宝塔面板下nextcloud完美优化配置

柔光的暖阳◎ 2023-03-03 12:26 28阅读 0赞

# [宝塔面板下nextcloud完美优化配置][nextcloud] #

## 一、性能优化 ##

Nextcloud由于各种原因，默认安装后，任何页面加载时间都过于缓慢。之前的文章有介绍到使用PHP的APCu模块以提升缓存性能，这里再介绍使用Memcached提高Nextcloud的性能。

Nextcloud支持多个不同类型的缓存后端，所以可以同时启用本地缓存（APCu）和分布式缓存（Memcached、Redis），官方推荐的组合是APCu+Redis

> 分布式缓存选择Memcached、Redis其中一种启用即可，无需两者都启用

宝塔面板很方便的可以安装php的Memcached和Redis模块（注意是memcache**d**，非memcache），这里我以APCu+Memcached为例

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2kxMjM0NA_size_16_color_FFFFFF_t_70][]

安装完毕后，打开/www/wwwroot/你的nextcloud目录/config/config.php，在其尾部添加以下代码

第1行为指定本地缓存为APCu，第2、3行为指定分布式缓存为Memcached

'memcache.local' => '\OC\Memcache\APCu',
    'memcache.distributed' => '\OC\Memcache\Memcached',
    'memcached_servers' => array(
        array('localhost', 11211),
    )

如图，注意分号，保存即可

![20200731141347790.png][]

Redis则需要稍微修改一下配置

'memcache.local' => '\OC\Memcache\APCu',
    'memcache.distributed' => '\OC\Memcache\Redis',
    'redis' => array(
         'host' => 'localhost',
         'port' => 6379,
    )

## 二、Nginx配置 ##

这一步最为蛋疼，官方给出的Nginx配置示例，有些是可以参考的，有些挪到宝塔上来则会有各种奇奇怪怪的问题，所以需要针对宝塔修改nextcloud下Nginx的配置。

经过几天的折腾，这部分终于也解决的差不多了。分享一下我的Nginx配置，为方便理解和阅读，我已在配置文件中加入一些注释，可以根据情况修改一下即可。

server
    {
        #基础配置，这些可以照搬宝塔的配置
        listen 80;
        listen 443 ssl http2;
        server_name file.bugxia.com;
        index index.php index.html index.htm default.php default.htm default.html;
        root /www/wwwroot/file.bugxia.com;
        client_max_body_size 10G; 
        fastcgi_buffers 64 4K;
        gzip on;
        gzip_vary on;
        gzip_comp_level 4;
        gzip_min_length 256;
        gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
        gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
        
        #nextcloud包含了403和404的错误页面
        error_page 403 /core/templates/403.php;
        error_page 404 /core/templates/404.php;
        
        #防止一些HTTP响应头引起的安全隐患
        add_header Strict-Transport-Security 'max-age=15552000';
        add_header X-Content-Type-Options 'nosniff';
        add_header X-Robots-Tag 'none';
        add_header X-Frame-Options 'SAMEORIGIN';
        add_header X-Download-Options 'noopen';
        add_header X-Permitted-Cross-Domain-Policies 'none';
        add_header X-XSS-Protection '1;mode=block';
        add_header Referrer-Policy "no-referrer";
    
        #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
        #error_page 404/404.html;
        ssl_certificate    /www/server/panel/vhost/cert/file.bugxia.com/fullchain.pem;
        ssl_certificate_key    /www/server/panel/vhost/cert/file.bugxia.com/privkey.pem;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 10m;
        error_page 497  https://$host$request_uri;
        #SSL-END
    
        #PHP-INFO-START  PHP引用配置，可以注释或修改
        #include enable-php-74.conf;
        #PHP-INFO-END
        
        #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
        include /www/server/panel/vhost/rewrite/file.bugxia.com.conf;
        #REWRITE-END
        
        location = /.well-known/carddav {
          return 301 $scheme://$host:$server_port/remote.php/dav;
        }
        location = /.well-known/caldav {
          return 301 $scheme://$host:$server_port/remote.php/dav;
        }
    
        location / {
            rewrite ^ /index.php;
        }
        
        #Let's Encrypt 证书续期验证目录
        location ~ \.well-known{
            allow all;
        }
        
        #nextcloud一些关键目录的权限设置
        location ~ ^\/(?:build|tests|config|lib|3rdparty|templates|data)\/ {
            deny all;
        }
        location ~ ^\/(?:\.|autotest|occ|issue|indie|db_|console) {
            deny all;
        }
        
        location ~ [^/]\.php(/|$) {
            fastcgi_split_path_info ^(.+?\.php)(\/.*|)$;
            set $path_info $fastcgi_path_info;
            try_files $fastcgi_script_name =404;
            include fastcgi_params;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            fastcgi_param PATH_INFO $path_info;
            fastcgi_param HTTPS on;
            fastcgi_param modHeadersAvailable true;
            #宝塔默认是include调用PHP相关配置，这里稍稍修改了一下，注意php版本 #加入了front_controller_active这项参数以隐藏页面URL中的index.php
            fastcgi_param front_controller_active true;
            fastcgi_pass unix:/tmp/php-cgi-74.sock;
            fastcgi_intercept_errors on;
            fastcgi_request_buffering off;
            include fastcgi.conf;
            include pathinfo.conf;
        }
        
        location ~ ^\/(?:updater|oc[ms]-provider)(?:$|\/) {
            try_files $uri/ =404;
            index index.php;
        }
    
        location ~ \.(?:css|js|woff2?|svg|gif|map)$ {
            try_files $uri /index.php$request_uri;
            add_header Cache-Control "public, max-age=15778463";
            add_header Referrer-Policy "no-referrer" always;
            add_header X-Content-Type-Options "nosniff" always;
            add_header X-Download-Options "noopen" always;
            add_header X-Frame-Options "SAMEORIGIN" always;
            add_header X-Permitted-Cross-Domain-Policies "none" always;
            add_header X-Robots-Tag "none" always;
            add_header X-XSS-Protection "1; mode=block" always;
            access_log off;
        }
    
        location ~ \.(?:png|html|ttf|ico|jpg|jpeg|bcmap)$ {
            try_files $uri /index.php$request_uri;
            access_log off;
        }
    
        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
            error_log off;
            access_log /dev/null;
        }
        
        location ~ .*\.(js|css)?$
        {
            expires      12h;
            error_log off;
            access_log /dev/null; 
        }
    }

参考：

[https://docs.nextcloud.com/server/13/admin\_manual/configuration\_server/caching\_configuration.html][https_docs.nextcloud.com_server_13_admin_manual_configuration_server_caching_configuration.html]

[https://serverfault.com/questions/845696/nginx-rewrite-nextcloud-index-php-in-url][https_serverfault.com_questions_845696_nginx-rewrite-nextcloud-index-php-in-url]

[nextcloud]: https://bugxia.com/197.html
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2kxMjM0NA_size_16_color_FFFFFF_t_70]: /images/20230208/56b4e710ac4746e9ab836713e5d4907f.png
[20200731141347790.png]: /images/20230208/dade6b35994546cabd7928234ee764d4.png
[https_docs.nextcloud.com_server_13_admin_manual_configuration_server_caching_configuration.html]: https://docs.nextcloud.com/server/13/admin_manual/configuration_server/caching_configuration.html
[https_serverfault.com_questions_845696_nginx-rewrite-nextcloud-index-php-in-url]: https://serverfault.com/questions/845696/nginx-rewrite-nextcloud-index-php-in-url