This commit is contained in:
jacob
2025-09-30 10:12:56 +02:00
parent ed590c77cb
commit ca0fc08d1b

View File

@@ -3,8 +3,11 @@
image: image:
repository: nextcloud repository: nextcloud
flavor: apache flavor: apache
# default is generated by flavor and appVersion
tag: tag:
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
# pullSecrets:
# - myRegistrKeySecretName
nameOverride: "" nameOverride: ""
fullnameOverride: "" fullnameOverride: ""
@@ -12,60 +15,71 @@ podAnnotations: {}
deploymentAnnotations: {} deploymentAnnotations: {}
deploymentLabels: {} deploymentLabels: {}
replicaCount: 2 # Number of replicas to be deployed
replicaCount: 1
## Allowing use of ingress controllers
## ref: https://kubernetes.io/docs/concepts/services-networking/ingress/
##
ingress: ingress:
enabled: false enabled: false
classname: nginx # className: nginx
annotations: {} annotations: {}
nginx.ingress.kubernetes.io/proxy-body-size: 4G # nginx.ingress.kubernetes.io/proxy-body-size: 4G
kubernetes.io/tls-acme: "true" # kubernetes.io/tls-acme: "true"
cert-manager.io/cluster-issuer: letsencrypt-prod # cert-manager.io/cluster-issuer: letsencrypt-prod
# Keep this in sync with the README.md: # # Keep this in sync with the README.md:
nginx.ingress.kubernetes.io/server-snippet: |- # nginx.ingress.kubernetes.io/server-snippet: |-
server_tokens off; # server_tokens off;
proxy_hide_header X-Powered-By; # proxy_hide_header X-Powered-By;
rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last; # rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last;
rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last; # rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last;
rewrite ^/.well-known/host-meta /public.php?service=host-meta last; # rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json; # rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json;
location = /.well-known/carddav { # location = /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav; # return 301 $scheme://$host/remote.php/dav;
} # }
location = /.well-known/caldav { # location = /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav; # return 301 $scheme://$host/remote.php/dav;
} # }
location = /robots.txt { # location = /robots.txt {
allow all; # allow all;
log_not_found off; # log_not_found off;
access_log off; # access_log off;
} # }
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ { # location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
deny all; # deny all;
} # }
location ~ ^/(?:autotest|occ|issue|indie|db_|console) { # location ~ ^/(?:autotest|occ|issue|indie|db_|console) {
deny all; # deny all;
} # }
#tls: # tls:
# - secretName: nextcloud-tls # - secretName: nextcloud-tls
# hosts: # hosts:
# - nextcloud.darkstars.local # - nextcloud.kube.home
labels: {} labels: {}
path: / path: /
pathType: Prefix pathType: Prefix
# Allow configuration of lifecycle hooks
# ref: https://kubernetes.io/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/
lifecycle: {} lifecycle: {}
# lifecycle:
# postStartCommand: []
# preStopCommand: []
phpClientHttpsFix: phpClientHttpsFix:
enabled: false enabled: false
protocol: https protocol: https
nextcloud: nextcloud:
host: nextcloud.darkstars.local host: nextcloud.kube.home
username: admin username: admin
password: changeme password: changeme
## Use an existing secret
existingSecret: existingSecret:
enabled: false enabled: false
# secretName: nameofsecret
usernameKey: nextcloud-username usernameKey: nextcloud-username
passwordKey: nextcloud-password passwordKey: nextcloud-password
tokenKey: "" tokenKey: ""
@@ -73,14 +87,19 @@ nextcloud:
smtpPasswordKey: smtp-password smtpPasswordKey: smtp-password
smtpHostKey: smtp-host smtpHostKey: smtp-host
update: 0 update: 0
# If web server is not binding default port, you can define it
containerPort: 80 containerPort: 80
datadir: /var/www/html/data datadir: /var/www/html/data
persistence: persistence:
subPath: subPath:
# if set, we'll template this list to the NEXTCLOUD_TRUSTED_DOMAINS env var
trustedDomains: [] trustedDomains: []
## SMTP configuration
mail: mail:
enabled: false enabled: false
# the user we send email as
fromAddress: user fromAddress: user
# the domain we send email from
domain: domain.com domain: domain.com
smtp: smtp:
host: domain.com host: domain.com
@@ -89,7 +108,10 @@ nextcloud:
authtype: LOGIN authtype: LOGIN
name: user name: user
password: pass password: pass
## Primary ObjectStore options
# see: https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/primary_storage.html#configuring-object-storage-as-primary-storage
objectStore: objectStore:
# https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/primary_storage.html#simple-storage-service-s3
s3: s3:
enabled: false enabled: false
# ignored if nextcloud.objectstore.s3.existingSecret is not empty string # ignored if nextcloud.objectstore.s3.existingSecret is not empty string