Nextcloud

設定

php-fpm

/etc/php/8.1/fpm/php-fpm.conf

pid = /run/php/php8.1-fpm.pid

/etc/php/8.1/fpm/pool.d/www.conf

Listen = /run/php/php8.1-fpm.sock
Listen.owner = www-data
Listen.group = www-data

pm = static
pm.max_children = 8         #CPU

php

/etc/php/8.1/mods-available/apcu.ini

extension=apcu.so
apc.enable_cli=1
apc.shm_size=128M

/etc/php/8.1/mods-available/opcache.ini

opcache.enable=1
opcache.enable_cli=1
opcache.interned_strings_buffer=16
opcache.max_accelerated_files=10000
opcache.memory_consumption=128
opcache.save_comments=1
opcache.revalidate_freq=60
opcache.fast_shutdown=1
opcache.jit = 1205
opcache.jit_buffer_size = 128M

• opcache.jit について php-fpm が OPcache の JIT に原因があって Segmentation Fault を起こすケースの対策

Nextcloud

/etc/config/config.php

  'default_language' => 'ja',
  'default_locale' => 'ja_JP',
  'default_phone_region' => 'JP'

  'memcache.local' => '\\OC\\Memcache\\APCu',
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'redis' => array (
    'host' => '/run/redis/redis-server.sock',
    'port' => 0,
    'dbindex' => 0,
    'timeout' => 1.5,
  ),
  'memcache.locking' => '\\OC\\Memcache\\Redis',

occ コマンド

groupfolders

  groupfolders:create                    Create a new group folder
  groupfolders:delete                    Delete group folder
  groupfolders:expire                    Trigger expiry of versions and trashbin for files stored in group folders
  groupfolders:group                     Edit the groups that have access to a group folder
  groupfolders:list                      List the configured group folders
  groupfolders:permissions               Configure advanced permissions for a configured group folder
  groupfolders:quota                     Edit the quota of a configured group folder
  groupfolders:rename                    Rename group folder
  groupfolders:scan                      Scan a group folder for outside changes
  groupfolders:trashbin:cleanup          Empty the groupfolder trashbin

Trouble

ImageMagick で PS や PDF を扱えないわけは脆弱性対策でした

/etc/ImageMagick-6/policy.xml の以下の行をコメントアウトした

<policy domain="coder" rights="none" pattern="PDF" />