Enter the following commands in the command line of the jail: To do this we will use FreeBSD’s ports system. The certbot client is needed to obtain an SSL certificate. If have adjusted some commands (in the jail we do not need to use sudo) and skipped the part “Setting Up a Firewall and Allowing HTTPS Access” because we do not need to do this in the jail. The following lines are more or less a copy of the real good tutorial from describing How To Secure Nginx with Let’s Encrypt on FreeBSD. Replace the _ by the server name as displayed in the following screenshot: To do this enter the following command to switch into the config folder of nginx:

We need to set the server name that certbot can verify it.

To do this, login to the backend of your TrueNAs server select the NextCloud jail and enter the command line: Step 1 – Add the server name to the nginx config If you are unsure check the documentation of your Modem/Router/Firewall for NAT and Port Forwarding.Īfter we have prepared the requirements we will start securing our NextCloud instance with Let’s Encrypt. NAT and/or Port Forwarding for 80 and 443 on your Firewall and/or Router to the NextCloud IP-address: Configure your firewall for NAT or Port Forwarding that your TrueNAS server is reachable from outside using port 80 and 443.īecause there is a huge variety of devices I cannot not go into detail.I you have a dynamic IP-Address, you can use Dynamic DNS providers like NoIP to register a domain name. A domain name which can be resolved from the Internet: Select oder register a domain name and make a DNS record pointing to the public IP-Address of your internet connection.To do this we need the following requirements: In part two we will secure our NextCloud instance using https and make it reachable from the Internet. In part one of this tutorial we installed TrueNAS and created a NextCloud jail which makes the NAS content available using a web browser or the NextCloud app locally.

Collabora online nextcloud nginx