Minimum LAN installation via Docker on Ubuntu, please?

[davidbernat]

Greetings. We have had NextCloud highly recommended to us for our LAN storage needs, and a calendar.

We are genuinely dazed by the multiple configuration requirements across multiple README.md instructions.

The basic docker run / docker compose setup launches an insecure https://{ip}:{port} setup.
This setup requires a public Internet DNS server pointing to our local network to receive its SSL certificates.
Why can we not use a local self-signed certificate? Why can we not disable https entirely for an internal LAN?

We know there are many, multiple instruction templates for reduced LAN or and behind nginx setups.
But most of them read much more complicated than should be necessary (e.g. that nginx config) or feel oddly restrictive. If you will do me the appetite of a conversation they simply "feel" unnecessarily complicated, and...?

We have multiple various services running across our local network and the NextCloud model feels... hmm...
Thanks in advance. We can see NextCloud put a lot of work into NextCloud.

[davidbernat]

I could just as well comment that the presented installation instructions did not work and that this should be categorized as a bug.
@szaimen would love to see a member of your team make progress on this capability today so we can move ahead with its blockers.
cc: #7525 (comment)

[szaimen]

Hi, sse https://github.com/nextcloud/all-in-one/blob/main/local-instance.md

[davidbernat]

@szaimen those documentations are brittle and outdated.
Minimum setup is a few lines of code to set up a self-service SSL server on the machine.
When using Nginx as the reverse proxy an SSL redirect can be done with two additional lines.

Kindly, everything else is noise and fluff, even increasing the Nginx maximum file size allowed as transfer.
There are numerous configuration files being asked of the user and bloat which does document the reason for each line.
Even the URL you pointed me two has four different branches, most with three large subparts, and one which requires a purchase.

LAN-enclosed is absolutely expected of any Swiss knife for non-cloud storage.
After reading thoroughly about the company origins and management we are thoroughly, uh, of notice, of your choices.
A user having three years of hobbyist experience should not require hours of errors and weeks of public tickets to set up a service.
Genuine paragons of security would even be flirting with bash-enabled, bash-limited AI algorithms to install this.
Were I were advising Open Source to the United Nations we might issue a report of orange level worry on these issues last month.

May we have provided the four line bash command and twelve line Nginx LAN configuration, please?

[davidbernat]

@szaimen We would love to see that NextCloud takes this opportunity to reply with a real solution to our question.

Why is LAN in isolation not supported by NextCloud.

[szaimen]

It is supported but not by Nextcloud All-in-one.