Commit new Chart releases for TrueCharts

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

stable/automatic-ripping-machine/2.1.22/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [automatic-ripping-machine-2.1.22](https://github.com/truecharts/charts/compare/automatic-ripping-machine-2.1.21...automatic-ripping-machine-2.1.22) (2024-01-21)
-
-### Chore
-
-
-
-- update container image common to v17.2.28[@918b4c5](https://github.com/918b4c5) by renovate ([#17478](https://github.com/truecharts/charts/issues/17478))

stable/automatic-ripping-machine/2.1.23/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [automatic-ripping-machine-2.1.23](https://github.com/truecharts/charts/compare/automatic-ripping-machine-2.1.22...automatic-ripping-machine-2.1.23) (2024-01-22)
+
+### Chore
+
+
+
+- update container image automaticrippingmachine/automatic-ripping-machine to 2.6.69[@308fd29](https://github.com/308fd29) by renovate ([#17490](https://github.com/truecharts/charts/issues/17490))
+
+
 ## [automatic-ripping-machine-2.1.22](https://github.com/truecharts/charts/compare/automatic-ripping-machine-2.1.21...automatic-ripping-machine-2.1.22) (2024-01-21)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 
 
 - update container image common to v17.2.22[@e7c9056](https://github.com/e7c9056) by renovate ([#16986](https://github.com/truecharts/charts/issues/16986))
-
-
-## [automatic-ripping-machine-2.1.13](https://github.com/truecharts/charts/compare/automatic-ripping-machine-2.1.12...automatic-ripping-machine-2.1.13) (2024-01-08)
-
-### Chore
-
-
-
-- update container image automaticrippingmachine/automatic-ripping-machine to 2.6.67[@ba66471](https://github.com/ba66471) by renovate ([#16972](https://github.com/truecharts/charts/issues/16972))

stable/automatic-ripping-machine/2.1.23/Chart.yaml

@@ -34,4 +34,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/automatic-ripping-machine
   - https://hub.docker.com/r/automaticrippingmachine/automatic-ripping-machine
 type: application
-version: 2.1.22
+version: 2.1.23

stable/automatic-ripping-machine/2.1.23/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [automatic-ripping-machine-2.1.23](https://github.com/truecharts/charts/compare/automatic-ripping-machine-2.1.22...automatic-ripping-machine-2.1.23) (2024-01-22)
+
+### Chore
+
+
+
+- update container image automaticrippingmachine/automatic-ripping-machine to 2.6.69[@308fd29](https://github.com/308fd29) by renovate ([#17490](https://github.com/truecharts/charts/issues/17490))

stable/automatic-ripping-machine/2.1.23/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: automaticrippingmachine/automatic-ripping-machine
   pullPolicy: IfNotPresent
-  tag: 2.6.69@sha256:c3644337ed8867374c9f4439229d25984746dc0bb86a2a3b026274abdf3e655d
+  tag: 2.6.69@sha256:308fd291aaa32c1d9e0f904994e66e5220375657bdaee9ee915a784c637e44b3
 
 securityContext:
   container:

stable/clamav/9.1.10/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [clamav-9.1.10](https://github.com/truecharts/charts/compare/clamav-9.1.9...clamav-9.1.10) (2024-01-21)
-
-### Chore
-
-
-
-- update container image common to v17.2.28[@918b4c5](https://github.com/918b4c5) by renovate ([#17478](https://github.com/truecharts/charts/issues/17478))

stable/clamav/9.1.11/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [clamav-9.1.11](https://github.com/truecharts/charts/compare/clamav-9.1.10...clamav-9.1.11) (2024-01-22)
+
+### Chore
+
+
+
+- update container image clamav/clamav to 1.2.1[@f51c38f](https://github.com/f51c38f) by renovate ([#17491](https://github.com/truecharts/charts/issues/17491))
+
+
 ## [clamav-9.1.10](https://github.com/truecharts/charts/compare/clamav-9.1.9...clamav-9.1.10) (2024-01-21)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 
 - update container image common to v17.2.18[@085ba3c](https://github.com/085ba3c) by renovate ([#16732](https://github.com/truecharts/charts/issues/16732))
 
-- standardize ./img references ([#16704](https://github.com/truecharts/charts/issues/16704))
-
-- lints some docs, uses front-matter instead of # h1, and fix list items in changelog ([#16589](https://github.com/truecharts/charts/issues/16589))
-
-
-## [clamav-9.1.2](https://github.com/truecharts/charts/compare/clamav-9.1.0...clamav-9.1.2) (2024-01-01)
-
-### Chore
-

stable/clamav/9.1.11/Chart.yaml

@@ -35,4 +35,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/clamav
   - https://hub.docker.com/r/clamav/clamav
 type: application
-version: 9.1.10
+version: 9.1.11

stable/clamav/9.1.11/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [clamav-9.1.11](https://github.com/truecharts/charts/compare/clamav-9.1.10...clamav-9.1.11) (2024-01-22)
+
+### Chore
+
+
+
+- update container image clamav/clamav to 1.2.1[@f51c38f](https://github.com/f51c38f) by renovate ([#17491](https://github.com/truecharts/charts/issues/17491))

stable/clamav/9.1.11/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: clamav/clamav
   pullPolicy: IfNotPresent
-  tag: 1.2.1@sha256:d584c29eefc29e138eb14f243abef2f6712cffecac52194626a2b2f6bb3ec2c7
+  tag: 1.2.1@sha256:f51c38f31c6b8754191a040c9f9ffc7cb3e44c796b9a2700b3cfd33211651a6f
 securityContext:
   container:
     readOnlyRootFilesystem: false

stable/duckdns/8.1.13/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [duckdns-8.1.13](https://github.com/truecharts/charts/compare/duckdns-8.1.12...duckdns-8.1.13) (2024-01-21)
-
-### Chore
-
-
-
-- update container image common to v17.2.28[@918b4c5](https://github.com/918b4c5) by renovate ([#17478](https://github.com/truecharts/charts/issues/17478))

stable/duckdns/8.1.14/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [duckdns-8.1.14](https://github.com/truecharts/charts/compare/duckdns-8.1.13...duckdns-8.1.14) (2024-01-22)
+
+### Chore
+
+
+
+- update container image ghcr.io/linuxserver/duckdns to latest[@91523ea](https://github.com/91523ea) by renovate ([#17493](https://github.com/truecharts/charts/issues/17493))
+
+
 ## [duckdns-8.1.13](https://github.com/truecharts/charts/compare/duckdns-8.1.12...duckdns-8.1.13) (2024-01-21)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 
 
 - bump common ([#16751](https://github.com/truecharts/charts/issues/16751))
-
-
-## [duckdns-8.1.4](https://github.com/truecharts/charts/compare/duckdns-8.1.3...duckdns-8.1.4) (2024-01-01)
-
-### Chore
-
-
-
-- increase common version for oci fixes

stable/duckdns/8.1.14/Chart.yaml

@@ -32,4 +32,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/duckdns
   - https://ghcr.io/linuxserver/duckdns
 type: application
-version: 8.1.13
+version: 8.1.14

stable/duckdns/8.1.14/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [duckdns-8.1.14](https://github.com/truecharts/charts/compare/duckdns-8.1.13...duckdns-8.1.14) (2024-01-22)
+
+### Chore
+
+
+
+- update container image ghcr.io/linuxserver/duckdns to latest[@91523ea](https://github.com/91523ea) by renovate ([#17493](https://github.com/truecharts/charts/issues/17493))

stable/duckdns/8.1.14/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: ghcr.io/linuxserver/duckdns
   pullPolicy: IfNotPresent
-  tag: latest@sha256:710930ec25e688a9ab3b98b1cb217600a07095829a42efbb9cbed966c294a1e2
+  tag: latest@sha256:91523eac78915b3c8fb6ba18cd0126dcbe0d55a513c9981b2d11f5a84c6de6d4
 securityContext:
   container:
     runAsNonRoot: false

