Found the ultimate Nextcloud / Owncloud replacement! reddit / selfhosted ---------------------------------------------------------------------- Joonas1233 · 2023-11-22 12:23 I just wanted to share my findings with everyone! I've been searching for a fast, easy-to-use self-hosted cloud storage app and that seems to be the best I've stumbled upon. [https://github.com/cloudreve/Cloudreve](https://github.com/cloudreve/ Cloudreve) Note for Unraid users. Find the app in the app store, but replace the repository as the one provided is very old. [https://hub.docker.com/r /cloudreve/cloudreve](https://hub.docker.com/r/cloudreve/cloudreve) ---------------------------------------------------------------------- Firestarter321 · 2023-11-22 12:32 I may just have my tinfoil hat on too tight, however, there’s no chance that I’ll trust a Chinese application with any of my personal information. ---------------------------------------------------------------------- Joonas1233 · 2023-11-22 12:44 The code is open to the public. So far I have not seen any sus activities by AdGuard Home DNS ---------------------------------------------------------------------- Digital-Chupacabra · 2023-11-22 12:45 A little explanation of why/how this is better would go a long way to supporting your case. ---------------------------------------------------------------------- Joonas1233 · 2023-11-22 12:50 It's maxing out my internal server connection speed for a start. Has a beautiful app for phones. Easy to share files (automatic zipping for folders), UI and backend settings are easy to customize.. ---------------------------------------------------------------------- WiseCookie69 · 2023-11-22 13:19 It's fully open source, lol. Instead of being "mimimi chinese application", go ahead and audit it. At least in the linked repository you most likely won't find anything suspicious - i skimmed through it for a few minutes, including giving the external dependencies in `go.mod` a quick lookover. And the code is actually fairly easy to read. The only thing that would annoy me are some news thing in the admin interface fetching [`https://forum.cloudreve.org/api/discussions?inclu de=startUser%2ClastUser%2CstartPost%2Ctags&filter%5Bq%5D=%20tag%3A"+ta g+"&sort=- startTime&page%5Blimit%5D=10`](https://forum.cloudreve.org/api/discuss ions?include=startuser%2clastuser%2cstartpost%2ctags&filter%5bq%5d=%20 tag%3a"+tag+"&sort=-starttime&page%5blimit%5d=10), which would give away an instance's external IP. But then again, Nextcloud also does shit like that without asking you. ---------------------------------------------------------------------- thatoneguy5464 · 2023-11-22 14:43 I'm upset that I just spent a ton of my time switching from OwnCloud to nextcloud only to see this beautiful app. ---------------------------------------------------------------------- johnrobbespiere · 2023-11-22 14:49 Genuine > The anti China hate on everything from there even though MOST things are from there is ridiculous and shows you why the CIA and NSA and all have the budget they do. ---------------------------------------------------------------------- Joonas1233 · 2023-11-22 14:52 I just use both. Since the OwnCloud has pretty good desktop apps as well for syncing between multiple devices. Haven’t looked into the Cloudreve desktop offerings just yet. ---------------------------------------------------------------------- JiggySnoop · 2023-11-22 14:58 is there a button for change language to English in their website ? i clicked all the buttons still can't find it ---------------------------------------------------------------------- JiggySnoop · 2023-11-22 15:00 never mind, i translated that web page to English ---------------------------------------------------------------------- ionv3n0m · 2023-11-22 15:03 "mimimi chinese application" LOL ---------------------------------------------------------------------- HTTP_404_NotFound · 2023-11-22 15:14 > I FOUND THE ULTIMATE REPLACEMENT. (Offers basically no solid reasons as to why it is better then Nextcloud). ---------------------------------------------------------------------- Myotis · 2023-11-22 15:15 Looks good. I don't see any mention of client software applications though. Am I missing the MacOS or Windows syncing apps? ---------------------------------------------------------------------- Joonas1233 · 2023-11-22 15:17 Literally read my reply on another comment ---------------------------------------------------------------------- -eschguy- · 2023-11-22 15:29 What does this do that Nextcloud doesn't? ---------------------------------------------------------------------- HTTP_404_NotFound · 2023-11-22 15:29 Here are all of your comments in this post. > It's maxing out my internal server connection speed for a start. Has a beautiful app for phones. Easy to share files (automatic zipping for folders), UI and backend settings are easy to customize.. Speed is Subjective. Easy to share, is also subjective, as you can single-click share with nextcloud too. > The code is open to the public. So far I have not seen any sus activities by AdGuard Home DNS As is https://github.com/nextcloud > I just use both. Since the OwnCloud has pretty good desktop apps as well for syncing between multiple devices. Haven’t looked into the Cloudreve desktop offerings just yet. ---------------------------------------------------------------------- thatoneguy5464 · 2023-11-22 15:31 Could you explain changing the repo in unraid? Do I need to use docker compose to grab the new version or do I use the app in community apps and change it there? ---------------------------------------------------------------------- Joonas1233 · 2023-11-22 15:43 Use the template from community apps. Worked wonderfully for me ---------------------------------------------------------------------- selfh-sted · 2023-11-22 15:49 I'm not familiar