1. Open Ubuntu SSH port

To open the SSH port, you need to do two things. First, you need to open port 22 to Ubuntu iptables, and second, you need to forward the port of virtualbox. If you installed Ubuntu using an external IP, you can just do the first step. If the host PC is connected to the router, you must connect port 22 to the host PC through DMZ settings and port forwarding to be able to access it from outside.

Original Korean article: Setting up and connecting Ubuntu SSH ports

1) Basic environment configuration

The content starting from now on assumes the following environment.

• Ubuntu is installed as virtual
• The host PC is assigned an IP from the internal router.
• Virtual IP: 10.0.2.15

2) Allow Iptables SSH port

SSH port uses 22. Open IPtables to use TCP port 22.

• -A : Add to chain
• -p tcp : protocol tcp
• -m tcp: tcp match, extended match
• –dport: Port number
• — j : Jump to target
• ACCEPT: Allow

sudo iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT

Prints rules to see if the chain is registered in iptables. Save the added rules and reload.

sudo iptables -S
sudo netfilter-persistent save
sudo netfilter-persistent reload

Let's check the IP of ubuntu. When you check the IP using the ip addr command, the following output appears and it is confirmed that Ubuntu's IP is 10.0.2.15.

ip addr

2. SSH port forwarding in VirtualBox

Opening Ubuntu's SSH port allows Ubuntu to connect, but connection is not yet possible from the host computer. To connect to Ubuntu using MobaXterm on the host computer, you need to forward the port in VirtualBox.

In VirtualBox, you can enable port foreclosure in the settings without shutting down the virtual machine. Click Network in Virtual PC Settings.

Expand Network Advanced and click the Port Forwarding button.

Click the plus icon at the top right to add a port forwarding rule. Enter the name [SSH], protocol [TCP], host IP (you can leave it blank because you are connecting as a local host) [ ], host port [22], guest IP (ubuntu IP can be checked with the ip addr command) [10.0.2.15], and guest port [22].

3. Access Ubuntu terminal using MobaXterm

Run MobaXterm. Since there are no registered sessions yet, click Session at the top left to register a new session.

To connect to Ubuntu using SSH, click SSH in the upper left corner.

Remnote Host refers to the IP of the host PC, not the ubuntu IP. The Host IP can be checked by running the terminal on the host PC using the cmd command and using the ipconfig /all command. Since we are connecting using localhost IP here, we will enter 127.0.0.1. Click the OK button to close the window.

You can see that the 127.0.0.1 session has been added to the user session section on the left side of MobaXterm. If you double-click the session and the login terminal appears, the port is normally open.

Good article to read together

• Install Ubuntu OpenSSH and install MobaXterm
• VirtualBox Virtual Box virtual machine download and installation
• Download Ubuntu and set up Ubuntu (virtualbox)
• Install Ubuntu 22.04.1 (VirtualBox)
• firewall settings

Related Reading

• Related Thinknote article
• Related Thinknote article
• Related Thinknote article
• Related Thinknote article
• Related Thinknote article

FAQ

What is this article about?

This article is an English translation and global-reader adaptation of the Korean post “Setting up and connecting Ubuntu SSH ports.” It preserves the original article’s main explanation, examples, and practical context.

Why is it translated into English?

The English version helps global readers access Thinknote articles through English search keywords while keeping the Korean source available as the original reference.

Where can I read the original Korean version?

You can read the original Korean article here: https://www.thinknote.co.kr/ubuntu-ssh-port-connection/

1. Understanding and features of PHP

1) Understanding PHP

The purpose of installing PHP 8 is to use WordPress in conjunction with the Nginx web server. In the future, we will also cover how to use PHP to manipulate some data and insert PHP code, but rather, we will explain it for the purpose of operating WordPress developed with PHP.

Original Korean article: Install PHP 8 (ubuntu)

PHP stands for Hypertext Preprocessor and is designed to implement dynamic web pages. You can create the desired web page by processing code written in PHP like an HTML file in the PHP engine. PHP is moving to version 8.x, and after 7.0, PHP code and HTML are written separately as separate files and are increasingly executed through php-fpm (PHP FastCGI Process Manager) rather than a web server.