stable/nextcloud/28.1.24/CHANGELOG.md

@@ -0,0 +1,99 @@
+---
+title: Changelog
+---
+
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+## [nextcloud-28.1.24](https://github.com/truecharts/charts/compare/nextcloud-28.1.23...nextcloud-28.1.24) (2024-01-22)
+
+### Chore
+
+
+
+- update container image clamav/clamav to 1.2.1[@f51c38f](https://github.com/f51c38f) by renovate ([#17491](https://github.com/truecharts/charts/issues/17491))
+
+
+## [nextcloud-28.1.23](https://github.com/truecharts/charts/compare/nextcloud-28.1.22...nextcloud-28.1.23) (2024-01-21)
+
+### Chore
+
+
+
+- update container image common to v17.2.28[@918b4c5](https://github.com/918b4c5) by renovate ([#17478](https://github.com/truecharts/charts/issues/17478))
+
+- update container image common to v17.2.26[@24c98f7](https://github.com/24c98f7) by renovate ([#17409](https://github.com/truecharts/charts/issues/17409))
+
+
+## [nextcloud-28.1.22](https://github.com/truecharts/charts/compare/nextcloud-28.1.21...nextcloud-28.1.22) (2024-01-21)
+
+### Chore
+
+
+
+- update container image tccr.io/tccr/nextcloud-push-notify to v0.6.7[@a6dfa37](https://github.com/a6dfa37) by renovate ([#17462](https://github.com/truecharts/charts/issues/17462))
+
+
+## [nextcloud-28.1.21](https://github.com/truecharts/charts/compare/nextcloud-28.1.18...nextcloud-28.1.21) (2024-01-21)
+
+### Chore
+
+
+
+- update nextcloud by renovate ([#17396](https://github.com/truecharts/charts/issues/17396))
+
+
+## [nextcloud-28.1.18](https://github.com/truecharts/charts/compare/nextcloud-28.1.17...nextcloud-28.1.18) (2024-01-21)
+
+### Chore
+
+
+
+- update metadata in chart.yaml ([#17457](https://github.com/truecharts/charts/issues/17457))
+
+
+## [nextcloud-28.1.17](https://github.com/truecharts/charts/compare/nextcloud-28.1.16...nextcloud-28.1.17) (2024-01-21)
+
+### Chore
+
+
+
+- install traefik during tests but set the services to clusterip ([#17445](https://github.com/truecharts/charts/issues/17445))
+
+
+## [nextcloud-28.1.16](https://github.com/truecharts/charts/compare/nextcloud-28.1.14...nextcloud-28.1.16) (2024-01-21)
+
+### Chore
+
+
+
+- update container image nginxinc/nginx-unprivileged to 1.25.3[@9af8bb1](https://github.com/9af8bb1) by renovate ([#17257](https://github.com/truecharts/charts/issues/17257))
+
+
+
+
+## [nextcloud-28.1.14](https://github.com/truecharts/charts/compare/nextcloud-28.1.13...nextcloud-28.1.14) (2024-01-13)
+
+### Chore
+
+
+
+- update container image tccr.io/tccr/nextcloud-fpm to v28.0.1[@49e45f3](https://github.com/49e45f3) by renovate ([#17093](https://github.com/truecharts/charts/issues/17093))
+
+- update container image nginxinc/nginx-unprivileged to 1.25.3[@3ae7d1f](https://github.com/3ae7d1f) by renovate ([#16975](https://github.com/truecharts/charts/issues/16975))
+
+
+## [nextcloud-28.1.13](https://github.com/truecharts/charts/compare/nextcloud-28.1.12...nextcloud-28.1.13) (2024-01-12)
+
+### Chore
+
+
+
+- update container image collabora/code to v23.05.7.2.1[@f465087](https://github.com/f465087) by renovate ([#16985](https://github.com/truecharts/charts/issues/16985))
+
+
+## [nextcloud-28.1.12](https://github.com/truecharts/charts/compare/nextcloud-28.1.11...nextcloud-28.1.12) (2024-01-09)
+
+### Chore

stable/nextcloud/28.1.24/Chart.yaml

@@ -0,0 +1,53 @@
+annotations:
+  max_scale_version: 23.10.2
+  min_scale_version: 23.10.0
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/category: cloud
+  truecharts.org/max_helm_version: "3.14"
+  truecharts.org/min_helm_version: "3.12"
+  truecharts.org/train: stable
+apiVersion: v2
+appVersion: 28.0.1
+dependencies:
+  - name: common
+    version: 17.2.28
+    repository: oci://tccr.io/truecharts
+    condition: ""
+    alias: ""
+    tags: []
+    import-values: []
+  - name: redis
+    version: 11.1.6
+    repository: https://deps.truecharts.org
+    condition: redis.enabled
+    alias: ""
+    tags: []
+    import-values: []
+deprecated: false
+description: A private cloud server that puts the control and security of your own data back into your hands.
+home: https://truecharts.org/charts/stable/nextcloud
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/nextcloud.png
+keywords:
+  - nextcloud
+  - storage
+  - http
+  - web
+  - php
+kubeVersion: ">=1.24.0-0"
+maintainers:
+  - name: TrueCharts
+    email: info@truecharts.org
+    url: https://truecharts.org
+name: nextcloud
+sources:
+  - https://github.com/nextcloud/docker
+  - https://github.com/nextcloud/helm
+  - https://github.com/truecharts/charts/tree/master/charts/stable/nextcloud
+  - https://hub.docker.com/r/collabora/code
+  - https://github.com/truecharts/containers/tree/master/apps/nextcloud-imaginary
+  - https://github.com/truecharts/containers/tree/master/apps/nextcloud-push-notify
+  - https://hub.docker.com/r/clamav/clamav
+  - https://hub.docker.com/r/nginxinc/nginx-unprivileged
+  - https://github.com/truecharts/containers/tree/master/apps/nextcloud-fpm
+type: application
+version: 28.1.24

stable/nextcloud/28.1.24/LICENSE

@@ -0,0 +1,106 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             The TrueCharts Project, it's owner and it's contributors
+Licensed Work:        The TrueCharts "Blocky" Helm Chart
+Additional Use Grant: You may use the licensed work in production, as long
+                      as it is directly sourced from a TrueCharts provided
+                      official repository, catalog or source. You may also make private
+                      modification to the directly sourced licenced work,
+                      when used in production.
+
+                      The following cases are, due to their nature, also
+                      defined as 'production use' and explicitly prohibited:
+                      - Bundling, including or displaying the licensed work
+                      with(in) another work intended for production use,
+                      with the apparent intend of facilitating and/or
+                      promoting production use by third parties in
+                      violation of this license.
+
+Change Date:          2050-01-01
+
+Change License:       3-clause BSD license
+
+For information about alternative licensing arrangements for the Software,
+please contact: legal@truecharts.org
+
+Notice
+
+The Business Source License (this document, or the “License”) is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
+“Business Source License” is a trademark of MariaDB Corporation Ab.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark “Business Source License”,
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the “Business
+Source License” name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where “compatible” means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text “None”.
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.

stable/nextcloud/28.1.24/README.md

@@ -0,0 +1,28 @@
+---
+title: README
+---
+
+## General Info
+
+TrueCharts can be installed as both _normal_ Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/stable/nextcloud)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+_All Rights Reserved - The TrueCharts Project_

stable/nextcloud/28.1.24/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [nextcloud-28.1.24](https://github.com/truecharts/charts/compare/nextcloud-28.1.23...nextcloud-28.1.24) (2024-01-22)
+
+### Chore
+
+
+
+- update container image clamav/clamav to 1.2.1[@f51c38f](https://github.com/f51c38f) by renovate ([#17491](https://github.com/truecharts/charts/issues/17491))

stable/nextcloud/28.1.24/app-readme.md

@@ -0,0 +1,8 @@
+A private cloud server that puts the control and security of your own data back into your hands.
+
+This App is supplied by TrueCharts, for more information visit the manual: [https://truecharts.org/charts/stable/nextcloud](https://truecharts.org/charts/stable/nextcloud)
+
+---
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!

