Storage Box vs HDD for volumes

[Stardenver]

@Kubernetes said in Storage Box vs HDD for volumes:

Currently I am trying to do exactly the same. But I have problems to get the Storage Box as internal Storage in Nextcloud. How exactly did you do that?

I mounted the storage box as volume and assigned that volume to nextcloud in the settings (within cloudron - not in nextcloud) so it has access to it. I then installed the external storage app and added the volume to Nextcloud as local storage.

So 3 steps actually (which I will repeat):

1. mount as volume in cloudron settings
2. add volume to nextcloud in the cloudron apps settings for nextcloud
3. add volume as local storage within nextcloud settings

hope this helps

[Kubernetes]

@Stardenver Great, thanks a lot! I was not aware of the disabled external Storage App. It works like a charm.

[jdaviescoates]

@Stardenver said in Storage Box vs HDD for volumes:

use nextcloud encryption

I've read elsewhere on here that using Nextcloud encryption is a bad move because apparently it's "an absolute joke"

@privsec said in Encryption error since upgrade to 25.0.2:

next cloud encryption is an absolute joke.

Don’t use it

[Stardenver]

@jdaviescoates said in Storage Box vs HDD for volumes:

@Stardenver said in Storage Box vs HDD for volumes:

use nextcloud encryption

I've read elsewhere on here that using Nextcloud encryption is a bad move because apparently "it's a joke"

Not really. Its useless within Nexloud as your hoster could still access your installation or even get his hands on your encryption keys. But it prevents external storage providers from looking into your files.

So everyone with access to your server could somehow read your files, but external storages like Google Drive, AWS, Dropbox, etc don't have access to your server files and keys and therefor can't spy onto your files. So it prevents Google and Co from reading your files.

Its a solution to protect your "outsourced" files and not those that are stored directly on your server.

[jdaviescoates]

@Stardenver my understanding was that the issues run deeper than that and that it just doesn't work very well and is liable to break, but I could be completely mistaken about that.

[Stardenver]

@jdaviescoates said in Storage Box vs HDD for volumes:

@Stardenver my understanding was that the issues run deeper than that and that it just doesn't work very well and is liable to break, but I could be completely mistaken about that.

Could you provide some more information and maybe a source for this?

[jdaviescoates]

@Stardenver Sorry, I don't have any, I think it just my impression gleaned from people either saying bad stuff about it on here, or having problems with it on here. My impression could well be wrong.

[Stardenver]

@jdaviescoates I am not deep enough into this topic and can't say anything about problems or reasons to not use it within your Nextcloud installation - but I can tell for sure and by my own experience that it really keeps external providers from reading/scanning your files. I used it several times with different storage solutions and all files were encrypted and not accessible from within those external servers. So at least this part of it is working.

In case you stumble upon any more information or sources regarding this I would appreciate an update here, as this is really of an interesting topic.

[jdaviescoates]

@Stardenver you can see a bunch of posts on here if you just whack Nextcloud Encryption into the search box:

https://forum.cloudron.io/search?term=nextcloud+encryption&in=titlesposts

That in itself is a bit of red flag for me.

[Stardenver]

@jdaviescoates Thank you very much. This is indeed a red flag. Never had that problem but now I am afraid I may get it. Scares me a bit now.

[jdaviescoates]

@Stardenver said in Storage Box vs HDD for volumes:

Scares me a bit now.

Yeah, I'm generally a bit scared of encryption unless it's all automated by some app like Signal or whatever. I'm always worried something will go wrong or I'll forget/ loose my pw and loose access to my own files. I tend to feel that in my own personal circumstances that is a greater risk than someone nefarious managing to access my unencrypted files, so I mostly just don't encrypt stuff.

But this sounds like a pretty good method of getting Ubuntu's full disk encryption set-up with Cloudron (so long as you store you passwords safely, like in a password manager and printed out on paper, and maybe somewhere else too for good measure):

https://forum.cloudron.io/post/59269

For now though, I reckon my files are safe enough behind insanely long passwords plus 2FA