2023-06-16 17:10:56 -04:00
|
|
|
image:
|
|
|
|
repository: tccr.io/truecharts/nextcloud-fpm
|
|
|
|
pullPolicy: IfNotPresent
|
2023-08-13 10:39:59 -04:00
|
|
|
tag: v27.0.2@sha256:367bdda86c95a334189e1396e5a5865f78d6739a7bca1f665290e6a965f51bcf
|
2023-06-16 17:10:56 -04:00
|
|
|
nginxImage:
|
|
|
|
repository: tccr.io/truecharts/nginx-unprivileged
|
|
|
|
pullPolicy: IfNotPresent
|
2023-09-18 07:40:02 -04:00
|
|
|
tag: v1.25.2@sha256:d33f55cafb5c6e6d7882e786034057f42e9aed5e0b493b37c57ceb9c31775fe2
|
2023-06-16 17:10:56 -04:00
|
|
|
imaginaryImage:
|
|
|
|
repository: tccr.io/truecharts/nextcloud-imaginary
|
|
|
|
pullPolicy: IfNotPresent
|
2023-09-11 18:19:20 -04:00
|
|
|
tag: v20230401@sha256:cfef62fb7390eca99c22b447fe336f7df39c56b3ec007400d5ccd8e55433b877
|
2023-06-16 17:10:56 -04:00
|
|
|
hpbImage:
|
|
|
|
repository: tccr.io/truecharts/nextcloud-push-notify
|
|
|
|
pullPolicy: IfNotPresent
|
2023-08-13 14:44:28 -04:00
|
|
|
tag: v0.6.3@sha256:e951d53322738ac7155dde6897fe0371e64109fc3c47c7176cb00c2f88e61065
|
2023-06-16 17:10:56 -04:00
|
|
|
clamavImage:
|
|
|
|
repository: tccr.io/truecharts/clamav
|
|
|
|
pullPolicy: IfNotPresent
|
2023-08-31 08:45:35 -04:00
|
|
|
tag: v1.2.0@sha256:827369aea735afc1bfe7622c8451445e9f20c37d5e40f4731ab0ed35a72a0043
|
2023-06-18 11:15:53 -04:00
|
|
|
collaboraImage:
|
|
|
|
repository: tccr.io/truecharts/collabora
|
|
|
|
pullPolicy: IfNotPresent
|
2023-09-13 14:42:16 -04:00
|
|
|
tag: v23.05.4.1.1@sha256:bc09f2fc5be83b66610ee4b6c000d918b92f1324ee73f32c1bb92467e6100024
|
2023-06-16 17:10:56 -04:00
|
|
|
|
|
|
|
nextcloud:
|
|
|
|
# Initial Credentials
|
|
|
|
credentials:
|
|
|
|
initialAdminUser: admin
|
|
|
|
initialAdminPassword: adminpass
|
|
|
|
# General settings
|
|
|
|
general:
|
|
|
|
# Custom Nextcloud Scripts
|
|
|
|
run_optimize: true
|
|
|
|
default_phone_region: GR
|
|
|
|
# IP used for exposing nextcloud,
|
|
|
|
# often the loadbalancer IP
|
|
|
|
accessIP: ""
|
|
|
|
# File settings
|
|
|
|
files:
|
|
|
|
shared_folder_name: Shared
|
|
|
|
max_chunk_size: 10485760
|
|
|
|
# Expiration settings
|
|
|
|
expirations:
|
|
|
|
activity_expire_days: 90
|
|
|
|
trash_retention_obligation: auto
|
|
|
|
versions_retention_obligation: auto
|
|
|
|
# Previews settings
|
|
|
|
previews:
|
|
|
|
enabled: true
|
|
|
|
# It will also deploy the container
|
|
|
|
imaginary: true
|
|
|
|
cron: true
|
|
|
|
schedule: "*/30 * * * *"
|
|
|
|
max_x: 2048
|
|
|
|
max_y: 2048
|
|
|
|
max_memory: 1024
|
|
|
|
max_file_size_image: 50
|
2023-07-22 04:02:21 -04:00
|
|
|
# Setting for Imaginary
|