stable/nextcloud/28.1.24/ix_values.yaml

@@ -0,0 +1,516 @@
+image:
+  repository: tccr.io/tccr/nextcloud-fpm
+  pullPolicy: IfNotPresent
+  tag: v28.0.1@sha256:5197ecccd86acb9f841364c2b393d4bfdb1acd2bd300498066e6e41db37bf36a
+nginxImage:
+  repository: nginxinc/nginx-unprivileged
+  pullPolicy: IfNotPresent
+  tag: 1.25.3@sha256:9af8bb104ae7ded69ce009adcf76b246c6041be56bd6d09c6677f5267223bd38
+imaginaryImage:
+  repository: tccr.io/tccr/nextcloud-imaginary
+  pullPolicy: IfNotPresent
+  tag: v20230401@sha256:b9137ac211ece1f8bb70dba685236e358ba40b49fff54c8d98991e025d168498
+hpbImage:
+  repository: tccr.io/tccr/nextcloud-push-notify
+  pullPolicy: IfNotPresent
+  tag: v0.6.7@sha256:a6dfa3788a088e0121bfb0674f31c71deb581e70c91747860bc091b49c030bcc
+clamavImage:
+  repository: clamav/clamav
+  pullPolicy: IfNotPresent
+  tag: 1.2.1@sha256:f51c38f31c6b8754191a040c9f9ffc7cb3e44c796b9a2700b3cfd33211651a6f
+collaboraImage:
+  repository: collabora/code
+  pullPolicy: IfNotPresent
+  tag: 23.05.7.2.1@sha256:f46508758da9672443207ab0ddce79297e8767f5658ad3fccc09e725042fb5ad
+nextcloud:
+  # Initial Credentials
+  credentials:
+    initialAdminUser: admin
+    initialAdminPassword: adminpass
+  # General settings
+  general:
+    # Custom Nextcloud Scripts
+    run_optimize: true
+    default_phone_region: GR
+    # IP used for exposing nextcloud,
+    # often the loadbalancer IP
+    accessIP: ""
+    # Allows Nextcloud to connect to unsecure (http) endpoints
+    force_enable_allow_local_remote_servers: false
+  # File settings
+  files:
+    shared_folder_name: Shared
+    max_chunk_size: 10485760
+  # Expiration settings
+  expirations:
+    activity_expire_days: 90
+    trash_retention_obligation: auto
+    versions_retention_obligation: auto
+  # Previews settings
+  previews:
+    enabled: true
+    # It will also deploy the container
+    imaginary: true
+    cron: true
+    schedule: "*/30 * * * *"
+    max_x: 2048
+    max_y: 2048
+    max_memory: 1024
+    max_file_size_image: 50
+    # Setting for Imaginary
+    max_allowed_resolution: 18.0
+    jpeg_quality: 60
+    square_sizes: 32 256
+    width_sizes: 256 384
+    height_sizes: 256
+    # Casings are important
+    # https://github.com/nextcloud/server/blob/master/config/config.sample.php#L1269
+    # Only the last part of the provider is needed
+    providers:
+      - PNG
+      - JPEG
+  # Logging settings
+  logging:
+    log_level: 2
+    log_file: /var/www/html/data/logs/nextcloud.log
+    log_audit_file: /var/www/html/data/logs/audit.log
+    log_date_format: d/m/Y H:i:s
+  # ClamAV settings
+  clamav:
+    # It will also deploy the container
+    # Note that this runs as root
+    enabled: false
+    stream_max_length: 26214400
+    file_max_size: -1
+    infected_action: only_log
+  # Notify Push settings
+  notify_push:
+    # It will also deploy the container
+    enabled: true
+  # Collabora settings
+  collabora:
+    # It will also deploy the container
+    enabled: false
+    # default|compact|tabbed
+    interface_mode: default
+    username: admin
+    password: changeme
+    dictionaries:
+      - de_DE
+      - en_GB
+      - en_US
+      - el_GR
+      - es_ES
+      - fr_FR
+      - pt_BR
+      - pt_PT
+      - it
+      - nl
+      - ru
+  onlyoffice:
+    # It will not deploy the container
+    # Only add the OnlyOffice settings
+    enabled: false
+    url: ""
+    internal_url: ""
+    verify_ssl: true
+    jwt: ""
+    jwt_header: Authorization
+  # PHP settings
+  php:
+    memory_limit: 1G
+    upload_limit: 10G
+    pm_max_children: 180
+    pm_start_servers: 18
+    pm_min_spare_servers: 12
+    pm_max_spare_servers: 30
+  opcache:
+    interned_strings_buffer: 32
+    max_accelerated_files: 10000
+    memory_consumption: 128
+    revalidate_freq: 60
+    jit_buffer_size: 128
+# Do NOT edit below this line
+workload:
+  # Nextcloud php-fpm
+  main:
+    type: Deployment
+    podSpec:
+      containers:
+        main:
+          enabled: true
+          primary: true
+          envFrom:
+            - configMapRef:
+                name: nextcloud-config
+          probes:
+            liveness:
+              enabled: true
+              type: exec
+              command: /healthcheck.sh
+            readiness:
+              enabled: true
+              type: exec
+              command: /healthcheck.sh
+            startup:
+              enabled: true
+              type: tcp
+              port: "{{ .Values.service.nextcloud.ports.nextcloud.targetPort }}"
+  nginx:
+    enabled: true
+    type: Deployment
+    strategy: RollingUpdate
+    replicas: 1
+    podSpec:
+      containers:
+        nginx:
+          enabled: true
+          primary: true
+          imageSelector: nginxImage
+          probes:
+            readiness:
+              enabled: true
+              path: /robots.txt
+              port: "{{ .Values.service.main.ports.main.port }}"
+              httpHeaders:
+                Host: kube.internal.healthcheck
+            liveness:
+              enabled: true
+              path: /robots.txt
+              port: "{{ .Values.service.main.ports.main.port }}"
+              httpHeaders:
+                Host: kube.internal.healthcheck
+            startup:
+              enabled: true
+              type: tcp
+              port: "{{ .Values.service.main.ports.main.port }}"
+  notify:
+    enabled: true
+    type: Deployment
+    strategy: RollingUpdate
+    replicas: 1
+    podSpec:
+      containers:
+        notify:
+          primary: true
+          enabled: true
+          imageSelector: hpbImage
+          envFrom:
+            - configMapRef:
+                name: hpb-config
+          probes:
+            readiness:
+              enabled: true
+              path: /push/test/cookie
+              port: 7867
+              httpHeaders:
+                Host: kube.internal.healthcheck
+            liveness:
+              enabled: true
+              path: /push/test/cookie
+              port: 7867
+              httpHeaders:
+                Host: kube.internal.healthcheck
+            startup:
+              enabled: true
+              type: tcp
+              port: 7867
+  imaginary:
+    enabled: true
+    type: Deployment
+    strategy: RollingUpdate
+    replicas: 1
+    podSpec:
+      containers:
+        imaginary:
+          primary: true
+          enabled: true
+          imageSelector: imaginaryImage
+          command: imaginary
+          args:
+            - -p
+            - "{{ .Values.service.imaginary.ports.imaginary.port }}"
+            - -concurrency
+            - "10"
+            - -max-allowed-resolution
+            - "{{ .Values.nextcloud.previews.max_allowed_resolution }}"
+            - -enable-url-source
+            - -return-size
+          probes:
+            readiness:
+              enabled: true
+              path: /health
+              port: "{{ .Values.service.imaginary.ports.imaginary.port }}"
+            liveness:
+              enabled: true
+              path: /health
+              port: "{{ .Values.service.imaginary.ports.imaginary.port }}"
+            startup:
+              enabled: true
+              type: tcp
+              port: "{{ .Values.service.imaginary.ports.imaginary.port }}"
+  clamav:
+    enabled: true
+    type: Deployment
+    strategy: RollingUpdate
+    replicas: 1
+    podSpec:
+      containers:
+        clamav:
+          primary: true
+          enabled: true
+          imageSelector: clamavImage
+          # FIXME: https://github.com/Cisco-Talos/clamav/issues/478
+          securityContext:
+            runAsUser: 0
+            runAsGroup: 0
+            runAsNonRoot: false
+            readOnlyRootFilesystem: false
+          envFrom:
+            - configMapRef:
+                name: clamav-config
+          probes:
+            readiness:
+              enabled: true
+              type: exec
+              command: clamdcheck.sh
+            liveness:
+              enabled: true
+              type: exec
+              command: clamdcheck.sh
+            startup:
+              enabled: true
+              type: tcp
+              port: "{{ .Values.service.clamav.ports.clamav.targetPort }}"
+  collabora:
+    enabled: true
+    type: Deployment
+    strategy: RollingUpdate
+    replicas: 1
+    podSpec:
+      containers:
+        collabora:
+          primary: true
+          enabled: true
+          imageSelector: collaboraImage
+          securityContext:
+            runAsUser: 100
+            runAsGroup: 102
+            readOnlyRootFilesystem: false
+            allowPrivilegeEscalation: true
+            capabilities:
+              add:
+                - CHOWN
+                - FOWNER
+                - SYS_CHROOT
+                - MKNOD
+          envFrom:
+            - configMapRef:
+                name: collabora-config
+          probes:
+            readiness:
+              enabled: true
+              type: http
+              path: /collabora/
+              port: "{{ .Values.service.collabora.ports.collabora.targetPort }}"
+            liveness:
+              enabled: true
+              type: http
+              path: /collabora/
+              port: "{{ .Values.service.collabora.ports.collabora.targetPort }}"
+            startup:
+              enabled: true
+              type: tcp
+              port: "{{ .Values.service.collabora.ports.collabora.targetPort }}"
+cronjobs:
+  # Don't change names, it's used in the persistence
+  - name: nextcloud-cron
+    enabled: true
+    schedule: "*/5 * * * *"
+    cmd:
+      - echo "Running [php -f /var/www/html/cron.php] ..."
+      - php -f /var/www/html/cron.php
+      - echo "Finished [php -f /var/www/html/cron.php]"
+  - name: preview-cron
+    enabled: "{{ .Values.nextcloud.previews.cron }}"
+    schedule: "{{ .Values.nextcloud.previews.schedule }}"
+    cmd:
+      - echo "Running [occ preview:pre-generate] ..."
+      - occ preview:pre-generate
+      - echo "Finished [occ preview:pre-generate]"
+service:
+  # Main service links to ingress easier
+  # That's why the nginx is swapped with nextcloud
+  main:
+    targetSelector: nginx
+    ports:
+      main:
+        targetSelector: nginx
+        port: 8080
+  nextcloud:
+    enabled: true
+    targetSelector: main
+    ports:
+      nextcloud:
+        enabled: true
+        targetSelector: main
+        port: 9000
+        targetPort: 9000
+  notify:
+    enabled: true
+    targetSelector: notify
+    ports:
+      notify:
+        enabled: true
+        primary: true
+        port: 7867
+        targetPort: 7867
+        targetSelector: notify
+      metrics:
+        enabled: true
+        port: 7868
+        targetSelector: notify
+  imaginary:
+    enabled: true
+    targetSelector: imaginary
+    ports:
+      imaginary:
+        enabled: true
+        port: 9090
+        targetSelector: imaginary
+  clamav:
+    enabled: true
+    targetSelector: clamav
+    ports:
+      clamav:
+        enabled: true
+        port: 3310
+        targetPort: 3310
+        targetSelector: clamav
+  collabora:
+    enabled: true
+    targetSelector: collabora
+    ports:
+      collabora:
+        enabled: true
+        port: 9980
+        targetPort: 9980
+        targetSelector: collabora
+persistence:
+  php-tune:
+    enabled: true
+    type: configmap
+    objectName: php-tune
+    targetSelector:
+      main:
+        main:
+          mountPath: /usr/local/etc/php-fpm.d/zz-tune.conf
+          subPath: zz-tune.conf
+          readOnly: true
+  redis-session:
+    enabled: true
+    type: configmap
+    objectName: redis-session
+    targetSelector:
+      main:
+        main:
+          mountPath: /usr/local/etc/php/conf.d/redis-session.ini
+          subPath: redis-session.ini
+          readOnly: true
+  opcache-recommended:
+    enabled: true
+    type: configmap
+    objectName: opcache
+    targetSelector:
+      main:
+        main:
+          mountPath: /usr/local/etc/php/conf.d/opcache-recommended.ini
+          subPath: opcache-recommended.ini
+          readOnly: true
+  nginx:
+    enabled: true
+    type: configmap
+    objectName: nginx-config
+    targetSelector:
+      nginx:
+        nginx:
+          mountPath: /etc/nginx/nginx.conf
+          subPath: nginx.conf
+          readOnly: true
+  nginx-temp:
+    enabled: true
+    type: emptyDir
+    targetSelector:
+      nginx:
+        nginx:
+          mountPath: /tmp/nginx
+  html:
+    enabled: true
+    targetSelector:
+      main:
+        main:
+          mountPath: /var/www/html
+      nextcloud-cron:
+        nextcloud-cron:
+          mountPath: /var/www/html
+      preview-cron:
+        preview-cron:
+          mountPath: /var/www/html
+      nginx:
+        nginx:
+          mountPath: /var/www/html
+          readOnly: true
+  config:
+    enabled: true
+    targetSelector:
+      main:
+        main:
+          mountPath: /var/www/html/config
+      nextcloud-cron:
+        nextcloud-cron:
+          mountPath: /var/www/html/config
+      preview-cron:
+        preview-cron:
+          mountPath: /var/www/html/config
+      notify:
+        notify:
+          mountPath: /var/www/html/config
+          readOnly: true
+      nginx:
+        nginx:
+          mountPath: /var/www/html/config
+          readOnly: true
+  data:
+    enabled: true
+    targetSelector:
+      main:
+        main:
+          mountPath: /var/www/html/data
+        init-perms:
+          mountPath: /var/www/html/data
+      nextcloud-cron:
+        nextcloud-cron:
+          mountPath: /var/www/html/data
+      preview-cron:
+        preview-cron:
+          mountPath: /var/www/html/data
+      nginx:
+        nginx:
+          mountPath: /var/www/html/data
+          readOnly: true
+cnpg:
+  main:
+    enabled: true
+    user: nextcloud
+    database: nextcloud
+redis:
+  enabled: true
+  username: default
+portal:
+  open:
+    enabled: true
+updated: true
+
+ingress:
+  main:
+    required: true

