{"id":4859,"date":"2025-10-06T12:09:08","date_gmt":"2025-10-06T04:09:08","guid":{"rendered":"https:\/\/dasmz.com\/?p=4859"},"modified":"2025-10-08T22:18:16","modified_gmt":"2025-10-08T14:18:16","slug":"%e9%80%9a%e8%bf%87%e5%85%ac%e7%bd%91%e6%9c%8d%e5%8a%a1%e5%99%a8%e6%98%a0%e5%b0%84%e5%ae%b6%e9%87%8c%e7%9a%84nextcloud%e7%9a%84webdav","status":"publish","type":"post","link":"https:\/\/dasmz.com\/?p=4859","title":{"rendered":"\u901a\u8fc7\u516c\u7f51\u670d\u52a1\u5668\u6620\u5c04\u5bb6\u91cc\u7684nextcloud\u7684webdav"},"content":{"rendered":"\n

\u524d\u7f00\u3001\u6587\u6863\u4fee\u6539\u8bb0\u5f55<\/strong><\/p>\n\n\n\n

20251006 \u521d\u59cb\u5316\u7f16\u8f91\u6b64\u6587\u7ae0\uff0c\u5b8c\u7a3f\uff0c\u6682\u672a\u89e3\u51b3\uff0c\u6c42\u52a9\n20251008 \u66f4\u65b0\u6587\u6863<\/pre>\n\n\n\n
\u7ae0\u82821\u3001\u9700\u6c42\u63cf\u8ff0<\/strong><\/p>\n\n\n\n
\u5bb6\u4e2d\u670d\u52a1\u5668<\/strong>\uff1a<\/p>\n\n\n\n
\u8fd0\u884c Nextcloud (Docker)\uff0c\u6ca1\u6709\u516c\u7f51 IP\uff0c\u901a\u8fc7 frpc\uff08TCP \u6a21\u5f0f\uff09 \u5c06 80 \u7aef\u53e3\u6620\u5c04\u5230\u516c\u7f51\u670d\u52a1\u5668<\/p>\n\n\n\n
\u516c\u7f51\u670d\u52a1\u5668<\/strong>\uff1a<\/p>\n\n\n\n
\u8fd0\u884c frps\uff0c\u90e8\u7f72 nginx + HTTPS \u8bc1\u4e66\uff0cnginx \u5bf9\u5916\u66b4\u9732\u7684\u662f HTTPS\uff0cnginx \u53cd\u4ee3\u5230 frp \u8f6c\u53d1\u6765\u7684 nextcloud HTTP<\/p>\n\n\n\n
\u73b0\u8c61\uff1a<\/p>\n\n\n\n
Web\uff08\u6d4f\u89c8\u5668\uff09\u8bbf\u95ee\u6b63\u5e38nextcloud\u3002WebDAV \u7684 HTTPS \u8bbf\u95ee\uff08\u4f8b\u5982\u901a\u8fc7 https:\/\/nas.mydomain.com\/remote.php\/dav\/files\/...<\/code>\uff09\u4e0d\u901a\u3002<\/p>\n\n\n\n
\u7ae0\u82822\u3001\u6545\u969c\u6392\u67e51 – Nginx\u53cd\u4ee3\u7684\u65f6\u5019\uff0c\u5c11\u4e86\u5bf9webdav\u7684\u53c2\u6570\u652f\u6301<\/p>\n\n\n\n
WebDAV \u4e0d\u4ec5\u7528 GET \/ POST\uff0c\u8fd8\u4f1a\u7528 PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK, UNLOCK\uff0c\u8fd9\u4e9b\u65b9\u6cd5\u5982\u679c\u88ab nginx \u5c4f\u853d\u6216\u672a\u8f6c\u53d1\uff0c\u4f1a\u76f4\u63a5\u5bfc\u81f4 WebDAV \u5ba2\u6237\u7aef\u62a5\u9519\uff08\u4f8b\u5982 Windows \u6216 macOS Finder \u4f1a\u76f4\u63a5\u663e\u793a\u201c\u8fde\u63a5\u5931\u8d25\u201d\uff09\u3002<\/p>\n\n\n\n
