search

nextcloud / cms_pico

🗃 Integrate Pico CMS and let your users manage their own websites
https://apps.nextcloud.com/apps/cms_pico
GNU Affero General Public License v3.0
137 stars 43 forks source link

This website is hosted on a non-local storage and thus could not be accessed. #175

Closed sgofferj closed 3 years ago

sgofferj commented 3 years ago

NC 20.0.10 on docker Pico CMS 1.0.15 Server side encryption: enabled / default encryption module Encrypt the home storage: No - Double checked that web directory is not encrypted Pico CMS web directory: /web (i.e. on the home storage) Home storage: Docker bind mount, i.e. not external from NC point of view Nextcloud log: no apparent related entry. I opened a console, issued tail -f nextcloud.log, tried to open Pico websites and nothing appeared in the log. URL: https://cloud.gofferje.net/ - try the TOS and privacy policy links on the bottom.

My assumption: Pico CMS only checks if the server side encryption app is enabled but does NOT check if the web directory is actually on an encrypted volume. That would be a bug because it's a common use case to enable server side encryption and only encrypt external volumes, e.g. S3, Google Drive, etc. but not the home storage.

PhrozenByte commented 3 years ago

You must move the files to a "Local (unencrypted)" storage. Enable Nextcloud's external storage app. This is due to how Nextcloud implements server-side encryption.

sgofferj commented 3 years ago

That doesn't scale very well because it requires manually creating an external volume for every user who wants to use PicoCMS... Just to be sure, you did see the part where I wrote that only external volumes are encrypted but the home storage isn't?

PhrozenByte commented 3 years ago

Just to be sure, you did see the part where I wrote that only external volumes are encrypted but the home storage isn't?

Yes. As I said: "This is due to how Nextcloud implements server-side encryption."

sgofferj commented 3 years ago

I see. I'll implement the workaround then. Thanks. Feel free to close if you think it can't be fixed.

github-actions[bot] commented 3 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in two days if no further activity occurs. Thank you for your contributions! :+1: