When you think about a firewall, you think about a complicated tool big companies use to keep hackers out of their networks. And perhaps you think about the many movies where weird visuals are used to represent them being used and broken through. Nextcloud has the File Access Control app which acts as a bit of a firewall and while it helps protect businesses secrets, there are use cases for home users as well.
Introducing Two Factor Authentication
Two factor authentication has becoming quite popular in the last months/years. So you go ahead and enable all those fancy things on various websites you use. Note that they often provide you with a list of recovery keys! Where do you put those keys, to make sure you don’t ever lose them? There is this self-hosted cloud solution you use, with the slogan “a safe home for all your data“. And it sure can help with this!
By putting your keys on your Nextcloud you keep them to yourself. Yet, Nextcloud aims to make sharing easy. You don’t want to accidentally share your recovery keys, do you? Nor would you want your sync client on your phone to, all too easily, give access to these files. So is there an extra layer of protection possible, one that protects from accidental sharing or a stolen phone?
Protecting the keys
This is where the File Access Control app joins the party:
1. As a first step you assign the tag `Protected file` to your recovery files in the web UI.2. You go to `admin settings` > `File access control` and start a new rule group:
1. `File system tag` is tagged with `Protected file`2. `Request user agent` is not `Desktop client`
Your files can now no longer be downloaded and synced with the android client or a web browser.
This would disallow the client and only allow the web interface (and only Firefox!) from the local network.
Now to be sure the files are also not delivered to your laptop, you can add a second rule that only allows the Desktop client when the IP is the local IP of your Desktop PC which accesses the instance via the LAN rather then the internet:
1. `File system tag` is tagged with `Protected file`2. `Request user agent` is `Desktop client`3. `Request remote address` does not match IPv4 `192.168.176.42/32`
As you see, the File Access Control app can help ensure your data stays within the confines of your house or follows other rules which ensure you don’t accidentally make them available where you wouldn’t want them. Note that it is NOT a super secure solution, you can’t use it to replace https or other encryption solutions! But it can avoid mistakes through accidental sharing and such.
Post by Joas, main author of the File Access Control app
Our latest release supports a healthy meeting culture, introduces the Nextcloud Assistant and emphasizes user-centric design, transparency and user control. Thank you to our community! 💙 Nextcloud would not be the same without our dedicated, encouraging community. A huge thank you to the thousands of community members for making this release the best it can […]
As the Conference is fast approaching, we would like to additionally present you with the full program for the weekend. From our keynote speakers and panelists, to lightning talks and workshops, we have a full agenda booked that we cannot wait to experience with you! Keynote speakers Nextcloud is pleased to welcome the following keynote […]
Video calls and online chats are second nature for us at this point. Taking your work call virtually or communicating with your manager online can all be done from home and this style of working is generally accepted. However, what is not universally accepted is the fact that Big Tech firms are ambiguous about what […]
Over the last year, AI has become a popular topic. Some is hype, some is substance. Some is good, some is bad. We want to give you the good, not the bad, and ignore the hype! AI has a ton of opportunity – but also risk. So we put you in control – off by […]
As part of Schleswig-Holstein's state digitization strategy, the state chancellery has announced they will work with Nextcloud to develop AI for working with government documents. This comes just after we announced the first private AI assistant last weekend with Hub 6. The German state already uses Nextcloud and their AI strategy aligns with our work on ethical, local AI technologies.
Nextcloud is on an international tour spreading the word of Nextcloud Hub 6 this October! Go to any of the following events to: Whether you’re in Germany, Italy, Latvia, Singapore or the UAE, we’re ready to share the latest of what Nextcloud has to offer nearest you. Open Source Week (OSW23) Oct. 3-5 – Rome, […]
Just like that, the Nextcloud Conference has come to a close. It’s been an exciting weekend and we can’t wait to share it with you! Today was the second and final day of the conference and we hope it was a great experience for all who attended. If you missed it, sit back and relax […]