with Cloudreve, but [FileStash](https://www.filestash.app/) is a similar application often recommended on this subreddit. ---------------------------------------------------------------------- Larkonath · 2023-11-22 15:50 While you distrust Chinese apps, the Americans one are siphoning your data like there's no tomorrow. ---------------------------------------------------------------------- rrrmmmrrrmmm · 2023-11-22 16:03 Pro: + it's written in GoLang, which makes it probably less resource Hungry than Nextcloud (but the new OwnCloud is written in GoLang, too) + it supports multiple storage providers Con: - NextCloud has a lot of [NextCloud apps](https://apps.nextcloud.com/) that allow you to do far more than just storing files - I just get a weird feeling when I see dependencies to [Tencent Cloud and Upyun](https://github.com/cloudreve/Cloudreve/blob/88409cc1f0a0a55 b7ea8f0aee15e82876260b2d8/go.mod#L39-L43). But it's probably just me and it's probably just used properly for binding on their cloud storage. ---------------------------------------------------------------------- WassiChain · 2023-11-22 16:14 This comment is actually delusional. ---------------------------------------------------------------------- Amplificator · 2023-11-22 16:27 I find that exact thing funny.. a lot of people don’t want to use Chinese or Russians apps due to privacy yet they forget that services (generalization) from especially the US does this exact thing. Government as well, especially with gag orders that won’t even let companies tell you when your data has been shared. I obviously do understand the privacy focus but it’s just funny how people only seem to extend this to foreign governments which arguably would have less usage out of your data than your own. But hey.. ---------------------------------------------------------------------- Self_toasted · 2023-11-22 16:27 >Client downloads are under Releases on the Github page: https://github.com/cloudreve/Cloudreve/releases ---------------------------------------------------------------------- Sudden_Cheetah7530 · 2023-11-22 16:28 How is the fast of this? I am using Nextcloud, but it is terribly slow and thinking of migration. If it has just average speed like the other applications, I would move. ---------------------------------------------------------------------- Myotis · 2023-11-22 16:32 Those are the server applications. This doesn't seem to have associated syncing apps like Nextcloud does. ---------------------------------------------------------------------- zezimeme · 2023-11-22 17:17 The ios app has features hidden behind a subscription. So no thx. ---------------------------------------------------------------------- lakimens · 2023-11-22 17:58 SeaFile seems to fit the bill and not be Chinese in the process. ---------------------------------------------------------------------- lh458 · 2023-11-22 18:04 The company behind Seafile is also based out of Beijing. ---------------------------------------------------------------------- lakimens · 2023-11-22 18:05 Ah shit, I walked right into that one 😅😅 ---------------------------------------------------------------------- lilolalu · 2023-11-22 18:54 So, I have my Nextcloud folder in a TrueCrypt volume on my laptop. The connection to my server is encrypted, the next cloud files are on a LUKS encrypted volume. What extra benefit security-wise would end-to- end encryption give me? BTW there is this: https://cryptpad.org/ ---------------------------------------------------------------------- jcol26 · 2023-11-22 19:36 I think you’d be surprised at how many popular open source apps aren’t audited. ---------------------------------------------------------------------- Starmina · 2023-11-22 20:05 "only thing" 🤣 ---------------------------------------------------------------------- Starmina · 2023-11-22 20:06 CCP support ---------------------------------------------------------------------- Starmina · 2023-11-22 20:07 🤣 bUT ITs MaxInG oUt My EnTiRE BanDwItH ThO ---------------------------------------------------------------------- Starmina · 2023-11-22 20:08 I have some bad news for you if that's your way of auditing if an app is malicious. ---------------------------------------------------------------------- Starmina · 2023-11-22 20:10 According to him, it's able to saturate it's whole "internal server connection speed". Might be true because Nextcloud can be really slow. ---------------------------------------------------------------------- ModerateBiscuit · 2023-11-22 20:16 I don't really understand people who complain about Nextcloud being slow - for it's intended use case, it's generally fine. I've run it for ages and never had an issue. It only becomes an issue when you start to abuse its functionality. For something Nextcloud - reliability, stability and security support/updates matter far more than raw speed. I don't care if my document takes 2 seconds to load if it means not handing my data to the CCP ;). ---------------------------------------------------------------------- whattteva · 2023-11-22 20:17 Does the new owncloud have free ios/android apps? ---------------------------------------------------------------------- autogyrophilia · 2023-11-22 20:40 And I presume you are a CIA agent? ---------------------------------------------------------------------- Joonas1233 · 2023-11-22 20:46 So is owncloud… ---------------------------------------------------------------------- Joonas1233 · 2023-11-22 20:48 Fucking hell what a bunch mad basement nerds. Sharing my good experience with a pain Ive had for ages and the response i got couldn’t be worse ---------------------------------------------------------------------- brunopgoncalves · 2023-11-22 21:07 same for owncloud ---------------------------------------------------------------------- Joonas1233 · 2023-11-22 21:29 I have some