{"id":1296,"date":"2022-10-13T17:48:23","date_gmt":"2022-10-13T15:48:23","guid":{"rendered":"https:\/\/apfelcast.com\/?p=1296"},"modified":"2022-10-13T17:48:23","modified_gmt":"2022-10-13T15:48:23","slug":"nextcloud-top-5-security-essential-so-sicherst-du-deinen-nextcloud-server-ab","status":"publish","type":"post","link":"https:\/\/it-ion.de\/index.php\/2022\/10\/13\/nextcloud-top-5-security-essential-so-sicherst-du-deinen-nextcloud-server-ab\/","title":{"rendered":"Nextcloud Top 5 Security Essential &#8211; So sicherst du deinen Nextcloud Server ab!"},"content":{"rendered":"\n<p> <div class=\"brlbs-cmpnt-container brlbs-cmpnt-content-blocker brlbs-cmpnt-with-individual-styles\" data-borlabs-cookie-content-blocker-id=\"default\" data-borlabs-cookie-content=\"PGlmcmFtZSB3aWR0aD0iNTYwIiBoZWlnaHQ9IjMxNSIgc3JjPSJodHRwczovL3d3dy55b3V0dWJlLmNvbS9lbWJlZC8wLWh4bHZSNmY5ZyIgdGl0bGU9IllvdVR1YmUgdmlkZW8gcGxheWVyIiBmcmFtZWJvcmRlcj0iMCIgYWxsb3c9ImFjY2VsZXJvbWV0ZXI7IGF1dG9wbGF5OyBjbGlwYm9hcmQtd3JpdGU7IGVuY3J5cHRlZC1tZWRpYTsgZ3lyb3Njb3BlOyBwaWN0dXJlLWluLXBpY3R1cmUiIGFsbG93ZnVsbHNjcmVlbj0iIj48L2lmcmFtZT4=\"><div class=\"brlbs-cmpnt-cb-preset-a\"> <p class=\"brlbs-cmpnt-cb-description\">Sie sehen gerade einen Platzhalterinhalt von <strong>Standard<\/strong>. Um auf den eigentlichen Inhalt zuzugreifen, klicken Sie auf die Schaltfl\u00e4che unten. Bitte beachten Sie, dass dabei Daten an Drittanbieter weitergegeben werden.<\/p> <div class=\"brlbs-cmpnt-cb-buttons\"> <a class=\"brlbs-cmpnt-cb-btn\" href=\"#\" data-borlabs-cookie-unblock role=\"button\">Inhalt entsperren<\/a> <a class=\"brlbs-cmpnt-cb-btn\" href=\"#\" data-borlabs-cookie-accept-service role=\"button\" style=\"display: none\">Erforderlichen Service akzeptieren und Inhalte entsperren<\/a> <\/div> <a class=\"brlbs-cmpnt-cb-provider-toggle\" href=\"#\" data-borlabs-cookie-show-provider-information role=\"button\">Mehr Informationen<\/a> <\/div><\/div><\/p>\n\n\n\n<p>In diesem Video zeige ich euch die Grundlagen der Absicherung eures Nextcloud Servers. Dazu geh\u00f6rt eine Zwei-Faktor-Authentifizierung, DDOS Schutz, die richtige Firewall Konfiguration usw.<\/p>\n\n\n\n<p>\u00bb Relevante Videos:<br>Automatische Updates einrichten: <a href=\"https:\/\/cc.apfelcast.com\/bk09l\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/cc.apfelcast.com\/bk09l<\/a><br>Sicherheits- und Einrichtungswarnungen beheben: <a href=\"https:\/\/cc.apfelcast.com\/z6kfl\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/cc.apfelcast.com\/z6kfl<\/a><br><br>\u00bb Nextcloud Docs zu Security: <a href=\"https:\/\/docs.nextcloud.com\/server\/latest\/admin_manual\/installation\/harden_server.html\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.nextcloud.com\/server\/latest\/admin_manual\/installation\/harden_server.html<\/a><\/p>\n\n\n\n<div id=\"93964-1\"><script src=\"\/\/ads.themoneytizer.com\/s\/gen.js?type=1\"><\/script><script src=\"\/\/ads.themoneytizer.com\/s\/requestform.js?siteId=93964&amp;formatId=1\"><\/script><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Im Video verwendete Befehle:<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"shell\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">#### Nextcloud Top 5 Security Essentials ####\n\n#### Fail2Ban ####\n\n## install fail2ban ##\napt install fail2ban\n\n## create fail2ban filter ##\nnano \/etc\/fail2ban\/filter.d\/nextcloud.conf\n\n[Definition]\n_groupsre = (?:(?:,?\\s*\"\\w+\":(?:\"[^\"]+\"|\\w+))*)\nfailregex = ^\\{%(_groupsre)s,?\\s*\"remoteAddr\":\"&lt;HOST>\"%(_groupsre)s,?\\s*\"message\":\"Login failed:\n            ^\\{%(_groupsre)s,?\\s*\"remoteAddr\":\"&lt;HOST>\"%(_groupsre)s,?\\s*\"message\":\"Trusted domain error.\ndatepattern = ,?\\s*\"time\"\\s*:\\s*\"%%Y-%%m-%%d[T ]%%H:%%M:%%S(%%z)?\"\n\n## create fail2ban jail ##\nnano \/etc\/fail2ban\/jail.d\/nextcloud.local\n\n[nextcloud]\nbackend = auto\nenabled = true\nport = 80,443\nprotocol = tcp\nfilter = nextcloud\nmaxretry = 5\nbantime = 86400\nfindtime = 43200\nlogpath = \/home\/data\/nextcloud.log\n\n## restart fail2ban ##\nservice fail2ban restart\n\n## check status ##\nfail2ban-client status nextcloud\n\n##unban ip ##\nfail2ban-client set nextcloud unbanip &lt;ipadress>\n\n\n\n#### UFW Firewall ####\n\napt install ufw\n\nufw default deny\nufw allow 22\nufw allow 80\nufw allow 443\nufw enable\n\n\n#### Auto Logout ####\n\nnano \/var\/www\/nextcloud\/config\/config.php\n\n'remember_login_cookie_lifetime' => 1296000,\n'session_lifetime' => 1800,\n'session_keepalive' => false,\n'auto_logout' => true,\n\n\n#### AntiVirus for Files ####\n\n## Pakete installieren ##\napt install clamav clamav-freshclam clamav-daemon -y\n\n## Stoppen Sie ClamAV und aktualisieren Sie die Virendatenbanken ##\n\nservice clamav-freshclam stop\nfreshclam\nservice clamav-freshclam start\n\n## Passen Sie die clamav Konfiguration an, um gr\u00f6\u00dfere Dateien(50MB) und Container-Dateien mit bis zu 25 Unterverzeichnissen scannen zu k\u00f6nnen ##\n\ncp \/etc\/clamav\/clamd.conf \/etc\/clamav\/clamd.conf.bak\nsed -i \"s\/MaxFileSize.*\/MaxFileSize 50M\/\" \/etc\/clamav\/clamd.conf\nsed -i \"s\/MaxDirectoryRecursion.*\/MaxDirectoryRecursion 25\/\" \/etc\/clamav\/clamd.conf\nsed -i \"s\/PCREMaxFileSize.*\/PCREMaxFileSize 50M\/\" \/etc\/clamav\/clamd.conf\nsed -i \"s\/StreamMaxLength.*\/StreamMaxLength 50M\/\" \/etc\/clamav\/clamd.conf\n\n## Im Anschluss daran werden die ClamAV relevanten Dienste neu gestartet ##\nservice clamav-freshclam restart &amp;&amp; service clamav-daemon restart<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Sie sehen gerade einen Platzhalterinhalt von Standard. Um auf den eigentlichen Inhalt zuzugreifen, klicken Sie&#8230;<\/p>\n","protected":false},"author":1,"featured_media":1298,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-1296","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-allgemein"],"taxonomy_info":{"category":[{"value":1,"label":"Allgemein"}]},"featured_image_src_large":["https:\/\/it-ion.de\/wp-content\/uploads\/2022\/10\/thumbnail_nc_security-1024x576.jpg",1024,576,true],"author_info":{"display_name":"Daniel Klozb\u00fccher","author_link":"https:\/\/it-ion.de\/index.php\/author\/wp-master\/"},"comment_info":0,"category_info":[{"term_id":1,"name":"Allgemein","slug":"allgemein","term_group":0,"term_taxonomy_id":1,"taxonomy":"category","description":"","parent":0,"count":89,"filter":"raw","cat_ID":1,"category_count":89,"category_description":"","cat_name":"Allgemein","category_nicename":"allgemein","category_parent":0}],"tag_info":false,"_links":{"self":[{"href":"https:\/\/it-ion.de\/index.php\/wp-json\/wp\/v2\/posts\/1296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/it-ion.de\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/it-ion.de\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/it-ion.de\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/it-ion.de\/index.php\/wp-json\/wp\/v2\/comments?post=1296"}],"version-history":[{"count":0,"href":"https:\/\/it-ion.de\/index.php\/wp-json\/wp\/v2\/posts\/1296\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/it-ion.de\/index.php\/wp-json\/wp\/v2\/media\/1298"}],"wp:attachment":[{"href":"https:\/\/it-ion.de\/index.php\/wp-json\/wp\/v2\/media?parent=1296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/it-ion.de\/index.php\/wp-json\/wp\/v2\/categories?post=1296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/it-ion.de\/index.php\/wp-json\/wp\/v2\/tags?post=1296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}