Nextcloud is your own cloud drive. Your files live on your server and sync to your computers and phones, and you can share a folder or a single file with a link instead of handing it to someone else's cloud.
On this page
- At a glance
- What it's good for
- Signing in
- The addresses it answers on
- Adding people
- Getting your files onto it
- Files you copy in on the server
- Extras
- Good to know
- What the install asks
- Addresses and ports
- Settings
- In its config file
- Tools
- Works with
- Privacy and security
- What leaves this server
- What LibrePortal turns off
- Sources
- Under the hood
Good to know before you install
Nextcloud runs as five containers and wants about 1 GB of free memory once in use, and it only answers on this server's own addresses and names, so add any other name with its Add Trusted Domain tool. Talk calls work at home and over the LibrePortal VPN as they are; for calls from outside, add Talk's call server (about 100 MB more, a little more during calls), which needs port 3478 TCP and UDP to reach this server, forwarded on your router if the server is at home.
At a glance#
- What it is
- Self-hosted Cloud Storage Storage
- Where it opens
- Web Interface
On its own port at
http://your-server:port, ornextcloud.your-domainonce you have a domain - Updates
- Automatic A backup is taken first, and it rolls back if the update fails
- Backups
- Included Part of the daily backup when that's switched on
- Copies
- As many as you like Run several copies, each with its own data
- Needs
- memory
What it's good for#
Nextcloud does the job Dropbox, Google Drive or OneDrive do, on a machine you own. You keep a folder on your laptop that stays in step with the server, your phone uploads its photos to it, and you can send someone a link to a file instead of an attachment. Each person in the house gets their own account and their own space, and you can share folders between you.
It's also a platform. Its own app store adds calendars, contacts, notes, tasks and a lot more, so for many people it becomes the one place their stuff lives.
Nextcloud or ownCloud?
LibrePortal also has ownCloud. The two share a history and look alike, but Nextcloud is the one to pick for a new setup: it's more actively developed, has far more add-on apps, and on LibrePortal it has a Tools tab for managing people and fixing things, which ownCloud doesn't have.
Signing in#
Open it with the Web Interface button on its page. There's no setup wizard to click through and no page where the first visitor becomes the owner: Nextcloud's own installer runs as it first starts, and creates the account before it serves a single page. That account is called admin, and its password is in the Login Details shown when the install finishes. Press Welcome on the app's page to see it again.
The first start takes a few minutes while Nextcloud builds its database. Afterwards LibrePortal switches on its memory cache and file locking (Redis), which makes syncing lots of small files noticeably quicker.
If the install couldn't finish
If Nextcloud's first install fails (its database is slow to answer on a small server, say), Nextcloud falls back to its own setup page, where whoever opens it would choose the admin. So LibrePortal keeps Nextcloud reachable from the server only, and off its local name, until Nextcloud says it's installed, its setup page is locked and the admin login works. That takes up to five minutes. If it doesn't get there, the install says so and leaves Nextcloud reachable from the server only. The simplest fix is to uninstall it and install it again.
The addresses it answers on#
Nextcloud only answers to addresses on its trusted domains list. Open it by any other name and you get "Access through untrusted domain" instead of the sign-in page. LibrePortal keeps that list up to date for you: every time Nextcloud starts, it adds whatever your server is reachable on that day. That's your server's address on your home network (like 192.168.1.50), its public address, the app's address on your domain, its local name such as nextcloud.lan.internal, and the server's address on the LibrePortal VPN. It only ever adds; nothing is taken off.
So if you set up a domain or turn on local names after installing Nextcloud, restart it and the new name works. For any other name, run Add Trusted Domain on the Tools tab with just the host part, like files.example.com (no http://, no port), and reload the page. It adds to the list without replacing anything already on it.
Nextcloud works on plain http:// on your server's address and port, and over HTTPS through Traefik, side by side.
Adding people#
Make accounts from the Tools tab rather than handing out the admin login.
- Open Nextcloud's page in LibrePortal and go to Tools.
- Run Create User Account with a username. Add a display name if you like. Leave the password empty and one is made for you; tick Make admin only for someone who should run the server with you.
