Document Nextcloud deployment and Infisical secrets
This commit is contained in:
+42
-2
@@ -9,7 +9,7 @@ All public services are routed through Nginx Proxy Manager.
|
||||
Verified proxy-host snapshot:
|
||||
|
||||
```text
|
||||
2026-06-24
|
||||
2026-06-24, with Nextcloud evidence added from 2026-07-08 server output
|
||||
```
|
||||
|
||||
---
|
||||
@@ -38,6 +38,7 @@ Used for:
|
||||
| 5 | `team.silveressence.net` | `http://openproject:80` | enabled | enabled | disabled | enabled | none | enabled |
|
||||
| 6 | `nuget.silveressence.net` | `http://baget:80` | disabled | disabled | disabled | disabled | none | enabled |
|
||||
| 8 | `dbgate.silveressence.net` | `http://dbgate:3000` | disabled | disabled | disabled | enabled | none | enabled |
|
||||
| 13 | `cloud.silveressence.net` | `http://nextcloud:80` | disabled | disabled | disabled | enabled | none | enabled |
|
||||
|
||||
All listed active inventory hosts have Block Exploits enabled.
|
||||
|
||||
@@ -72,9 +73,10 @@ Nginx Proxy Manager findings from the 2026-06-24 snapshot:
|
||||
|
||||
* `portainer.silveressence.net` has SSL Force, HTTP/2 and HSTS enabled.
|
||||
* `team.silveressence.net` has SSL Force and HTTP/2 enabled.
|
||||
* `git.silveressence.net`, `meet.silveressence.net`, `nuget.silveressence.net` and `dbgate.silveressence.net` do not have SSL Force enabled.
|
||||
* `git.silveressence.net`, `meet.silveressence.net`, `nuget.silveressence.net`, `dbgate.silveressence.net` and `cloud.silveressence.net` do not have SSL Force enabled.
|
||||
* No listed proxy host uses an Nginx Proxy Manager access list.
|
||||
* DbGate is a high-sensitivity database administration interface and should be prioritized for SSL Force and an access restriction policy.
|
||||
* Nextcloud stores private files and should be prioritized for SSL Force, HTTP/2 and HSTS.
|
||||
* Plane.so has been removed from containers, Nginx Proxy Manager and server certificate storage.
|
||||
|
||||
---
|
||||
@@ -317,6 +319,44 @@ Active
|
||||
|
||||
---
|
||||
|
||||
### Nextcloud
|
||||
|
||||
Domain:
|
||||
|
||||
```text
|
||||
cloud.silveressence.net
|
||||
```
|
||||
|
||||
Purpose:
|
||||
|
||||
* Private cloud storage
|
||||
* File sharing
|
||||
* Team document storage
|
||||
|
||||
Container:
|
||||
|
||||
```text
|
||||
nextcloud
|
||||
```
|
||||
|
||||
Routing:
|
||||
|
||||
```text
|
||||
Nginx Proxy Manager -> nextcloud:80
|
||||
```
|
||||
|
||||
Status:
|
||||
|
||||
```text
|
||||
Active
|
||||
```
|
||||
|
||||
Runtime note:
|
||||
|
||||
Nginx Proxy Manager proxy host 13 is enabled and forwards `cloud.silveressence.net` to `http://nextcloud:80`. The 2026-07-08 database query showed SSL Force disabled, HTTP/2 disabled, HSTS disabled, WebSocket enabled, Block Exploits enabled and no access list.
|
||||
|
||||
---
|
||||
|
||||
## DNS
|
||||
|
||||
DNS records should point to:
|
||||
|
||||
Reference in New Issue
Block a user