If running a custom Docker architecture where Nextcloud and HaRP share a machine, ensure they sit on the exact same internal Docker network.
Nextcloud provides the —the sheet music, the conductor, the seating chart. Harp provides the instruments —the physical ability to generate sound waves that reach the audience instantly.
The system does not protect against file content confidentiality if the server is malicious — that requires end‑to‑end encryption (e.g., Nextcloud’s native server‑side encryption is orthogonal).
: Unlike the previous proxy, HaRP natively supports end-to-end WebSockets, enabling real-time features like live editing and instant notifications for external apps. Secure Tunneling FRP (Fast Reverse Proxy) harp nextcloud
Using the FRP (Fast Reverse Proxy) protocol, HaRP allows ExApps to initiate outgoing connections. This eliminates the need to open risky firewall ports or manage complex NAT rules. Architectural Impact
The most concrete public reference is the on GitHub (archived or experimental).
To appreciate HaRP, it's helpful to understand what it replaces: the . In the older Docker Socket Proxy setup, requests from the web UI had to travel through the main Nextcloud server to reach an ExApp container. While functional, this introduced a bottleneck, added complexity, and, most critically, did not support WebSockets . If running a custom Docker architecture where Nextcloud
A common concern: "Does P2P bypass Nextcloud’s permissions?"
HaRP is a high-performance reverse proxy that simplifies how Nextcloud communicates with apps running outside the main server (ExApps). It was introduced primarily to:
Version 0: 3f4c... (initial upload) Version 1: a1b9... (renamed from draft.pdf) Version 2: d7e2... (content updated) The system does not protect against file content
| Requirement | Details | |-------------|---------| | | Nextcloud 32 or higher (HaRP is not available in older versions) | | Docker | A working Docker installation on your system | | Reverse Proxy | NGINX, Caddy, Traefik, or Apache (for production setups) | | Network Access | Ability to expose ports 8780 and 8782 if needed | | Basic CLI Knowledge | Familiarity with Docker commands and configuration files |
: External applications (ExApps) had to expose ports to the host system or be explicitly reachable by the Nextcloud server, leading to intricate firewall rules and security vulnerabilities.
For high-performance needs (e.g., using GPUs for AI), HaRP allows for a remote host configuration. The ExApps run on the remote machine, while the HaRP container manages the communication.
Select for typical Docker setups, or "HaRP Proxy (Docker)" if running within a custom network, as shown in the Nextcloud Documentation .