Is it possible to configure nextcloud to automatically update? At least for minor, non-breaking changes, or when all apps are compatible?
I’m not comfortable with running a public seever without the latest security updates.
If nextcloud doesn’t do auto updates, is this something that managed nextcloud service providers usually do for you on a paid plan?
I don’t know to much about security, its all just a hobby for me but maybe it could help you.
As far as I know, basically only open Ports are potential security risks. \ So I would
I personally use OpenSuse Leap with yast2 online_update_configuration configured to update patch one a week, but you can do this in every distro with cron jobs.
Yes, but 443/80 must be open and public. This lets an attacker exploit a (pre-auth) vulnerable in php or nextcloud.
I think the best you can do I stay up to date