilisateurs de ce serveur à recevoir des partages d'autres serveurs//"
- cron : choisir "//cron//"
- décocher "//Autoriser le repartage//"
Bugs/doc : https://forum.owncloud.org/viewtopic.php?f=31&t=26310
===== Client OwnCloud =====
Owncloud client version 2.0.0 with debian jessie backports
echo "deb http://http.debian.net/debian jessie-backports main" >> /etc/apt/sources.list
apt-get update
apt-get -t jessie-backports install "owncloud-client"