Applay full permission for www-data on /var/www/nextcloud

Reviewed-on: #52

.gitlab-ci.yml

@@ -1,6 +1,6 @@
-# Build on Bookworm
+# Build on Trixie
 default:
-  image: debian:bookworm
+  image: debian:trixie
 
 latest:
   # Build the latest .deb file
@@ -10,8 +10,8 @@ latest:
     - apt update && apt install -y build-essential fakeroot devscripts apache2-dev
     - export DEBEMAIL="NOREPLY@`hostname -d`"
     - mkdir -p builddir
-    - uscan --overwrite-download --destdir builddir
+    - uscan --overwrite-download --destdir builddir --download-version $NC_VERSION
-    - cd ../nextcloud-server-28.0.3
+    - cd ../nextcloud-server-$NC_VERSION
     - dpkg-buildpackage -rfakeroot
     - cd - ; cp ../nextcloud-server_*.deb .
   artifacts:

README.md

@@ -1,7 +1,7 @@
-## Instalation from repository
+## Installation from repository
 ```
-wget -qO - https://apt.jurisic.org/Release.key | gpg --dearmor | sudo dd of=/usr/share/keyrings/jurisic-keyring.gpg
+wget -qO /etc/apt/keyrings/jurisic-keyring.asc https://apt.jurisic.org/Release.key
-echo "deb [ signed-by=/usr/share/keyrings/jurisic-keyring.gpg ] https://apt.jurisic.org/debian/ $(lsb_release -cs) main contrib non-free" | sudo tee /etc/apt/sources.list.d/jurisic.list
+echo "deb [ signed-by=/etc/apt/keyrings/jurisic-keyring.asc ] https://apt.jurisic.org/debian/ $(lsb_release -cs) main contrib non-free" > /etc/apt/sources.list.d/jurisic.list 
 sudo apt update
 sudo apt install nextcloud-server
 ```
@@ -15,11 +15,11 @@ sudo apt-get install build-essential fakeroot devscripts apache2-dev
 ```
 git clone https://git.jurisic.org/ijurisic/nextcloud-deb.git
 cd nextcloud-deb
-git checkout bookworm
+git checkout trixie
 uscan --verbose --download-current-version
-cd ../nextcloud-server-28.0.3
+cd ../nextcloud-server-32.0.3
 dch -n
-dpkg-buildpackage -rfakeroot -us -uc
+dpkg-buildpackage -us -uc
 cd ..
-dpkg -i nextcloud-server_28.0.3-1~deb12_all.deb
+dpkg -i nextcloud-server_32.0.3-2~deb13_all.deb
 ```

debian/changelog

@@ -1,71 +1,30 @@
-nextcloud-server (28.0.3-1~deb12) bookworm; urgency=medium
+nextcloud-server (32.0.3-2~deb13) trixie; urgency=medium
 
-  * New upstream release 28.0.3
+  * Fixed occ script, postinstall permissions
+  * Updated rules, readme
 
- -- Ivan Jurišić <ivan@jurisic.org>  Mon, 04 Mar 2024 09:08:55 +0000
+ -- Ivan Jurišić <ivan@jurisic.org>  Tue, 08 Jan 2026 15:34:32 +0200
 
-nextcloud-server (28.0.2-1~deb12) bookworm; urgency=medium
+nextcloud-server (32.0.3-1~deb13) trixie; urgency=medium
 
-  * New upstream release 28.0.2
+  * New upstream release 32.0.3
 
- -- Ivan Jurišić <ivan@jurisic.org>  Mon, 05 Feb 2024 10:52:15 +0000
+ -- Jan Baumgarten <jan.baumgarten@iks.ag>  Tue, 16 Dec 2025 09:25:00 +0200
 
-nextcloud-server (27.1.6-1~deb12) bookworm; urgency=medium
+nextcloud-server (32.0.2-1~deb13) trixie; urgency=medium
 
-  * New upstream release 27.1.6
+  * New upstream release 32.0.2
 
- -- jan <jan.baumgarten@iks.ag>  Fri, 26 Jan 2024 08:42:57 +0100
+ -- Jan Baumgarten <jan.baumgarten@iks.ag>  Sun, 23 Nov 2025 22:34:00 +0200
 
