hive-apps/projects/nextcloud/values/nextcloud.yaml

158 lines
3.3 KiB
YAML
Raw Normal View History

2021-11-28 10:16:31 +00:00
image:
2022-08-14 17:54:24 +00:00
tag: 24-fpm
2021-11-28 10:16:31 +00:00
pullPolicy: Always
nextcloud:
host: share.gnu.one
extraEnv:
- name: HTTP_PROXY
value: http://proxy-squid.proxy.svc.cluster.local:80
- name: HTTPS_PROXY
value: http://proxy-squid.proxy.svc.cluster.local:80
- name: NO_PROXY
value: .cluster.local
existingSecret:
enabled: true
secretName: nextcloud-user
usernameKey: username
passwordKey: password
smtpUsernameKey: smtp_username
smtpPasswordKey: smtp_password
configs:
proxy.config.php: |-
<?php
$CONFIG = array (
'proxy' => 'proxy-squid.proxy.svc.cluster.local:80',
'trusted_proxies' =>
array (
0 => 'proxy-squid.proxy.svc.cluster.local',
),
'proxyexclude' => ['.cluster.local'],
'debug' => true,
'loglevel' => 1,
);
extraSecurityContext:
runAsUser: "33"
runAsGroup: "33"
runAsNonRoot: true
readOnlyRootFilesystem: true
2022-09-02 17:30:24 +00:00
2022-09-03 14:45:30 +00:00
# Needed for rootless:
containerPort: 8080
2022-09-02 17:30:24 +00:00
extraVolumes:
- name: nginx-cache
emptyDir: {}
extraVolumeMounts:
- mountPath: /var/cache/nginx
name: nginx-cache
2021-11-28 10:16:31 +00:00
phpConfigs:
memory_limit.conf: |
php_admin_value[memory_limit] = 512M
tuning.conf: |
pm = dynamic
pm.max_children = 64
pm.start_servers = 12
pm.min_spare_servers = 8
pm.max_spare_servers = 24
pm.max_requests = 1000
2022-05-11 15:33:05 +00:00
2022-09-02 17:30:24 +00:00
# See: https://github.com/nextcloud/helm/issues/186
securityContext:
runAsUser: 101
runAsGroup: 101
fsGroup: 101
2022-09-03 14:45:30 +00:00
fsGroupChangePolicy: "Always"
runAsNonRoot: true
2022-09-02 17:30:24 +00:00
2021-11-28 10:16:31 +00:00
ingress:
enabled: true
2022-01-06 10:17:45 +00:00
labels:
environment: external
2021-11-28 10:16:31 +00:00
annotations:
2022-01-05 20:06:12 +00:00
#nginx.ingress.kubernetes.io/proxy-body-size: 4G
2021-11-28 10:16:31 +00:00
kubernetes.io/tls-acme: "true"
cert-manager.io/cluster-issuer: letsencrypt
2022-01-05 20:06:12 +00:00
traefik.ingress.kubernetes.io/router.tls: 'true'
2022-01-11 21:18:02 +00:00
kubernetes.io/ingress.class: ingress-external
2021-11-28 10:16:31 +00:00
tls:
- secretName: nextcloud-tls
hosts:
- share.gnu.one
nginx:
enabled: true
cronjob:
2022-05-11 15:33:05 +00:00
enabled: false
2021-11-28 10:16:31 +00:00
curlInsecure: true
internalDatabase:
enabled: false
externalDatabase:
enabled: true
type: postgresql
host: nextcloud-postgresql.nextcloud.svc.cluster.local
existingSecret:
enabled: true
secretName: nextcloud-postgres
passwordKey: postgresql-password
usernameKey: postgresql-username
postgresql:
enabled: true
2022-05-24 16:11:34 +00:00
# old:
2022-05-11 15:33:05 +00:00
image:
2022-04-09 09:52:02 +00:00
registry: docker.io
repository: bitnami/postgresql
tag: 11
2021-11-28 10:16:31 +00:00
postgresqlDatabase: nextcloud
postgresqlUsername: nextcloud
existingSecret: nextcloud-postgres
persistence:
enabled: true
2022-05-24 16:11:34 +00:00
# New:
global:
auth:
username: nextcloud
password: nextcloud
database: nextcloud
existingSecret: nextcloud-postgres
primary:
persistence:
enabled: true
2021-11-28 10:16:31 +00:00
redis:
enabled: false
architecture: standalone
auth:
existingSecret: nextcloud-redis
existingSecretPasswordKey: password
replica:
replicaCount: 1
rbac:
create: false
podSecurityPolicy:
enabled: true
create: true
persistence:
enabled: true
storageClass: local-path
size: 100Gi
persistence:
enabled: true
rbac:
enabled: true
readinessProbe:
initialDelaySeconds: 60
livenessProbe:
initialDelaySeconds: 60
startupProbe:
initialDelaySeconds: 60