race
58b4793ebe
Files under /srv/nc-files (NFS export on desslok) created at initial AIO setup were written by uid 0 with mode 0755 root:www-data. PHP-FPM workers run as www-data (uid 33), which can't create new files in those dirs. Symptom: any of "Permission denied" on new document, file upload, or Collabora discovery. Same class of bug as the Collabora remoteData/discovery warning. Fix: chmod g+w on the affected parents. Snapshots saved to /var/tmp for rollback. Add Option A (narrow target list) and Option B (sweep all group=www-data dirs without g+w) procedures to troubleshooting.html.
Nextcloud Office
Session log + runbook for the 2026-08-10 deployment and 2026-08-11
rewire of office.rmf44.xyz as a Nextcloud All-in-One stack with
Collabora + Whiteboard on homework03, replacing the retired
OnlyOffice container on hawker. The 2026-08-11 rewire collapsed the
storage layer to a single NFS bind (post-mortem in
troubleshooting.html#appdata-missing).
Files
index.html— overview, current state, at-a-glancearchitecture.html— topology, container tree, data flow, request flowprocedure.html— phase-by-phase build commands (what was actually run)troubleshooting.html— every pitfall hit, with root cause and fixoperations.html— backup pipeline, rollback, monitoring, day-2 follow-upsassets/style.css— self-contained dark theme (works standalone from disk)assets/diagrams/topology.svg— public ingress + NetBird + AIOassets/diagrams/container-tree.svg— 8 AIO containers + bind mountsassets/diagrams/data-flow.svg— NFS vs ext4 split, database on hostassets/diagrams/request-flow.svg— swimlane sequence of agit clone-equivalent
How to view
Open index.html in a browser. All paths are relative; no web server
needed. The HTML uses self-hosted woff2 fonts referenced from
assets/fonts/{family}/*.woff2 — copy those from ../fonts/ if you
want the full editorial look.
# Local preview with full fonts
rsync -a ../fonts/ assets/fonts/
xdg-open index.html
Without the font files, the site falls back to system sans-serif / serif
per the CSS font-family chain — still readable.
Style
Uses the painkiller-bullet-dark-blue theme: dark blue background
(#0d1b2a), mint accent (#4ecca3), Josefin Sans headings + Cormorant
Infant body. Same aesthetic as ../painkiller-bullet-dark-blue.css in
this lab repo. Mirrors /home/tigo/lab/gite_replacement/ template.
Source material
The narrative comes from a single Hermes session on 2026-08-10 that
deployed the stack end-to-end. The skill self-hosted-services
nextcloud-aio notes (currently in development) reference the
named-volume bind pattern from this work.