-nextcloud-server (27.1.5-1~deb12) bookworm; urgency=medium
+nextcloud-server (32.0.1-1~deb13) trixie; urgency=medium
 
-  * New upstream release 27.1.5
+  * New upstream release 32.0.1
 
- -- Jan Baumgarten <jan.baumgarten@iks.ag>  Fri, 24 Nov 2023 21:28:32 +0100
+ -- Jan Baumgarten <jan.baumgarten@iks.ag>  Wed, 29 Oct 2025 14:27:00 +0200
 
-nextcloud-server (27.1.4-1~deb12) bookworm; urgency=medium
+nextcloud-server (32.0.0-1~deb13) trixie; urgency=medium
 
-  * New upstream release 27.1.4
+  * New upstream release 32.0.0
 
- -- Jan Baumgarten <jan.baumgarten@iks.ag>  Fri, 24 Nov 2023 21:28:32 +0100
+ -- Ivan Jurišić <ivan@jurisic.org>  Thu, 23 Oct 2025 07:50:27 +0200
-
-nextcloud-server (27.1.3-1~deb12) bookworm; urgency=medium
-
-  * New upstream release 27.1.3
-
- -- Ivan Jurišić <ivan@jurisic.org>  Fri, 10 Nov 2023 12:22:32 +0000
-
-nextcloud-server (27.1.0-1~deb12) bookworm; urgency=medium
-
-  * New upstream release 27.1.0
-
- -- Ivan Jurišić <ivan@jurisic.org>  Mon, 18 Sep 2023 08:59:43 +0000
-
-nextcloud-server (27.0.2-1~deb12) bookworm; urgency=medium
-
-  * New upstream release 27.0.2
-
- -- Ivan Jurišić <ivan@jurisic.org>  Tue, 22 Aug 2023 11:20:48 +0000
-
-nextcloud-server (27.0.1-1~deb12) bookworm; urgency=medium
-
-  * New upstream release 27.0.1
-
- -- Ivan Jurišić <ivan@jurisic.org>  Thu, 27 Jul 2023 12:13:18 +0000
-
-nextcloud-server (26.0.4-1~deb12) bookworm; urgency=medium
-
-  * New upstream release 26.0.4
-
- -- Ivan Jurišić <ivan@jurisic.org>  Wed, 26 Jul 2023 11:40:04 +0000
-
-nextcloud-server (26.0.3-1~deb12) bookworm; urgency=medium
-
-  * New upstream release 26.0.3
-
- -- Ivan Jurišić <ivan@jurisic.org>  Mon, 26 Jun 2023 08:07:08 +0200
-
-nextcloud-server (26.0.2-1~deb12) bookworm; urgency=medium
-
-  * New upstream release 26.0.2
-
- -- Ivan Jurišić <ivan@jurisic.org>  Mon, 05 Jun 2023 06:13:02 +0000

debian/conffiles

@@ -1 +0,0 @@
-/var/www/nextcloud/.htaccess

debian/nextcloud-server.install

@@ -1,3 +1,11 @@
+.htaccess var/www/nextcloud
+.user.ini var/www/nextcloud
+*.php var/www/nextcloud
+*.html var/www/nextcloud
+*.txt var/www/nextcloud
+*.json var/www/nextcloud
+*.lock var/www/nextcloud
+*.toml var/www/nextcloud
 3rdparty var/www/nextcloud
 apps var/www/nextcloud
 config var/www/nextcloud
@@ -9,13 +17,13 @@ ocs-provider var/www/nextcloud
 resources var/www/nextcloud
 themes var/www/nextcloud
 updater var/www/nextcloud
-*.php var/www/nextcloud
-*.html var/www/nextcloud
-*.txt var/www/nextcloud
-.htaccess var/www/nextcloud
-.user.ini var/www/nextcloud
 AUTHORS var/www/nextcloud
 COPYING var/www/nextcloud
+LICENSES var/www/nextcloud
 occ var/www/nextcloud
+composer.json var/www/nextcloud
+composer.lock var/www/nextcloud
+package-lock.json var/www/nextcloud
+package.json var/www/nextcloud
 debian/apache/nextcloud.conf		etc/apache2/conf-available
 debian/usr/sbin/occ			usr/sbin

debian/nextcloud-server.postinst

@@ -38,17 +38,24 @@ configure)
         apache2_invoke enmod mime || exit $?
     fi
 
