Nextcloud on Netcup: Docker Compose, TLS and backups

1. Choose a plan

• VPS 1000: smaller teams, 8 GB RAM.
• RS 2000: multiple apps, Collabora, more headroom.
• Storage: local NVMe is fine to start; keep backups external.

2. Docker Compose

services:
  nextcloud:
    image: nextcloud:apache
    restart: unless-stopped
    ports:
      - "8080:80"
    environment:
      MYSQL_HOST: db
      MYSQL_DATABASE: nextcloud
      MYSQL_USER: nextcloud
      MYSQL_PASSWORD: change-me
      REDIS_HOST: redis
    volumes:
      - nextcloud_data:/var/www/html
    depends_on:
      - db
      - redis
  db:
    image: mariadb:11
    restart: unless-stopped
    environment:
      MARIADB_DATABASE: nextcloud
      MARIADB_USER: nextcloud
      MARIADB_PASSWORD: change-me
      MARIADB_ROOT_PASSWORD: change-root
    volumes:
      - db_data:/var/lib/mysql
  redis:
    image: redis:7-alpine
    restart: unless-stopped
volumes:
  nextcloud_data:
  db_data:

Note: Start with docker compose up -d and check the logs. The first start can take a few minutes.

3. Reverse proxy and TLS

nextcloud.example.com {
  reverse_proxy 127.0.0.1:8080
}

# In Nextcloud:
docker compose exec -u www-data nextcloud php occ config:system:set trusted_proxies 0 --value=127.0.0.1
docker compose exec -u www-data nextcloud php occ config:system:set overwriteprotocol --value=https

Note: Without trusted proxies and overwriteprotocol you get wrong URLs or login loops behind the proxy.

4. Backups and updates

docker compose exec -T db mariadb-dump -u root -p"$MARIADB_ROOT_PASSWORD" nextcloud > nextcloud-db.sql
docker run --rm -v nextcloud_data:/data -v "$PWD":/backup alpine tar czf /backup/nextcloud-data.tar.gz -C /data .
docker compose exec -u www-data nextcloud php occ maintenance:mode --on