# values/nextcloud.values.yaml
#
# For chart: nextcloud/nextcloud
# Repo:     https://nextcloud.github.io/helm/
#
# Optimized for large file uploads over 1Gbps link

replicaCount: 1

nextcloud:
   host: nextcloud.kube.huskypup.net
   username: ""
   password: ""

   # PHP configuration for large uploads
   # Use /var/www/tmp (on Ceph PVC) instead of /tmp (on root overlay)
   phpConfigs:
      upload.ini: |
        upload_tmp_dir = /var/www/tmp
        sys_temp_dir = /var/www/tmp

   # Environment variables for PHP
   extraEnv:
     - name: TMPDIR
       value: /var/www/tmp
     - name: PHP_MEMORY_LIMIT
       value: "2G"
     - name: PHP_UPLOAD_LIMIT
       value: "10G"

   configs:
      oidc.config.php: |-
        <?php
        $CONFIG = array (
          'oidc_login_provider_url' => 'https://auth.kube.huskypup.net/application/o/nextcloud/',
          'oidc_login_client_id' => '',
          'oidc_login_client_secret' => '',
          'oidc_login_button_text' => 'Log in with Authentik',
          'oidc_login_auto_redirect' => false,
          'oidc_login_hide_password_form' => false,
          'oidc_login_verify_ssl' => false,
          'user_oidc' => array(
            'httpclient.allowselfsigned' => true,
          ),
        );
      proxy.config.php: |-
        <?php
        $CONFIG = array (
          'trusted_proxies' => array(
            0 => '10.0.0.0/8',
            1 => '172.16.0.0/12',
          ),
          'overwriteprotocol' => 'https',
          'overwrite.cli.url' => 'https://nextcloud.kube.huskypup.net',
          'allow_local_remote_servers' => true,
        );
      # Use Ceph-backed temp directory for large uploads
      temp.config.php: |-
        <?php
        $CONFIG = array (
          'tempdirectory' => '/var/www/tmp',
        );

   existingSecret:
      enabled: true
      secretName: nextcloud-admin-secret
      usernameKey: username
      passwordKey: password

   # Ingress disabled - Istio VirtualService handles routing
   ingress:
     enabled: false

externalDatabase:
   enabled: true
   type: mysql
   host: mariadb-nextcloud
   port: 3306
   user: nextcloud
   database: nextcloud
   existingSecret:
      enabled: true
      secretName: mariadb-nextcloud
      passwordKey: password
      usernameKey: user

persistence:
   enabled: true
   storageClass: rook-ceph-block
   accessMode: ReadWriteOnce
   size: 50Gi

securityContext:
   allowPrivilegeEscalation: false
   capabilities:
     drop:
       - ALL

resources:
   requests:
     cpu: 50m
     memory: 512Mi
   limits:
     cpu: 1000m
     memory: 2Gi

redis:
   enabled: false

metrics:
   enabled: false