hoellen/docker-nextcloud
1
0
Fork 0
mirror of https://github.com/hoellen/docker-nextcloud.git synced 2025-07-04 17:16:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Compare commits

base: hoellen:version-25
Branches Tags
hoellen:master hoellen:version-30 hoellen:version-29 hoellen:version-28 hoellen:version-27 hoellen:version-26 hoellen:version-25 hoellen:version-24 hoellen:version-23 hoellen:version-22
..
compare: hoellen:0ee4012ae6adee9420c511fc9e0316b5f7dcb8ec
Branches Tags
hoellen:master hoellen:version-30 hoellen:version-29 hoellen:version-28 hoellen:version-27 hoellen:version-26 hoellen:version-25 hoellen:version-24 hoellen:version-23 hoellen:version-22

13 Commits
version-25 ... 0ee4012ae6

Author SHA1 Message Date
hoellen
0ee4012ae6 Update Snuffleupagus to 0.10.0 2023-09-21 16:17:49 +02:00
hoellen
18da631215 Drop call of libxml_set_external_entity_loader 
ref:
  - https://github.com/jvoisin/snuffleupagus/issues/463
  - https://github.com/hoellen/docker-nextcloud/issues/42
 2023-09-21 16:12:33 +02:00
Jan Wagner
e627d1fd4c chore: update Nextcloud to 27.1.1 2023-09-21 15:52:33 +02:00
hoellen
86012886af chore: update Nextcloud to 27.1.0 2023-09-15 22:22:15 +02:00
hoellen
de096e78a4 chore: update Nextcloud to 27.0.2 2023-08-10 12:34:01 +02:00
hoellen
2d3fd8f5c3 fix: disable snuffleupagus xxe protection 
Nextcloud now prevents loading external entities by using libxml_set_external_entity_loader.

ref:
https://github.com/nextcloud/server/pull/39490
https://github.com/hoellen/docker-nextcloud/issues/42
 2023-07-25 06:34:32 +02:00
hoellen
9070495ad0 chore: update Nextcloud to 27.0.1 2023-07-21 00:15:21 +03:00
hoellen
4ba3589149 chore: update Nextcloud to 27, PHP to 8.2 and Alpine to 3.18 2023-06-13 16:06:23 +02:00
hoellen
a7ba180598 Update Nextcloud to 26.0.2 2023-05-25 21:08:59 +02:00
hoellen
4ea95f826a chore: update Nextcloud to 26.0.1 2023-04-20 09:36:26 +02:00
hoellen
8451b3d94d chore: update nginx to new stable (1.24.0) 2023-04-12 10:42:30 +02:00
hoellen
9c24fd91b2 chore: update Alpine Linux to 3.17 2023-04-01 12:30:42 +02:00
hoellen
0bb5b1fa73 chore: update Nextcloud to 26.0.0 2023-03-21 21:30:47 +01:00
4 changed files with 15 additions and 9 deletions
Expand all files Collapse all files

3
.github/workflows/build.yml vendored
View File

@ -3,7 +3,7 @@ name: build
on:
workflow_dispatch:
push:
branches: [ version-25 ]
branches: [ master ]
schedule:
# Build the image regularly (each Friday)
- cron: '23 04 * * 5'
@ -53,6 +53,7 @@ jobs:
with:
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
tags: |
latest
${{ env.FULL_VERSION }}
${{ env.MAJOR_VERSION }}

15
Dockerfile
View File

@ -1,17 +1,17 @@
# -------------- Build-time variables --------------
ARG NEXTCLOUD_VERSION=25.0.13
ARG PHP_VERSION=8.1
ARG NGINX_VERSION=1.22
ARG NEXTCLOUD_VERSION=27.1.1
ARG PHP_VERSION=8.2
ARG NGINX_VERSION=1.24
ARG ALPINE_VERSION=3.17
ARG ALPINE_VERSION=3.18
ARG HARDENED_MALLOC_VERSION=11
ARG SNUFFLEUPAGUS_VERSION=0.8.3
ARG SNUFFLEUPAGUS_VERSION=0.10.0
ARG UID=1000
ARG GID=1000
# nextcloud-25.0.13.tar.bz2
ARG SHA256_SUM="387bac148a696244f1ec02698a082d408283a875b3de85eb9719dd4493eebe33"
# nextcloud-27.1.1.tar.bz2
ARG SHA256_SUM="3a91500566874675676fa3b5bfae2587a839cde41dfac5318043b162c1311fab"
# Nextcloud Security <security@nextcloud.com> (D75899B9A724937A)
ARG GPG_FINGERPRINT="2880 6A87 8AE4 23A2 8372 792E D758 99B9 A724 937A"
@ -64,6 +64,7 @@ RUN apk -U upgrade \
pcntl \
pdo_mysql \
pdo_pgsql \
sysvsem \
zip \
gmp \
&& pecl install smbclient \

2
rootfs/etc/nginx/conf.d/default.conf
View File

@ -21,7 +21,7 @@ server {
add_header X-Download-Options "noopen" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "none" always;
add_header X-Robots-Tag "noindex, nofollow" always;
add_header X-XSS-Protection "0" always;
location = /robots.txt {

4
rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules
View File

@ -47,6 +47,10 @@ sp.disable_function.function("ini_get").param("option").value("open_basedir").fi
sp.disable_function.function("ini_get").param("option").value("allow_url_fopen").filename("/nextcloud/3rdparty/guzzlehttp/guzzle/src/Utils.php").allow();
sp.disable_function.function("exec").param("command").value("apachectl -M | grep mpm").filename("/nextcloud/apps2/spreed/lib/Settings/Admin/AdminSettings.php").allow();
# Nextcloud inherently enables XXE-Protection since 27.0.1, therefore, drop setting a new external entity loader
sp.disable_function.function("libxml_set_external_entity_loader").filename("/nextcloud/lib/base.php").allow();
sp.disable_function.function("libxml_set_external_entity_loader").drop();
# Harden the `chmod` function (0777 (oct = 511, 0666 = 438)
sp.disable_function.function("chmod").param("permissions").value("438").drop();
sp.disable_function.function("chmod").param("permissions").value("511").drop();