This repository provides AWS CloudFormation templates to deploy NextCloud on AWS completely. No need to manage servers or manually react to monitoring events with adding capacity manually.
- Elastic Container Service - Fargate
- Running and scaling the official nextcloud docker container (Apache, PHP)
- Elastic Filesystem - NFS
- Persist basic settings and configuration, support official nextcloud upgrade mechanism
- Amazon S3
- Primary data storage for cloud native data handling (archiving, tiering, versioning)
- RDS Aurora Serverless - RDS (Postgres)
- Cloud native full managed auto-scaled database system backing the nextcloud installation
- ElastiCache - Redis
- Handles PHP Sessions to enable container cluster to scale easily without interruption for end-users
- Application Load Balancer, Route53, Amazon Certificate Manager
- Secures the application with HTTPS, balances load, performs health checks, auto-certificate renewal
- If you have never used AWS ECS within your AWS Account before, create the Service-Linked Role before going on. See the official AWS Documentation
aws cloudformation package --template-file ecs-nextcloud.yml --s3-bucket <cfn-artifact-bucket-name> --output-template-file packaged.yaml- Deploy packaged CloudFormation file (
packaged.yaml) with appropriate parameters- For example using
aws cloudformation deploy --template-file packaged.yaml --stack-name nextcloud-test-env --parameter-overrides DbPassword=<DB-Admin-Password> NextCloudAdminPassword=<Nextcloud-Admin-Password> IsolationLevel=Public --capabilities CAPABILITY_IAM
- For example using
- The VPC setup has three levels of isolation
Publicplaces containers within the public subnetsPrivateplaces containers into private subnets, deploys one NAT Gateway for outbound internet accessPrivateHAsame as privat, but deploys two NAT Gateways
- After the CloudFormation Stack is deployed successfully it takes up to 15min for the frontend being available initially
- Find the Nextcloud URLs within the CloudFormation Outputs
The recommendation is to use the at least the default values to get decent performance (cpu: 1024, mem: 2048).
A desired container capacity of 2 allows scaling and re-deployment without downtime. For initialization go with a single container to avoid clashes when copying files during the setup phase.
The baseline cost drivers are the AWS RDS database, ElastiCache Redis and Fargate task costs. Find the hourly charged costs for your AWS region within the AWS pricing pages:
- Check per ACU (Auora Capacity Unit) costs https://aws.amazon.com/rds/aurora/pricing/
- Fargate Pricing https://aws.amazon.com/fargate/pricing/
- ElastiCache Redis Pricing https://aws.amazon.com/elasticache/pricing/
- Create backups of RDS and EFS
- Suspend AutoScaling using the CloudFormation parameter
- Scale in to 1 task (set desired ECS capacity to 1)
- Update CFN stack with new version number
- Wait for Nextcloud to become available
- Verify the upgrade was successful
- Scale out service to desired size and disable AutoScaling suspension
- Enhanced monitoring for fine granular auto-scaling (ECS)
- Enable WebCron
- Whenever Nextcloud supports it
- Use short-term credentials instead of IAM User for S3 access
- Redis Cluster Support
Sample CloudWatch Dashboard pre-configured with basic metrics will be deployed within CloudFormation
- While code samples in this repository has been tested and believe it works well, as always, be sure to test it in your environment before using it in production!
- It is highly recommended to change the administrator password after initial deployment
- While the
PublicVPC isolation level is the most cost efficient one, the suggestion is, for production workloads keep instances and containers in private subnets. This lowers risk, e.g. opening up ports with wrongly configured inbound port on VPC security groups.
See CONTRIBUTING for more information.
This library is licensed under the MIT-0 License. See the LICENSE file.
This deployment references the official Nextcloud Docker image which is published under AGPL-3.0 License.