proxy_methods \u6307\u4ee4\uff0c\u56e0\u4e3a\u90a3\u662f \u7b2c\u4e09\u65b9\u6a21\u5757\uff08ngx_http_proxy_methods_module\uff09 \u7684\u8bed\u6cd5\uff0c\u4e0d\u5728\u6807\u51c6\u7248 nginx \u4e2d\u3002<\/p>\n\n\n\n
\u53ea\u8981\u4e0d\u5199 proxy_methods \u548c limit_except\uff0cnginx \u9ed8\u8ba4\u4f1a\u8f6c\u53d1\u6240\u6709 HTTP \u65b9\u6cd5\uff0c\u5305\u62ec PROPFIND\u3002<\/p>\n\n\n\n
\u90a3\u6211\u8fd9\u4e2a\u9519\u8bef\uff0c\u5e94\u8be5\u4e0d\u662f\u8fd9\u4e2a\u56e0\u7d20\u5bfc\u81f4\u7684\u3002<\/p>\n\n\n\n
\u7ae0\u82823\u3001 \u6545\u969c\u6392\u67e52 – Nextcloud\u7684\u914d\u7f6e\u6587\u4ef6<\/p>\n\n\n\n
\u6211\u914d\u7f6e\u6587\u4ef6\u7684\u8def\u5f84\u662f\uff0c\/data\/config\/config.php\uff0c\u786e\u4fdd\u53cd\u4ee3\u540e\u8fd4\u56de\u7684\u94fe\u63a5\u662f HTTPS\u3002<\/p>\n\n\n\n
\u6307\u5b9a\u4fe1\u4efb\u6765\u6e90\uff1a trusted_proxies \u53c2\u6570\u662f\u4e00\u4e2a\u6570\u7ec4\uff0c\u7528\u4e8e\u660e\u786e\u5217\u51fa Nextcloud \u5e94\u8be5\u4fe1\u4efb\u7684 \u53cd\u5411\u4ee3\u7406\u670d\u52a1\u5668\u7684 IP \u5730\u5740 \u6216 IP \u5730\u5740\u6bb5\uff08CIDR \u683c\u5f0f\uff09\u3002<\/p>\n\n\n\n
\u6b63\u786e\u914d\u7f6e trusted_proxies<\/code> \u540e\uff0cNextcloud \u624d\u80fd\u4ece\u53cd\u5411\u4ee3\u7406\u8bbe\u7f6e\u7684\u7279\u5b9a HTTP \u5934\uff08\u9ed8\u8ba4\u4e3a X-Forwarded-For<\/code>\uff09\u4e2d\u63d0\u53d6\u51fa\u771f\u6b63\u7684 \u5ba2\u6237\u7aef IP \u5730\u5740<\/strong>\u3002<\/p>\n\n\n\n
  'trusted_proxies' => \n  array (\n    0 => '192.168.1.10', \/\/ \u4f60\u7684\u53cd\u5411\u4ee3\u7406\u670d\u52a1\u5668\u7684 IPv4 \u5730\u5740\n    1 => '2001:db8::1',  \/\/ IPv6 \u5730\u5740\u793a\u4f8b\n    2 => '172.16.0.0\/12',\/\/ IP \u5730\u5740\u6bb5 (CIDR) \u793a\u4f8b\uff0c\u4f8b\u5982 Docker \u7f51\u7edc\u7684\u8303\u56f4\n  ),\n  \/\/ ... \u5176\u4ed6\u914d\u7f6e ...\n\n'overwriteprotocol' => 'https',\n'overwrite.cli.url' => 'https:\/\/nas.mydomain.com',<\/pre>\n\n\n\n
\u5728\u8fd9\u4e2a\u53c2\u6570\u4e2d\uff0c\u589e\u52a0\u6211\u670d\u52a1\u5668\u7684\u57df\u540d\uff0c\u589e\u52a0\u670d\u52a1\u5668\u7684IP\uff0c\u91cd\u542f\u4e00\u4e0bdocker\/nextcloud\u5b9e\u4f8b\u3002<\/p>\n\n\n\n
\u7ae0\u82824\u3001\u6545\u969c\u6392\u67e53 – frp\u7684TCP\u591a\u8def\u590d\u7528<\/p>\n\n\n\n
\u542f\u7528 TCP \u591a\u8def\u590d\u7528\uff0c\u5e94\u8be5\u5728\u914d\u7f6e\u6587\u4ef6\u4e2d\uff0ctcp_mux = true \uff0c \u4e0d\u8fc7\uff0c\u6211\u8fd9\u91ccfrp 0.65.0 \u7248\u672c<\/p>\n\n\n\n
