Files
okxlin bc132f91a5 maint: publish rebuilt OxiCloud 0.9.1 package
Publishes the reviewed app-only OxiCloud rebuild from PR #6997.
2026-09-19 10:44:24 +08:00
..
2026-08-21 15:01:12 +08:00

OxiCloud

Introduction

OxiCloud is a self-hosted cloud storage platform built with Rust. It provides file management, sharing, search, WebDAV, calendar, and address-book features.

Features

  • Upload, download, organize, and search files in the browser
  • Share links, trash, favorites, and media thumbnails
  • WebDAV, CalDAV, CardDAV, and Nextcloud-compatible APIs
  • Local disk, S3-compatible, and Azure Blob storage backends
  • Password, magic-link, and OIDC authentication

Usage

  • Open http://<server-ip>:8086 after installation; use the port configured in the PANEL_APP_PORT_HTTP field when it differs from 8086.
  • Create the administrator account when the first-use page is displayed.
  • Set OXICLOUD_BASE_URL to the public HTTP or HTTPS URL used to access OxiCloud so that share links and callbacks use the correct address.

Database and storage

  • Select a running PostgreSQL service in 1Panel during installation. 1Panel creates and links a database and user, and OxiCloud runs its migrations at startup. Linked roles are currently PostgreSQL superusers, so use a dedicated PostgreSQL instance for untrusted users or high-value data.
  • APP_DATA_DIR is mounted at /app/storage for file content, upload staging, and the generated JWT key. Back up this directory and the PostgreSQL database before upgrades, migrations, or uninstalling.
  • Database credentials are generated by 1Panel and stored in the application environment file. Do not commit or share the installed .env file.

Security

  • Configure request size limits, timeouts, access controls, and HTTPS in the reverse proxy for public deployments.
  • Registration is enabled by default. Set OXICLOUD_DISABLE_REGISTRATION to true after creating the administrator when access must be restricted.
  • Credentials for S3, Azure, OIDC, or SMTP are stored in the application environment; grant only the required permissions and keep them out of logs.

References