Skip to content

NextCloudPi

Productivity & Wikis

NextcloudPi is a ready‑to‑use image and installer that deploys a full Nextcloud server stack (Apache, PHP, MariaDB, Redis, etc.) for Raspberry Pi, VMs, and other boards.

Shell Latest v1.57.1 · 1mo ago Security brief →

Features

  • Pre‑configured Nextcloud stack (Apache + PHP 8.1 + MariaDB + Redis) for Raspberry Pi and other devices
  • Built‑in tools: ncp‑config TUI, web panel, automatic HTTPS via Let’s Encrypt, security hardening (Fail2Ban, UFW, ModSecurity)
  • Backup/restore, update notifications, BTRFS snapshot support and extensive extras (Wi‑Fi, Dynamic DNS, NFS/SMB sharing, ZRAM, etc.)

Recent releases

View all 2 releases →
v1.57.1 Security relevant
Security fixes
  • Properly escape all bash arguments in ncp‑web (ncp-launcher.php) – fixes a security vulnerability
Full changelog

v1.57.1 (2026-04-14) Various fixes

Included Software

Nextcloud 33.0.2 (can be automatically updated to latest minor version)
PHP 8.3
Debian bookworm
Armbian

Fixes

  • Fail gracefully when parsing invalid backup cache (#2105, thanks @Dominik0101)
  • security: Properly escape all bash arguments in ncp-web (ncp-launcher.php)
  • Make sure, sury repository key is updated from pkg sources (fixes #2104)
  • Fix broken ncp-preview-generator cronjob script (fixes #2107)

Changelog

Checksums:

1e06609bfb455631532426834b25ae17  NextcloudPi_OdroidC4_v1.57.1.zip
bf780db004ca2a00be0725a15202deaf  NextcloudPi_OrangePi5Plus_v1.57.1.zip
bd6993b052b71f6e994cd7fd9f793c8a  NextcloudPi_RaspberryPi 4+_v1.57.1.zip
378c83331daf3e380bedc5fc434b1647  NextcloudPi_OrangePi5_v1.57.1.zip
9474fa8279ba2013faf25d813c72c056  NextcloudPi_OdroidC2_v1.57.1.zip
d1490637de80f3c94b5ffbd94384ebcf  NextcloudPi_RockPro64_v1.57.1.zip
57fa6ac09618436a8e8eca9f99f30890  NextcloudPi_OdroidHC4_v1.57.1.zip
33fb6563475f9d9f3a708c011b619d5e  NextcloudPi_Rock64_v1.57.1.zip
4cce987da86ed340230bb6e44c351168  NextcloudPi_LXC_arm64_v1.57.1.tar.gz
52888e2dda6784bc4d82f98971eb201f  NextcloudPi_LXD_arm64_v1.57.1.tar.gz
f48780c558dfb62ffa3a3d6779d3dd04  NextcloudPi_LXC_x86_v1.57.1.tar.gz
e4d11d9ed446b00923b0bc8dc9148d43  NextcloudPi_LXD_x86_v1.57.1.tar.gz
v1.57.0 Bug fix
Security fixes
  • Fix XSS via log output and undefined array key warning in ncp-web (GHSA issue #2096)
Notable features
  • Support for Nextcloud 33
  • Migrate to upstream previewgenerator
  • Add option to check incompatible apps in nc-update-nextcloud and nc-autoupdate-nc
Full changelog

v1.57.0 (2026-04-04) Nextcloud 33, new previewgenerator, fixes

Included Software

Nextcloud 33.0.2 (can be automatically updated to latest minor version)
PHP 8.3
Debian bookworm
Armbian v25.08

Changes

  • Support for Nextcloud 33
  • Migrate to upstream previewgenerator (fixes #2098)
  • Set overwrite.cli.url during NCP activation (fixes #2087)
  • Add option to check for incompatible apps in nc-update-nextcloud and nc-autoupdate-nc (on by default)

Fixes

  • Fix outdated OS version being picked up in ncp_diag (#2090 , thanks @CrazyWolf13)
  • Fix(ncp-web): prevent XSS via log output and undefined array key warning (#2096, thanks @aroldobossoni)
  • Fix trusted proxy not being respected by Apache

Development related

  • Reenable and fix update tests for incus and VM targets
  • Disable dist-upgrade test for VM target

Changelog

Checksums:

05ba81e9ef01ac6a4891de6a2605d43a  NextcloudPi_LXC_arm64_v1.57.0.tar.gz
e3da526edd23e52728ae13e0af2ee662  NextcloudPi_LXD_arm64_v1.57.0.tar.gz
aa42bcae9c82aefd242971a34ee774ab  NextcloudPi_RaspberryPi 4+_v1.57.0.zip
058b60d9268b5a3edf009d2d885d6551  NextcloudPi_OdroidC2_v1.57.0.zip
15984757184b3150317a5bb1f7483cd3  NextcloudPi_RockPro64_v1.57.0.zip
afa2ec5ac3126101efc4bcfbab42c7b5  NextcloudPi_OdroidHC4_v1.57.0.zip
def2f13ff19d6ba7459c8012fa3ca4ae  NextcloudPi_OdroidC4_v1.57.0.zip
b72599ee3d5999c401e396b35bdd79e0  NextcloudPi_OrangePi5Plus_v1.57.0.zip
b411a310d3287907db62cea1865c70c1  NextcloudPi_OrangePi5_v1.57.0.zip
b47fd1ed4d4942771758556cbffbd5f2  NextcloudPi_OdroidHC4_v1.57.0.zip
7a45c98d511b96f7be7bbcc1d2d97fc0  NextcloudPi_LXD_x86_v1.57.0.tar.gz
27ad5f5eab594dc6cfb9629163908259  NextcloudPi_LXC_x86_v1.57.0.tar.gz
3eb0c2bc7b65c6515eb07d8d874ef6c0  NextcloudPi_Rock64_v1.57.0.zip

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
2,901
Forks
320
Languages
Shell PHP JavaScript

Install & Platforms

Install via
binary shell-script
Platforms
linux arm64

Community & Support

Beta — feedback welcome: [email protected]