stable/nextcloud/28.1.24/templates/_configmap.tpl

@@ -0,0 +1,443 @@
+{{- define "nextcloud.accessurl" -}}
+  {{- $accessUrl := .Values.chartContext.appUrl -}}
+  {{- if or (contains "127.0.0.1" $accessUrl) (contains "localhost" $accessUrl) -}}
+    {{- if .Values.nextcloud.general.accessIP -}}
+      {{- $prot := "http" -}}
+      {{- $host := .Values.nextcloud.general.accessIP -}}
+      {{- $port := .Values.service.main.ports.main.port -}}
+      {{/*
+        Allowing here to override protocol and port
+        should be enough to make it work with any rev proxy
+      */}}
+      {{- $accessUrl = printf "%v://%v:%v" $prot $host $port -}}
+    {{- end -}}
+  {{- end -}}
+
+  {{- $accessUrl -}}
+{{- end -}}
+
+{{- define "nextcloud.accesshost" -}}
+  {{- $accessUrl := (include "nextcloud.accessurl" $) -}}
+  {{- $accessHost := regexReplaceAll ".*://(.*)" $accessUrl "${1}" -}}
+  {{- $accessHost = regexReplaceAll "(.*):.*" $accessHost "${1}" -}}
+
+  {{- $accessHost -}}
+{{- end -}}
+
+{{/* Define the configmap */}}
+{{- define "nextcloud.configmaps" -}}
+{{- $fullname := (include "tc.v1.common.lib.chart.names.fullname" $) -}}
+{{- $fqdn := (include "tc.v1.common.lib.chart.names.fqdn" $) -}}
+{{- $accessUrl := (include "nextcloud.accessurl" $) -}}
+{{- $accessHost := (include "nextcloud.accesshost" $) -}}
+{{- $accessHostPort := regexReplaceAll ".*://(.*)" $accessUrl "${1}" -}}
+{{- $accessProtocol := regexReplaceAll "(.*)://.*" $accessUrl "${1}" -}}
+{{- $redisHost := .Values.redis.creds.plainhost | trimAll "\"" -}}
+{{- $redisPass := .Values.redis.creds.redisPassword | trimAll "\"" -}}
+{{- $healthHost := "kube.internal.healthcheck" -}}
+
+php-tune:
+  enabled: true
+  data:
+    zz-tune.conf: |
+      [www]
+      pm.max_children = {{ .Values.nextcloud.php.pm_max_children }}
+      pm.start_servers = {{ .Values.nextcloud.php.pm_start_servers }}
+      pm.min_spare_servers = {{ .Values.nextcloud.php.pm_min_spare_servers }}
+      pm.max_spare_servers = {{ .Values.nextcloud.php.pm_max_spare_servers }}
+
+opcache:
+  enabled: true
+  data:
+    opcache-recommended.ini: |
+      opcache.enable=1
+      opcache.save_comments=1
+      opcache.jit=1255
+      opcache.interned_strings_buffer={{ .Values.nextcloud.opcache.interned_strings_buffer }}
+      opcache.max_accelerated_files={{ .Values.nextcloud.opcache.max_accelerated_files }}
+      opcache.memory_consumption={{ .Values.nextcloud.opcache.memory_consumption }}
+      opcache.revalidate_freq={{ .Values.nextcloud.opcache.revalidate_freq }}
+      opcache.jit_buffer_size={{ printf "%vM" .Values.nextcloud.opcache.jit_buffer_size }}
+
+redis-session:
+  enabled: true
+  data:
+    redis-session.ini: |
+      session.save_handler = redis
+      session.save_path = {{ printf "tcp://%v:6379?auth=%v" $redisHost $redisPass | quote }}
+      redis.session.locking_enabled = 1
+      redis.session.lock_retries = -1
+      redis.session.lock_wait_time = 10000
+
+hpb-config:
+  enabled: {{ .Values.nextcloud.notify_push.enabled }}
+  data:
+    NEXTCLOUD_URL: {{ printf "http://%v:%v" $fullname .Values.service.main.ports.main.port }}
+    HPB_HOST: {{ $healthHost }}
+    CONFIG_FILE: {{ printf "%v/config.php" .Values.persistence.config.targetSelector.notify.notify.mountPath }}
+    METRICS_PORT: {{ .Values.service.notify.ports.metrics.port | quote }}
+
+clamav-config:
+  enabled: {{ .Values.nextcloud.clamav.enabled }}
+  data:
+    CLAMAV_NO_CLAMD: "false"
+    CLAMAV_NO_FRESHCLAMD: "true"
+    CLAMAV_NO_MILTERD: "true"
+    CLAMD_STARTUP_TIMEOUT: "1800"
+
+collabora-config:
+  enabled: {{ .Values.nextcloud.collabora.enabled }}
+  data:
+    aliasgroup1: {{ $accessUrl }}
+    server_name: {{ $accessHostPort }}
+    dictionaries: {{ join " " .Values.nextcloud.collabora.dictionaries }}
+    username: {{ .Values.nextcloud.collabora.username | quote }}
+    password: {{ .Values.nextcloud.collabora.password | quote }}
+    DONT_GEN_SSL_CERT: "true"
+    # mount_jail_tree is only used for local storage
+    # not needed for WOPI https://github.com/CollaboraOnline/online/issues/3604#issuecomment-989833814
+    extra_params: |
+      --o:ssl.enable=false
+      --o:ssl.termination=true
+      --o:net.service_root=/collabora
+      --o:home_mode.enable=true
+      --o:welcome.enable=false
+      --o:logging.level=warning
+      --o:logging.level_startup=warning
+      --o:security.seccomp=true
+      --o:mount_jail_tree=false
+      --o:user_interface.mode={{ .Values.nextcloud.collabora.interface_mode }}
+
+nextcloud-config:
+  enabled: true
+  data:
+    {{/* Database */}}
+    POSTGRES_DB: {{ .Values.cnpg.main.database | quote }}
+    POSTGRES_USER: {{ .Values.cnpg.main.user | quote }}
+    POSTGRES_PASSWORD: {{ .Values.cnpg.main.creds.password | trimAll "\"" }}
+    POSTGRES_HOST: {{ .Values.cnpg.main.creds.host | trimAll "\"" }}
+
+    {{/* Redis */}}
+    NX_REDIS_HOST: {{ $redisHost }}
+    NX_REDIS_PASS: {{ $redisPass }}
+
+    {{/* Nextcloud INITIAL credentials */}}
+    NEXTCLOUD_ADMIN_USER: {{ .Values.nextcloud.credentials.initialAdminUser | quote }}
+    NEXTCLOUD_ADMIN_PASSWORD: {{ .Values.nextcloud.credentials.initialAdminPassword | quote }}
+
+    {{/* PHP Variables */}}
+    PHP_MEMORY_LIMIT: {{ .Values.nextcloud.php.memory_limit | quote }}
+    PHP_UPLOAD_LIMIT: {{ .Values.nextcloud.php.upload_limit | quote }}
+
+    {{/* Notify Push */}}
+    NX_NOTIFY_PUSH: {{ .Values.nextcloud.notify_push.enabled | quote }}
+    {{- if .Values.nextcloud.notify_push.enabled }}
+    NX_NOTIFY_PUSH_ENDPOINT: {{ $accessUrl }}/push
+    {{- end }}
+
+    {{/* Previews */}}
+    NX_PREVIEWS: {{ .Values.nextcloud.previews.enabled | quote }}
+    NX_PREVIEW_PROVIDERS: {{ join " " .Values.nextcloud.previews.providers }}
+    NX_PREVIEW_MAX_X: {{ .Values.nextcloud.previews.max_x | quote }}
+    NX_PREVIEW_MAX_Y: {{ .Values.nextcloud.previews.max_y | quote }}
+    NX_PREVIEW_MAX_MEMORY: {{ .Values.nextcloud.previews.max_memory | quote }}
+    NX_PREVIEW_MAX_FILESIZE_IMAGE: {{ .Values.nextcloud.previews.max_file_size_image | quote }}
+    NX_JPEG_QUALITY: {{ .Values.nextcloud.previews.jpeg_quality | quote }}
+    NX_PREVIEW_SQUARE_SIZES: {{ .Values.nextcloud.previews.square_sizes | quote }}
+    NX_PREVIEW_WIDTH_SIZES: {{ .Values.nextcloud.previews.width_sizes | quote }}
+    NX_PREVIEW_HEIGHT_SIZES: {{ .Values.nextcloud.previews.height_sizes | quote }}
+
+    {{/* Imaginary */}}
+    NX_IMAGINARY: {{ and .Values.nextcloud.previews.enabled .Values.nextcloud.previews.imaginary | quote }}
+    {{- if and .Values.nextcloud.previews.enabled .Values.nextcloud.previews.imaginary }}
+    NX_IMAGINARY_URL: {{ printf "http://%v-imaginary:%v" $fullname .Values.service.imaginary.ports.imaginary.port }}
+    {{- end }}
+
+    {{/* Expirations */}}
+    NX_ACTIVITY_EXPIRE_DAYS: {{ .Values.nextcloud.expirations.activity_expire_days | quote }}
+    NX_TRASH_RETENTION: {{ .Values.nextcloud.expirations.trash_retention_obligation | quote }}
+    NX_VERSIONS_RETENTION: {{ .Values.nextcloud.expirations.versions_retention_obligation | quote }}
+
+    {{/* General */}}
+    NX_RUN_OPTIMIZE: {{ .Values.nextcloud.general.run_optimize | quote }}
+    NX_DEFAULT_PHONE_REGION: {{ .Values.nextcloud.general.default_phone_region | quote }}
+    NEXTCLOUD_DATA_DIR: {{ .Values.persistence.data.targetSelector.main.main.mountPath }}
+    NX_FORCE_ENABLE_ALLOW_LOCAL_REMOTE_SERVERS: {{ .Values.nextcloud.general.force_enable_allow_local_remote_servers | quote }}
+
+    {{/* Files */}}
+    NX_SHARED_FOLDER_NAME: {{ .Values.nextcloud.files.shared_folder_name | quote }}
+    NX_MAX_CHUNKSIZE: {{ .Values.nextcloud.files.max_chunk_size | mul 1 | quote }}
+
+    {{/* Logging */}}
+    NX_LOG_LEVEL: {{ .Values.nextcloud.logging.log_level | quote }}
+    NX_LOG_FILE: {{ .Values.nextcloud.logging.log_file | quote }}
+    NX_LOG_FILE_AUDIT: {{ .Values.nextcloud.logging.log_audit_file | quote }}
+    NX_LOG_DATE_FORMAT: {{ .Values.nextcloud.logging.log_date_format | quote }}
+    NX_LOG_TIMEZONE: {{ .Values.TZ | quote }}
+
+    {{/* ClamAV */}}
+    NX_CLAMAV: {{ .Values.nextcloud.clamav.enabled | quote }}
+    {{- if .Values.nextcloud.clamav.enabled }}
+    NX_CLAMAV_HOST: {{ printf "%v-clamav" $fullname }}
+    NX_CLAMAV_PORT: {{ .Values.service.clamav.ports.clamav.targetPort | quote }}
+    NX_CLAMAV_STREAM_MAX_LENGTH: {{ .Values.nextcloud.clamav.stream_max_length | mul 1 | quote }}
+    NX_CLAMAV_FILE_MAX_SIZE: {{ .Values.nextcloud.clamav.file_max_size | quote }}
+    NX_CLAMAV_INFECTED_ACTION: {{ .Values.nextcloud.clamav.infected_action | quote }}
+    {{- end }}
+
+    {{/* Collabora */}}
+    NX_COLLABORA: {{ .Values.nextcloud.collabora.enabled | quote }}
+    {{- if .Values.nextcloud.collabora.enabled }}
+    NX_COLLABORA_URL: {{ printf "%v/collabora" $accessUrl | quote }}
+    # Ideally this would be a combo of: public ip, pod cidr, svc cidr
+    # But not always people have static IP.
+    NX_COLLABORA_ALLOWLIST: "0.0.0.0/0"
+    {{- end }}
+
+    {{/* Only Office */}}
+    NX_ONLYOFFICE: {{ .Values.nextcloud.onlyoffice.enabled | quote }}
+    {{- if .Values.nextcloud.onlyoffice.enabled }}
+    NX_ONLYOFFICE_URL: {{ .Values.nextcloud.onlyoffice.url | quote }}
+    NX_ONLYOFFICE_INTERNAL_URL: {{ .Values.nextcloud.onlyoffice.internal_url | quote }}
+    NX_ONLYOFFICE_VERIFY_SSL: {{ .Values.nextcloud.onlyoffice.verify_ssl | quote }}
+    NX_ONLYOFFICE_NEXTCLOUD_INTERNAL_URL: {{ printf "http://%v.svc.cluster.local:%v" $fqdn .Values.service.main.ports.main.port }}
+    NX_ONLYOFFICE_JWT: {{ .Values.nextcloud.onlyoffice.jwt | quote }}
+    NX_ONLYOFFICE_JWT_HEADER: {{ .Values.nextcloud.onlyoffice.jwt_header | quote }}
+    {{- end }}
+
+    {{/* URLs */}}
+    NX_OVERWRITE_HOST: {{ $accessHostPort }}
+    NX_OVERWRITE_CLI_URL: {{ $accessUrl }}
+    # Return the protocol part of the URL
+    NX_OVERWRITE_PROTOCOL: {{ $accessProtocol | lower }}
