This report provides a comprehensive guide to deploying a Nextcloud server on a Windows environment using Docker Desktop and securing remote access via Tailscale.
Documentation you'll need to get up and running.
1. Introduction: Why Nextcloud + Tailscale?
Self-hosting your data is the ultimate flex for digital privacy. Nextcloud acts as a private alternative to Google Drive or Dropbox , while Tailscale—built on the WireGuard protocol—allows you to access your server from anywhere in the world without the security risks of opening ports on your router .
2. Prerequisites
Before starting, ensure your Windows PC meets these requirements:
OS: Windows 10 or 11 (Pro, Enterprise, or Education recommended for better virtualization support).
Virtualization: Enabled in BIOS/UEFI.
Hardware: Minimum 8GB RAM and a solid-state drive (SSD) for the OS and Nextcloud database.
Software: A Tailscale account.
3. Phase I: Installing Docker Desktop on Windows
Nextcloud is best managed on Windows through Docker. This keeps the server isolated and easy to update.
3.1 Install WSL2 (Windows Subsystem for Linux)
Open PowerShell as Administrator.
Run:
wsl --install.
Restart your computer when prompted.
3.2 Install Docker Desktop
Download Docker Desktop for Windows.
During installation, ensure the "Use WSL 2 instead of Hyper-V" option is checked.
Open Docker Desktop and ensure the "Engine" is running (green icon in the bottom corner).
4. Phase II: Deploying Nextcloud AIO (All-In-One)
The "All-In-One" (AIO) version is the gold standard for easy deployment, handling the database (PostgreSQL), web server (Apache), and caching (Redis) automatically (Politecnico di Torino, 2022).
4.1 Running the AIO Container
Open PowerShell and run the following command to start the Nextcloud AIO master container:
docker run `
--sig-proxy=false `
--name nextcloud-aio-mastercontainer `
--restart always `
--publish 8080:8080 `
-e NEXTCLOUD_DATADIR="C:\NextcloudData" `
--volume nextcloud_aio_mastercontainer:/mnt/docker-aio-config `
--volume //var/run/docker.sock:/var/run/docker.sock:ro `
nextcloud/all-in-one:latest
Note: Replace C:\NextcloudData with the path where you want your files stored.
4.2 Initial Setup
Go to https://localhost:8080 in your browser.
Copy the Setup Password shown in the terminal or on the page.
Enter the password and start the Nextcloud setup.
5. Phase III: Setting Up Tailscale for Remote Access
Instead of messing with "Port Forwarding" (which exposes you to the open internet), Tailscale creates a "Mesh VPN".
5.1 Install Tailscale
Download and install Tailscale for Windows.
Log in. Your PC now has a unique Tailscale IP (e.g., 100.x.y.z) and a MagicDNS name (e.g., my-pc.tail-net.ts.net).
5.2 Configure Nextcloud to Accept Tailscale Traffic
Nextcloud is picky about "Trusted Domains." You must tell it to trust your Tailscale address.
Find your Tailscale IP in the Tailscale app.
In Nextcloud AIO, you will be asked for a domain. Instead of a website (like example.com), enter your Tailscale IP or MagicDNS name.
The AIO interface will then provide a specific command to add this to your config.php.
6. Accessing Your Server
Locally: Use https://localhost or the local IP.
Remotely: Open the Tailscale app on your phone or laptop, and enter your Tailscale IP into the Nextcloud app.
7. Maintenance and Backups
Updates: The Nextcloud AIO interface has a one-click update button for the containers.
Backups: Since your data is in C:\NextcloudData, ensure this folder is backed up to an external drive or secondary cloud service.
Comments