# tcp_mux = true  # \u9ed8\u8ba4\u5c31\u662f true\uff0c\u53ef\u4ee5\u4e0d\u5199<\/pre>\n\n\n\n
\u7ae0\u82825\u3001\u6545\u969c\u6392\u67e54 – nextcloud\u7684\u5e94\u7528\u5bc6\u7801<\/p>\n\n\n\n
Nextcloud \u7684 WebDAV \u9ed8\u8ba4\u4e0d\u63a5\u53d7\u666e\u901a\u7528\u6237\u5bc6\u7801\uff08\u5982\u679c\u5f00\u542f\u4e86\u53cc\u91cd\u8ba4\u8bc1\u3001OIDC\u3001\u6216 brute-force protection\uff09\u3002<\/p>\n\n\n\n
\u5728 Nextcloud \u7f51\u9875\u7aef\uff1a<\/p>\n\n\n\n
\u70b9\u51fb\u53f3\u4e0a\u89d2\u5934\u50cf \u2192 \u201c\u5b89\u5168\u201d; \u5728\u201c\u8bbe\u5907\u4e0e\u4f1a\u8bdd\u201d\u2192\u201c\u521b\u5efa\u65b0\u5e94\u7528\u5bc6\u7801\u201d; \u590d\u5236\u751f\u6210\u7684\u5bc6\u7801<\/p>\n\n\n\n
\u589e\u52a0\u4e86\uff0c\u5c1d\u8bd5\uff0c\u4e5f\u6ca1\u6709\u7528\uff0c\u5e94\u8be5\u4e5f\u4e0d\u662f\u8fd9\u4e2a\u95ee\u9898\u3002<\/p>\n\n\n\n
\u7ae0\u82826\u3001\u6545\u969c\u6392\u67e55 – nginx\u7684\u914d\u7f6e<\/p>\n\n\n\n
\u5bf9\u4e8enginx\uff0c\u589e\u52a0http2\u7684\u914d\u7f6e\uff0c\u6211\u8fd9\u91cc\u7248\u672c\u662f1.28.0\uff0cHTTP\/2 \u662f\u8fd9\u6837\u542f\u7528\u7684<\/p>\n\n\n\n
listen 443 ssl;\nhttp2 on;<\/pre>\n\n\n\n
\u5b8c\u5168\u517c\u5bb9 HTTP\/1.1 \u56de\u9000\uff0c\u589e\u52a0\u4e0a\u6765\u3002\u5c34\u5c2c\uff0c\u4e5f\u6ca1\u5565\u7528\u3002<\/p>\n\n\n\n
\u7ae0\u82827\u3001\u6545\u969c\u6392\u67e56 – frp\u7684\u53c2\u6570<\/p>\n\n\n\n
\u6211\u8fd9\u91cc\u914d\u7684frp\uff0c\u8d70\u7684TCP\uff0c\u8fd9\u4e2a\u53ef\u80fd\u662f\u4e0d\u5bf9\u7684\uff0cfrps\u548cfrpc\u4e4b\u95f4\u7684tcp\u901a\u9053\u662f\u7ecf\u8fc7TLS\u52a0\u5bc6\u7684\uff0c\u8fd9\u6837\u7684\u8bdd\uff0c\u53ef\u80fd\u662f\u5b58\u5728TLS in TLS\u7684\u60c5\u51b5\u3002<\/p>\n\n\n\n
\u5982\u679c\u662f\u8fd9\u6837\u7684\u60c5\u51b5\uff0c\u90a3\u5c31\u76f4\u63a5\u5148docker\u91cd\u65b0\u62c9\u4e00\u4e2a\u7eafHTTP\u65b9\u5f0f\u7684nextcloud\u5bb9\u5668\u770b\u770b\uff0c\u76f4\u63a5\u6620\u5c04\u7528ftp\u7684TCP\u65b9\u5f0f\u6620\u5c04\u672c\u5730\u7684http\u53bb\u516c\u7f51\u8bd5\u8bd5\u3002<\/p>\n\n\n\n
\u7528\u7eafHTTP\u5012\u662f\u6ca1\u5565\u95ee\u9898\u3002<\/p>\n\n\n\n
\u7ae0\u82828\u3001<\/strong>\u6545\u969c\u6392\u67e57 – \u4fee\u6539\u6ce8\u518c\u8868<\/p>\n\n\n\n
Windows \u9700\u8981\u4fee\u6539\u6ce8\u518c\u8868\u624d\u80fd\u652f\u6301\u975e\u5fae\u8f6f WebDAV \u670d\u52a1\u5668<\/p>\n\n\n\n
[HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\WebClient\\Parameters]
“BasicAuthLevel”=dword:00000002<\/p>\n\n\n\n
0 \u7981\u7528\u57fa\u672c\u8ba4\u8bc1\n\n1 \u53ea\u5141\u8bb8 HTTPS \u57fa\u672c\u8ba4\u8bc1\n\n2 \u5141\u8bb8 HTTP\/HTTPS \u57fa\u672c\u8ba4\u8bc1\uff08\u63a8\u8350\u81f3\u5c11\u4e3a 1\uff09<\/pre>\n\n\n\n
net stop WebClient\nnet start WebClient<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u7ae0\u82829\u3001\u6545\u969c\u6392\u67e58 – \u914d\u7f6e\u67b6\u6784\u53d8\u5316<\/strong><\/p>\n\n\n\n
\u4ece\u539f\u5148\u7684
\u5bb6\u4e2d\u670d\u52a1\u5668\uff1a\u8fd0\u884c Nextcloud (Docker)\uff0c\u6ca1\u6709\u516c\u7f51 IP\uff0c\u901a\u8fc7 frpc\uff08TCP \u6a21\u5f0f\uff09 \u5c06 80 \u7aef\u53e3\u6620\u5c04\u5230\u516c\u7f51\u670d\u52a1\u5668
\u516c\u7f51\u670d\u52a1\u5668\uff1a\u8fd0\u884c frps\uff0c\u90e8\u7f72 nginx + HTTPS \u8bc1\u4e66\uff0cnginx \u5bf9\u5916\u66b4\u9732\u7684\u662f HTTPS\uff0cnginx \u53cd\u4ee3\u5230 frp \u8f6c\u53d1\u6765\u7684 nextcloud HTTP<\/p>\n\n\n\n
\u8c03\u6574\u4e3a
\u5bb6\u4e2d\u670d\u52a1\u5668\uff1a\u8fd0\u884c Nextcloud (Docker)\/TCP\/80\uff0c\u6ca1\u6709\u516c\u7f51 IP\uff0c\u901a\u8fc7\u52a0\u8f7d\u8bc1\u4e66\u7684Nginx\u53cd\u4ee3\u672c\u573080\u5230\u672c\u673a\u7684TCP\/SSL\/443\uff0c\u901a\u8fc7 frpc\uff08TCP \u6a21\u5f0f\uff09 \u5c06 443 \u7aef\u53e3\u6620\u5c04\u5230\u516c\u7f51\u670d\u52a1\u5668
\u516c\u7f51\u670d\u52a1\u5668\uff1a\u8fd0\u884c frps\uff0c\u901a\u8fc7\u521a\u521afrpc\u4e0a\u6307\u5b9a\u7684TCP\/SSL\/\u516c\u7f51\u7aef\u53e3\u8bbf\u95ee<\/p>\n\n\n\n
\u5373\u76f8\u5f53\u4e0eHTTPS \u573a\u666f\u7684\u76f4\u901a\u914d\u7f6e\uff08TLS passthrough\uff09\uff0c\u907f\u514d\u7ecf\u8fc7frp\u96a7\u9053\u7684\u65f6\u5019\u7684TLS in TLS\u7684\u95ee\u9898\uff0c\u8fd9\u4e2a\u4e5f\u662f\u6211\u4e00\u5f00\u59cb\u6000\u7591\u7684\u70b9\u3002<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u7ae0\u828210\u3001\u6545\u969c\u6392\u67e59 – \u6d4b\u8bd5 WebDAV \u7aef\u70b9\uff08\u4e0d\u5e26\u8ba4\u8bc1\uff09<\/p>\n\n\n\n
curl -i http:\/\/localhost\/remote.php\/dav\/<\/p>\n\n\n\n
\u8868\u793a WebDAV \u63a5\u53e3\u5b58\u5728\uff0c\u53ea\u662f\u9700\u8981\u767b\u5f55\u3002<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u9644\u5f551\u3001\u89c6\u9891\u64cd\u4f5c\u6f14\u793a<\/strong><\/p>\n\n\n\n
\u9644\u5f552\u3001@Dasmz<\/strong><\/p>\n\n\n\n
