==== Nextcloud ====

=== Apache und php module installieren / aktualisieren ===

=== mysql / mariaDB installieren / konfigurieren ===

=== anpassung für Apache ===
/etc/apache2/sites-availeble/oc.bamasch.de.conf

<file bash>
<VirtualHost *:80>
    ServerName oc.bamasch.de
    Redirect / https://oc.bamasch.de/
</VirtualHost>

<IfModule mod_ssl.c>
	<VirtualHost _default_:443>
		ServerName oc.bamasch.de
		ServerAdmin webmaster@localhost
		DocumentRoot /var/www/oc.bamasch.de/owncloud

		<IfModule mod_headers.c>
			Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
		</IfModule>

                Redirect 301 /.well-known/carddav /remote.php/dav
                Redirect 301 /.well-known/caldav /remote.php/dav

		<IfModule mod_dav.c>
 			Dav off
		</IfModule>

		SetEnv HOME /var/www/oc.bamasch.de/owncloud
		SetEnv HTTP_HOME /var/www/oc.bamasch.de/owncloud

		ErrorLog ${APACHE_LOG_DIR}/oc.bamasch.de_ssl.error.log
		CustomLog ${APACHE_LOG_DIR}/oc.bamasch.de_ssl.access.log combined

		#   SSL Engine Switch:
		#   Enable/Disable SSL for this virtual host.
		SSLEngine on
		ServerAlias oc.bamasch.de
		Include /etc/letsencrypt/options-ssl-apache.conf

		SSLCertificateFile /etc/letsencrypt/live/www.bamasch.de/fullchain.pem
		SSLCertificateKeyFile /etc/letsencrypt/live/www.bamasch.de/privkey.pem

		<FilesMatch "\.(cgi|shtml|phtml|php)$">
				SSLOptions +StdEnvVars
		</FilesMatch>
		<Directory /usr/lib/cgi-bin>
				SSLOptions +StdEnvVars
		</Directory>

		#   "force-response-1.0" for this.
BrowserMatch "MSIE [2-6]" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response
-1.0
		# MSIE 7 and newer should be able to use keepalive
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown

	</VirtualHost>
</IfModule>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
</file>