Serverside Setup
So to install nextcloud we're going to use docker-compose as follows (as the root user):
[ Wonderland ] [ /dev/pts/9 ] [/srv/nextcloud]
→ sudo -i
[ Wonderland ] [ /dev/pts/9 ] [/srv/nextcloud]
→ apt install docker.io docker-compose -y
[ Wonderland ] [ /dev/pts/9 ] [/srv/nextcloud]
→ vim docker-compose.yml
[ Wonderland ] [ /dev/pts/7 ] [/srv/nextcloud]
→ cat docker-compose.yml
networks:
tor-nxtcld:
driver: bridge
ipam:
config:
- subnet: 10.7.0.0/24
gateway: 10.7.0.1
services:
db:
image: mariadb:latest
restart: always
command: --transaction-isolation=READ-COMMITTED
networks:
tor-nxtcld:
ipv4_address: 10.7.0.2
volumes:
- db:/var/lib/mysql
environment:
- MYSQL_ROOT_PASSWORD=P@SSW0RD
- MYSQL_PASSWORD=P@SSW0RD
- MYSQL_DATABASE=nextcloud
- MYSQL_USER=nextcloud
redis:
image: redis:alpine
restart: always
app:
image: nextcloud:latest
restart: always
networks:
tor-nxtcld:
ipv4_address: 10.7.0.3
ports:
- 127.0.0.1:9639:80
depends_on:
- redis
- db
volumes:
- nextcloud:/var/www/html
environment:
- MYSQL_PASSWORD=P@SSW0RD
- MYSQL_DATABASE=nextcloud
- MYSQL_USER=nextcloud
- MYSQL_HOST=db
- NEXTCLOUD_TRUSTED_DOMAINS=nxtcloud.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion
- OVERWRITEHOSTPROTOCOL=http
- OVERWRITEHOST=nxtcloud.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion
- PROXY=tor-nxtcld:9050
tor-nxtcld:
image: osminogin/tor-simple
container_name: tor-nxtcld
volumes:
- ./tor-data:/var/lib/tor
- ./tor-data/torrc:/etc/tor
networks:
tor-nxtcld:
ipv4_address: 10.7.0.4
volumes:
nextcloud:
db:
Don't forget to replace the "P@SSW0RD" with a password of your own, and that docker-compose.yaml will expose the nextcloud service on local port 9639, so let's run docker-compose up -d to run the service:
As you can see in the docker-compose.yml file, there is a tor container, this is to make sure that the nextcloud connects to the internet through Tor (see the PROXY environment variable), to protect the serverside anonymity.
[ Wonderland ] [ /dev/pts/9 ] [/srv/nextcloud]
→ docker-compose up -d
Starting nextcloud_redis_1 ... done
Starting nextcloud_db_1 ... done
Starting nextcloud_app_1 ... done
Then we also setup the torrc config to make sure that our nextcloud instance also goes through tor for every external connections it has to make:
[ Wonderland ] [ /dev/pts/10 ] [/srv/nextcloud]
→ cd tor-data
[ Wonderland ] [ /dev/pts/10 ] [/srv/nextcloud/tor-data]
→ ls
torrc
[ Wonderland ] [ /dev/pts/10 ] [/srv/nextcloud/tor-data]
→ vim torrc/torrc
[ Wonderland ] [ /dev/pts/10 ] [/srv/nextcloud/tor-data]
→ cat torrc/torrc
SOCKSPort 0.0.0.0:9050
Then we setup the nginx config to be able to access the nextcloud service accordingly. (obviously, replace the onion domain with your own onion domain):
[ Wonderland ] [ /dev/pts/9 ] [/srv/nextcloud]
→ vim /etc/nginx/sites-available/nxtcloud.conf
[ Wonderland ] [ /dev/pts/10 ] [/srv/nextcloud/tor-data]
→ cat /etc/nginx/sites-available/nxtcloud.conf
upstream nxtcloudbackend {
server 127.0.0.1:9639;
}
server {
######## TOR WEBSITE ########
listen 4443;
listen [::]:4443;
server_name nxtcloud.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion;
location / {
proxy_pass http://nxtcloudbackend;
proxy_headers_hash_max_size 512;
proxy_headers_hash_bucket_size 64;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#proxy_http_version 1.1;
#proxy_set_header Upgrade $http_upgrade;
#proxy_set_header Connection "Upgrade";
client_max_body_size 20G;
}
}
[ Wonderland ] [ /dev/pts/9 ] [/srv/nextcloud]
→ ln -s /etc/nginx/sites-available/nxtcloud.conf /etc/nginx/sites-enabled
[ Wonderland ] [ /dev/pts/9 ] [/srv/nextcloud]
→ nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[ Wonderland ] [ /dev/pts/9 ] [/srv/nextcloud]
→ nginx -s reload
2025/03/26 09:46:30 [notice] 2097639#2097639: signal process started
Make sure that you follow this tutorial to know how to have your own custom onion domain name:
[ Wonderland ] [ /dev/pts/3 ] [~]
→ cat /etc/tor/torrc
HiddenServiceDir /var/lib/tor/onions/nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/
HiddenServicePort 80 127.0.0.1:4443
SocksPort 127.0.0.1:9050
[ Wonderland ] [ /dev/pts/3 ] [~]
→ systemctl restart tor@default
then you can proceed with accessing your nextcloud instance:
Then here we can edit the nextcloud appearance aswell:
So when you want to login, it'll look like that:
Once logged in, you can drag and drop files from your computer directly into the nextcloud web interface:
And that's it! You now have a nextcloud instance working via .onion to easily save your files remotely.
Sidenote: Help us improve this tutorial by letting us know if there's anything missing or incorrect on this git issue directly!