|
|
|
max_allowed_resolution: 18.0
|
2023-06-16 17:10:56 -04:00
|
|
|
jpeg_quality: 60
|
|
|
|
square_sizes: 32 256
|
|
|
|
width_sizes: 256 384
|
|
|
|
height_sizes: 256
|
|
|
|
# Casings are important
|
|
|
|
# https://github.com/nextcloud/server/blob/master/config/config.sample.php#L1269
|
|
|
|
# Only the last part of the provider is needed
|
|
|
|
providers:
|
|
|
|
- PNG
|
|
|
|
- JPEG
|
|
|
|
# Logging settings
|
|
|
|
logging:
|
|
|
|
log_level: 2
|
|
|
|
log_file: /var/www/html/data/logs/nextcloud.log
|
|
|
|
log_audit_file: /var/www/html/data/logs/audit.log
|
|
|
|
log_date_format: d/m/Y H:i:s
|
|
|
|
# ClamAV settings
|
|
|
|
clamav:
|
|
|
|
# It will also deploy the container
|
|
|
|
# Note that this runs as root
|
|
|
|
enabled: false
|
|
|
|
stream_max_length: 26214400
|
|
|
|
file_max_size: -1
|
|
|
|
infected_action: only_log
|
|
|
|
# Notify Push settings
|
|
|
|
notify_push:
|
|
|
|
# It will also deploy the container
|
|
|
|
enabled: true
|
|
|
|
# Collabora settings
|
|
|
|
collabora:
|
2023-06-18 11:15:53 -04:00
|
|
|
# It will also deploy the container
|
2023-06-16 17:10:56 -04:00
|
|
|
enabled: false
|
2023-06-18 11:15:53 -04:00
|
|
|
# default|compact|tabbed
|
|
|
|
interface_mode: default
|
|
|
|
username: admin
|
|
|
|
password: changeme
|
|
|
|
dictionaries:
|
|
|
|
- de_DE
|
|
|
|
- en_GB
|
|
|
|
- en_US
|
|
|
|
- el_GR
|
|
|
|
- es_ES
|
|
|
|
- fr_FR
|
|
|
|
- pt_BR
|
|
|
|
- pt_PT
|
|
|
|
- it
|
|
|
|
- nl
|
|
|
|
- ru
|
2023-06-16 17:10:56 -04:00
|
|
|
onlyoffice:
|
|
|
|
# It will not deploy the container
|
|
|
|
# Only add the OnlyOffice settings
|
|
|
|
enabled: false
|
|
|
|
url: ""
|
|
|
|
jwt: ""
|
|
|
|
jwt_header: Authorization
|
|
|
|
# PHP settings
|
|
|
|
php:
|
|
|
|
memory_limit: 1G
|
|
|
|
upload_limit: 10G
|
|
|
|
pm_max_children: 180
|
|
|
|
pm_start_servers: 18
|
|
|
|
pm_min_spare_servers: 12
|
|
|
|
pm_max_spare_servers: 30
|
2023-08-06 08:54:05 -04:00
|
|
|
opcache:
|
|
|
|
interned_strings_buffer: 32
|
|
|
|
max_accelerated_files: 10000
|
|
|
|
memory_consumption: 128
|
|
|
|
revalidate_freq: 60
|
|
|
|
jit_buffer_size: 128
|
2023-06-16 17:10:56 -04:00
|
|
|
|
|
|
|
# Do NOT edit below this line
|
|
|
|
workload:
|
|
|
|
# Nextcloud php-fpm
|
|
|
|
main:
|
|
|
|
type: Deployment
|
|
|
|
podSpec:
|
|
|
|
containers:
|
|
|
|
main:
|
|
|
|
enabled: true
|
|
|
|
primary: true
|
|
|
|
envFrom:
|
|
|
|
- configMapRef:
|
|
|
|
name: nextcloud-config
|
|
|
|
probes:
|
|
|
|
liveness:
|
|
|
|
enabled: true
|
|
|
|
type: exec
|
|
|
|
command: /healthcheck.sh
