It is currently Tue Dec 18, 2018 3:19 am
All times are UTC + 8 hours

Configuring NAS / Owncloud 8.2.2. to use HTTPS

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing right on the web. Installation has minimal server requirements, does not need special permissions and is quick. ownCloud is extendable via a simple but powerful API for applications and plugins.

Moderator: leecool

Configuring NAS / Owncloud 8.2.2. to use HTTPS

Postby mdof2 » Tue Feb 02, 2016 5:04 am

Can someone kindly point me to a reference on configuring Owncloud 8.2.2 for HTTPS access *only*.
I'm having a hard time finding steps on how to do it from the NAS and or configuration settings within Owncloud.
This used to be a simple tick mark in Enterprise, but I've switched to the non-enterprise version recently, and would like this setting enabled as it was prior.

Much thanks!
mdof2
 
Posts: 76
Joined: Mon Nov 18, 2013 6:59 pm

Re: Configuring NAS / Owncloud 8.2.2. to use HTTPS

Postby mdof2 » Wed Feb 03, 2016 6:25 am

Nobody uses Owncloud over HTTPS?
mdof2
 
Posts: 76
Joined: Mon Nov 18, 2013 6:59 pm

Re: Configuring NAS / Owncloud 8.2.2. to use HTTPS

Postby sksbir » Wed Feb 03, 2016 11:21 pm

Hello
Yes I do, but Owncloud 8.0.4 upgraded to 8.1.3 at present time. But it should not be very different.
This is how I have proceed :
- started webserver
- disabled http , enabled https ( of course this is my own choice )
- created a virtualhost : /web/owncloud with https + specific port number.
- mapped only this specific port number to give access from outside my LAN.
- updated /web/owncloud/config/config.php following owncloud installation instructions ( you have to update "trusted domains" )
- installed self signed certificates which worked with my target domain URL
sksbir
 
Posts: 314
Joined: Tue Aug 25, 2015 9:23 pm

Re: Configuring NAS / Owncloud 8.2.2. to use HTTPS

Postby mdof2 » Wed Feb 03, 2016 11:36 pm

Thank you very much sksbir.
I'll dig around that path you followed and see what I can do.
I'll need to do something slightly different as there are other services that rely on http, so I can't turn off http altogether.
I did find that it can be does via the host file on the NAS through SSH/puTTy but my preferred method was via the app config or via the asustor admin GUI.

Thanks again for sharing your experience.
mdof2
 
Posts: 76
Joined: Mon Nov 18, 2013 6:59 pm

Re: Configuring NAS / Owncloud 8.2.2. to use HTTPS

Postby sksbir » Thu Feb 04, 2016 4:26 pm

you are welcome :)
Then I think that best way is to create an other virtual hosts mapped to another sub-folder ( eg /web/mywebserver ) and using port 80, give an arbitrary port other than 80 to the main web server ( or perhaps disable it ? I did not test if virtualhosts still work if main protocol is disabled in control panel ) that is NOT accessible from outside your LAN.
You have to move your content what is stored in /web to /web/mywebserver ( /web/owncloud excluded of course ! ) .

After that, you will be sure that /web/owncloud is not accessible in an other way than threw it's own associated virtualhost.
Last edited by sksbir on Thu Feb 04, 2016 9:39 pm, edited 1 time in total.
sksbir
 
Posts: 314
Joined: Tue Aug 25, 2015 9:23 pm

Re: Configuring NAS / Owncloud 8.2.2. to use HTTPS

Postby mdof2 » Thu Feb 04, 2016 9:39 pm

sksbir wrote:Then I think that best way is to create an other virtual hosts mapped to another sub-folder ( eg /web/mywebserver ) and using port 80, give an arbitrary port other than 80 to the main web server ( or perhaps disable it ? I did not test if virtualhosts still work if main protocol is disabled in control panel ) that is NOT accessible from outside your LAN.
You have to move your content what is stored in /web to /web/mywebserver ( /web/owncloud excluded of course ! ) .

After that, you will be sure that /web/owncloud is not accessible in an other way than threw it's own associated virtualhost.


That's a giant band aid of trouble looking to fix a very simple problem.
I'll go back to doing it though an .htaccess file.
mdof2
 
Posts: 76
Joined: Mon Nov 18, 2013 6:59 pm

Re: Configuring NAS / Owncloud 8.2.2. to use HTTPS

Postby sksbir » Thu Feb 04, 2016 9:43 pm

Of course. with .htaccess.... :)
but you wrote finding steps on how to do it from the NAS and or configuration settings within Owncloud, so this is a good way for people who don't really know how to use ssh vi and so one...
sksbir
 
Posts: 314
Joined: Tue Aug 25, 2015 9:23 pm

Re: Configuring NAS / Owncloud 8.2.2. to use HTTPS

Postby mdof2 » Thu Feb 04, 2016 9:54 pm

htaccess doesn't require ssh or vi.
It's a simple notepad file in a folder, readily accessible, to anyone.

Configuring the Apache hosts file in the NAS based on the instructions from Owncloud is the alternative which requires SSH/VI, etc. Which I assure you, your average Asustor NAS owner isn't going to do. Which is even more surprising that people run cloud based services off their NAS lacking security. htaccess doesn't correctly fix the problem, but it gets me closer than being wide open to hackers.
mdof2
 
Posts: 76
Joined: Mon Nov 18, 2013 6:59 pm

Return to ownCloud

  • You cannot post new topics in this forum
    You cannot reply to topics in this forum
    You cannot edit your posts in this forum
    You cannot delete your posts in this forum
    You cannot post attachments in this forum
  • Who is online

    Users browsing this forum: No registered users and 3 guests