{
 "slug": "nextcloud",
 "name": "Nextcloud",
 "tagline": "File sync, sharing and collaboration suite for teams",
 "category": "collaboration",
 "use_cases": [
  "file-sync",
  "document-collaboration",
  "private-cloud"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Nextcloud GmbH",
  "url": "https://nextcloud.com",
  "license": "AGPL-3.0",
  "license_url": "https://github.com/nextcloud/server/blob/master/COPYING"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "35.0.2",
   "last_build": "2026-10-25",
   "entity_id": "prod-bxsofmslugqtc",
   "ami_alias": "/aws/service/marketplace/prod-bxsofmslugqtc/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-dk7sazmkic3vc",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "35.0.2",
   "last_build": "2026-10-24",
   "offer_id": "nextcloud",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:nextcloud:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.nextcloud?tab=Overview",
   "recommended_vm_size": "Standard_D4s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/nextcloud/",
  "json": "https://lynxroute.com/products/nextcloud/product.json"
 },
 "release_notes": [
  {
   "version": "35.0.2",
   "title": "Nextcloud 35.0.2",
   "notes": "* Nextcloud Server updated 34.0.5 -> 35.0.2, a major release. AGPL-3.0 unchanged\n* New instances deploy 35.0.2 directly on PHP 8.3 and MariaDB 10.11, both meeting the raised Nextcloud 35 minimums\n* Upgrading an existing 34.x instance: use the built-in updater or occ upgrade; skipping a major version is not supported\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build, including the PHP2Shell fix (USN-8948-1)\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-25",
    "azure": "2026-10-24"
   }
  },
  {
   "version": "34.0.5",
   "title": "Nextcloud 34.0.5",
   "notes": "* Nextcloud Server updated 34.0.4 -> 34.0.5, a maintenance release on the 34 line. AGPL-3.0 unchanged\n* Security hardening: CSRF protection on the share-accept endpoint, calendar and address-book sharing limited to the owner, sensitive values kept out of logs and configuration output, session and remember-me fixes\n* Security: ships the PHP2Shell fix (CVE-2026-109618, CVE-2026-109619; unauthenticated remote code execution in PHP) via Ubuntu php8.3 8.3.6-0ubuntu0.24.04.13 (USN-8948-1). Earlier images of this product carry the vulnerable PHP and should be replaced\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23"
   }
  },
  {
   "version": "34.0.4",
   "title": "Nextcloud 34.0.4",
   "notes": "* Nextcloud updated 34.0.3 -> 34.0.4, a maintenance release on the 34 branch. AGPL-3.0 unchanged\n* Sharing fixes: shares created with multiple mount permissions, and public links spanning multiple mounts, now resolve correctly\n* Preview handling corrected - version metadata is removed by preview ID, and preview pagination, ordering and mapping queries are fixed\n* Calendar invitation mail no longer carries an unrelated user's name, and group display names are now set on every backend that supports it\n* Refreshed code-signing revocation lists, with bundled app updates across activity, notifications, photos, text and viewer\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-11",
    "azure": "2026-09-13"
   }
  },
  {
   "version": "34.0.3",
   "title": "Nextcloud v34.0.3",
   "notes": "* Re-release of Nextcloud 34.0.3. The application version is unchanged; this build refreshes the underlying operating system image\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-08-19"
   }
  },
  {
   "version": "34.0.3",
   "title": "Nextcloud 34.0.3",
   "notes": "* Nextcloud 34.0.3 - maintenance release (patch from 34.0.2) with upstream bugfixes and bundled security updates. AGPL-3.0\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-08-19"
   }
  },
  {
   "version": "34.0.2",
   "title": "Nextcloud 34.0.2",
