IT in Education

Accessing external storage

nextcloudUsing the external storage support app, you can access FTP, S3 or Swift object stores. This article describes using Wasabi and Amazon S3.


Wasabi external storage

When you create your bucket on Wasabi, make a note of the bucket name and user details.

Log on to your Nextcloud instance with an admin account.

  1. Go to your Avatar > Apps.
    1. Search for External storage support.
    2. Click the Download and enable button.
  2. Go to your Avatar > Settings.
  3. In the left pane, select Administration > External storages.
  4. Enter the following details: 
    1. Folder name: Your own meaningful name (e.g. Wasabi storage)
    2. External storage: Amazon S3
      1. Bucket: wasabi-bucket-name
      2. Hostname: s3.eu-central-1.wasabisys.com
      3. Port: 443
      4. Region: Note that this is included in the hostname.
      5. Enable SSL: Enable
      6. Access key: ABCDEFGHIJ1234567890
      7. Secret key: ABCDEFGHIJ1234567890klmnopqrst1234567890
  5. Click the tick to save your settings.

This will create full access to your Wasabi bucket for all users. You can select individual users by adding them in the Available for section.

Amazon S3 external storage

If you create a single S3 bucket on Amazon, simply make a note of the bucket name and user details.

You can also create up to 100 S3 buckets for individual members of staff. When using Nextcloud, to save time, you can allow the S3 Bucket to be created automatically as long as the IAM user account exists.

Note that currently there isn't a way to provide Nextcloud access to folders inside an S3 bucket.

Log on to your Nextcloud instance with an admin account.

  1. Go to your Avatar > Apps.
    1. Search for External storage support.
    2. Click the Download and enable button.
  2. Go to your Avatar > Settings.
  3. In the left pane, select Administration > External storages.
  4. Enter the following details: 
    1. Folder name: This is the folder name that will appear in Nextcloud files (e.g. Archive).
    2. External storage: Amazon S3
      1. Bucket: S3-bucket-name
      2. Region: The region where your bucket is stored (e.g. eu-west-2).
      3. Enable SSL: enable
      4. Access key: ABCDEFGHIJ1234567890
      5. Secret key: ABCDEFGHIJ1234567890klmnopqrst1234567890
  5. Click the tick to save your settings.

This will create full access to your Wasabi bucket for the individual user.

Nextcloud permissions

You may wish to assign specific permissions for different users and groups.

  1. Go to your Avatar > Settings.
  2. In the left pane, select External storages.
  3. Click 3dotsHorizontal next to your newly configured storage.
  4. Select any of the following options:
    1. Enable previews
    2. Enable sharing
    3. Read-only
  5. Add users and/or groups to the Available for field.

Using this method you can create multiple storage settings for the same Wasabi bucket. For example you could make it read-only for a group of users, and give full access to an admin. Note that where there is a conflict of permissions, the least privilege will prevail.

Users mounting their own storage

If you enable the Allow users to mount external storage option, you can also specify which type of external storage users can mount (e.g. S3 and Nextcloud instances). Users will then be able to go to their Avatar > Settings and click External storages in their Personal section on the left pane, to mount their own storage.

Note that mounting an external Nextcloud instance is much slower than accessing it directly.

Global credentials

Global credentials can be used when you are accessing multiple external storages that use the same credentials. Note that it is best practice to use different credentials for different services.


Thanks for visiting,
Steven