- The task output shows the username and password. Send them to the person and ask them to change the password once they're in.
The others do what they say: Reset User Password (leave it empty to generate one), Set Admin Status, List Users and Delete User Account, which removes the person's files too and can't be undone. If you reset the admin password here, LibrePortal updates the one it shows you as well.
Getting your files onto it#
In the browser you can drag files and folders straight onto the Files page. For anything more than a handful, use the apps.
On your computer, install the Nextcloud desktop app (Windows, macOS and Linux) from nextcloud.com. Give it your Nextcloud's address, exactly as you open it in the browser, and it opens a browser window where you sign in and approve it. It then keeps a folder on your computer in step with the server, in both directions.
On your phone, the Nextcloud app for Android and iPhone signs in the same way and can upload new photos automatically.
Neither app keeps your real password. When you approve one, Nextcloud gives it an app password of its own, and you can see and revoke each device in Nextcloud's personal security settings. That's also where to make an app password by hand for anything that asks for a username and password directly, like a calendar app.
Pick the address you'll keep
The apps remember the address you set them up with. If you're going to add a domain, it's less fiddly to do it before you set up everyone's phones and laptops. Your Nextcloud is Public to start with, so the apps can reach it wherever your server is reachable. If you'd rather keep it at home, make it private and use the LibrePortal VPN when you're out.
Files you copy in on the server#
Nextcloud keeps its own index of what's in each person's folder. If you copy files into its data folder directly on the server (from an old backup, say), Nextcloud won't see them until you run Rescan Files on the Tools tab. Give it a username to scan one person, or leave it empty to scan everyone, which can take a while on a big collection.
Extras#
Nextcloud has its own app store, and LibrePortal offers a short list of its apps as extras that you can tick while installing. See Choosing extras for how the step works.
- Talk: chat, voice and video calls with the people on your Nextcloud. It has a sub-option, Calls from outside your home, and group calls, covered below.
- Calendar: calendars you can sync to your phone and share.
- Contacts: an address book you can sync to your phone.
- Tasks: to-do lists that sync with your calendar apps.
- Notes: simple notes, kept as files in your Nextcloud.
- Deck: boards and cards for planning, on your own or together.
- Music: play the music in your Nextcloud files in the browser.
- External storage: show other folders and drives inside Nextcloud.
- Office: open and edit documents, spreadsheets and slides with OnlyOffice.
Each one comes from the Nextcloud app store, so your server needs internet while it installs. If one can't be added, the install says which and why, and Nextcloud is installed and working anyway. To change them later, run Add or Remove Extras on the Tools tab: it shows the list with what's on already ticked. Removing an extra switches the app off inside Nextcloud but deletes nothing, so boards, notes and calendars are back as they were if you tick it again. This is also how a Nextcloud installed before extras existed gets them.
Phones sync calendars, contacts and tasks over the standard CalDAV and CardDAV (on Android, the free DAVxโต app does it). LibrePortal's web server already answers the addresses those apps look for, so you can usually give them just your Nextcloud's address. Anything not on the list is still in Nextcloud's own app store, under Apps in the admin's menu.
Office needs OnlyOffice installed first
Office is greyed out until OnlyOffice is installed. The easiest way is to let Nextcloud bring it: when you install Nextcloud, the Confirm step offers OnlyOffice under Also install, and ticking it there ticks the Office extra, and the other way round. However it arrives, LibrePortal installs Nextcloud's ONLYOFFICE connector and points it at OnlyOffice, secret and all, and does it again by itself if OnlyOffice is reinstalled or moves. The editor opens from OnlyOffice's own address, so your browser has to be able to reach OnlyOffice too. Nextcloud's Works with list shows whether the two are connected.
Talk: calls from outside your home
Talk's calls work out of the box on your home network and over the LibrePortal VPN, between two people. For calls with people outside your network, and for calls with more than a few people at once, turn on Talk's sub-option Calls from outside your home, and group calls. It adds Nextcloud's own call server (TURN and a high-performance signalling server) beside Nextcloud and wires Talk to it.