bad news about your life if some stranger in the internet is what ur concerned about ---------------------------------------------------------------------- xitrum4692 · 2023-11-23 05:49 Or when you start updating it 😅 ---------------------------------------------------------------------- rrrmmmrrrmmm · 2023-11-23 08:09 It's a rewrite so a direct replacement. Hence the existing OwnCloud apps should work. ---------------------------------------------------------------------- rrrmmmrrrmmm · 2023-11-23 08:13 Well, when someone exploits your NextCloud app, the malicious user can simply read all the data from all other users. But with your setup you'd probably also not be able to access your NextCloud data if your server reboots, right? With an e2e encrypted both issues wouldn't exist. ---------------------------------------------------------------------- lilolalu · 2023-11-23 08:15 Since the important files are synced on my laptop, I have all the stuff that I am currently working in locally. When the server is up again, they will be synced. There are occasional "race conditions" especially with my password safe on the phone and the laptop, but fortunately KeepassXC allows to merge databases so that's a minor issue. ---------------------------------------------------------------------- rrrmmmrrrmmm · 2023-11-23 08:25 Well, that is a complicated workaround that only works for you if you have access to your laptop and you're the only person relying on it. ;) And it doesn't help with the first issue at all. > KeepassXC allows to merge databases TIL!!! ---------------------------------------------------------------------- lakimens · 2023-11-23 08:31 I guess audited wasn't the right word here. What I meant to say was, the more popular an app is, the more individual developers would've checked the code. ---------------------------------------------------------------------- lilolalu · 2023-11-23 08:40 Not complicated at all. I have a pretty good uptime for my server so we are talking about emergency situations, not something that regularly occurs. In the rare events that my ISP has problems, for a couple of hours, I can either go home and work locally or use one of the synced copies on one of the devices. The same applies to the other users as well. And this is just the risk that "working in the cloud" brings. There was an outage of all Microsoft services recently, no teams, no office 365, no azure ... The company where I worked was basically inoperable. ---------------------------------------------------------------------- paul_h · 2023-11-23 09:07 Only for WebDAV, but I've been enjoying https://github.com/sigoden/dufs recently. I mount it in Proxmox/LXC container then use my IDE from my host computer. ---------------------------------------------------------------------- rrrmmmrrrmmm · 2023-11-23 12:36 > Not complicated at all. I have a pretty good uptime for my server so we are talking about emergency situations, not something that regularly occurs. Well, the whole security topic is about emergency situations. We wouldn't need backups, firewalls, encryption, UPS etc if everything would be good all the time. It's like saying "oh, I don't need to lock my door because most of the time nobody is entering" or "I don't need a seat belt because most of the time I'm not involved in car crashes". ;) If you believe that you live in fluffy wonderland where you don't have to keep in mind that emergencies exist, then you won't even need TrueCrypt or LUKS. ;) > I can either go home and work locally That's what I was referring to in my first response. You have to manually decrypt your encrypted mounts and without that your services are non-functioning. And even then an attacker who exploits Nextcloud will be able to read the other data. So an e2e encrypted services would still solve both issues. > The same applies to the other users as well... Oh, so all of your users can decrypt your encrypted mounts? > And this is just the risk that "working in the cloud" brings. Not at all. E2E encrypted services also work in the cloud. Services or machines are rebooting? No issue at all. You don't have to enter a passphrase to have your system running. E2e encrypted services just reboot. They don't care about the data they are handling. They don't even need to know what's in there. An attacker exploited on of the applications and gained access to data on the disk? That's bad of course but the data is still e2e encrypted so the sensible data is still secure. > There was an outage of all Microsoft services recently, no teams, no office 365, no azure ... The company where I worked was basically inoperable. That's unfortunate but how does this relate to e2e encryption? Remember that we're having this thread because you asked "_What extra benefit security-wise would end-to-end encryption give me?_". ;) ---------------------------------------------------------------------- Fluffer_Wuffer · 2023-11-23 13:15 I honestly don't get this... if they wanted to backdoor something, it won't be an OSS app, where the code is accessible to every-person and their dog. Then on top of this, they basically have access to all you're home network with IOT devices (and every other piece of electronics produced there), in addition to all your kids phones (assuming you have some) via TikTok etc.. There is some quality OSS coming from China, and this will increase... and it should be promoted.. the more the merrier! ---------------------------------------------------------------------- Firestarter321 · 2023-11-23 14:42 I don’t care what others do, however, I just have no interest storing documents with my SSN on their software. Could I go through the 50K+ lines of code (even though I’m not proficient with Go) looking for something nefarious…sure. Will I given that trusted software such as Nextcloud exists and is also free…nope.