Installing Nextcloud on Virtualmin and Extending It in a GDPR-Compliant Way: Correctly Setting Up Encryption, Backup, Collabora Online, and Group Folders for Associations

Installing Nextcloud on Virtualmin: Step-by-Step Guide

Nextcloud is a flexible open-source cloud solution that is perfect for associations to securely share files and collaborate on them. Virtualmin offers a user-friendly interface for managing web servers. In this guide, we show you how to install Nextcloud on Virtualmin and extend it in a GDPR-compliant way.

Requirements

• A server with Virtualmin installed (e.g., on a virtual server)
• A domain pointing to the server (register it with Dezhost Domains)
• Basic knowledge of Linux and web hosting

Step 1: Prepare Virtualmin and the Server

Make sure your server is up to date and all required packages are installed. Log in via SSH and run the following commands:

sudo apt update && sudo apt upgrade -y
sudo apt install php php-cli php-mysql php-curl php-gd php-mbstring php-xml php-zip php-intl php-bcmath php-gmp unzip -y

Create a new virtual server for your domain in Virtualmin. Make sure PHP 7.4 or higher and MySQL/MariaDB are available.

Step 2: Download and Install Nextcloud

Download the latest Nextcloud version and extract it into the web directory of your virtual server:

cd /home/youruser/public_html
wget https://download.nextcloud.com/server/releases/latest.zip
unzip latest.zip
mv nextcloud/* .
rm -rf nextcloud latest.zip

Set the correct permissions:

chown -R youruser:youruser /home/youruser/public_html
chmod -R 755 /home/youruser/public_html

Step 3: Create Database and Set Up Nextcloud

Create a new MySQL database and a user in Virtualmin. Then open your domain in the browser and follow the installation wizard. Enter the database details and choose an admin user.

GDPR-Compliant Extensions for Nextcloud

To operate Nextcloud in a GDPR-compliant way, encryption, regular backups, and the correct configuration of group folders are essential.

Encryption: Server-Side and End-to-End Encryption

Nextcloud offers server-side encryption to protect files on storage. Enable it in the settings under "Security." For particularly sensitive data, end-to-end encryption (E2EE) is recommended, which can be enabled in the desktop and mobile app.

• Server-side encryption: Protects data on the server, but the admin can decrypt it.
• End-to-end encryption: Only the user can decrypt it, ideal for confidential association documents.

Backup Strategy for Nextcloud

Regular backups are essential. Use Virtualmin's backup function or tools such as rsync and mysqldump. Schedule automatic backups in Virtualmin under "Backup and Restore." Store backups in a safe place, e.g., on an external server or encrypted cloud storage.

Collabora Online for Collaborative Editing

Collabora Online enables online editing of documents directly in Nextcloud. Install the Collabora container and enable the Nextcloud app "Collabora Online." In the settings, enter the URL of the Collabora server. This allows association members to work together on texts, spreadsheets, and presentations.

• Install Collabora via Docker: docker run -d -p 9980:9980 collabora/code
• Configure the reverse proxy in Virtualmin for the Collabora domain.
• Enable the app in Nextcloud and enter the Collabora URL.

Setting Up Group Folders for Associations

Group folders are ideal for sharing files with specific member groups. Create groups in Nextcloud (e.g., "Board," "Members") and assign folders to them. This way you retain control over permissions.

• Go to "Apps" and enable "Group Folders."
• Create a group and a folder, e.g., "Association Documents."
• Assign the group to the folder and set the permissions (read, write, share).

For even more control, you can also consider web hosting or reseller hosting to manage multiple Nextcloud instances.

Tips for GDPR Compliance

• Inform members about data processing and obtain consent.
• Use strong passwords and two-factor authentication.
• Regular updates of Nextcloud and Collabora close security gaps.
• Document all processes and record the technical and organizational measures (TOMs).

With these steps, you operate a secure, GDPR-compliant Nextcloud instance on Virtualmin that is specifically tailored to the needs of associations.