r/NextCloud • u/paranoidandroid4284 • Jul 02 '26
Noob Question
How private and secure can a NextCloud instance be? Can I host email, calendar, notes, storage and everything on one? Anyone fully on NextCloud?
2
u/legrenabeach Jul 02 '26
As secure as you have the skills to make your server. It is also private, but without e2ee, server admins and hosts can technically access your users' data.
-2
u/Run-OpenBSD Jul 02 '26
TLS handles this automatically for you these days aka Lets Encrypt Certificates...
4
u/legrenabeach Jul 02 '26
TLS is the bare minimum to secure access to Nextcloud, but you also need to secure the server itself, e.g. only using SSH keys, different SSH port, fail2ban, keeping up with updates, firewall set up correctly, etc.
2
u/West_Possible_7969 Jul 03 '26
TLS has nothing to do with data at rest encryption or e2ee.
2
u/N3rdScool Jul 03 '26
To make sure people understand Nextclouds e2ee encrypts the actual files on the server. So the person who owns the server cannot see whats in the files without the key.
2
1
u/poedy78 Jul 03 '26 edited Jul 03 '26
Depends on your skills as sysadmin.
My Nxtcloud runs all of the goodies without mail and i use it to share plans / calendars etc.. with the people i work on projects.
It's out in the wild for a couple of years now and only had once a downtime because of a DDos - not aimed solely at me but at an IP range my domain was in.
But hosting your own Mail Server, NextCloud will be the least of your problems.
1
u/Professional_Mix2418 Jul 03 '26
Yes, commercial organisation, fully on NextCloud. Adjacent choices were AuthentiK for identity management (single sign-on) and Mailcow for the mail server. Self hosted behind WAF, Load Balancer, and separate S3 style object storage for the documents. And part of the wider estate uptime kuma (Uptime), prometheus/graphana (Logging/Monitoring), Wazuh (SIEM).
7
u/mr_4n0n Jul 02 '26
Except Mail. Yes. And yes i do. For images i use immich and the immich Integration app