\u535a\u5ba2\u5185\uff0c\u6240\u6709\u6559\u7a0b\u4e3a\u624b\u6253\u539f\u521b\u6559\u7a0b\uff0c\u5982\u679c\u6280\u672f\u6559\u7a0b\u5bf9\u60a8\u6709\u6240\u5e2e\u52a9\uff0c\u6b22\u8fce\u6253\u8d4f\u4f5c\u8005\u3002\u6280\u672f\u5c42\u9762\uff0c\u95fb\u9053\u6709\u5148\u540e\uff0c\u5982\u6709\u758f\u6f0f\u3001\u9519\u8bef\uff0c\u6b22\u8fce\u6307\u6b63\u3002\u6280\u672f\u535a\u5ba2\u7684\u5185\u5bb9\uff0c\u4e00\u822c\u5177\u6709\u4e00\u5b9a\u7684\u73af\u5883\u4f9d\u8d56\uff0c\u5177\u6709\u4e00\u5b9a\u7684\u5e74\u4ee3\u4f9d\u8d56\uff0c\u914c\u60c5\u53c2\u8003\u5176\u4e2d\u7684\u5185\u5bb9\uff0c\u8bf7\u52ff\u5b8c\u5168\u7167\u642c\u7167\u6284\u3002<\/p>\n\n\n\n
\u5bf9\u4e8e\u535a\u5ba2\u5185\u5df2\u63d0\u53ca\u7684\u4e13\u4e1a\u77e5\u8bc6\uff0c\u5982\u679c\u9700\u8981\u6280\u672f\u6307\u5bfc\uff0c\u6b22\u8fce\u8054\u7cfb\u6211\uff0c\u4ec5\u9700\u652f\u4ed8\u5de5\u65f6\u8d39<\/p>\n\n\n\n
Twitter: Dasmz<\/a><\/p>\n\n\n\n
Youtube: @DasmzStudio<\/a><\/p>\n\n\n\n
Telegram: @Dasmz<\/a><\/p>\n\n\n
\n
\"Donate\"
\u4e91\u4e5e\u8ba8<\/figcaption><\/figure><\/div>","protected":false},"excerpt":{"rendered":"
\u524d\u7f00\u3001\u6587\u6863\u4fee\u6539\u8bb0\u5f55 20251006 \u521d\u59cb\u5316\u7f16\u8f91\u6b64\u6587\u7ae0\uff0c\u5b8c\u7a3f\uff0c\u6682\u672a\u89e3\u51b3\uff0c\u6c42\u52a9 20251008 \u66f4\u65b0\u6587\u6863 \u7ae0\u8282 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3],"tags":[],"_links":{"self":[{"href":"https:\/\/dasmz.com\/index.php?rest_route=\/wp\/v2\/posts\/4859"}],"collection":[{"href":"https:\/\/dasmz.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dasmz.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dasmz.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dasmz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4859"}],"version-history":[{"count":23,"href":"https:\/\/dasmz.com\/index.php?rest_route=\/wp\/v2\/posts\/4859\/revisions"}],"predecessor-version":[{"id":4901,"href":"https:\/\/dasmz.com\/index.php?rest_route=\/wp\/v2\/posts\/4859\/revisions\/4901"}],"wp:attachment":[{"href":"https:\/\/dasmz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4859"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dasmz.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4859"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dasmz.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4859"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}