Server-side open source software is often implemented in PHP. Representative programs based on PHP include WordPress, MediaWiki, and NextCloud. PHP has strengths in text and HTML processing, so it can apply a variety of things such as URL parsing, form processing, and regular expressions, and supports various databases.

Various programming languages ​​such as Java and Python are widely used, but continuous development is underway based on the influence of open source.

2) PHP features

PHP has four characteristics: simplicity, efficiency, security, flexibility, and familiarity.

• PHP can perform system functions i.e. create, open, read, write and close files on the system.
• PHP can collect data from forms, i.e. files, save data to files, send data via email, and return data to the user.
• Add, delete and modify elements in the database via PHP.
• Access cookie variables and set cookies.
• PHP allows you to restrict users from accessing some pages on your website.
• You can encrypt your data.

3) Utilization of PHP

Tasks that would have required multiple Includes to be accessed in Java or C language are built-in functions, so they can be easily implemented with a small amount of code. Current PHP has evolved from a procedural form to a state where ‘object-oriented (class)’ programs can be written.

• PHP can generate dynamic page content.
• PHP can create, open, read, write, delete and close files on the server.
• PHP can collect form data.
• PHP can send and receive cookies.
• PHP can add, delete and modify data in the database.
• You can control user access using PHP.
• PHP can encrypt data

2. Install PHP 8

1) Preparation for PHP 8

Update and upgrade Ubuntu packages.

sudo apt update
sudo apt upgrade

2) Check and install PHP 8 package

You can check items related to PHP with the apt list command. However, because there are so many PHP-related packages, I am hesitant about what to install. In particular, since PHP versions vary, a specific version may be required for the development environment of existing programs.

The core of the PHP installation is php-fpm. Depending on the PHP version, it exists for each version such as php7.x-fpm, php8.x-fpm, etc. We will cover how to install a specific version in another article.

Check the core packages of your PHP 8 installation with apt list *fpm. Here, php-fpm is version 8.1 and php-fpm is version 8.1.2. The latest version may be good, but it is also a good idea to avoid the most recent version because compatibility problems may occur.

sudo apt list *fpm

Here we install php.

sudo apt install php8.1-fpm

3) Check PHP 8 status

To check that the installation is complete and operating properly, run the sudo systemctl status php8.1-fpm command. If you previously installed a specific version, you can check it by writing the version in php.

sudo systemctl status php8.1-fpm

The service is running normally. Looking at the output, the service operates as php8.1-fpm.service and the conf file is /etc/php/8.1/fpm/php-fpm.conf.

4) Additional installation of php 8 package for WordPress

Some packages may not be needed right now. However, since it doesn't really matter if you install it in advance, install all the basic packages.

sudo apt install php8.1-common php8.1-mysql php8.1-xml php8.1-xmlrpc php8.1-curl php8.1-gd php8.1-imagick php8.1-cli php8.1-dev php8.1-imap php8.1-mbstring php8.1-opcache php8.1-redis php8.1-soap php8.1-zip

3. Connect Nginx and PHP 8

Installing the PHP package does not mean that the PHP file will be applied to the web server. Some files need to be modified so that nginx can serve PHP.

1 file exists and 3 files need to be modified.

1. The /etc/nginx/nginx.conf file exists.
2. Check and add fastcig_param in /etc/nginx/fastcgi_params
3. Add and modify php script in /etc/nginx/sites-available/default setting
4. default_type in /etc/nginx/nginx.conf

Fourth, if you do not fix it, there will be a problem where the php file will not run and be downloaded.

1) Check /etc/nginx/nginx.conf

If you followed the previous installation and steps, the nginx.conf file exists. If you don't have it, just copy the following content and create a file. If you copy the contents below to create a file, you can skip step 4.

Create a file.

sudo nano /etc/nginx/nginx.conf

Paste the following code:

user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
        worker_connections 768;
        # multi_accept on;
}

http {
        ##
        # Basic Settings
        ##
        sendfile on;
        tcp_nopush on;
        types_hash_max_size 2048;
        # server_tokens off;
        # server_names_hash_bucket_size 64;
        # server_name_in_redirect off;
        include /etc/nginx/mime.types;
        #default_type application/octet-stream;
        default_type text/html;
        ##
        # SSL Settings
        ##
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
        ssl_prefer_server_ciphers on;

        ##
        # Logging Settings
        ##
        access_log /var/log/nginx/access.log;
        error_log /var/log/nginx/error.log;

        ##
        # Gzip Settings
        ##
        gzip on;
        # gzip_vary on;
        # gzip_proxied any;
        # gzip_comp_level 6;
        # gzip_buffers 16 8k;
        # gzip_http_version 1.1;
        # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

        ##
        # Virtual Host Configs
        ##
        include /etc/nginx/conf.d/*.conf;
        include /etc/nginx/sites-enabled/*;
}

#mail {
#       # See sample authentication script at:
#       # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
#
#       # auth_http localhost/auth.php;
#       # pop3_capabilities "TOP" "USER";
#       # imap_capabilities "IMAP4rev1" "UIDPLUS";
#
#       server {
#               listen     localhost:110;
#               protocol   pop3;
#               proxy      on;
#       }
#
#       server {
#               listen     localhost:143;
#               protocol   imap;
#               proxy      on;
#       }
#}

2) Check and add fastcig_param in /etc/nginx/fastcgi_params

Open /etc/nginx/fastcgi_param with an editor and add the following if it does not already exist:

sudo nano /etc/nginx/fastcgi_params

Add the following code to the first line:

fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

3) Add and modify php script in /etc/nginx/sites-available/default setting.

Run the default file with an editor and modify the location part as follows. Here, we modify it based on version 8.1. Simply find and change the following part of the existing file:

# pass PHP scripts to FastCGI server

location ~ \.php$ {
       include snippets/fastcgi-php.conf;

       # With php-fpm (or other unix sockets):
       fastcgi_pass unix:/run/php/php8.1-fpm.sock;
}

Restart both Nginx and PHP.

sudo systemctl restart nginx
sudo systemctl restart php8.1-fpm

4. Run PHP 8 and check

Create a file to check PHP information. The file is created in the web root.

sudo nano /var/www/html/info.php

Copy and paste the following content according to the PHP code rules.

<?php
phpinfo();
?>

Check the php information on the website with localhost/info.php or address/info.php.

Please note that in order to install WordPress, you must modify the php.ini file. Executing the php file and modifying the php.ini file will be covered in the WordPress installation article.

Good article to read together

• Setting up Nginx + Php8
• Free HTTPS setup (Let’s Encrypt, Cloudflare)
• Install memory caching APCu, Redis, Memcached
• Install Nginx web server (Centos 8)
• Install Nginx web server (ubuntu)

Related Reading

• Related Thinknote article
• Related Thinknote article
• Related Thinknote article
• Related Thinknote article
• Related Thinknote article

FAQ

What is this article about?

This article is an English translation and global-reader adaptation of the Korean post “Install PHP 8 (ubuntu).” It preserves the original article’s main explanation, examples, and practical context.

Why is it translated into English?

The English version helps global readers access Thinknote articles through English search keywords while keeping the Korean source available as the original reference.

Where can I read the original Korean version?

You can read the original Korean article here: https://www.thinknote.co.kr/php8-install-ubuntu-wordpress/

1. Connect Nginx and PHP 8

Installing the nginx php8 package does not mean that the php file will be applied to the web server. Some files need to be modified so that nginx can serve php8. If your settings are incorrect, php8 will not work properly with nginx. In particular, there is a problem where nothing appears when the php file is downloaded or when phpinfo or php code is run.

Original Korean article: Setting up Nginx + Php8

The part we are checking now will help PHP operate properly on the web server through nginx and PHP8 settings.

1 file exists and 3 files need to be modified.

1. The /etc/nginx/nginx.conf file exists.
2. Check and add fastcig_param in /etc/nginx/fastcgi_params
3. Add and modify php script in /etc/nginx/sites-available/default setting
4. default_type in /etc/nginx/nginx.conf

Fourth, if you do not fix it, there will be a problem where the php file will not run and be downloaded.