+    # IP (or range in this case) of the proxy(ies)
+    NX_TRUSTED_PROXIES: |
+      {{ .Values.chartContext.podCIDR }}
+      {{ .Values.chartContext.svcCIDR }}
+    # fullname-* will allow access from the
+    # other services in the same namespace
+    NX_TRUSTED_DOMAINS: |
+      127.0.0.1
+      localhost
+      {{ $fullname }}
+      {{ printf "%v-*" $fullname }}
+      {{ $healthHost }}
+      {{- if not (contains "127.0.0.1" $accessHost) }}
+        {{- $accessHost | nindent 6 }}
+      {{- end -}}
+      {{- with .Values.nextcloud.general.accessIP }}
+        {{- . | nindent 6 }}
+      {{- end }}
+
+# TODO: Replace locations with ingress
+# like /push, /.well-known/carddav, /.well-known/caldav
+# needs some work as nginx converts urls to pretty urls
+# before matching them to locations, so ingress needs to
+# take that into consideration.
+nginx-config:
+  enabled: true
+  data:
+    nginx.conf: |
+      worker_processes auto;
+
+      error_log               /var/log/nginx/error.log warn;
+      # Set to /tmp so it can run as non-root
+      pid                     /tmp/nginx.pid;
+
+      events {
+        worker_connections  1024;
+      }
+
+      http {
+        # Set to /tmp so it can run as non-root
+        client_body_temp_path /tmp/nginx/client_temp;
+        proxy_temp_path       /tmp/nginx/proxy_temp_path;
+        fastcgi_temp_path     /tmp/nginx/fastcgi_temp;
+        uwsgi_temp_path       /tmp/nginx/uwsgi_temp;
+        scgi_temp_path        /tmp/nginx/scgi_temp;
+
+        include               /etc/nginx/mime.types;
+        default_type          application/octet-stream;
+
+        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                          '$status $body_bytes_sent "$http_referer" '
+                          '"$http_user_agent" "$http_x_forwarded_for"';
+
+        access_log  /var/log/nginx/access.log  main;
+
+        sendfile        on;
+        #tcp_nopush     on;
+
+        # Prevent nginx HTTP Server Detection
+        server_tokens   off;
+
+        keepalive_timeout  65;
+
+        #gzip  on;
+
+        upstream php-handler {
+          server {{ printf "%v-nextcloud" $fullname }}:{{ .Values.service.nextcloud.ports.nextcloud.targetPort }};
+        }
+
+        server {
+          listen {{ .Values.service.main.ports.main.port }};
+          absolute_redirect off;
+
+          {{- if .Values.nextcloud.notify_push.enabled }}
+          # Forward Notify_Push "High Performance Backend"  to it's own container
+          location ^~ /push/ {
+              # The trailing "/" is important!
+              proxy_pass http://{{ printf "%v-notify" $fullname }}:{{ .Values.service.notify.ports.notify.targetPort }}/;
+              proxy_http_version 1.1;
+              proxy_set_header Upgrade $http_upgrade;
+              proxy_set_header Connection "Upgrade";
+              proxy_set_header Host $host;
+              proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+          }
+          {{- end }}
+
+          # HSTS settings
+          # WARNING: Only add the preload option once you read about
+          # the consequences in https://hstspreload.org/. This option
+          # will add the domain to a hardcoded list that is shipped
+          # in all major browsers and getting removed from this list
+          # could take several months.
+          #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always;
+
+          # Set max upload size
+          client_max_body_size {{ .Values.nextcloud.php.upload_limit | default "512M" }};
+          fastcgi_buffers 64 4K;
+
+          # Enable gzip but do not remove ETag headers
+          gzip on;
+          gzip_vary on;
+          gzip_comp_level 4;
+          gzip_min_length 256;
+          gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
+          gzip_types application/atom+xml text/javascript application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/wasm application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
+
+          # Pagespeed is not supported by Nextcloud, so if your server is built
+          # with the `ngx_pagespeed` module, uncomment this line to disable it.
+          #pagespeed off;
+
+          include mime.types;
+          types {
+              text/javascript js mjs;
+          }
+
+          # HTTP response headers borrowed from Nextcloud `.htaccess`
+          add_header Referrer-Policy                      "no-referrer"       always;
+          add_header X-Content-Type-Options               "nosniff"           always;
+          add_header X-Download-Options                   "noopen"            always;
+          add_header X-Frame-Options                      "SAMEORIGIN"        always;
+          add_header X-Permitted-Cross-Domain-Policies    "none"              always;
+          add_header X-Robots-Tag                         "noindex, nofollow" always;
+          add_header X-XSS-Protection                     "1; mode=block"     always;
+
+          # Remove X-Powered-By, which is an information leak
+          fastcgi_hide_header X-Powered-By;
+
+          # Path to the root of your installation
+          root {{ .Values.persistence.html.targetSelector.nginx.nginx.mountPath }};
+
+          # Specify how to handle directories -- specifying `/index.php$request_uri`
+          # here as the fallback means that Nginx always exhibits the desired behaviour
+          # when a client requests a path that corresponds to a directory that exists
+          # on the server. In particular, if that directory contains an index.php file,
+          # that file is correctly served; if it doesn't, then the request is passed to
+          # the front-end controller. This consistent behaviour means that we don't need
+          # to specify custom rules for certain paths (e.g. images and other assets,
+          # `/updater`, `/ocm-provider`, `/ocs-provider`), and thus
+          # `try_files $uri $uri/ /index.php$request_uri`
+          # always provides the desired behaviour.
+          index index.php index.html /index.php$request_uri;
+
+          # Rule borrowed from `.htaccess` to handle Microsoft DAV clients
+          location = / {
+            if ( $http_user_agent ~ ^DavClnt ) {
+              return 302 /remote.php/webdav/$is_args$args;
+            }
+          }
+
+          location = /robots.txt {
+            allow all;
+            log_not_found off;
+            access_log off;
+          }
+
+          # Make a regex exception for `/.well-known` so that clients can still
+          # access it despite the existence of the regex rule
+          # `location ~ /(\.|autotest|...)` which would otherwise handle requests
+          # for `/.well-known`.
+          location ^~ /.well-known {
+            # The rules in this block are an adaptation of the rules
+            # in `.htaccess` that concern `/.well-known`.
+
+            location = /.well-known/carddav { return 301 /remote.php/dav/; }
+            location = /.well-known/caldav  { return 301 /remote.php/dav/; }
+
+            location /.well-known/acme-challenge    { try_files $uri $uri/ =404; }
+            location /.well-known/pki-validation    { try_files $uri $uri/ =404; }
+
+            # Let Nextcloud's API for `/.well-known` URIs handle all other
+            # requests by passing them to the front-end controller.
+            return 301 /index.php$request_uri;
+          }
+
+          # Rules borrowed from `.htaccess` to hide certain paths from clients
+          location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)  { return 404; }
+          location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console)                { return 404; }
+
+          # Ensure this block, which passes PHP files to the PHP process, is above the blocks
+          # which handle static assets (as seen below). If this block is not declared first,
+          # then Nginx will encounter an infinite rewriting loop when it prepends `/index.php`
+          # to the URI, resulting in a HTTP 500 error response.
+          location ~ \.php(?:$|/) {
+            # Required for legacy support
+            rewrite ^/(?!index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|oc[ms]-provider\/.+|.+\/richdocumentscode\/proxy) /index.php$request_uri;
+
+            fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+            set $path_info $fastcgi_path_info;
+
+            try_files $fastcgi_script_name =404;
+
+            include fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param PATH_INFO $path_info;
+            #fastcgi_param HTTPS on;
+
+            fastcgi_param modHeadersAvailable true;         # Avoid sending the security headers twice
+            fastcgi_param front_controller_active true;     # Enable pretty urls
+            fastcgi_pass php-handler;
+
+            fastcgi_intercept_errors on;
+            fastcgi_request_buffering off;
+            proxy_send_timeout 3600s;
+            proxy_read_timeout 3600s;
+            fastcgi_send_timeout 3600s;
+            fastcgi_read_timeout 3600s;
+          }
+
+          location ~ \.(?:css|js|svg|gif)$ {
+            try_files $uri /index.php$request_uri;
+            expires 6M;         # Cache-Control policy borrowed from `.htaccess`
+            access_log off;     # Optional: Don't log access to assets
+          }
+
+          location ~ \.woff2?$ {
+            try_files $uri /index.php$request_uri;
+            expires 7d;         # Cache-Control policy borrowed from `.htaccess`
+            access_log off;     # Optional: Don't log access to assets
+          }
+
+          # Rule borrowed from `.htaccess`
+          location /remote {
+            return 301 /remote.php$request_uri;
+          }
+
+          location / {
+            try_files $uri $uri/ /index.php$request_uri;
+          }
+        }
+      }
+{{- end -}}