-    if [ "$(su 'www-data' -s /bin/sh -c 'php /var/www/nextcloud/occ status' | grep 'installed:' | cut -f2 -d ':' | xargs)" = "false" ]; then
+    # Permissions and owners
+    chown -R www-data:www-data /var/www/nextcloud
+    chmod 644 /var/www/nextcloud/.htaccess
+    chmod +x /var/www/nextcloud/occ
+    chmod +x /usr/sbin/occ
+
+    # Check status
+    if [ "$(/usr/sbin/occ status | grep 'installed:' | cut -f2 -d ':' | xargs)" = "false" ]; then
         echo "Nextcloud is not configured, please use open web browser http://<your_server_ip>/nextcloud"
-        echo "After configure please run  su 'www-data' -s /bin/sh -c 'php /var/www/nextcloud/occ config:system:set --value true upgrade.disable-web'"
+        echo "After configure please run  occ config:system:set --value true upgrade.disable-web'"
-    elif [ "$(su 'www-data' -s /bin/sh -c 'php /var/www/nextcloud/occ status' | grep 'installed:' | cut -f2 -d ':' | xargs)" = "true" ]; then
+    elif [ "$(/usr/sbin/occ status | grep 'installed:' | cut -f2 -d ':' | xargs)" = "true" ]; then
-        su 'www-data' -s /bin/sh -c 'php /var/www/nextcloud/occ upgrade'
+        /usr/sbin/occ maintenance:update:htaccess
-        su 'www-data' -s /bin/sh -c 'php /var/www/nextcloud/occ db:add-missing-indices'
+        /usr/sbin/occ upgrade
-        su 'www-data' -s /bin/sh -c 'php /var/www/nextcloud/occ config:system:set --value true upgrade.disable-web' >/dev/null || true
+        /usr/sbin/occ db:add-missing-indices
+        /usr/sbin/occ config:system:set --value true upgrade.disable-web >/dev/null || true
     else
         echo "Got unexpect answer, occ status can't to read satus of nextcloud. Check php installation."
     fi
-
     ;;
 
 abort-upgrade | abort-remove | abort-deconfigure) ;;

debian/rules

@@ -13,19 +13,4 @@ override_dh_fixperms:
 	mkdir -p debian/nextcloud-server/var/www/nextcloud/updater
 
 	find debian/nextcloud-server/var/www/nextcloud -type f -print0 | xargs -0 chmod 0640
-	find debian/nextcloud-server/var/www/nextcloud -type d -print0 | xargs -0 chmod 0750
+	find debian/nextcloud-server/var/www/nextcloud -type d -print0 | xargs -0 chmod 0770
-
-	chown -R www-data:www-data debian/nextcloud-server/var/www/nextcloud
-	chown -R www-data:www-data debian/nextcloud-server/var/www/nextcloud/apps
-	chown -R www-data:www-data debian/nextcloud-server/var/www/nextcloud/config
-	chown -R www-data:www-data debian/nextcloud-server/var/www/nextcloud/data
-	chown -R www-data:www-data debian/nextcloud-server/var/www/nextcloud/themes
-	chown -R www-data:www-data debian/nextcloud-server/var/www/nextcloud/updater
-
-	chmod 0644 debian/nextcloud-server/var/www/nextcloud/.htaccess
-	chown www-data:www-data debian/nextcloud-server/var/www/nextcloud/.htaccess
-
-	chmod +x debian/nextcloud-server/var/www/nextcloud/occ
-	chmod +x debian/usr/sbin/occ
-
-	

debian/usr/sbin/occ

@@ -2,7 +2,7 @@
 
 if [ $(id -u) -eq 0 ] || [ $(id -u) -eq 33 ];then
   OPT="$@"
-  su www-data -s /bin/sh -c "/usr/bin/php /var/www/nextcloud/occ $OPT"
+  su -g www-data -s /bin/sh -c "/var/www/nextcloud/occ $OPT"
 else
   echo "Please run as root"
 fi

debian/watch

@@ -1,3 +1,3 @@
 version=4
-opts="pgpmode=auto" https://download.nextcloud.com/server/releases/nextcloud-(28.*)\.zip debian uupdate
+opts="pgpmode=auto" https://download.nextcloud.com/server/releases/nextcloud-(32.*)\.zip debian uupdate