# Nextcloud > Nextcloud All-in-One: files, calendars and contacts, set up privately through a tunnel. Nextcloud All-in-One (AIO) is the install method Nextcloud recommends: one mastercontainer that sets up and updates Nextcloud, its database, Redis, HTTPS and optional apps such as Talk and Office. We run it as its README says, except that its setup page listens on 127.0.0.1:8080 instead of every address. Your files live in Docker volumes that AIO manages. ## Details - Installs on: Ubuntu and Debian; AlmaLinux, Rocky Linux and Fedora - Smallest plan: Standard (2 vCPU, 4 GB RAM) - Public ports: 443/tcp, 3478/tcp, 3478/udp - Project site: https://nextcloud.com/ ## After the server is ready 1. Point a domain such as cloud.example.com at the server and allow 443 in the panel firewall (and 3478 TCP and UDP if you'll use Talk). 2. From your computer, run `ssh -L 8080:127.0.0.1:8080 root@`, open `https://localhost:8080`, accept the self-signed certificate warning, copy the passphrase it shows and log in. 3. Enter your domain, choose the optional apps and start the containers. When AIO is done it shows Nextcloud's initial admin password: save it, log in at your domain and turn on two-factor login. 4. In AIO, set a backup location and turn on daily backups. ## Questions ### Why All-in-One and not a manual install? It's the method Nextcloud itself recommends: one container that installs Nextcloud, its database, Redis and HTTPS, and keeps them updated and backed up. Nextcloud's other Docker image is maintained by community volunteers for expert use. AIO's trade-off is that it wants the server to itself. ### Do I need a domain? Yes. AIO only starts Nextcloud for a domain that points at the server, because it gets a Let's Encrypt certificate for it. A subdomain such as cloud.example.com works. AIO can't move Nextcloud to another domain from its interface later, so pick one you'll keep. ### How much space do I get for files? The plan's NVMe disk, less the system and the containers: 40, 80 or 160 GB in total. Nextcloud can also mount external storage (S3-compatible, SFTP, WebDAV) through its External storage app, which is how people grow past the disk. ### Are my files encrypted? In transit, yes: everything goes over HTTPS. At rest, Nextcloud's server-side encryption is off by default and has costs (larger files, harder recovery). For files only you should ever read, a client-side tool such as Cryptomator on top of Nextcloud keeps them encrypted before they leave your device. ## Order it Pick Nextcloud in the order form, or use `"app": "nextcloud"` in the API or `vps9 servers create --app nextcloud`. See [all one-click apps](https://vpsnine.com/apps) and [plans](https://vpsnine.com/plans).