stable/nextcloud/28.1.24/templates/_cronjobs.tpl

@@ -0,0 +1,34 @@
+{{- define "nextcloud.cronjobs" -}}
+{{- range $cj := .Values.cronjobs }}
+  {{- $name := $cj.name | required "Nextcloud - Expected non-empty name in cronjob" -}}
+  {{- $schedule := $cj.schedule | required "Nextcloud - Expected non-empty schedule in cronjob" }}
+
+{{ $name }}:
+  enabled: {{ $cj.enabled | quote }}
+  type: CronJob
+  schedule: {{ $schedule | quote }}
+  podSpec:
+    restartPolicy: Never
+    containers:
+      {{ $name }}:
+        enabled: true
+        primary: true
+        imageSelector: image
+        command:
+          - /bin/bash
+          - -c
+          - |
+            {{- range $cj.cmd }}
+              {{- . | nindent 12 }}
+            {{- else -}}
+              {{- fail "Nextcloud - Expected non-empty cmd in cronjob" -}}
+            {{- end }}
+        probes:
+          liveness:
+            enabled: false
+          readiness:
+            enabled: false
+          startup:
+            enabled: false
+{{- end }}
+{{- end -}}

stable/nextcloud/28.1.24/templates/_ingressInjector.tpl

@@ -0,0 +1,23 @@
+{{- define "nextcloud.ingressInjector" -}}
+  {{- if .Values.ingress.main.enabled -}}
+    {{- $injectPaths := list -}}
+    {{- if .Values.nextcloud.collabora.enabled -}}
+      {{- $injectPaths = mustAppend $injectPaths (include "nextcloud.collabora.ingress" $ | fromYaml) -}}
+    {{- end -}}
+    {{/* Append more paths here if needed */}}
+
+    {{- range $host := .Values.ingress.main.hosts -}}
+      {{- $paths := $host.paths -}}
+      {{- $paths = concat $paths $injectPaths -}}
+      {{- $_ := set $host "paths" $paths -}}
+    {{- end -}}
+  {{- end -}}
+{{- end -}}
+
+{{- define "nextcloud.collabora.ingress" -}}
+path: /collabora/
+pathType: Prefix
+overrideService:
+  name: collabora
+  port: {{ .Values.service.collabora.ports.collabora.port }}
+{{- end -}}

stable/nextcloud/28.1.24/templates/_initPerms.tpl

@@ -0,0 +1,29 @@
+{{- define "nextcloud.init.perms" -}}
+{{- $uid := .Values.securityContext.container.runAsUser -}}
+{{- $gid := .Values.securityContext.container.runAsGroup -}}
+{{- $path := .Values.persistence.data.targetSelector.main.main.mountPath }}
+enabled: true
+type: install
+imageSelector: alpineImage
+securityContext:
+  runAsUser: 0
+  runAsGroup: 0
+  runAsNonRoot: false
+  capabilities:
+    disableS6Caps: true
+    add:
+      - DAC_OVERRIDE
+      - FOWNER
+      - CHOWN
+command: /bin/sh
+args:
+  - -c
+  - |
+    echo "Setting permissions to 700 on data directory [{{ $path }}] ..."
+    chmod 770 {{ $path }} | echo "Failed to set permissions on data directory [{{ $path }}]"
+
+    echo "Setting ownership to {{ $uid }}:{{ $gid }} on data directory [{{ $path }}] ..."
+    chown {{ $uid }}:{{ $gid }} {{ $path }} | echo "Failed to set ownership on data directory [{{ $path }}]"
+
+    echo "Finished."
+{{- end -}}

stable/nextcloud/28.1.24/templates/_validation.tpl

@@ -0,0 +1,42 @@
+{{- define "nextcloud.validation" -}}
+
+  {{- if not (mustRegexMatch "^[0-9]+(M|G){1}$" .Values.nextcloud.php.memory_limit) -}}
+    {{- fail (printf "Nextcloud - Expected Memory Limit to be in format [1M, 1G] but got [%v]" .Values.nextcloud.php.memory_limit) -}}
+  {{- end -}}
+
+  {{- if not (mustRegexMatch "^[0-9]+(M|G){1}$" .Values.nextcloud.php.upload_limit) -}}
+    {{- fail (printf "Nextcloud - Expected Memory Limit to be in format [1M, 1G] but got [%v]" .Values.nextcloud.php.upload_limit) -}}
+  {{- end -}}
+
+  {{- if not (deepEqual .Values.nextcloud.previews.providers (uniq .Values.nextcloud.previews.providers)) -}}
+    {{- fail (printf "Nextcloud - Expected preview providers to be unique but got [%v]" .Values.nextcloud.previews.providers) -}}
+  {{- end -}}
+
+  {{- if and .Values.nextcloud.collabora.enabled .Values.nextcloud.onlyoffice.enabled -}}
+    {{- fail "Nextcloud - Expected only one of [Collabora, OnlyOffice] to be enabled" -}}
+  {{- end -}}
+
+  {{- if contains "$" .Values.nextcloud.collabora.password -}}
+    {{- fail "Nextcloud - Collabora [Password] cannot contain [$]" -}}
+  {{- end -}}
+
+  {{- if .Values.nextcloud.collabora.enabled -}}
+    {{- if lt (len .Values.nextcloud.collabora.password) 8 -}}
+      {{- fail "Nextcloud - Collabora [Password] must be at least 8 characters" -}}
+    {{- end -}}
+
+    {{- $collaboraUIModes := (list "default" "compact" "tabbed") -}}
+    {{- if not (mustHas .Values.nextcloud.collabora.interface_mode $collaboraUIModes) -}}
+      {{- fail (printf "Nextcloud - Expected [Interface Mode] in Collabora to be one of [%v], but got [%v]" (join "," $collaboraUIModes) .Values.nextcloud.collabora.interface_mode) -}}
+    {{- end -}}
+
+    {{- if not .Values.nextcloud.collabora.dictionaries -}}
+      {{- fail "Nextcloud - Expected non-empty Collabora [Dictionaries]" -}}
+    {{- end -}}
+
+    {{- if not (deepEqual .Values.nextcloud.collabora.dictionaries (uniq .Values.nextcloud.collabora.dictionaries)) -}}
+      {{- fail "Nextcloud - Collabora [Dictionaries] must be unique" -}}
+    {{- end -}}
+  {{- end -}}
+
+{{- end -}}

