在OpenWRT上使用docker实现NextCloud

root@OpenWrt:~# df -h
Filesystem                Size      Used Available Use% Mounted on
/dev/sda5                 7.3G     33.8M      6.8G   0% /tmp/docker_data
/dev/sda6                 1.8G      5.6M      1.7G   0% /tmp/mysql_data
/dev/sda7               356.5G     68.0M    338.3G   0% /www/nextcloud
root@OpenWrt:~# opkg update && opkg install docker dockerd luci-app-dockerman luci-i18n-dockerman-zh-cn luci-lib-docker

root@OpenWrt:~# groupadd --system --gid 999 mysql
root@OpenWrt:~# useradd --system --uid 999 --gid 999 --home-dir /tmp/mysql_data --no-create-home mysql
root@OpenWrt:~# usermod -s /bin/false mysql
root@OpenWrt:~# chown -R mysql:mysql /tmp/mysql_data/
root@OpenWrt:~# chmod -R 750 /tmp/mysql_data/
root@OpenWrt:~# useradd --system --uid 33 --gid 33 --home-dir /tmp/mysql_data --no-create-home www-data
root@OpenWrt:~# usermod -s /bin/false www-data
root@OpenWrt:~# chown -R mysql:mysql /www/nextcloud/
root@OpenWrt:~# chmod -R 750 /www/nextcloud/

root@OpenWrt:~# cat /var/dockerd/daemon.json 
{ "data-root": "\/var\/docker_data\/", "log-level": "warn", "iptables": true }
root@OpenWrt:~# service dockerd restart
root@OpenWrt:~# docker pull php:8.2.9-apache && docker pull mysql:8.1.0 && docker pull redis:7.2.0
root@OpenWrt:~# docker images
REPOSITORY   TAG            IMAGE ID       CREATED       SIZE
php          8.2.9-apache   2d1146630e0c   9 days ago    503MB
redis        7.2.0          506734eb5e71   9 days ago    138MB
mysql        8.1.0          99afc808f15b   2 weeks ago   577MB

root@OpenWrt:~# docker network create --subnet=172.18.8.0/24 --gateway=172.18.8.1 nextcloud
root@OpenWrt:~# docker network ls
NETWORK ID     NAME                DRIVER    SCOPE
9e4b7f073333   bridge              bridge    local
6793e16f3437   host                host      local
6d0f11886770   nextcloud           bridge    local
b69da7f5d942   none                null      local

docker run \
--detach \
--volume /www/nextcloud/:/var/www/html/ \
--network nextcloud \
--ip 172.18.8.10 \
--publish 8080:80 \
--publish 8443:8443 \
--name apache \
apache:8.2.9-apache

root@OpenWrt:~# cat /www/nextcloud/index.php
<?php

phpinfo();

?>

docker run \
--detach \
--env MYSQL_RANDOM_ROOT_PASSWORD=yes \
--network nextcloud \
--ip 172.18.8.11 \
--publish 3306:3306 \
--volume /tmp/mysql_data/:/var/lib/mysql/ \
--name mysql \
mysql:8.1.0

bash-4.4# mysql -u root -p
Enter password: 
mysql> CREATE DATABASE IF NOT EXISTS nextcloud CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;
mysql> quit

root@9237ba7c0d75:/var/www/html# cat /etc/apache2/sites-available/nextcloud.conf   
<VirtualHost *:80>
  DocumentRoot /var/www/html/
  ServerName 172.18.8.10

  <Directory /var/www/html/>
    Require all granted
    AllowOverride All
    Options FollowSymLinks MultiViews

    <IfModule mod_dav.c>
      Dav off
    </IfModule>

  </Directory>
</VirtualHost>
root@9237ba7c0d75:/var/www/html# a2ensite nextcloud
Enabling site nextcloud.
To activate the new configuration, you need to run:
  service apache2 reload

root@OpenWrt:/www/nextcloud/config# cat config.php 
<?php
$CONFIG = array (
  'instanceid' => 'occqfc7uo423',
  'memcache.distributed' => '\OC\Memcache\Redis',
  'memcache.locking' => '\OC\Memcache\Redis',
  'memcache.local' => '\OC\Memcache\APCu',
  'redis' => array(
    'host' => '172.18.8.12',
    'port' => 6379,
  ),
);

root@9237ba7c0d75:/var/www/html# a2enmod ssl
root@9237ba7c0d75:/var/www/html# cat /etc/apache2/sites-available/nextcloud-ssl.conf | grep -v "#" 
<VirtualHost *:8443>
        ServerAdmin webmaster@localhost
        ServerName 172.18.8.10:8443
        DocumentRoot /var/www/html
        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
        SSLEngine on
        SSLCertificateFile      /etc/ssl/certs/ssl-cert-snakeoil.pem
        SSLCertificateKeyFile   /etc/ssl/private/ssl-cert-snakeoil.key
        <FilesMatch "\.(?:cgi|shtml|phtml|php)$">
                SSLOptions +StdEnvVars
        </FilesMatch>
        <Directory /usr/lib/cgi-bin>
                SSLOptions +StdEnvVars
        </Directory>
        <Directory /var/www/html/>
                Require all granted
                AllowOverride All
                Options FollowSymLinks MultiViews
                <IfModule mod_dav.c>
                        Dav off
                </IfModule>
        </Directory>
        Header always set Strict-Transport-Security "max-age=63072000"
</VirtualHost>
root@9237ba7c0d75:/var/www/html# a2ensite nextcloud-ssl.conf

root@9237ba7c0d75:/var/www/html# cat /etc/apache2/ports.conf 
# If you just change the port or add more ports here, you will likely also
# have to change the VirtualHost statement in
# /etc/apache2/sites-enabled/000-default.conf

Listen 80

<IfModule ssl_module>
        Listen 8443
</IfModule>

<IfModule mod_gnutls.c>
        Listen 8443
</IfModule>
root@9237ba7c0d75:/var/www/html# cat /etc/apache2/mods-enabled/ssl.conf | grep SSLCipherSuite
#SSLCipherSuite HIGH:!aNULL
SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM

root@9237ba7c0d75:/var/www/html# cat config/config.php 
<?php
$CONFIG = array (
  'trusted_domains' => 
  array (
    0 => '192.168.0.1:8080',
    1 => '你的域名.com:8443',
  ),