How to Self-Host Nextcloud and Access It from Anywhere

What Is Nextcloud?

Nextcloud is an open-source, self-hosted collaboration platform. At its core it is a file sync and share server, but the app ecosystem makes it much more: calendar and contacts sync, photo gallery, office document editing (via Collabora or OnlyOffice), video calls, password manager, and more. Every piece of data stays on hardware you own.

Requirements

Installation Path 1: Docker Compose on Linux

This is the recommended method for any Linux machine (Ubuntu, Debian, or any x86_64 server). It installs Nextcloud together with MariaDB and Redis in isolated containers, making upgrades easy and the host system clean.

Step 1: Install Docker

# Install Docker (one-line official script):
curl -fsSL https://get.docker.com | sudo sh

# Add your user to the docker group (no sudo needed):
sudo usermod -aG docker $USER

# Log out and back in, then verify:
docker --version
docker compose version

Expected output:

Docker version 27.x.x, build xxxxxxx
Docker Compose version v2.x.x

Step 2: Create the project directory and .env file

mkdir ~/nextcloud && cd ~/nextcloud

Create a .env file with your passwords. Never commit this file to Git:

cat > .env << 'EOF'
MYSQL_ROOT_PASSWORD=change_this_root_password
MYSQL_PASSWORD=change_this_db_password
MYSQL_DATABASE=nextcloud
MYSQL_USER=nextcloud
NEXTCLOUD_ADMIN_USER=admin
NEXTCLOUD_ADMIN_PASSWORD=change_this_admin_password
NEXTCLOUD_TRUSTED_DOMAINS=localhost
EOF

Step 3: Create docker-compose.yml

cat > docker-compose.yml << 'EOF'
version: "3.8"

services:

  db:
    image: mariadb:11
    container_name: nextcloud-db
    restart: unless-stopped
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    volumes:
      - db_data:/var/lib/mysql
    env_file: .env
    environment:
      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
      - MYSQL_DATABASE=${MYSQL_DATABASE}
      - MYSQL_USER=${MYSQL_USER}
      - MYSQL_PASSWORD=${MYSQL_PASSWORD}

  redis:
    image: redis:alpine
    container_name: nextcloud-redis
    restart: unless-stopped

  app:
    image: nextcloud:stable-apache
    container_name: nextcloud-app
    restart: unless-stopped
    ports:
      - "8080:80"
    depends_on:
      - db
      - redis
    volumes:
      - nextcloud_html:/var/www/html
      - ./data:/var/www/html/data
    env_file: .env
    environment:
      - MYSQL_HOST=db
      - MYSQL_DATABASE=${MYSQL_DATABASE}
      - MYSQL_USER=${MYSQL_USER}
      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
      - REDIS_HOST=redis
      - NEXTCLOUD_ADMIN_USER=${NEXTCLOUD_ADMIN_USER}
      - NEXTCLOUD_ADMIN_PASSWORD=${NEXTCLOUD_ADMIN_PASSWORD}
      - NEXTCLOUD_TRUSTED_DOMAINS=${NEXTCLOUD_TRUSTED_DOMAINS}
      - APACHE_DISABLE_REWRITE_IP=1
      - TRUSTED_PROXIES=172.16.0.0/12 192.168.0.0/16 10.0.0.0/8

volumes:
  db_data:
  nextcloud_html:
EOF

Step 4: Start Nextcloud

docker compose up -d

The first run pulls images and runs the Nextcloud installer automatically. Wait about 2 minutes, then open http://localhost:8080 in your browser. You should see the Nextcloud login screen.

