Having your own server that makes services like Dropbox, OneDrive or Google Drive redundant and enables data sovereignty at home sounds tempting. A Nextcloud server can also be set up quickly and free of charge. With the Raspberry Pi 4 and its USB 3.0 interfaces, this even works with the popular tinkering computer and is therefore extremely inexpensive. Fast DSL or even fiber optic connections at home nowadays also provide the necessary bandwidth, and many network providers offer static IPs.
I too had a Nextcloud installation under OMV (Open Media Vault) on an HP Microserver Gen 8 running on my home server. Now I’ve pulled the plug and deactivated the Nextcloud service. Why? For one thing, running your own Nextcloud server for just two people is absolute overkill. The server needs to be maintained and regularly updated. This is essential. Unfortunately, the updates aren’t done with a simple click of a button. At least under OMV, you have to log into the server and first move a .well-known file so that the Nextcloud update even starts.
⚠ [affiliate] Keine Produkte mit Cache für default.
Bitte affiliate-sync --lang en ausführen.
Under OMV, the automatic renewal of the Let’s Encrypt certificate unfortunately doesn’t work either, so you have to trigger it manually every 3 months. All of this can be categorized as “annoying”, but not yet a knockout criterion.
Home server as a popular attack target
However, you’re really shocked when you look at the external traffic knocking on your own Nextcloud server’s door. With an externally accessible server on a DSL connection, you’re under constant fire. The vulnerability doesn’t just affect the actual Nextcloud server, but also the infrastructure behind it. Security gaps in OMV, an unpatched Linux server on which Nextcloud runs, or simply security gaps due to insufficient protection, which usually stems from ignorance, mean that you become a popular target for hackers.
A Raspberry Pi in particular quickly tempts you to open it up to the outside world to release some service or other. As a very widespread system, however, it is a welcome point of attack, which the internet automatically scours and which can open up the home network wide open. Under certain circumstances, attackers can also gain access to a smart home control system, etc.
With your own Nextcloud server, however, you also have to take care of regular backups yourself, and ransomware attacks show why this is not a luxury but an absolute minimum requirement. The problem can be seen in the still regular hacks of various NAS systems . It’s simply not a good idea as a private user to operate a publicly accessible server on a DSL connection.
Nextcloud with professional hosters
I estimate the risk of such an attack to be orders of magnitude higher than using a service like Google Drive. Moreover, there are also dedicated hosters that offer Nextcloud servers with professional support and security management, such as Pixelx . Up to 5 GB of storage space, you can even get your private Nextcloud server for free here. The saved time and hardware can be put to better use elsewhere.
Hi! I'm Markus – the Fricklr. ⚡ Electrical engineer, 🎵 musician (bass, guitar, keys) and professionally 'something with the internet' 🌐 for over 30 years – nowadays with AI too 🤖 – a 55-year-old generalist from Bavaria, Germany.
Your feedback helps me write even more interesting posts. After "Yes" there's also a small option to support my work.
What do you think? Leave a comment!
Share your thoughts, questions or experiences with the community.