|
|
|
|
readiness:
|
|
|
|
enabled: true
|
|
|
|
type: exec
|
|
|
|
command: /healthcheck.sh
|
|
|
|
startup:
|
|
|
|
enabled: true
|
|
|
|
type: tcp
|
|
|
|
port: "{{ .Values.service.nextcloud.ports.nextcloud.targetPort }}"
|
|
|
|
nginx:
|
|
|
|
enabled: true
|
|
|
|
type: Deployment
|
|
|
|
strategy: RollingUpdate
|
|
|
|
replicas: 1
|
|
|
|
podSpec:
|
|
|
|
containers:
|
|
|
|
nginx:
|
|
|
|
enabled: true
|
|
|
|
primary: true
|
|
|
|
imageSelector: nginxImage
|
|
|
|
probes:
|
|
|
|
readiness:
|
|
|
|
enabled: true
|
|
|
|
path: /robots.txt
|
|
|
|
port: "{{ .Values.service.main.ports.main.port }}"
|
|
|
|
httpHeaders:
|
|
|
|
Host: kube.internal.healthcheck
|
|
|
|
liveness:
|
|
|
|
enabled: true
|
|
|
|
path: /robots.txt
|
|
|
|
port: "{{ .Values.service.main.ports.main.port }}"
|
|
|
|
httpHeaders:
|
|
|
|
Host: kube.internal.healthcheck
|
|
|
|
startup:
|
|
|
|
enabled: true
|
|
|
|
type: tcp
|
|
|
|
port: "{{ .Values.service.main.ports.main.port }}"
|
|
|
|
notify:
|
|
|
|
enabled: true
|
|
|
|
type: Deployment
|
|
|
|
strategy: RollingUpdate
|
|
|
|
replicas: 1
|
|
|
|
podSpec:
|
|
|
|
containers:
|
|
|
|
notify:
|
|
|
|
primary: true
|
|
|
|
enabled: true
|
|
|
|
imageSelector: hpbImage
|
|
|
|
envFrom:
|
|
|
|
- configMapRef:
|
|
|
|
name: hpb-config
|
|
|
|
probes:
|
|
|
|
readiness:
|
|
|
|
enabled: true
|
|
|
|
path: /push/test/cookie
|
|
|
|
port: 7867
|
|
|
|
httpHeaders:
|
|
|
|
Host: kube.internal.healthcheck
|
|
|
|
liveness:
|
|
|
|
enabled: true
|
|
|
|
path: /push/test/cookie
|
|
|
|
port: 7867
|
|
|
|
httpHeaders:
|
|
|
|
Host: kube.internal.healthcheck
|
|
|
|
startup:
|
|
|
|
enabled: true
|
|
|
|
type: tcp
|
|
|
|
port: 7867
|
|
|
|
imaginary:
|
|
|
|
enabled: true
|
|
|
|
type: Deployment
|
|
|
|
strategy: RollingUpdate
|
|
|
|
replicas: 1
|
|
|
|
podSpec:
|
|
|
|
containers:
|
|
|
|
imaginary:
|
|
|
|
primary: true
|
|
|
|
enabled: true
|
|
|
|
imageSelector: imaginaryImage
|
|
|
|
command: imaginary
|
|
|
|
args:
|
|
|
|
- -p
|
|
|
|
- "{{ .Values.service.imaginary.ports.imaginary.port }}"
|
|
|
|
- -concurrency
|
|
|
|
- "10"
|
2023-07-22 04:02:21 -04:00
|
|
|
- -max-allowed-resolution
|
|
|
|
- "{{ .Values.nextcloud.previews.max_allowed_resolution }}"
|
2023-06-16 17:10:56 -04:00
|
|
|
- -enable-url-source
|
|
|
|
- -return-size
|
|
|
|
probes:
|
|
|
|
readiness:
|
|
|
|
enabled: true
|
|
|
|
path: /health
|
|
|
|
port: "{{ .Values.service.imaginary.ports.imaginary.port }}"
|
|
|
|
liveness:
|
|
|
|
enabled: true
|
|
|
|
path: /health
|
|
|
|
port: "{{ .Values.service.imaginary.ports.imaginary.port }}"