# Check that all three containers are running:
docker compose ps

Expected output:

NAME               IMAGE                    STATUS
nextcloud-app      nextcloud:stable-apache  Up 2 minutes
nextcloud-db       mariadb:11               Up 2 minutes
nextcloud-redis    redis:alpine             Up 2 minutes

Step 5: Set up the background cron job

Nextcloud requires periodic background tasks (file scanning, notifications, cleanup). The default AJAX-based cron only runs when someone is logged in. Switch to a proper system cron:

# Add a cron job that runs every 5 minutes:
(crontab -l 2>/dev/null; echo "*/5 * * * * docker exec --user www-data nextcloud-app php -f /var/www/html/cron.php") | crontab -

# Then set the cron type in Nextcloud to "cron":
docker exec --user www-data nextcloud-app php occ background:cron

Expected output:

Set mode for background jobs to 'cron'

Installation Path 2: Raspberry Pi (NextcloudPi)

The Raspberry Pi deserves its own section because it is the most popular self-hosting hardware for Nextcloud. The official NextcloudPi project provides a dedicated OS image and install script that sets everything up automatically, including Apache, PHP, MariaDB, and Redis, optimized for the Pi's constraints.

Option A: NextcloudPi OS Image (Recommended for beginners)

Option B: Install NextcloudPi on Existing Raspberry Pi OS

If your Pi already runs Raspberry Pi OS Bookworm (64-bit), install NextcloudPi on top with the official script:

# Update the system first:
sudo apt update && sudo apt upgrade -y

# Run the NextcloudPi installer:
curl -sSL https://raw.githubusercontent.com/nextcloud/nextcloudpi/master/install.sh | sudo bash

The installer takes 5-15 minutes depending on your Pi model and internet speed. When complete it prints:

NextcloudPi instance already running on this machine.

 First run wizard
 ---------------------------------------------------------------
 It seems this is your first run of NextcloudPi.
 Navigate to https://<your-pi-ip>:4443
 to complete the initial configuration.
 ---------------------------------------------------------------

Option C: Docker Compose on Raspberry Pi

If you prefer Docker on your Pi (for easier updates and multi-container management), the same docker-compose.yml from Path 1 works on Raspberry Pi OS 64-bit without changes. The nextcloud:stable-apache image includes an ARM64 build.

# Install Docker on Raspberry Pi OS:
curl -fsSL https://get.docker.com | sudo sh
sudo usermod -aG docker pi
# Log out and back in, then run the same docker-compose.yml from Path 1

Raspberry Pi: Mounting an External Drive for Data

Storing Nextcloud data on the SD card will wear it out quickly. Mount an external USB SSD or HDD:

# Find the drive:
lsblk

# Create a mount point and mount:
sudo mkdir -p /mnt/nextcloud-data
sudo mount /dev/sda1 /mnt/nextcloud-data

# Make mount permanent (add to /etc/fstab):
echo "UUID=$(sudo blkid -s UUID -o value /dev/sda1)  /mnt/nextcloud-data  ext4  defaults,nofail  0  2" | sudo tee -a /etc/fstab

# Fix permissions for Nextcloud (www-data user):
sudo chown -R www-data:www-data /mnt/nextcloud-data

In Docker Compose on Pi, point the data volume to this path:

volumes:
  - /mnt/nextcloud-data:/var/www/html/data

Critical: trusted_proxies Configuration for Tunnel Access

This is the most common point of failure when exposing Nextcloud through any reverse proxy or tunnel. If trusted_proxies is not configured, Nextcloud rejects requests that come through the tunnel and logs errors like "Blocked request from an untrusted proxy" or shows a blank page after login.

For Docker Compose installs

The TRUSTED_PROXIES environment variable in the docker-compose.yml above already covers all private IP ranges. Verify it is set:

TRUSTED_PROXIES=172.16.0.0/12 192.168.0.0/16 10.0.0.0/8
APACHE_DISABLE_REWRITE_IP=1

After changing, restart the app container:

docker compose restart app

For NextcloudPi (Raspberry Pi) installs

Edit the Nextcloud config file directly:

# On NextcloudPi, config.php is at:
sudo nano /var/www/nextcloud/config/config.php

# Add or update this block inside the $CONFIG array:
'trusted_proxies' =>
  array (
    0 => '127.0.0.1',
    1 => '::1',
    2 => '172.16.0.0/12',
    3 => '192.168.0.0/16',
    4 => '10.0.0.0/8',
  ),
'overwriteprotocol' => 'https',

Then restart Apache:

sudo systemctl restart apache2

Expose Nextcloud to the Internet with Localtonet

With Nextcloud running locally, the next step is making it accessible from anywhere. Localtonet creates an encrypted outbound tunnel from your machine to a public HTTPS endpoint. No port forwarding, no static IP, and it works behind CGNAT.