That server needs port 3478, TCP and UDP, reachable from outside. On a server with its own public address LibrePortal opens it in the firewall for you; on a server at home, forward port 3478 to it on your router, the same as you would for the VPN. It uses about 100 MB of memory, a little more during a call. Turning the sub-option off puts Talk back to direct calls and stops the extra server.
Good to know#
- Updates are automatic within a version. LibrePortal follows one major version of Nextcloud (34 at the moment) and takes its fixes as they come. A new major version shows as Newer version on the app's Updates tab and waits for you to press Upgrade. Nextcloud refuses to skip a version, so LibrePortal steps through them one at a time and checks each one has really finished, maintenance mode and all, before the next. See Updates.
- Maintenance mode locks everyone out and shows a notice. Toggle Maintenance Mode is there for repairs; Nextcloud switches it on and off by itself while it upgrades, so you rarely need it. If Nextcloud is stuck saying it's in maintenance mode, System Status tells you, and the same tool turns it off.
- Background jobs (scanning files, making previews, emptying old versions and the trash, notifications) run every five minutes on their own, in a separate cron container, and the heaviest daily ones at night. A Nextcloud installed with 0.4.6 or earlier has no cron container and runs them only when people use the web page, until you reinstall it.
- It's a bigger app. Nextcloud is five containers (Nextcloud itself, its web server, its database, its cache and the background jobs) and wants about 1 GB of free memory once it's in use.
- Big files are fine. The web server in front of Nextcloud accepts uploads up to 10 GB in one go, and the apps upload in chunks anyway.
- Backups include everything: the database and the whole Nextcloud folder, which holds everyone's files. That can be big, so it's worth reading Storage if Nextcloud is going to hold a lot, and moving it to a bigger disk before it fills the one it's on.
- Several copies. You can run more than one Nextcloud, each with its own users and files, for example one for the family and one for a club.
- Something wrong? Tail Logs on the Tools tab shows Nextcloud's own recent log lines.
What the install asks#
When you install Nextcloud, LibrePortal asks for a little more than usual before it starts:
- Extras. From the Nextcloud app store, so this needs internet while it installs. Change them later under Tools. Turning a shared folder off only takes it out of Nextcloud; the files stay on this server.
- Who sees them. Only for the shared folders you tick. Someone who has not signed in to Nextcloud yet sees them after their first sign-in. Change it later under Tools, Who sees the shared folders.
Addresses and ports#
Nextcloud has 4 ports. LibrePortal picks a free port number for each when you install, so yours will differ from anyone else's. The Config tab's Network section shows them, and the app's Open button uses the right one. "Anyone" means it's reachable from wherever your server is reachable; you can make it private later.
| What it is | Who can reach it | With a domain |
|---|---|---|
| Web Interface | Anyone | nextcloud.your-domain |
| Metrics Exporter (sidecar, docker-network only) TCP | Off until you turn it on | Port only |
| Talk calls (TURN) TCP | Off until you turn it on | Port only |
| Talk calls (TURN) UDP | Off until you turn it on | Port only |
Settings#
These are Nextcloud's own settings on its Config tab. The settings every app shares, like backups, updates and where its data lives, are explained in App pages and settings.
| Setting | What it does | Starts as |
|---|---|---|
| Nextcloud Admin Username | Username seeded into Nextcloud on first boot | Empty |
| Database Name Advanced | MariaDB schema Nextcloud uses (internal to the docker network) | nextcloud |
| Database User Advanced | MariaDB account Nextcloud connects with (internal to the docker network) | nextcloud |
In its config file#
A few more aren't on the Config tab yet. They live in the app's config file, described here so you know they exist. How to change them.
| Setting | What it does | Starts as |
|---|---|---|
NameCFG_NEXTCLOUD_DISPLAY_NAME |
What this app is called on your dashboards. Leave empty to use its usual name | Empty |
Show on the LibrePortal DashboardCFG_NEXTCLOUD_SHOW_ON_DASHBOARD |
Whether this app gets a shortcut on the front page of the LibrePortal WebUI, separate from any Dashy dashboard Choices: true, false |
true |
Sign in automaticallyCFG_NEXTCLOUD_GATE_AUTOLOGIN |
Behind the Authelia gate, open your existing Nextcloud account straight from your Authelia login (needs the gate; the Authelia username must be a Nextcloud username). The direct web port then answers on this server only, and OnlyOffice cannot be used with it. Turn off to get Nextcloud's own sign-in page again Choices: true, false |
false |
ExtrasCFG_NEXTCLOUD_EXTRAS |
Optional Nextcloud apps that are on; change them from the Tools tab | Empty |
Music Folder NameCFG_NEXTCLOUD_MUSIC_NAME |
What the shared music folder is called in Nextcloud; used when it is first made | SharedMusic |
Video Folder NameCFG_NEXTCLOUD_VIDEO_NAME |
What the shared video folder is called in Nextcloud; used when it is first made | SharedVideo |
Photos Folder NameCFG_NEXTCLOUD_PHOTOS_NAME |
What the shared photos folder is called in Nextcloud; used when it is first made | SharedPhotos |
Who Sees MusicCFG_NEXTCLOUD_MUSIC_AUDIENCE |
admin, all, or Nextcloud usernames separated by commas | admin |
Who Sees VideoCFG_NEXTCLOUD_VIDEO_AUDIENCE |
admin, all, or Nextcloud usernames separated by commas | admin |
Who Sees PhotosCFG_NEXTCLOUD_PHOTOS_AUDIENCE |
admin, all, or Nextcloud usernames separated by commas | admin |
Who Sees New Shared FoldersCFG_NEXTCLOUD_SHARED_AUDIENCE |
admin or all; the install screen's pick for the shared folders it makes | admin |
Update checkCFG_NEXTCLOUD_UPDATE_CHECK |
Whether Nextcloud may ask nextcloud.com if a newer version exists Choices: true, false |
false |
Public lookup serverCFG_NEXTCLOUD_LOOKUP_SERVER |
Whether people's public details may be published to lookup.nextcloud.com Choices: true, false |
false |
Help linksCFG_NEXTCLOUD_KNOWLEDGE_BASE |
Whether Nextcloud may fetch its help and knowledge-base content from the internet Choices: true, false |
false |
Connectivity checkCFG_NEXTCLOUD_CONNECTIVITY_CHECK |
Whether Nextcloud may test its internet connection by visiting nextcloud.com, eff.org and edri.org Choices: true, false |
false |
Usage surveyCFG_NEXTCLOUD_SURVEY |
Whether the survey app may report how this server is used to Nextcloud Choices: true, false |
false |
Welcome wizard and weatherCFG_NEXTCLOUD_EXTERNAL_LOOKUPS |
Whether the first-run wizard and the weather widget may fetch content from the internet Choices: true, false |
false |
LibreSTUNCFG_NEXTCLOUD_LIBRESTUN |
Whether calls use this server's own STUN and TURN server (LibreSTUN) when it is installed; off keeps how this app made calls before Choices: auto, off |
auto |
Detailed logsCFG_NEXTCLOUD_VERBOSE_LOGS |
Whether Nextcloud writes its normal, chattier logs, including who connected, instead of only warnings and errors. Choices: true, false |
false |
Debug logging for 24 hoursCFG_NEXTCLOUD_DEBUG_LOGS |
Turn on to see everything Nextcloud is doing while you look for a problem; it turns itself off after 24 hours. Choices: true, false |
false |
Tools#
Nextcloud's Tools tab has 14 buttons for jobs you'd otherwise need a terminal for. Each one runs as a task, so you can watch it on the Tasks page and read what it did. More about Tools.
A code to scan with LibreSync, LibrePortal's Android app, which puts the shared music and videos where every app on the phone can play them, and can copy camera photos up here.
Talk, Calendar, Office and more, from the Nextcloud app store, and the shared Music, Video and Photos folders. Removing one keeps what was made with it; a shared folder's files stay on this server.
Set a new password for an existing user. Leave blank to generate one.
Add a new user. Tick "Make admin" for full rights.
List every user.
Permanently remove a user and all their files.