1) Check /etc/nginx/nginx.conf

If you followed the previous installation and steps, the nginx.conf file exists. If you don't have it, just copy the following content and create a file. If you copy the contents below to create a file, you can skip step 4.

The user set below may differ depending on the PHP version. user must match the user, group, listen.owner, and listen.group information in sudo nano /etc/php/8.1/fpm/pool.d/www.conf.

Create a file.

sudo nano /etc/nginx/nginx.conf

Paste the following code:

user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
        worker_connections 768;
        # multi_accept on;
}

http {
        ##
        # Basic Settings
        ##
        sendfile on;
        tcp_nopush on;
        types_hash_max_size 2048;
        # server_tokens off;
        # server_names_hash_bucket_size 64;
        # server_name_in_redirect off;
        include /etc/nginx/mime.types;
        #default_type application/octet-stream;
        default_type text/html;
        ##
        # SSL Settings
        ##
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
        ssl_prefer_server_ciphers on;

        ##
        # Logging Settings
        ##
        access_log /var/log/nginx/access.log;
        error_log /var/log/nginx/error.log;

        ##
        # Gzip Settings
        ##
        gzip on;
        # gzip_vary on;
        # gzip_proxied any;
        # gzip_comp_level 6;
        # gzip_buffers 16 8k;
        # gzip_http_version 1.1;
        # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

        ##
        # Virtual Host Configs
        ##
        include /etc/nginx/conf.d/*.conf;
        include /etc/nginx/sites-enabled/*;
}

#mail {
#       # See sample authentication script at:
#       # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
#
#       # auth_http localhost/auth.php;
#       # pop3_capabilities "TOP" "USER";
#       # imap_capabilities "IMAP4rev1" "UIDPLUS";
#
#       server {
#               listen     localhost:110;
#               protocol   pop3;
#               proxy      on;
#       }
#
#       server {
#               listen     localhost:143;
#               protocol   imap;
#               proxy      on;
#       }
#}

2) Check and add fastcig_param in /etc/nginx/fastcgi_params

Open /etc/nginx/fastcgi_param with an editor and add the following if it does not already exist:

sudo nano /etc/nginx/fastcgi_params

Add the following code to the first line:

fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

3) Add and modify php script in /etc/nginx/sites-available/default setting.

Run the default file with an editor and modify the location part as follows. Here, we modify it based on version 8.1. Simply find and change the following part of the existing file:

# pass PHP scripts to FastCGI server

location ~ \.php$ {
       include snippets/fastcgi-php.conf;

       # With php-fpm (or other unix sockets):
       fastcgi_pass unix:/run/php/php8.1-fpm.sock;
}

Restart both Nginx and PHP.

sudo systemctl restart nginx
sudo systemctl restart php8.1-fpm

4. Run PHP 8 and check

Create a file to check PHP information. The file is created in the web root.

sudo nano /var/www/html/info.php

Copy and paste the following content according to the PHP code rules.

<?php
phpinfo();
?>

Check the php information on the website with localhost/info.php or address/info.php.

This article was written by selecting only the problem-solving part of the PHP8 settings after installing nginx, and is duplicated with the previous article. If you want to know more about installing nginx, click the following link:

Install Nginx web server (ubuntu) – Thinknote

If you want to install php8 with Ubuntu's nginx installed, click the following link. PHP installation is a preparatory step for installing WordPress.

Install PHP 8 (ubuntu) – Thinknote

Good article to read together

• Install PHP 8 (ubuntu)
• Install memory caching APCu, Redis, Memcached
• Install Nginx web server (ubuntu)
• Free HTTPS setup (Let’s Encrypt, Cloudflare)
• Install Nginx web server (Centos 8)

Related Reading

• Related Thinknote article
• Related Thinknote article
• Related Thinknote article
• Related Thinknote article
• Related Thinknote article

FAQ

What is this article about?

This article is an English translation and global-reader adaptation of the Korean post “Setting up Nginx + Php8.” It preserves the original article’s main explanation, examples, and practical context.

Why is it translated into English?

The English version helps global readers access Thinknote articles through English search keywords while keeping the Korean source available as the original reference.

Where can I read the original Korean version?

You can read the original Korean article here: https://www.thinknote.co.kr/nginx-php8-configuration/

1. Advance preparation

The installation process below is carried out in an Ubuntu 22 environment. If you need to prepare in advance, please refer to the steps below:

Original Korean article: Nextcloud installation and settings

1. Install Ubuntu 22.04.1 (VirtualBox)
2. ubuntu update and upgrade
3. Install and enable Ubuntu firewall iptables
4. Ubuntu firewall iptables setup and management
5. Install Ubuntu OpenSSH and install MobaXterm
6. Setting up and connecting Ubuntu SSH ports
7. Install Nginx web server (ubuntu)
8. Install PHP 8 (ubuntu)
9. Setting up Nginx + Php8
10. Installing and managing MariaDB (MySQL)
11. Install OpenSSL
12. Free HTTPS setup (Let’s Encrypt, Cloudflare)
13. Install memory caching APCu, Redis, Memcached

2. Understanding Installable Cloud Nextcloud

Nextcloud is a cloud storage and collaboration platform for personal and enterprise use. Nextcloud is open source software developed by Frank Karlitschek after leaving the ownCloud project in 2016. members of the ownCloud community gathered together to create Nextcloud and began development.

1) Nextcloud Features

Nextcloud is widely used by individuals and businesses as a secure and efficient cloud storage and collaboration tool.

1. File Sync and Share: Nextcloud allows you to sync and share files across multiple devices.
2. Security: Nextcloud provides a variety of security features, including data encryption and two-factor authentication, to enhance user data protection.
3. Collaboration tools: Include collaboration tools like document editing, calendar, address book, and more to help you accomplish a variety of tasks with your team.
4. App Ecosystem: We offer a variety of apps and extensions to extend Nextcloud to fit your needs.
5. Self-hosted: Nextcloud is available on-premise or in the cloud, allowing users to run their own servers to manage their data.

2) Advantages

1. Privacy Protection: Nextcloud is easy to protect personal information because users can directly manage their data.
2. Extensibility: A variety of apps and extensions allow you to extend Nextcloud to fit your needs.
3. Collaboration features: It provides various collaboration tools such as document editing and calendar, making it easy to work with team members.

3) Disadvantages

1. Technical Knowledge Required: Must have a technical understanding of server setup and maintenance.
2. Initial setup complexity: Initially setting up Nextcloud can be a bit complicated.

4) System Requirements

Platform Options Operating System (64-bit) Ubuntu 22.04 LTS (recommended) Ubuntu 20.04 LTS Red Hat Enterprise Linux 8 (recommended) Debian 12 Linux Enterprise Server 15 openSUSE Leap 15.4 CentOS Stream Database MySQL 8.0+ or MariaDB 10.3/10.4/10.5/ 10.6 (recommended) Oracle Database 11g (enterprise) (only as part of subscription) ) PostgreSQL 10/11/12/13/14/15 SQLite (recommended for testing and minimum instances only) ) Web server Apache 2.4 and or (recommended) mod_phpphp-fpm nginx php-fpm PHP runtime 8.0 (deprecated)) 8.1 8.2 (recommended)

3) Hardware Requirements

1. Processor: 1 GHz or faster dual core processor
2. Memory: At least 512MB RAM (recommended: 2GB or more)
3. Storage space: At least 10GB of free space
4. Network: Network interface for Internet connection

2. Install Nextcloud

Nextcloud installation includes all-in-one VM, all-in-one Docker, and web installer installation methods. Here, we will proceed with the installation using the web installer.

1) Create folder and download installation file

Create a folder to install nextcloud. Create a logs folder to store web logs and a public folder to install nextcloud.

sudo mkdir  /var/www/nc.skdream.com
sudo mkdir  /var/www/nc.skdream.com/logs
sudo mkdir  /var/www/nc.skdream.com/public

Download the installation file to the public folder. https://download.nextcloud.com/server/installer/setup-nextcloud.php

cd /var/www/nc.skdream.com/public
sudo wget 
https://download.nextcloud.com/server/installer/setup-nextcloud.php

Change the public folder user to www-data.

sudo chown -R www-data:www-data /var/www/nc.skdream.com/public

2) Creating Nginx server block

Create a server block file for domain connection.

sudo nano /etc/nginx/sites-available/nc.skdream.com

Paste the code below and change the domain part to your own domain.

upstream php-handler {
        server unix:/var/run/php/php8.2-fpm.sock;

}
# Set the `immutable` cache control options only for assets with a cache busting `v` argument
map $arg_v $asset_immutable {
        "" "";
        default "immutable";
}
server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;

        server_name example.com;

        ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/example.com/chain.pem;
        ssl_dhparam /etc/ssl/certs/dhparam.pem;

        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256;
        ssl_ecdh_curve secp384r1;
        ssl_session_timeout 10m;
        ssl_session_cache shared:SSL:10m;
        ssl_session_tickets off;
        ssl_stapling on;
        ssl_stapling_verify on;
        resolver 1.1.1.1 1.0.0.1 valid=300s;
        resolver_timeout 5s;

        access_log /var/www/nc.skdream.com/logs/access.log;
        error_log /var/www/nc.skdream.com/logs/error.log;

        root /var/www/nc.skdream.com/public/;
        #index index.php index.html;

        #Nextcloud
        # Prevent nginx HTTP Server Detection
        server_tokens off;

        # HSTS settings
        # WARNING: Only add the preload option once you read about
        # the consequences in https://hstspreload.org/. This option
        # will add the domain to a hardcoded list that is shipped
        # in all major browsers and getting removed from this list
        # could take several months.
        add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;

        # set max upload size and increase upload timeout:
        client_max_body_size 512M;
        client_body_timeout 300s;
        fastcgi_buffers 64 4K;

        # Enable gzip but do not remove ETag headers
        gzip on;
        gzip_vary on;
        gzip_comp_level 4;
        gzip_min_length 256;
        gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
        gzip_types application/atom+xml text/javascript application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/wasm application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;

        # Pagespeed is not supported by Nextcloud, so if your server is built
        # with the `ngx_pagespeed` module, uncomment this line to disable it.
        #pagespeed off;

        # The settings allows you to optimize the HTTP2 bandwitdth.
        # See https://blog.cloudflare.com/delivering-http-2-upload-speed-improvements/
        # for tunning hints
        client_body_buffer_size 512k;

        # HTTP response headers borrowed from Nextcloud `.htaccess`
        add_header Referrer-Policy                   "no-referrer"       always;
        add_header X-Content-Type-Options            "nosniff"           always;
        #add_header X-Download-Options                "noopen"            always;
        add_header X-Frame-Options                   "SAMEORIGIN"        always;
        add_header X-Permitted-Cross-Domain-Policies "none"              always;
        add_header X-Robots-Tag                      "noindex, nofollow" always;
        add_header X-XSS-Protection                  "1; mode=block"     always;

        # Remove X-Powered-By, which is an information leak
        fastcgi_hide_header X-Powered-By;

        # Add .mjs as a file extension for javascript
        # Either include it in the default mime.types list
        # or include you can include that list explicitly and add the file extension
        # only for Nextcloud like below:
        include mime.types;

        # Specify how to handle directories -- specifying `/index.php$request_uri`
        # here as the fallback means that Nginx always exhibits the desired behaviour
        # when a client requests a path that corresponds to a directory that exists
        # on the server. In particular, if that directory contains an index.php file,
        # that file is correctly served; if it doesn't, then the request is passed to
        # the front-end controller. This consistent behaviour means that we don't need
        # to specify custom rules for certain paths (e.g. images and other assets,
        # `/updater`, `/ocs-provider`), and thus
        # `try_files $uri $uri/ /index.php$request_uri`
        # always provides the desired behaviour.
        index index.php index.html /index.php$request_uri;
        #types {
        #        text/javascript js mjs;
        #}
        # Rule borrowed from `.htaccess` to handle Microsoft DAV clients
        location = / {
                if ( $http_user_agent ~ ^DavClnt ) {
                        return 302 /remote.php/webdav/$is_args$args;
                }
        }

        location = /robots.txt {
                allow all;
                log_not_found off;
                access_log off;
        }


        # Make a regex exception for `/.well-known` so that clients can still
        # access it despite the existence of the regex rule
        # `location ~ /(\.|autotest|...)` which would otherwise handle requests
        # for `/.well-known`.
        location ^~ /.well-known {
                # The rules in this block are an adaptation of the rules
                # in `.htaccess` that concern `/.well-known`.

                location = /.well-known/carddav { return 301 /remote.php/dav/; }
                location = /.well-known/caldav  { return 301 /remote.php/dav/; }

                location /.well-known/acme-challenge    { try_files $uri $uri/ =404; }
                location /.well-known/pki-validation    { try_files $uri $uri/ =404; }

                # Let Nextcloud's API for `/.well-known` URIs handle all other
                # requests by passing them to the front-end controller.
                return 301 /index.php$request_uri;
        }


        # Rules borrowed from `.htaccess` to hide certain paths from clients
        location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)  { return 404; }
        location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console)                { return 404; }

        # Ensure this block, which passes PHP files to the PHP process, is above the blocks
        # which handle static assets (as seen below). If this block is not declared first,
        # then Nginx will encounter an infinite rewriting loop when it prepends `/index.php`
        # to the URI, resulting in a HTTP 500 error response.

        # to the URI, resulting in a HTTP 500 error response.
        location ~ \.php(?:$|/) {
                # Required for legacy support
                rewrite ^/(?!index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|ocs-provider\/.+|.+\/richdocumentscode\/proxy) /index.php$request_uri;

                fastcgi_split_path_info ^(.+?\.php)(/.*)$;
                set $path_info $fastcgi_path_info;

                try_files $fastcgi_script_name =404;

                include fastcgi_params;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                fastcgi_param PATH_INFO $path_info;
                fastcgi_param HTTPS on;

                fastcgi_param modHeadersAvailable true;         # Avoid sending the security headers twice
                fastcgi_param front_controller_active true;     # Enable pretty urls
                fastcgi_pass php-handler;

                fastcgi_intercept_errors on;
                fastcgi_request_buffering off;

                fastcgi_max_temp_file_size 0;
        }
        # Javascript mimetype fixes for nginx
        # Note: The block below should be removed, and the js|mjs section should be
        # added to the block below this one. This is a temporary fix until Nginx 
        # upstream fixes the js mime-type
        location ~* \.(?:js|mjs)$ {
            types { 
                text/javascript js mjs;
            } 
            default_type "text/javascript";
            try_files $uri /index.php$request_uri;
            add_header Cache-Control "public, max-age=15778463, $asset_immutable";
            access_log off;
        }

        # Serve static files
        location ~ \.(?:css|svg|gif|png|jpg|ico|wasm|tflite|map|ogg|flac)$ {
            try_files $uri /index.php$request_uri;
            add_header Cache-Control "public, max-age=15778463, $asset_immutable";
            access_log off;     # Optional: Don't log access to assets

            location ~ \.wasm$ {
                default_type application/wasm;
            }
        }
        location ~ \.woff2?$ {
                try_files $uri /index.php$request_uri;
                expires 7d;         # Cache-Control policy borrowed from `.htaccess`
                access_log off;     # Optional: Don't log access to assets
        }

        # Rule borrowed from `.htaccess`
        location /remote {
                return 301 /remote.php$request_uri;
        }

        location / {
                try_files $uri $uri/ /index.php$request_uri;
        }


}

server {
        listen 80;
        listen [::]:80;

        server_name example.com;
        # Prevent nginx HTTP Server Detection
        server_tokens off;

        return 301 https://example.com$request_uri;
}

Set up the symbolic link and restart nginxt.

sudo ln -s /etc/nginx/sites-available/example.com /etc/nginx/sites-enabled/
sudo systemctl restart nginx

3) DB creation and permission granting

Connect to MariaDB with the command below.

mysql -u root -p

If you have not installed MariaDB, please refer to the following article: Installing and Managing MariaDB (MySQL) – Thinknote

Create a database to use with Nextcloud.

CREATE DATABASE nextcloud;

Create a new user. If you want to connect an existing user, you can omit it.

