Document Nextcloud deployment and Infisical secrets

This commit is contained in:
2026-07-08 15:13:17 +03:30
parent a81aa80161
commit 3f94ced9ea
23 changed files with 895 additions and 119 deletions
+42 -2
View File
@@ -9,7 +9,7 @@ All public services are routed through Nginx Proxy Manager.
Verified proxy-host snapshot:
```text
2026-06-24
2026-06-24, with Nextcloud evidence added from 2026-07-08 server output
```
---
@@ -38,6 +38,7 @@ Used for:
| 5 | `team.silveressence.net` | `http://openproject:80` | enabled | enabled | disabled | enabled | none | enabled |
| 6 | `nuget.silveressence.net` | `http://baget:80` | disabled | disabled | disabled | disabled | none | enabled |
| 8 | `dbgate.silveressence.net` | `http://dbgate:3000` | disabled | disabled | disabled | enabled | none | enabled |
| 13 | `cloud.silveressence.net` | `http://nextcloud:80` | disabled | disabled | disabled | enabled | none | enabled |
All listed active inventory hosts have Block Exploits enabled.
@@ -72,9 +73,10 @@ Nginx Proxy Manager findings from the 2026-06-24 snapshot:
* `portainer.silveressence.net` has SSL Force, HTTP/2 and HSTS enabled.
* `team.silveressence.net` has SSL Force and HTTP/2 enabled.
* `git.silveressence.net`, `meet.silveressence.net`, `nuget.silveressence.net` and `dbgate.silveressence.net` do not have SSL Force enabled.
* `git.silveressence.net`, `meet.silveressence.net`, `nuget.silveressence.net`, `dbgate.silveressence.net` and `cloud.silveressence.net` do not have SSL Force enabled.
* No listed proxy host uses an Nginx Proxy Manager access list.
* DbGate is a high-sensitivity database administration interface and should be prioritized for SSL Force and an access restriction policy.
* Nextcloud stores private files and should be prioritized for SSL Force, HTTP/2 and HSTS.
* Plane.so has been removed from containers, Nginx Proxy Manager and server certificate storage.
---
@@ -317,6 +319,44 @@ Active
---
### Nextcloud
Domain:
```text
cloud.silveressence.net
```
Purpose:
* Private cloud storage
* File sharing
* Team document storage
Container:
```text
nextcloud
```
Routing:
```text
Nginx Proxy Manager -> nextcloud:80
```
Status:
```text
Active
```
Runtime note:
Nginx Proxy Manager proxy host 13 is enabled and forwards `cloud.silveressence.net` to `http://nextcloud:80`. The 2026-07-08 database query showed SSL Force disabled, HTTP/2 disabled, HSTS disabled, WebSocket enabled, Block Exploits enabled and no access list.
---
## DNS
DNS records should point to: