{"id":13405923,"url":"https://github.com/nextcloud/vm","last_synced_at":"2026-01-26T13:10:11.225Z","repository":{"id":37265779,"uuid":"60343372","full_name":"nextcloud/vm","owner":"nextcloud","description":"💻☁📦 The Nextcloud VM (virtual machine appliance), Home/SME Server and scripts for RPi (4-5). Community developed and maintained.","archived":false,"fork":false,"pushed_at":"2026-01-19T02:38:34.000Z","size":57744,"stargazers_count":1498,"open_issues_count":14,"forks_count":672,"subscribers_count":70,"default_branch":"main","last_synced_at":"2026-01-19T03:10:48.080Z","etag":null,"topics":["appliance","appliances","cloud","firewall","hyper-v","hypervisor","nextcloud","nextcloud-server","nextcloud-vm","onlyoffice","proxmox","proxmox-ve","ubuntu","virtualbox","vm","vmware","vmware-esxi","vmware-fusion","vmware-player"],"latest_commit_sha":null,"homepage":"https://download.nextcloudvm.com","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nextcloud.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"enoch85"}},"created_at":"2016-06-03T11:38:29.000Z","updated_at":"2026-01-18T22:56:14.000Z","dependencies_parsed_at":"2023-12-24T06:52:38.652Z","dependency_job_id":"39f08575-6ef7-4ae4-ab7a-87342278913c","html_url":"https://github.com/nextcloud/vm","commit_stats":{"total_commits":2850,"total_committers":82,"mean_commits":34.75609756097561,"dds":0.5803508771929824,"last_synced_commit":"b5fb4ea3fe8481f45ff768649d9e21ca0d839ace"},"previous_names":[],"tags_count":83,"template":false,"template_full_name":null,"purl":"pkg:github/nextcloud/vm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nextcloud%2Fvm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nextcloud%2Fvm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nextcloud%2Fvm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nextcloud%2Fvm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nextcloud","download_url":"https://codeload.github.com/nextcloud/vm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nextcloud%2Fvm/sbom","scorecard":{"id":175132,"data":{"date":"2025-08-11","repo":{"name":"github.com/nextcloud/vm","commit":"2f1a07ec07a2d83594f2df2f7c99805b83f1b7a9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 11/27 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/check-code-with-shellcheck.yml:1","Warn: no topLevel permission defined: .github/workflows/reviewdog.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":8,"reason":"3 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: GNU General Public License v3.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/nextcloud/.github/SECURITY.md:1","Info: Found linked content: github.com/nextcloud/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/nextcloud/.github/SECURITY.md:1","Info: Found text in security policy: github.com/nextcloud/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-code-with-shellcheck.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/nextcloud/vm/check-code-with-shellcheck.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-code-with-shellcheck.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/nextcloud/vm/check-code-with-shellcheck.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reviewdog.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/nextcloud/vm/reviewdog.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/reviewdog.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/nextcloud/vm/reviewdog.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reviewdog.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/nextcloud/vm/reviewdog.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/reviewdog.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/nextcloud/vm/reviewdog.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: apps/recognize.sh:41","Warn: downloadThenRun not pinned by hash: lib.sh:1738","Warn: pipCommand not pinned by hash: old/pdfannotate.sh:49","Info:   0 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":1,"reason":"SAST tool is not run on all commits -- score normalized to 1","details":["Warn: 2 commits out of 20 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T17:31:48.834Z","repository_id":37265779,"created_at":"2025-08-16T17:31:48.834Z","updated_at":"2025-08-16T17:31:48.834Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28778942,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-26T11:46:04.308Z","status":"ssl_error","status_checked_at":"2026-01-26T11:46:02.664Z","response_time":59,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["appliance","appliances","cloud","firewall","hyper-v","hypervisor","nextcloud","nextcloud-server","nextcloud-vm","onlyoffice","proxmox","proxmox-ve","ubuntu","virtualbox","vm","vmware","vmware-esxi","vmware-fusion","vmware-player"],"created_at":"2024-07-30T19:02:16.012Z","updated_at":"2026-01-26T13:10:11.215Z","avatar_url":"https://github.com/nextcloud.png","language":"Shell","readme":"Nextcloud VM Appliance\n============\n\nServer installation. Simplified. :cloud:\n--------------------------------\n\n#### Interactive Guidance\n\u003e **The Nextcloud VM** — _(aka **N**ext**c**loud **V**irtual **M**achine_ or _**NcVM**)_ — helps you create a personal or corporate [Nextcloud Server] _faster_ and _easier._ Fundamentally, NcVM is a carefully crafted _family_ of [\\*nix] scripts which interactively guide you through a quality-controlled installation to obtain an [A+ security-rated] Nextcloud instance.\n\n#### Curated Extras\n\u003e The Nextcloud [app store] extends core features by allowing you to enable a multitude of free one-click apps. However, _integration apps_ there like [Collabora Online] and [ONLYOFFICE] are solely _bridges_ to Nextcloud. You’re still required to install those services _separately_, which can be complex. NcVM provides optional _**full installation of select curated apps**_, including those and others. Monitor and manage your cloud using any web browser with NcVM’s hand-picked collection of power utilities featuring stunning, modern UIs.\n\n#### All Systems Go\n\u003e NcVM can check for and install _stable_ updates to keep things current, smooth, and secure.\n\n\n--------------------\n\n## Dependencies:\n(Ubuntu Server 24.04 LTS *minimal* 64-bit)\n\u003cbr\u003e\n(Linux Kernel: 6.8)\n- Apache 2.4\n- PostgreSQL 16\n- PHP-FPM 8.3\n- Redis Memcache (latest stable version from PECL)\n- PHP-igbinary (latest stable version from PECL\n- PHP-smbclient (latest stable version from PECL)\n- Nextcloud Server Latest\n\n## Support the development\n* [Create a PR](https://help.github.com/articles/creating-a-pull-request/) and improve the code\n* Report [your issue](https://github.com/nextcloud/vm/issues/new)\n* Help us with [existing issues](https://github.com/nextcloud/vm/issues)\n* Test what's not yet released into the stable VM. Please have a look at [this subfolder](https://github.com/nextcloud/vm/tree/main/not-supported) for further information.\n* **[Donate](https://shop.hanssonit.se/product-category/donate/) or buy our [pre-configured VMs](https://shop.hanssonit.se/product-category/virtual-machine/): 500 GB, 1 TB, 2TB for both VMware, Hyper-V and [more](https://docs.hanssonit.se/s/W6fMouPiqQz3_Mog/virtual-machines-vm/d/W7Du9uPiqQz3_Mr1/nextcloud-vm-machine-configuration?currentPageId=bls17dahv0jgrltpif20)**\n\n**FYI**\n\nDeveloped by [Daniel Hansson](https://github.com/enoch85) and the Nextcloud community. Nextcloud GmbH does not offer support for the VM in the [main branch](https://github.com/nextcloud/vm/tree/main) (full-version), as we only support manual tarball/zip-package installations. You can download the official Nextcloud VM appliance ([also from this repo](https://github.com/nextcloud/vm/tree/official-basic-vm)) from [our website](https://download.nextcloud.com/vm/Official-Nextcloud-VM.zip) to get a stripped down version for testing if you rather want to skip all the manual steps in our documentation.\n\nIf you want support regarding the full-version VM in main, please contact our partner [Hansson IT](https://www.hanssonit.se/nextcloud-vm).\n  \n## Full documentation\n* [VM](https://docs.hanssonit.se/s/W6fMouPiqQz3_Mog/virtual-machines-vm/d/W6fMquPiqQz3_Moi/nextcloud-vm) (the easiest option)\n* [Install with scripts](https://docs.hanssonit.se/s/bj0vl1ihv0jgrmfm08j0/build-your-own/d/bj0vl4ahv0jgrmfm0950/nextcloud-vm) (if you feel brave)\n* [FAQ](https://docs.hanssonit.se/s/bj101nihv0jgrmfm09f0/faq/d/bj101pihv0jgrmfm0a10/nextcloud-vm?currentPageId=bj101sqhv0jgrmfm0a1g) (Frequently Asked Questions)\n* [Machine configuration](https://docs.hanssonit.se/s/W6fMouPiqQz3_Mog/virtual-machines-vm/d/W7Du9uPiqQz3_Mr1/machine-setup-nextcloud-vm) (of the released version)\n\n## I want to test a Release Candidate (RC), or Beta!\nNo problem, brave explorer! We made it simple. \n\nIn some cases we do pre-releases of the VM as well. Those can be found in the [TESTING](https://download.kafit.se/s/dnkWptz8AK4JZDM?path=%2FTESTING) folder on the download server. \n\nIf you want to try the latest version yourself, there are two variables that you could use:\n\n1. For latest **beta** or **RC** version: `sudo bash /var/scripts/update.sh beta`\n\n2. For specific **RC** version: `sudo bash /var/scripts/update.sh 23.0.1rc2`\n\nPlease keep in mind that this is only intended for testing and might crash your Nextcloud. Please keep backups!\n\n\n## Vagrant example (Beta)\n\nThe `nextcloud_install_production.sh` script can be run as part of Vagrant provisioning.\n\nSee [this subrepo](https://github.com/nextcloud/vm/tree/main/vagrant) for more information.\n\nPlease report any issues you can find. Improvements are welcome!\n\n## First look\n#### Nextcloud\n![alt tag](https://github.com/nextcloud/nextcloud.com/blob/master/assets/img/features/VMwelcome.png)\n#### AdminNeo (Database Administration) *not default*\n![alt tag](https://i.imgur.com/tiF4chg.png)\n#### Webmin (Server Administration GUI) *not default*\n![alt tag](https://i.imgur.com/hLkmA1D.png)\n#### TLS rating\n![alt tag](https://i.imgur.com/nBEvczb.png)\n\n## The usual tags\n**Downloads from Github (not the main downloads location):**\n\u003cbr\u003e\n![Downloads](https://img.shields.io/github/downloads/nextcloud/vm/total.svg)\n\u003cbr\u003e\n**Downloads from main server:**\n\u003cbr\u003e\n~100 per day since 2016\n\u003cbr\u003e\n**Build Status:**\n\u003cbr\u003e\n[![Check-code-with-shellcheck Actions status](https://github.com/nextcloud/vm/workflows/check-code-with-shellcheck/badge.svg)](https://github.com/nextcloud/vm/actions)\n\u003cbr\u003e\n[![Reviewdog Actions status](https://github.com/nextcloud/vm/workflows/reviewdog/badge.svg)](https://github.com/nextcloud/vm/actions)\n\u003cbr\u003e\n**Stability Status:**\n\u003cbr\u003e\n![Stability Status](https://img.shields.io/badge/stability-stable-brightgreen.svg)\n\n## Current [maintainers](https://github.com/nextcloud/vm/graphs/contributors)\n(Most of the commit history is gone, since Github decided to remove it when an account email address is removed.)\n* [Daniel Hanson](https://github.com/enoch85) @ [T\u0026M Hansson IT AB](https://www.hanssonit.se)\n* [szaimen](https://github.com/szaimen)\n* You? :)\n\n## Special thanks to\n* Ezra Holm @ [Tech and Me](https://www.techandme.se)\n* [Luis Guzman](https://github.com/Ark74) @ [SwITNet](https://switnet.net)\n* [Stefan Heitmüller](https://github.com/morph027) @ [morph027's Blog](https://morph027.gitlab.io/)\n* [Lorenzo Faleschini](https://github.com/penzoiders)\n* [Georg Großmann](https://github.com/ggeorgg)\n* [liao20081228](https://github.com/liao20081228)\n* [aaaskew](https://github.com/aaaskew)\n* IP address data powered by [IPinfo](https://ipinfo.io/)\n\n[Nextcloud Server]: http://shortio.hanssonit.se/r1Rx0GqXa9\n[app store]: http://shortio.hanssonit.se/Rz1GEXt9dL\n[\\*nix]: http://shortio.hanssonit.se/52hOTQbhdh\n[A+ security-rated]: http://shortio.hanssonit.se/aMTjg0SJi3\n[Collabora Online]: http://shortio.hanssonit.se/IKjBoOfQOT\n[ONLYOFFICE]: http://shortio.hanssonit.se/oRLShCfRK3\n","funding_links":["https://github.com/sponsors/enoch85"],"categories":["Shell","Themes","ubuntu"],"sub_categories":["Images"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnextcloud%2Fvm","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnextcloud%2Fvm","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnextcloud%2Fvm/lists"}