ngsign/nextcloud-ngsign repository overview

⁠Nextcloud + NGSign

Nextcloud, pre-bundled with the NGSign app, so you can deploy a Nextcloud instance that's ready to send PDF documents for electronic signature out of the box.

NGSign⁠ is an electronic-signature platform (ETSI-compliant) that lets users sign documents and have them signed through a modern web application and a universal API. This image adds a Sign with NGSign action to PDFs in the Nextcloud Files app, so users can start and track signature transactions without leaving their Nextcloud workspace.

⁠What's in the image

• Based on the official nextcloud:34.0.4-apache image — pinned, so re-pulling a given tag never silently changes your Nextcloud version.
• The ngsign app pre-installed under custom_apps/, automatically enabled and synced into the persistent Nextcloud volume on every container start (so upgrades to the image also upgrade the app).
• A before-starting hook that applies NGSIGN_BASE_URL / NGSIGN_API_TOKEN to the app configuration at startup, if provided.

⁠Features

• Sign with NGSign action on PDF files in the Files app — enter one or more signers and launch a BY_MAIL signature transaction.
• Transactions page listing every transaction started by the connected user: status, signers, creation/expiration dates, and actions (check status, cancel, download the signed PDF).
• Automatic tracking: a cron job polls NGSign for status updates, retrieves signed PDFs, and expires stale transactions.
• Notifications to the document's creator as soon as it's signed.
• Bearer token never exposed to the browser; configurable from Administration → Additional settings → NGSign.

⁠Quick start

cat <<'EOF' > .env
NEXTCLOUD_PORT=8080
NEXTCLOUD_ADMIN_USER=admin
NEXTCLOUD_ADMIN_PASSWORD=change-this-admin-password
NEXTCLOUD_TRUSTED_DOMAINS=your.domain.example

MYSQL_DATABASE=nextcloud
MYSQL_USER=nextcloud
MYSQL_PASSWORD=change-this-database-password
MYSQL_ROOT_PASSWORD=change-this-root-database-password

NGSIGN_BASE_URL=https://sandbox.ng-sign.com/server
NGSIGN_API_TOKEN=
EOF

IMAGE_NAME=ngsign/nextcloud-ngsign:1.0.0 \
  docker compose --env-file .env -f compose.production.yaml up -d

This starts three services: nextcloud (the app server), cron (runs the same image with entrypoint: /cron.sh, required for signed-document retrieval and notifications), and a mariadb database. See the project repository for the full compose.production.yaml and configuration reference.

The token is never baked into the image or embedded in configuration committed to source control — inject it via environment variable or set it directly in Administration → Additional settings → NGSign.

⁠Compatibility

The bundled ngsign app declares compatibility with Nextcloud 30–34; this image tracks Nextcloud 34.0.4 specifically. Nextcloud's own cron mechanism must be running (handled by the cron service in compose.production.yaml) for signed-document retrieval and notifications to work.

⁠About NGSign

NGSign is developed by NG Technologies, a specialist in electronic signature and PKI. Available as SaaS at ngsign.app, or deployable as a private Cloud, on-premises, or hybrid service.

• Website: www.ng-sign.com⁠
• API reference: ng-sign.com/api-reference-simple-version
• Support: [email protected]⁠

⁠License

GNU General Public License v3.0. Source: the plugin's GitHub repository (https://github.com/ngsign/ngsign-nextcloud-plugin/⁠)