# Linux (Ubuntu, Debian, Raspberry Pi OS):
curl -fsSL https://localtonet.com/install.sh | sh

# Verify:
localtonet --version

localtonet --authtoken YOUR_TOKEN_HERE

# Docker Compose:
docker exec --user www-data nextcloud-app php occ config:system:set trusted_domains 1 --value="mycloud.localto.net"

# NextcloudPi:
sudo -u www-data php /var/www/nextcloud/occ config:system:set trusted_domains 1 --value="mycloud.localto.net"

System config value trusted_domains => 1 set to string mycloud.localto.net

# Docker Compose:
docker exec --user www-data nextcloud-app php occ config:system:set overwritehost --value="mycloud.localto.net"
docker exec --user www-data nextcloud-app php occ config:system:set overwriteprotocol --value="https"

# NextcloudPi:
sudo -u www-data php /var/www/nextcloud/occ config:system:set overwritehost --value="mycloud.localto.net"
sudo -u www-data php /var/www/nextcloud/occ config:system:set overwriteprotocol --value="https"

sudo localtonet --install-service --authtoken YOUR_TOKEN_HERE
sudo localtonet --start-service --authtoken YOUR_TOKEN_HERE

Essential occ Commands for Nextcloud Administration

The occ (ownCloud Console) tool is the Nextcloud command-line administration tool. Many settings that look confusing in the web UI are one-liners via occ. Always run it as the www-data user.

Backing Up Your Nextcloud

Nextcloud data lives in three places that all must be backed up together: the database, the application config, and the user data files.

#!/bin/bash
# Save as ~/nextcloud/backup.sh and run via cron: 0 2 * * * ~/nextcloud/backup.sh

BACKUP_DIR="/mnt/backup/nextcloud/$(date +%F)"
mkdir -p "$BACKUP_DIR"

cd ~/nextcloud

# 1. Enable maintenance mode:
docker exec --user www-data nextcloud-app php occ maintenance:mode --on

# 2. Dump the database:
docker exec nextcloud-db mysqldump \
  -u nextcloud -p"$MYSQL_PASSWORD" nextcloud \
  > "$BACKUP_DIR/nextcloud-db.sql"

# 3. Back up config and data:
rsync -a ./data/ "$BACKUP_DIR/data/"
rsync -a $(docker volume inspect nextcloud_nextcloud_html --format '{{.Mountpoint}}'/config) "$BACKUP_DIR/config/"

# 4. Disable maintenance mode:
docker exec --user www-data nextcloud-app php occ maintenance:mode --off

echo "Backup complete: $BACKUP_DIR"

# Manual backup via ncp-config:
sudo ncp-config

# Navigate to: Config > nc-backup
# Set the destination path (e.g., /mnt/backup)
# Run backup

# Or directly:
sudo -u www-data php /var/www/nextcloud/occ maintenance:mode --on
sudo rsync -a /var/www/nextcloud/data/ /mnt/backup/nextcloud-data/
sudo mysqldump -u nextcloud -p nextcloud > /mnt/backup/nextcloud-db.sql
sudo -u www-data php /var/www/nextcloud/occ maintenance:mode --off

Updating Nextcloud

cd ~/nextcloud

# Pull new images:
docker compose pull

# Recreate containers:
docker compose up -d --remove-orphans

# Run the Nextcloud upgrade:
docker exec --user www-data nextcloud-app php occ upgrade

# Fix any missing database indices:
docker exec --user www-data nextcloud-app php occ db:add-missing-indices

# Clear caches:
docker exec --user www-data nextcloud-app php occ maintenance:repair

# Via the web panel at https://<pi-ip>:4443:
# Navigate to: Updates > nc-update-nextcloud

# Or via command line:
sudo ncp-update

# To update only Nextcloud (not the Pi OS):
sudo -u www-data php /var/www/nextcloud/updater/updater.phar

Troubleshooting

Frequently Asked Questions