• use smb shares

alternative: use local storage and use www-data to access storage (can not access home directory)

• UMASK in Apache to 007
• nextcloud/apache user in group users