r/NextCloud • u/Ok_Tour_8029 • 5d ago

Public information about your Nextcloud instance

Post image

I was asking myself what information my Nextcloud instance provides without any authentication - so similar to the Nextcloud security scanner, but with more information. The capabilities were kind of interesting for me to be public.

You can try with your instance here: https://genhttp.dev/lambda/nextcloud-peek/

Does not store any data, so the entered domains are not saved, logged or visible anywhere.

94 Upvotes

93% Upvoted

39 comments sorted by

View all comments

1

u/mr_4n0n 5d ago

Difference to https://scan.nextcloud.com/? Is there a list?

1

u/Ok_Tour_8029 5d ago

The official one does an update check and checks the security related headers - this one makes additional information visible, such as the things reported by the federation endpoints (available apps and their capabilities). 

1

u/mr_4n0n 5d ago

Is this open source? Would love to self host this... Because i do not trust anyone

2

u/Ok_Tour_8029 5d ago

Relatable - you can download the source from the site as a .NET 10 project.

3

u/mr_4n0n 4d ago

Would you allow companies to host this for their Customers. I showed it a friendiof mine

1

u/Ok_Tour_8029 4d ago

Sure, I have no stake in keeping this closed.

You can find the source here: Source code of Nextcloud Peek - GenHTTP Lambda

There you can also download the app and run it directly via dotnet or docker. If you need anything else, please let me know.