|
|
|
|
startup:
|
|
|
|
enabled: true
|
|
|
|
type: tcp
|
|
|
|
port: "{{ .Values.service.imaginary.ports.imaginary.port }}"
|
|
|
|
clamav:
|
|
|
|
enabled: true
|
|
|
|
type: Deployment
|
|
|
|
strategy: RollingUpdate
|
|
|
|
replicas: 1
|
|
|
|
podSpec:
|
|
|
|
containers:
|
|
|
|
clamav:
|
|
|
|
primary: true
|
|
|
|
enabled: true
|
|
|
|
imageSelector: clamavImage
|
|
|
|
# FIXME: https://github.com/Cisco-Talos/clamav/issues/478
|
|
|
|
securityContext:
|
|
|
|
runAsUser: 0
|
|
|
|
runAsGroup: 0
|
|
|
|
runAsNonRoot: false
|
|
|
|
readOnlyRootFilesystem: false
|
|
|
|
envFrom:
|
|
|
|
- configMapRef:
|
|
|
|
name: clamav-config
|
|
|
|
probes:
|
|
|
|
readiness:
|
|
|
|
enabled: true
|
|
|
|
type: exec
|
|
|
|
command: clamdcheck.sh
|
|
|
|
liveness:
|
|
|
|
enabled: true
|
|
|
|
type: exec
|
|
|
|
command: clamdcheck.sh
|
|
|
|
startup:
|
|
|
|
enabled: true
|
|
|
|
type: tcp
|
|
|
|
port: "{{ .Values.service.clamav.ports.clamav.targetPort }}"
|
2023-06-18 11:15:53 -04:00
|
|
|
collabora:
|
|
|
|
enabled: true
|
|
|
|
type: Deployment
|
|
|
|
strategy: RollingUpdate
|
|
|
|
replicas: 1
|
|
|
|
podSpec:
|
|
|
|
containers:
|
|
|
|
collabora:
|
|
|
|
primary: true
|
|
|
|
enabled: true
|
|
|
|
imageSelector: collaboraImage
|
|
|
|
securityContext:
|
2023-06-21 04:00:28 -04:00
|
|
|
runAsUser: 100
|
|
|
|
runAsGroup: 102
|
2023-06-18 11:15:53 -04:00
|
|
|
readOnlyRootFilesystem: false
|
2023-06-21 04:00:28 -04:00
|
|
|
allowPrivilegeEscalation: true
|
|
|
|
capabilities:
|
|
|
|
add:
|
|
|
|
- CHOWN
|
|
|
|
- FOWNER
|
|
|
|
- SYS_CHROOT
|
|
|
|
- MKNOD
|
2023-06-18 11:15:53 -04:00
|
|
|
envFrom:
|
|
|
|
- configMapRef:
|
|
|
|
name: collabora-config
|
|
|
|
probes:
|
|
|
|
readiness:
|
|
|
|
enabled: true
|
|
|
|
type: http
|
2023-06-21 04:00:28 -04:00
|
|
|
path: /collabora/
|
2023-06-18 11:15:53 -04:00
|
|
|
port: "{{ .Values.service.collabora.ports.collabora.targetPort }}"
|
|
|
|
liveness:
|
|
|
|
enabled: true
|
|
|
|
type: http
|
2023-06-21 04:00:28 -04:00
|
|
|
path: /collabora/
|
2023-06-18 11:15:53 -04:00
|
|
|
port: "{{ .Values.service.collabora.ports.collabora.targetPort }}"
|
|
|
|
startup:
|
|
|
|
enabled: true
|
|
|
|
type: tcp
|
|
|
|
port: "{{ .Values.service.collabora.ports.collabora.targetPort }}"
|
2023-06-16 17:10:56 -04:00
|
|
|
|
|
|
|
cronjobs:
|
|
|
|
# Don't change names, it's used in the persistence
|
|
|
|
- name: nextcloud-cron
|
|
|
|
enabled: true
|
|
|
|
schedule: "*/5 * * * *"
|
|
|
|
cmd:
|
|
|
|
- echo "Running [php -f /var/www/html/cron.php] ..."
