How can I secure connection to nextcloud?

can you scroll up on your terminal window

...please check its terminal output...

I’ve found this :

DietPi-LetsEncrypt
─────────────────────────────────────────────────────
 Mode: Running Certbot

[  OK  ] DietPi-LetsEncrypt | Lighttpd webserver detected
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Obtaining a new certificate
An unexpected error occurred:
There were too many requests of a given type :: Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/rate-limits/
Please see the logfiles in /var/log/letsencrypt for more details.
[FAILED] Certbot failed with error code (1), please check its terminal output. Aborting...

well you tried it to often :rofl:

...too many failed authorizations recently...

Oooooh damn it ! I will try tomorrow morning then, thank you very much. :smiley:

You could as well create a self-singed SSL certificate, like here step 2: https://wiki.debian.org/Self-Signed_Certificate
Ah wait, that guide is better: https://www.digitalocean.com/community/tutorials/how-to-create-a-self-signed-ssl-certificate-for-apache-in-debian-10

Browsers will complain since you are no trusted CA :wink: and in case of Apple I am not sure if connecting via untrusted certificate is possible at all, but less effort compared to No-IP inkl. its monthly manual account renewal, so probably worth to give it a try :slight_smile:.

Hi,

So, I run the LetsEncrypt and it worked ! I’m quiet in a good way there, need to figure out how can I let the VPN on and still access the nextcloud, if you have an idea.

Thank you both the SSL, the help was very welcomed

Every topic about https pointing to that topic so i will ask here:
i want simply access to nextcloud localy by https (its only way to generate share link). When i put https://my_ip/nextcloud in my web browser nothing loading (not even page asking about certificate etc) - just page doesnt exist. What should i change?

You need to create a self signed certificate and activate SSL within web server config. As this is quite specific to web server used and this topic is several years old, I recommend opening a new own topic.