CREATE USER '[example example]'@'localhost' IDENTIFIED BY '[example]';

Grant permissions for the new database to the created user.

GRANT ALL PRIVILEGES ON [example example].* TO '[example example]'@'localhost';

Apply the changed permission settings.

FLUSH PRIVILEGES;
exit;

4) php requirements

To use Nextcloud, an additional PHP module is required. Below are the requirements presented in the Nextcloud manual.

• PHP (see System requirements for a list of supported versions)
• PHP module ctype
• PHP module curl
• PHP module dom
• PHP module fileinfo (included with PHP)
• PHP module filter (only on Mageia and FreeBSD)
• PHP module GD
• PHP module hash (only on FreeBSD)
• PHP module JSON (included with PHP >= 8.0)
• PHP module libxml (Linux package libxml2 must be >=2.7.0)
• PHP module mbstring
• PHP module openssl (included with PHP >= 8.0)
• PHP module posix
• PHP module session
• PHP module SimpleXML
• PHP module XMLReader
• PHP module XMLWriter
• PHP module zip
• PHP module zlib

Enter the code below to install uninstalled modules. If PHP8 is not installed, please refer to the following article. Install PHP 8 (ubuntu) – Thinknote

sudo apt install php8.2-ctype php8.2-curl php8.2-dom php8.2-gd php8.2-mbstring php8.2-zip php8.2-intl php8.2-gmp php8.2-bcmath libmagickcore-6.q16-6-extra php8.2-apcu php8.2-bz2 php8.2-imagick php8.2-imap php8.2-ldap php8.2-mysql php8.2-smbclient php8.2-xml php8.2-zip

Restart php.

sudo systemctl restart php8.2-fpm

3. Installation via web installer

Access the web installer on your domain and proceed with the installation.

https://example.com/setup-nextcloud.php

If the error Fatal error: Uncaught ValueError: Invalid or uninitialized Zip object in occurs, it is because the decompression path is /var/www/html. In this case, you must unzip and install it yourself. If it is unzipped, you can access it using the domain URL.

Installation is complete.

4. Check security and alerts

Log in as administrator and go to administrator settings. If a security and installation warning message appears at this time, please refer to the solutions for each item.

1) Errors related to file integrity

Uncomment clear_env = no in /etc/php/8.2/fpm/pool.d/www.conf

sudo nano /etc/php/8.2/fpm/pool.d/www.conf 
clear_env = no #example

2) Error in system environment variable getenv(‘path’)

Check the list of files related to the integrity of the administrator settings and delete problematic files. Then run the code below to check if the integrity issue is resolved.

sudo -u www-data php occ integrity:check-core

3) PHP memory limitations

In php.ini, set the memory_limit value and upload_max_filesize to 512M or more.

Memory_limit = 1G
upload_max_filesize = 1G

4) Set country phone number

Add the following to the nextcloud config.php file:

'default_phone_region' => 'kr'

5) Improved transaction performance – memcached configuration

Please refer to the following article for memcached configuration. Memory caching APCu, Redis, Memcached installation – Thinknote

To use memcached with transaction file locking, you must also install redis.

Once installation is complete, add the following to the nextcloud config.php file:

'memcache.local' => '\\OC\\Memcache\\Redis',
'memcache.distributed' => '\\OC\\Memcache\\Redis',
'memcache.locking' => '\\OC\\Memcache\\Redis',
'filelocking.enabled' => 'true',
'redis' =>
    array (
        'host' => 'localhost',
        'port' => 0,
        'timeout' => 0.0,
),

6) Check security and background operations

Thinknote

Related Reading

• Related Thinknote article
• Related Thinknote article
• Related Thinknote article
• Related Thinknote article
• Related Thinknote article

FAQ

What is this article about?

This article is an English translation and global-reader adaptation of the Korean post “Nextcloud installation and settings.” It preserves the original article’s main explanation, examples, and practical context.

Why is it translated into English?

The English version helps global readers access Thinknote articles through English search keywords while keeping the Korean source available as the original reference.

Where can I read the original Korean version?

You can read the original Korean article here: https://www.thinknote.co.kr/nextcloud-install-memcached/