|
|
|
|
- php -f /var/www/html/cron.php
|
|
|
|
- echo "Finished [php -f /var/www/html/cron.php]"
|
|
|
|
- name: preview-cron
|
|
|
|
enabled: "{{ .Values.nextcloud.previews.cron }}"
|
|
|
|
schedule: "{{ .Values.nextcloud.previews.schedule }}"
|
|
|
|
cmd:
|
|
|
|
- echo "Running [occ preview:pre-generate] ..."
|
|
|
|
- occ preview:pre-generate
|
|
|
|
- echo "Finished [occ preview:pre-generate]"
|
|
|
|
|
|
|
|
service:
|
|
|
|
# Main service links to ingress easier
|
|
|
|
# That's why the nginx is swapped with nextcloud
|
|
|
|
main:
|
|
|
|
targetSelector: nginx
|
|
|
|
ports:
|
|
|
|
main:
|
|
|
|
targetSelector: nginx
|
|
|
|
port: 8080
|
|
|
|
nextcloud:
|
|
|
|
enabled: true
|
|
|
|
targetSelector: main
|
|
|
|
ports:
|
|
|
|
nextcloud:
|
|
|
|
enabled: true
|
|
|
|
targetSelector: main
|
|
|
|
port: 9000
|
|
|
|
targetPort: 9000
|
|
|
|
notify:
|
|
|
|
enabled: true
|
|
|
|
targetSelector: notify
|
|
|
|
ports:
|
|
|
|
notify:
|
|
|
|
enabled: true
|
|
|
|
primary: true
|
|
|
|
port: 7867
|
|
|
|
targetPort: 7867
|
|
|
|
targetSelector: notify
|
|
|
|
metrics:
|
|
|
|
enabled: true
|
|
|
|
port: 7868
|
|
|
|
targetSelector: notify
|
|
|
|
imaginary:
|
|
|
|
enabled: true
|
|
|
|
targetSelector: imaginary
|
|
|
|
ports:
|
|
|
|
imaginary:
|
|
|
|
enabled: true
|
|
|
|
port: 9090
|
|
|
|
targetSelector: imaginary
|
|
|
|
clamav:
|
|
|
|
enabled: true
|
|
|
|
targetSelector: clamav
|
|
|
|
ports:
|
|
|
|
clamav:
|
|
|
|
enabled: true
|
|
|
|
port: 3310
|
|
|
|
targetPort: 3310
|
|
|
|
targetSelector: clamav
|
2023-06-18 11:15:53 -04:00
|
|
|
collabora:
|
|
|
|
enabled: true
|
|
|
|
targetSelector: collabora
|
|
|
|
ports:
|
|
|
|
collabora:
|
|
|
|
enabled: true
|
|
|
|
port: 9980
|
|
|
|
targetPort: 9980
|
|
|
|
targetSelector: collabora
|
2023-06-16 17:10:56 -04:00
|
|
|
|
|
|
|
persistence:
|
|
|
|
php-tune:
|
|
|
|
enabled: true
|
|
|
|
type: configmap
|
|
|
|
objectName: php-tune
|
|
|
|
targetSelector:
|
|
|
|
main:
|
|
|
|
main:
|
|
|
|
mountPath: /usr/local/etc/php-fpm.d/zz-tune.conf
|
|
|
|
subPath: zz-tune.conf
|
|
|
|
readOnly: true
|
|
|
|
redis-session:
|
|
|
|
enabled: true
|
|
|
|
type: configmap
|
|
|
|
objectName: redis-session
|
|
|
|
targetSelector:
|
|
|
|
main:
|
|
|
|
main:
|
|
|
|
mountPath: /usr/local/etc/php/conf.d/redis-session.ini
|
|
|
|