Promote or demote a user.
Lock users out so you can run upgrades or repairs safely.
Makes Nextcloud the home of your shared folders, when another app has them now. The files move here and every app that uses them follows. Nothing is deleted: on another disk the old copy is kept until you remove it.
Choose who sees a connected SharedMusic, SharedVideo or SharedPhotos folder in Nextcloud: just the admin, everyone, or people you pick (from Authelia and from Nextcloud's own accounts, or by typing a name). The admin always keeps it. Private libraries are shared with Nextcloud's own folder sharing.
Pick up files added or removed outside Nextcloud. Leave blank to scan everyone.
Let Nextcloud answer at a new hostname.
Show version and current state.
Show the last few log lines.
Works with#
These are the other apps Nextcloud knows how to work with. Once it's installed, its page shows the same list with whether each one is connected. How this works.
- Email: Sends its own email (password resets, notifications, invitations) through your mail server, from an account of its own. LibrePortal sets this up by itself when both are installed.
- Office (OnlyOffice): Open and edit documents in Nextcloud with OnlyOffice.
- Talk call server: Calls from outside your home, and group calls, through this server. There's nothing to switch on; LibrePortal shows whether it can work and lets you check.
- Phone notifications (ntfy): Talk's messages and calls reach Android phones through ntfy, without Google.
- LibreSTUN: Calls connect from anywhere through your own STUN and TURN server, with nothing going to Google. LibrePortal sets this up by itself when both are installed.
- Funkwhale: Plays the SharedMusic folder you fill from Nextcloud or ownCloud. Nothing is copied.
- Grafana: Shows dashboards for the apps that have one. works with every app
- Home Assistant: Shows how your Nextcloud is doing.
- Immich: Reads the SharedPhotos folder you fill from Nextcloud or ownCloud. Nothing is copied.
- Jellyfin: Reads the SharedVideo folder you fill from Nextcloud or ownCloud. Nothing is copied.
- Navidrome: Plays the SharedMusic folder you fill from Nextcloud or ownCloud. Nothing is copied.
- Prometheus: Collects metrics from the apps that can export them. works with every app
- Syncthing: Sees the shared folders under Shared, so you can keep any of them in step with your computers.
- Uptime Kuma: Watches your apps and shows when one goes down. works with every app
Privacy and security#
Worth knowing Nextcloud is your own file storage and calendar. LibrePortal turns off the checks that tell Nextcloud's servers about your install; the app store and anything you add still go online.
What leaves this server#
- The app store is reachable (apps.nextcloud.com) when you add apps
- Federated shares talk to the servers you connect
- Talk's default STUN server, unless you use LibrePortal's own call server
What LibrePortal turns off#
- Detailed logs and per-request access logging (switchable in Config)
- Update check with updates.nextcloud.com (switchable in Config)
- Public lookup server for sharing addresses (switchable in Config)
- Connectivity checks and help-page lookups (switchable in Config)
Licence: AGPL-3.0. Audited: 21 October 2026. See the privacy of every app and the Promise.
Sources#
Under the hood#
- It runs these images:
nextcloud:34.0.5-fpm-alpine@sha256:a71718394b5269b532f00f9fc7eb930c90f04355ba998240eccaa3aafad86497,mariadb:11.8.9@sha256:c4124d1afa875e47f2892edf26b482fa54f796e2f342d3717a04ca091a22a9bd,redis:8.10.2-alpine@sha256:9f8d2d789b9a1d1e3f283f979aa9cbf393373806472e1ccd460e2f9c869b833b,nginx:alpine@sha256:a3554c0d0b48177b1413c26e01f695334428020d9df01243fbae3e11cfd17417,ghcr.io/nextcloud-releases/aio-talk:20260929_105435@sha256:831a08f9772d188e65aee2fb59ef3785d3567a1fe2fb65f0e6fd2c17a16ffc87. - It can sit behind Authelia's sign-in once Authelia is installed.
- Its own project and documentation: github.com/nextcloud/server
Ports, settings, tools and connections on this page are read from LibrePortal v0.10.97's app catalogue each time the guide is built.