Is it possible to configure nextcloud to automatically update? At least for minor, non-breaking changes, or when all apps are compatible?
I’m not comfortable with running a public seever without the latest security updates.
If nextcloud doesn’t do auto updates, is this something that managed nextcloud service providers usually do for you on a paid plan?
Yes, but 443/80 must be open and public. This lets an attacker exploit a (pre-auth) vulnerable in php or nextcloud.
I think the best you can do I stay up to date