mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-20 23:16:49 +00:00
112 lines
2.6 KiB
YAML
112 lines
2.6 KiB
YAML
# values/nextcloud.values.yaml
|
|
#
|
|
# For chart: nextcloud/nextcloud
|
|
# Repo: https://nextcloud.github.io/helm/
|
|
#
|
|
# Optimized for large file uploads over 1Gbps link
|
|
|
|
replicaCount: 1
|
|
|
|
nextcloud:
|
|
host: nextcloud.kube.huskypup.net
|
|
username: ""
|
|
password: ""
|
|
|
|
# PHP configuration for large uploads
|
|
# Use /var/www/tmp (on Ceph PVC) instead of /tmp (on root overlay)
|
|
phpConfigs:
|
|
upload.ini: |
|
|
upload_tmp_dir = /var/www/tmp
|
|
sys_temp_dir = /var/www/tmp
|
|
|
|
# Environment variables for PHP
|
|
extraEnv:
|
|
- name: TMPDIR
|
|
value: /var/www/tmp
|
|
- name: PHP_MEMORY_LIMIT
|
|
value: "2G"
|
|
- name: PHP_UPLOAD_LIMIT
|
|
value: "10G"
|
|
|
|
configs:
|
|
oidc.config.php: |-
|
|
<?php
|
|
$CONFIG = array (
|
|
'oidc_login_provider_url' => 'https://auth.kube.huskypup.net/application/o/nextcloud/',
|
|
'oidc_login_client_id' => '',
|
|
'oidc_login_client_secret' => '',
|
|
'oidc_login_button_text' => 'Log in with Authentik',
|
|
'oidc_login_auto_redirect' => false,
|
|
'oidc_login_hide_password_form' => false,
|
|
'oidc_login_verify_ssl' => false,
|
|
'user_oidc' => array(
|
|
'httpclient.allowselfsigned' => true,
|
|
),
|
|
);
|
|
proxy.config.php: |-
|
|
<?php
|
|
$CONFIG = array (
|
|
'trusted_proxies' => array(
|
|
0 => '10.0.0.0/8',
|
|
1 => '172.16.0.0/12',
|
|
),
|
|
'overwriteprotocol' => 'https',
|
|
'overwrite.cli.url' => 'https://nextcloud.kube.huskypup.net',
|
|
'allow_local_remote_servers' => true,
|
|
);
|
|
# Use Ceph-backed temp directory for large uploads
|
|
temp.config.php: |-
|
|
<?php
|
|
$CONFIG = array (
|
|
'tempdirectory' => '/var/www/tmp',
|
|
);
|
|
|
|
existingSecret:
|
|
enabled: true
|
|
secretName: nextcloud-admin-secret
|
|
usernameKey: username
|
|
passwordKey: password
|
|
|
|
# Ingress disabled - Istio VirtualService handles routing
|
|
ingress:
|
|
enabled: false
|
|
|
|
externalDatabase:
|
|
enabled: true
|
|
type: mysql
|
|
host: mariadb-nextcloud
|
|
port: 3306
|
|
user: nextcloud
|
|
database: nextcloud
|
|
existingSecret:
|
|
enabled: true
|
|
secretName: mariadb-nextcloud
|
|
passwordKey: password
|
|
usernameKey: user
|
|
|
|
persistence:
|
|
enabled: true
|
|
storageClass: rook-ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 50Gi
|
|
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 2Gi
|
|
|
|
redis:
|
|
enabled: false
|
|
|
|
metrics:
|
|
enabled: false
|