Oddbean

folks do u know if local instance of #nextcloud even if not open to public or via .onion only DOES BROADCAST or LEAKS files or contents UPSTREAM to other file servers by any chance ? just checking #asknostr #backdoor content leaker @Sebastix @Dr. Hax @verita84 @Skipper @Kanzan @AverageJoe @Crusty 👨‍💻 i know it has bugs n issues for many new modules untested or unverified modles esp php looking to find anyone come across any #backdoor code leaking files to others without permission once u mapped some remote drives even within secured vpn/lan.

As long as you don't use any "Integration" Add-ons (for Dropbox or Google) and the federated cloud add-on it should not leak any files or data. Using nextcloud since it was called owncloud. Piece of mind.

good points thanks - not care much hacking or using unverified module in production - hardening or using reverse fixes that IF opening to public/limited friends on demand via onion 1. NO REASON use dropbox / google / onedrive - whole reason avoiding them their free snooping offers. 2. Federated chain delegation thing is new to me - so long link such server keep all private seems ok 3. At account admin level there are enough security - which group - OTP - folder permission etc even sharing via clearnet or onion SOME movies/pics so far i notice in docker its pretty fast even after REDUCING CPU threads of NGINX

just tested few stuff my docker instance running dummy domain locally perfectly fine (otp enabled) cannot reached even if opened to outside. some trusted domain etc config needed. so good not accessible. saw it making few outing internet connection - just for update etc maybe - its very sensitive any domain ssl cert changes once somehow running. i can spin another doocker domore tests instead breaking this. primary use NAS + media server is best for now. other bells n whistles later that may leak data create problems. https://image.nostr.build/a60b924604241a5684901a8df04a49936548acf549f6de7383c04d822f347389.png