New Page
📌 Purpose
This document outlines the production `config.php` for the **Nextcloud AIO** instance running at `cloud.mslspartners.com`. It includes caching, database, logging, and security settings necessary for a secure and performant deployment. ---
```php "overwritehost": "cloud.mslspartners.com", "overwriteprotocol": "https", "trusted_domains": [ "localhost", "cloud.mslspartners.com" ], "overwrite.cli.url": "https://cloud.mslspartners.com/", "instanceid": "***REMOVED***", "installed": true ``` - Enforces HTTPS access - Restricts access to trusted domains - Ensures consistent URL access via CLI ---
🧠 Cache Settings
```php "memcache.local": "\OC\Memcache\APCu", "memcache.distributed": "\OC\Memcache\Redis", "memcache.locking": "\OC\Memcache\Redis", "redis": { "host": "***REMOVED***", "password": "***REMOVED***", "port": 6379 } ``` - APCu is used for local caching - Redis is used for distributed caching and file locking ---
📦 Apps Paths
```php "apps_paths": [ { "path": "/var/www/html/apps", "url": "/apps", "writable": false }, { "path": "/var/www/html/custom_apps", "url": "/custom_apps", "writable": true } ] ``` - Separates official and custom apps - Only custom apps are writable ---
📝 Logging Settings
```php "loglevel": 2, "log_type": "file", "logfile": "/var/www/html/data/nextcloud.log", "log_rotate_size": 10485760, "log.condition": { "apps": ["admin_audit"] } ``` - Logs warnings and above - Auto-rotates logs at 10MB - Enables audit logs for admin activities ---
🛠 Maintenance & Updates
```php "maintenance": false, "upgrade.disable-web": true, "updatedirectory": "/nc-updater", "maintenance_window_start": 100 ``` - Web upgrades are disabled (CLI upgrade enforced) - Sets custom update directory and window ---
✉️ Email Settings
```php "mail_smtpmode": "smtp" ``` - Uses SMTP to send emails ---
🧹 Data Retention Policies
```php "trashbin_retention_obligation": "auto, 30", "versions_retention_obligation": "auto, 30", "activity_expire_days": 30 ``` - Deletes files and version history older than 30 days automatically ---
🖼 Preview Settings
```php "enable_previews": true, "preview_max_x": 2048, "preview_max_y": 2048, "jpeg_quality": 60, "enabledPreviewProviders": { "0": "OC\Preview\Imaginary", "1": "OC\Preview\Image", "2": "OC\Preview\MarkDown", "3": "OC\Preview\MP3", "4": "OC\Preview\TXT", "5": "OC\Preview\OpenDocument", "6": "OC\Preview\Movie", "7": "OC\Preview\Krita", "23": "OC\Preview\ImaginaryPDF" } ``` - Enables Imaginary preview backend and limits preview sizes - Reduces JPEG quality to save space ---
🔒 Security Settings
```php "auth.bruteforce.protection.enabled": true, "ratelimit.protection.enabled": true, "files_external_allow_create_new_local": false ``` - Enables brute-force and rate-limiting protections - Disables creation of unsafe local external mounts ---
⚡ One-Click Deployment Info
```php "one-click-instance": true, "one-click-instance.user-limit": 100, "one-click-instance.link": "https://nextcloud.com/all-in-one/" ``` - Flags this as an AIO instance - Soft-limits users for performance reasons ---
⚙️ Additional Settings
```php "allow_local_remote_servers": true, "htaccess.RewriteBase": "/", "DOMAIN": "cloud.mslspartners.com", "dbtype": "pgsql", "dbtableprefix": "oc_", "dbpersistent": false ``` - Enables proxy forwarding - Uses PostgreSQL as the database engine ---
🧾 Verification
> ✅ Last reviewed: **May 2025** > 📍 Environment: `cloud.mslspartners.com` > 🔐 Sensitive fields omitted for security ---