stable/nextcloud/28.1.24/templates/_waitNextcloud.tpl

@@ -0,0 +1,25 @@
+{{- define "nextcloud.wait.nextcloud" -}}
+{{- $fullname := (include "tc.v1.common.lib.chart.names.fullname" $) -}}
+{{- $ncURL := printf "%v-nextcloud:%v" $fullname .Values.service.nextcloud.ports.nextcloud.targetPort }}
+enabled: true
+type: init
+imageSelector: image
+securityContext:
+command: /bin/sh
+args:
+  - -c
+  - |
+    echo "Waiting Nextcloud [{{ $ncURL }}] to be ready and installed..."
+    until \
+          REQUEST_METHOD="GET" \
+          SCRIPT_NAME="status.php" \
+          SCRIPT_FILENAME="status.php" \
+          cgi-fcgi -bind -connect "{{ $ncURL }}" | grep -q '"installed":true';
+    do
+      echo "Waiting Nextcloud [{{ $ncURL }}] to be ready and installed..."
+      sleep 3
+    done
+
+    echo "Nextcloud is ready and installed..."
+    echo "Starting Nginx..."
+{{- end -}}

stable/nextcloud/28.1.24/templates/common.yaml

@@ -0,0 +1,92 @@
+{{- $selector := dict -}}
+{{- range $name := (list "main" "nextcloud-cron" "preview-cron") -}}
+  {{/* creates main: {} */}}
+  {{- $_ := set $selector $name dict -}}
+  {{/* sets main: {} to main: { main: {} } */}}
+  {{- $_ := set (get $selector $name) $name dict -}}
+{{- end -}}
+
+{{- range $item := .Values.persistenceList -}}
+  {{- $_ := set $item "targetSelector" $selector -}}
+{{- end -}}
+
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.v1.common.loader.init" . -}}
+
+{{- include "nextcloud.validation" $ -}}
+
+{{/* Render configmaps for all pods */}}
+{{- $configmaps := include "nextcloud.configmaps" . | fromYaml -}}
+{{- if $configmaps -}}
+  {{- $_ := mustMergeOverwrite .Values.configmap $configmaps -}}
+{{- end -}}
+
+{{/* Create hostAliases (resolve ingress host to Node/LB IP) */}}
+{{- $hostAlias := (list (dict
+    "ip" .Values.nextcloud.general.accessIP
+    "hostnames" (
+      list (include "nextcloud.accesshost" $)
+    )
+  )) -}}
+
+{{/* Add [hostAliases] to nextcloud and collabora pod */}}
+{{- $_ := set .Values.workload.main.podSpec "hostAliases" $hostAlias -}}
+{{- $_ := set .Values.workload.collabora.podSpec "hostAliases" $hostAlias -}}
+
+{{/* Add [init perms] container to nextcloud */}}
+{{- if not (get .Values.workload.main.podSpec "initContainers") -}}
+  {{- $_ := set .Values.workload.main.podSpec "initContainers" dict -}}
+{{- end -}}
+
+{{- $initPerms := (include "nextcloud.init.perms" . | fromYaml) -}}
+{{- $_ := set .Values.workload.main.podSpec.initContainers "init-perms" $initPerms -}}
+
+{{/* Add [wait nextcloud] container to nginx */}}
+{{- if not (get .Values.workload.nginx.podSpec "initContainers") -}}
+  {{- $_ := set .Values.workload.nginx.podSpec "initContainers" dict -}}
+{{- end -}}
+{{- $waitNextcloud := (include "nextcloud.wait.nextcloud" . | fromYaml) -}}
+{{- $_ := set .Values.workload.nginx.podSpec.initContainers "wait-nextcloud" $waitNextcloud -}}
+
+{{/* Disable [notify push] if requested */}}
+{{- if not .Values.nextcloud.notify_push.enabled -}}
+  {{- $_ := set .Values.workload.notify "enabled" false -}}
+  {{- $_ := set .Values.service.notify "enabled" false -}}
+{{- else -}}
+  {{/* Add [wait nextcloud] container to notify push */}}
+  {{- if not (get .Values.workload.notify.podSpec "initContainers") -}}
+    {{- $_ := set .Values.workload.notify.podSpec "initContainers" dict -}}
+  {{- end -}}
+  {{- $waitNextcloud := (include "nextcloud.wait.nextcloud" . | fromYaml) -}}
+  {{- $_ := set .Values.workload.notify.podSpec.initContainers "wait-nextcloud" $waitNextcloud -}}
+{{- end -}}
+
+{{/* Disable [clamav] if requested */}}
+{{- if not .Values.nextcloud.clamav.enabled -}}
+  {{- $_ := set .Values.workload.clamav "enabled" false -}}
+  {{- $_ := set .Values.service.clamav "enabled" false -}}
+{{- end -}}
+
+{{/* Disable [previews] if requested */}}
+{{- if or (not .Values.nextcloud.previews.imaginary) (not .Values.nextcloud.previews.enabled) -}}
+  {{- $_ := set .Values.workload.imaginary "enabled" false -}}
+  {{- $_ := set .Values.service.imaginary "enabled" false -}}
+{{- end -}}
+
+{{/* Disable [collabora] if requested */}}
+{{- if not .Values.nextcloud.collabora.enabled -}}
+  {{- $_ := set .Values.workload.collabora "enabled" false -}}
+  {{- $_ := set .Values.service.collabora "enabled" false -}}
+{{- end -}}
+
+{{/* Create [cronjobs] defined */}}
+{{- $cronjobs := include "nextcloud.cronjobs" . | fromYaml -}}
+{{- if $cronjobs -}}
+  {{- $_ := mustMergeOverwrite .Values.workload $cronjobs -}}
+{{- end -}}
+
+{{/* TODO: Do we have to cleanup when something (eg Collabora) is disabled? */}}
+{{- include "nextcloud.ingressInjector" $ -}}
+
+{{/* Render the templates */}}
+{{- include "tc.v1.common.loader.apply" . -}}

stable/rdtclient/3.1.12/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [rdtclient-3.1.12](https://github.com/truecharts/charts/compare/rdtclient-3.1.11...rdtclient-3.1.12) (2024-01-21)
-
-### Chore
-
-
-
-- update container image common to v17.2.28[@918b4c5](https://github.com/918b4c5) by renovate ([#17478](https://github.com/truecharts/charts/issues/17478))

stable/rdtclient/3.1.13/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [rdtclient-3.1.13](https://github.com/truecharts/charts/compare/rdtclient-3.1.12...rdtclient-3.1.13) (2024-01-22)
+
+### Chore
+
+
+
+- update container image ghcr.io/rogerfar/rdtclient to v2.0.59[@590dc26](https://github.com/590dc26) by renovate ([#17498](https://github.com/truecharts/charts/issues/17498))
+
+
 ## [rdtclient-3.1.12](https://github.com/truecharts/charts/compare/rdtclient-3.1.11...rdtclient-3.1.12) (2024-01-21)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 
 
 - increase common version for oci fixes
-
-- remove non-existent template refs ([#16738](https://github.com/truecharts/charts/issues/16738))
-
-
-## [rdtclient-3.1.3](https://github.com/truecharts/charts/compare/rdtclient-3.1.0...rdtclient-3.1.3) (2024-01-01)
-
-### Chore
-
-

stable/rdtclient/3.1.13/Chart.yaml

@@ -7,7 +7,7 @@ annotations:
   truecharts.org/min_helm_version: "3.12"
   truecharts.org/train: stable
 apiVersion: v2
-appVersion: 2.0.58
+appVersion: 2.0.59
 dependencies:
   - name: common
     version: 17.2.28
@@ -32,7 +32,7 @@ name: rdtclient
 sources:
   - https://github.com/rogerfar/rdt-client
   - https://github.com/truecharts/charts/tree/master/charts/stable/rdtclient
-  - https://ghcr.io/rogerfar/rdtclient
   - https://hub.docker.com/r/p3terx/aria2-pro
+  - https://ghcr.io/rogerfar/rdtclient
 type: application
-version: 3.1.12
+version: 3.1.13

stable/rdtclient/3.1.13/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [rdtclient-3.1.13](https://github.com/truecharts/charts/compare/rdtclient-3.1.12...rdtclient-3.1.13) (2024-01-22)
+
+### Chore
+
+
+
+- update container image ghcr.io/rogerfar/rdtclient to v2.0.59[@590dc26](https://github.com/590dc26) by renovate ([#17498](https://github.com/truecharts/charts/issues/17498))

stable/rdtclient/3.1.13/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: ghcr.io/rogerfar/rdtclient
   pullPolicy: IfNotPresent
-  tag: 2.0.58@sha256:5e8b26b247d5a019fc4589a3322b9fc97bf680d505d66d877190cce1471710c3
+  tag: 2.0.59@sha256:590dc26418082b4ee84c04ef4ff6f8ce78017082dbb6c069d5ef24dea80573e5
 aria2Image:
   repository: p3terx/aria2-pro
   pullPolicy: IfNotPresent

stable/rimgo/5.1.26/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [rimgo-5.1.26](https://github.com/truecharts/charts/compare/rimgo-5.1.25...rimgo-5.1.26) (2024-01-22)
-
-### Chore
-
-
-
-- update container image quay.io/pussthecatorg/rimgo to latest[@d8736db](https://github.com/d8736db) by renovate ([#17483](https://github.com/truecharts/charts/issues/17483))

stable/rimgo/5.1.27/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [rimgo-5.1.27](https://github.com/truecharts/charts/compare/rimgo-5.1.26...rimgo-5.1.27) (2024-01-22)
+
+### Chore
+
+
+
+- update container image quay.io/pussthecatorg/rimgo to latest[@d91306a](https://github.com/d91306a) by renovate ([#17496](https://github.com/truecharts/charts/issues/17496))
+
+
 ## [rimgo-5.1.26](https://github.com/truecharts/charts/compare/rimgo-5.1.25...rimgo-5.1.26) (2024-01-22)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 - update container image quay.io/pussthecatorg/rimgo to latest[@68f5236](https://github.com/68f5236) by renovate ([#17240](https://github.com/truecharts/charts/issues/17240))
 