subPath: redis-session.ini
|
|
|
|
readOnly: true
|
2023-08-06 08:54:05 -04:00
|
|
|
opcache-recommended:
|
|
|
|
enabled: true
|
|
|
|
type: configmap
|
|
|
|
objectName: opcache
|
|
|
|
targetSelector:
|
|
|
|
main:
|
|
|
|
main:
|
|
|
|
mountPath: /usr/local/etc/php/conf.d/opcache-recommended.ini
|
|
|
|
subPath: opcache-recommended.ini
|
|
|
|
readOnly: true
|
2023-06-16 17:10:56 -04:00
|
|
|
nginx:
|
|
|
|
enabled: true
|
|
|
|
type: configmap
|
|
|
|
objectName: nginx-config
|
|
|
|
targetSelector:
|
|
|
|
nginx:
|
|
|
|
nginx:
|
|
|
|
mountPath: /etc/nginx/nginx.conf
|
|
|
|
subPath: nginx.conf
|
|
|
|
readOnly: true
|
|
|
|
nginx-temp:
|
|
|
|
enabled: true
|
|
|
|
type: emptyDir
|
|
|
|
targetSelector:
|
|
|
|
nginx:
|
|
|
|
nginx:
|
|
|
|
mountPath: /tmp/nginx
|
|
|
|
html:
|
|
|
|
enabled: true
|
|
|
|
targetSelector:
|
|
|
|
main:
|
|
|
|
main:
|
|
|
|
mountPath: /var/www/html
|
|
|
|
nextcloud-cron:
|
|
|
|
nextcloud-cron:
|
|
|
|
mountPath: /var/www/html
|
|
|
|
preview-cron:
|
|
|
|
preview-cron:
|
|
|
|
mountPath: /var/www/html
|
|
|
|
nginx:
|
|
|
|
nginx:
|
|
|
|
mountPath: /var/www/html
|
|
|
|
readOnly: true
|
|
|
|
config:
|
|
|
|
enabled: true
|
|
|
|
targetSelector:
|
|
|
|
main:
|
|
|
|
main:
|
|
|
|
mountPath: /var/www/html/config
|
|
|
|
nextcloud-cron:
|
|
|
|
nextcloud-cron:
|
|
|
|
mountPath: /var/www/html/config
|
|
|
|
preview-cron:
|
|
|
|
preview-cron:
|
|
|
|
mountPath: /var/www/html/config
|
|
|
|
notify:
|
|
|
|
notify:
|
|
|
|
mountPath: /var/www/html/config
|
|
|
|
readOnly: true
|
|
|
|
nginx:
|
|
|
|
nginx:
|
|
|
|
mountPath: /var/www/html/config
|
|
|
|
readOnly: true
|
|
|
|
data:
|
|
|
|
enabled: true
|
|
|
|
targetSelector:
|
|
|
|
main:
|
|
|
|
main:
|
|
|
|
mountPath: /var/www/html/data
|
|
|
|
init-perms:
|
|
|
|
mountPath: /var/www/html/data
|
|
|
|
nextcloud-cron:
|
|
|
|
nextcloud-cron:
|
|
|
|
mountPath: /var/www/html/data
|
|
|
|
preview-cron:
|
|
|
|
preview-cron:
|
|
|
|
mountPath: /var/www/html/data
|
|
|
|
nginx:
|
|
|
|
nginx:
|
|
|
|
mountPath: /var/www/html/data
|
|
|
|
readOnly: true
|
|
|
|
|
|
|
|
cnpg:
|
|
|
|
main:
|
|
|
|
enabled: true
|
|
|
|
user: nextcloud
|
|
|
|
database: nextcloud
|
|
|
|
|
|
|
|
redis:
|
|
|
|
enabled: true
|
|
|
|
username: default
|
|
|
|
|
|
|
|
portal:
|
|
|
|
open:
|
|
|
|
enabled: true
|