   "notes": "* Nextcloud 34.0.2 - maintenance release (patch from 34.0.1) with upstream bugfixes and bundled security updates. AGPL-3.0\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-07-23",
    "azure": "2026-07-27"
   }
  },
  {
   "version": "34.0.1",
   "title": "Nextcloud 34.0.1",
   "notes": "* Updated Nextcloud to 34.0.0 (major release)\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-07-10",
    "azure": "2026-07-11"
   }
  },
  {
   "version": "34.0.0",
   "title": "Nextcloud 34.0.0",
   "notes": "* Updated Nextcloud to 34.0.0 (major release)\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n* CVE-scanned before release; SBOM (CycloneDX 1.6) and CIS Conformance Report included\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-19",
    "azure": "2026-06-20"
   }
  },
  {
   "version": "33.0.5",
   "title": "Nextcloud 33.0.5 - June 2026",
   "notes": "* Maintenance releases 33.0.4 and 33.0.5: bug fixes and stability improvements across server, files, photos, and text.\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-06",
    "azure": "2026-06-07"
   }
  },
  {
   "version": "33.0.3",
   "title": "Nextcloud 33.0.3 - May 2026",
   "notes": "* Nextcloud 33.0.3 on Ubuntu 24.04 LTS\n* Patch update from 33.0.2 (AWS catch-up to Azure, Live on Azure since 2026-05-12)\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-05-23"
   }
  },
  {
   "version": "33.0.2",
   "title": "Nextcloud 33.0.2 - Initial release (April 2026)",
   "notes": "* Nextcloud 33.0.2 on Ubuntu 24.04 LTS\n* Nginx + MariaDB + PHP 8.3 + Redis, Certbot pre-installed\n* SBOM, CIS Report, IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-04-25"
   }
  }
 ],
 "release_history": [
  {
   "version": "35.0.2",
   "aws": "2026-10-25",
   "azure": "2026-10-24"
  },
  {
   "version": "34.0.5",
   "aws": "2026-10-23"
  },
  {
   "version": "34.0.4",
   "aws": "2026-09-11",
   "azure": "2026-09-13"
  },
  {
   "version": "34.0.3",
   "aws": "2026-09-04",
   "azure": "2026-08-19"
  },
  {
   "version": "34.0.2",
   "aws": "2026-07-23",
   "azure": "2026-07-27"
  },
  {
   "version": "34.0.1",
   "aws": "2026-07-10",
   "azure": "2026-07-11"
  },
  {
   "version": "34.0.0",
   "aws": "2026-06-19",
   "azure": "2026-06-20"
  },
  {
   "version": "33.0.5",
   "aws": "2026-06-06",
   "azure": "2026-06-07"
  },
  {
   "version": "33.0.3",
   "aws": "2026-05-23"
  },
  {
   "version": "33.0.2",
   "aws": "2026-04-25"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-bxsofmslugqtc/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer nextcloud --plan payg-gen2\naz vm create -g my-rg -n nextcloud --size Standard_D4s_v3 \\\n  --image lynxroute:nextcloud:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Nextcloud is the leading open-source self-hosted file sync, share and collaboration platform - a PHP 8 web application served by Nginx with PHP-FPM and MariaDB, backed by Redis for session and file-locking caches. The bundled feature set covers file sync via desktop and mobile apps, end-to-end and server-side encryption, shared links and password-protected drops, calendar (CalDAV), contacts (CardDAV), email (Mail), notes, deck (project management), and Nextcloud Talk video conferencing - plus 100+ optional apps from the community store. A drop-in self-hosted alternative to Google Drive, Dropbox and Microsoft 365 for GDPR-sensitive teams and regulated industries. AGPL-3.0 license - no per-user fees, no vendor lock-in, all data inside your tenant.",
  "image_adds": "Security hardening:\n* Admin credentials generated at first boot\n* Certbot pre-installed - HTTPS with Let's Encrypt in one command\n* MariaDB database accessible from localhost only\n* Redis unix socket\n* UFW firewall - ports 22, 80, 443 only\n* fail2ban, AppArmor\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}