 
-## [rimgo-5.1.17](https://github.com/truecharts/charts/compare/rimgo-5.1.16...rimgo-5.1.17) (2024-01-14)
-
-### Chore
-
-
-
-- update container image quay.io/pussthecatorg/rimgo to latest[@16c449f](https://github.com/16c449f) by renovate ([#17174](https://github.com/truecharts/charts/issues/17174))
-
-

stable/rimgo/5.1.27/Chart.yaml

@@ -33,4 +33,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/rimgo
   - https://quay.io/pussthecatorg/rimgo
 type: application
-version: 5.1.26
+version: 5.1.27

stable/rimgo/5.1.27/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [rimgo-5.1.27](https://github.com/truecharts/charts/compare/rimgo-5.1.26...rimgo-5.1.27) (2024-01-22)
+
+### Chore
+
+
+
+- update container image quay.io/pussthecatorg/rimgo to latest[@d91306a](https://github.com/d91306a) by renovate ([#17496](https://github.com/truecharts/charts/issues/17496))

stable/rimgo/5.1.27/ix_values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: quay.io/pussthecatorg/rimgo
-  tag: latest@sha256:d8736db573658c1129ec61029b9af4eb980bafcbaa2ed44ff0995d4676b8995a
+  tag: latest@sha256:d91306aa0891f059bc1e2a27cdaf12a9314437ae3772c3d412fadb5f02e045b7
   pullPolicy: IfNotPresent
 persistence: {}
 

stable/rimgo/5.1.27/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

stable/rsshub/11.1.27/CHANGELOG.md

@@ -0,0 +1,99 @@
+---
+title: Changelog
+---
+
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+## [rsshub-11.1.27](https://github.com/truecharts/charts/compare/rsshub-11.1.26...rsshub-11.1.27) (2024-01-22)
+
+### Chore
+
+
+
+- update container image diygod/rsshub to latest[@375b446](https://github.com/375b446) by renovate ([#17492](https://github.com/truecharts/charts/issues/17492))
+
+
+## [rsshub-11.1.26](https://github.com/truecharts/charts/compare/rsshub-11.1.25...rsshub-11.1.26) (2024-01-22)
+
+### Chore
+
+
+
+- update container image diygod/rsshub to latest[@ae11c9e](https://github.com/ae11c9e) by renovate ([#17481](https://github.com/truecharts/charts/issues/17481))
+
+
+## [rsshub-11.1.25](https://github.com/truecharts/charts/compare/rsshub-11.1.24...rsshub-11.1.25) (2024-01-21)
+
+### Chore
+
+
+
+- update container image common to v17.2.28[@918b4c5](https://github.com/918b4c5) by renovate ([#17478](https://github.com/truecharts/charts/issues/17478))
+
+
+## [rsshub-11.1.24](https://github.com/truecharts/charts/compare/rsshub-11.1.23...rsshub-11.1.24) (2024-01-21)
+
+### Chore
+
+
+
+- update helm general non-major by renovate ([#17286](https://github.com/truecharts/charts/issues/17286))
+
+
+## [rsshub-11.1.23](https://github.com/truecharts/charts/compare/rsshub-11.1.22...rsshub-11.1.23) (2024-01-21)
+
+### Chore
+
+
+
+- update container image diygod/rsshub to latest[@1b05e63](https://github.com/1b05e63) by renovate ([#17466](https://github.com/truecharts/charts/issues/17466))
+
+
+## [rsshub-11.1.22](https://github.com/truecharts/charts/compare/rsshub-11.1.21...rsshub-11.1.22) (2024-01-21)
+
+### Chore
+
+
+
+- update container image common to v17.2.26[@24c98f7](https://github.com/24c98f7) by renovate ([#17409](https://github.com/truecharts/charts/issues/17409))
+
+
+## [rsshub-11.1.21](https://github.com/truecharts/charts/compare/rsshub-11.1.20...rsshub-11.1.21) (2024-01-21)
+
+### Chore
+
+
+
+- update metadata in chart.yaml ([#17457](https://github.com/truecharts/charts/issues/17457))
+
+
+## [rsshub-11.1.20](https://github.com/truecharts/charts/compare/rsshub-11.1.19...rsshub-11.1.20) (2024-01-21)
+
+### Chore
+
+
+
+- update container image diygod/rsshub to latest[@e924ec2](https://github.com/e924ec2) by renovate ([#17335](https://github.com/truecharts/charts/issues/17335))
+
+
+## [rsshub-11.1.19](https://github.com/truecharts/charts/compare/rsshub-11.1.18...rsshub-11.1.19) (2024-01-15)
+
+### Chore
+
+
+
+- update container image diygod/rsshub to latest[@e4c9c9e](https://github.com/e4c9c9e) by renovate ([#17276](https://github.com/truecharts/charts/issues/17276))
+
+
+## [rsshub-11.1.18](https://github.com/truecharts/charts/compare/rsshub-11.1.17...rsshub-11.1.18) (2024-01-15)
+
+### Chore
+
+
+
+- update helm general non-major by renovate ([#17105](https://github.com/truecharts/charts/issues/17105))
+
+

stable/rsshub/11.1.27/Chart.yaml

@@ -0,0 +1,46 @@
+annotations:
+  max_scale_version: 23.10.2
+  min_scale_version: 23.10.0
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/category: media
+  truecharts.org/max_helm_version: "3.14"
+  truecharts.org/min_helm_version: "3.12"
+  truecharts.org/train: stable
+apiVersion: v2
+appVersion: latest
+dependencies:
+  - name: common
+    version: 17.2.28
+    repository: oci://tccr.io/truecharts
+    condition: ""
+    alias: ""
+    tags: []
+    import-values: []
+  - name: redis
+    version: 11.1.13
+    repository: https://deps.truecharts.org
+    condition: redis.enabled
+    alias: ""
+    tags: []
+    import-values: []
+deprecated: false
+description: RSSHub can generate RSS feeds from pretty much everything
+home: https://truecharts.org/charts/stable/rsshub
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/rsshub.png
+keywords:
+  - rsshub
+  - rss
+kubeVersion: ">=1.24.0-0"
+maintainers:
+  - name: TrueCharts
+    email: info@truecharts.org
+    url: https://truecharts.org
+name: rsshub
+sources:
+  - https://docs.rsshub.app/en/install/
+  - https://github.com/DIYgod/RSSHub
+  - https://github.com/truecharts/charts/tree/master/charts/stable/rsshub
+  - https://hub.docker.com/r/diygod/rsshub
+  - https://hub.docker.com/r/browserless/chrome
+type: application
+version: 11.1.27

stable/rsshub/11.1.27/README.md

@@ -0,0 +1,28 @@
+---
+title: README
+---
+
+## General Info
+
+TrueCharts can be installed as both _normal_ Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/stable/rsshub)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+_All Rights Reserved - The TrueCharts Project_

stable/rsshub/11.1.27/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [rsshub-11.1.27](https://github.com/truecharts/charts/compare/rsshub-11.1.26...rsshub-11.1.27) (2024-01-22)
+
+### Chore
+
+
+
+- update container image diygod/rsshub to latest[@375b446](https://github.com/375b446) by renovate ([#17492](https://github.com/truecharts/charts/issues/17492))

stable/rsshub/11.1.27/app-readme.md

@@ -0,0 +1,8 @@
+RSSHub can generate RSS feeds from pretty much everything
+
+This App is supplied by TrueCharts, for more information visit the manual: [https://truecharts.org/charts/stable/rsshub](https://truecharts.org/charts/stable/rsshub)
+
+---
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!

stable/rsshub/11.1.27/ix_values.yaml

@@ -0,0 +1,62 @@
+image:
+  repository: diygod/rsshub
+  pullPolicy: IfNotPresent
+  tag: latest@sha256:375b4468f2b7fb7d9a13891475495a2184fa0630caa7aa383f1a09f28f5fe4ad
+browserlessImage:
+  repository: browserless/chrome
+  tag: 1.60.2-chrome-stable@sha256:7db5e3aad20c201abaa03bbbc868a55ef96574cda0e67ccb7e4e032053ecb87d
+service:
+  main:
+    ports:
+      main:
+        port: 10191
+# Enabled redis
+redis:
+  enabled: true
+  redisUsername: default
+additionalContainers:
+  browserless:
+    name: browserless
+    image: "{{ .Values.browserlessImage.repository }}:{{ .Values.browserlessImage.tag }}"
+    ports:
+      - containerPort: 3000
+        name: main
+portal:
+  open:
+    enabled: true
+securityContext:
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 0
+    runAsGroup: 0
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            PORT: "{{ .Values.service.main.ports.main.port }}"
+            NODE_ENV: production
+            CACHE_TYPE: "redis"
+            PUPPETEER_WS_ENDPOINT: "ws://localhost:3000"
+            NODE_NAME: "{{ .Release.Name }}-{{ randAlphaNum 5 }}"
+            # User  defined
+            # ALLOW_ORIGIN: ""
+            DISALLOW_ROBOT: false
+            TITLE_LENGTH_LIMIT: 150
+            REDIS_URL:
+              secretKeyRef:
+                expandObjectName: false
+                name: '{{ printf "%s-%s" .Release.Name "rediscreds" }}'
+                key: url
+            HTTP_BASIC_AUTH_NAME: ""
+            HTTP_BASIC_AUTH_PASS: ""
+            BITBUCKET_USERNAME: ""
+            BITBUCKET_PASSWORD: ""
+            GITHUB_ACCESS_TOKEN: ""
+            GOOGLE_FONTS_API_KEY: ""
+            YOUTUBE_KEY: ""
+            TELEGRAM_TOKEN: ""
+            LASTFM_API_KEY: ""
+updated: true

stable/rsshub/11.1.27/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

stable/rsshub/11.1.27/templates/common.yaml

@@ -0,0 +1 @@
+{{ include "tc.v1.common.loader.all" . }}