Initial commit

2026-08-20 23:16:49 +00:00 · 2026-03-09 20:21:35 -05:00
commit aacb8eebbe
314 changed files with 21766 additions and 0 deletions
@@ -0,0 +1,111 @@
+# values/nextcloud.values.yaml
+#
+# For chart: nextcloud/nextcloud
+# Repo:     https://nextcloud.github.io/helm/
+#
+# Optimized for large file uploads over 1Gbps link
+
+replicaCount: 1
+
+nextcloud:
+   host: nextcloud.kube.huskypup.net
+   username: ""
+   password: ""
+
+   # PHP configuration for large uploads
+   # Use /var/www/tmp (on Ceph PVC) instead of /tmp (on root overlay)
+   phpConfigs:
+      upload.ini: |
+        upload_tmp_dir = /var/www/tmp
+        sys_temp_dir = /var/www/tmp
+
+   # Environment variables for PHP
+   extraEnv:
+     - name: TMPDIR
+       value: /var/www/tmp
+     - name: PHP_MEMORY_LIMIT
+       value: "2G"
+     - name: PHP_UPLOAD_LIMIT
+       value: "10G"
+
+   configs:
+      oidc.config.php: |-
+        <?php
+        $CONFIG = array (
+          'oidc_login_provider_url' => 'https://auth.kube.huskypup.net/application/o/nextcloud/',
+          'oidc_login_client_id' => '',
+          'oidc_login_client_secret' => '',
+          'oidc_login_button_text' => 'Log in with Authentik',
+          'oidc_login_auto_redirect' => false,
+          'oidc_login_hide_password_form' => false,
+          'oidc_login_verify_ssl' => false,
+          'user_oidc' => array(
+            'httpclient.allowselfsigned' => true,
+          ),
+        );
+      proxy.config.php: |-
+        <?php
+        $CONFIG = array (
+          'trusted_proxies' => array(
+            0 => '10.0.0.0/8',
+            1 => '172.16.0.0/12',
+          ),
+          'overwriteprotocol' => 'https',
+          'overwrite.cli.url' => 'https://nextcloud.kube.huskypup.net',
+          'allow_local_remote_servers' => true,
+        );
+      # Use Ceph-backed temp directory for large uploads
+      temp.config.php: |-
+        <?php
+        $CONFIG = array (
+          'tempdirectory' => '/var/www/tmp',
+        );
+
+   existingSecret:
+      enabled: true
+      secretName: nextcloud-admin-secret
+      usernameKey: username
+      passwordKey: password
+
+   # Ingress disabled - Istio VirtualService handles routing
+   ingress:
+     enabled: false
+
+externalDatabase:
+   enabled: true
+   type: mysql
+   host: mariadb-nextcloud
+   port: 3306
+   user: nextcloud
+   database: nextcloud
+   existingSecret:
+      enabled: true
+      secretName: mariadb-nextcloud
+      passwordKey: password
+      usernameKey: user
+
+persistence:
+   enabled: true
+   storageClass: rook-ceph-block
+   accessMode: ReadWriteOnce
+   size: 50Gi
+
+securityContext:
+   allowPrivilegeEscalation: false
+   capabilities:
+     drop:
+       - ALL
+
+resources:
+   requests:
+     cpu: 50m
+     memory: 512Mi
+   limits:
+     cpu: 1000m
+     memory: 2Gi
+
+redis:
+   enabled: false
+
+metrics:
+   enabled: false