feat(nextcloud): reenable with correct settings

Author: eivarin

kubernetes/apps/default/kustomization.yml

@@ -8,4 +8,4 @@ resources:
   - ./kitchenowl/ks.yml
   - ./linkwarden/ks.yml
   - ./syncthing/ks.yml
-  # - ./nextcloud/ks.yml
+  - ./nextcloud/ks.yml

kubernetes/apps/default/nextcloud/app/externalsecret.yml

@@ -28,3 +28,7 @@ spec:
   - secretKey: admin_password
     remoteRef:
       key: NC_ADMIN_PASS
+
+  - secretKey: secret
+    remoteRef:
+      key: NC_SECRET

kubernetes/apps/default/nextcloud/app/helm-values.yml

@@ -1,7 +1,8 @@
 image:
-  flavor: apache
+  repository: ghcr.io/eivarin/nextcloud
+  tag: 30.0.6-fpm-alpine@sha256:737671470eb32624b6c71765b0323d27f24061911c8ed23696097d480838fce7
 nginx:
-  enabled: false
+  enabled: true
   # resources:
   #   requests:
   #     cpu: 500m
@@ -18,15 +19,34 @@ env:
 #   supplementalGroups:
 #     - 100
 
+affinity: &affinity
+  nodeAffinity:
+    preferredDuringSchedulingIgnoredDuringExecution:
+      - weight: 1
+        preference:
+          matchExpressions:
+            - key: node-priority
+              operator: In
+              values:
+              - "1"
+      - weight: 2
+        preference:
+          matchExpressions:
+            - key: node-priority
+              operator: In
+              values:
+              - "2"
+
+
 persistence:
   existingClaim: nextcloud
   enabled: true
   # accessMode: ReadWriteMany
   # storageClass: longhorn
-  nextcloudData:
+  # nextcloudData:
   #   accessMode: ReadWriteMany
-    enabled: false
-    existingClaim: nextcloud
+    # enabled: false
+    # existingClaim: nextcloud
 resources:
   requests:
     cpu: 200m
@@ -38,19 +58,6 @@ hpa:
 
 ingress:
   enabled: false
-  # enabled: true
-  # className: "traefik-external"
-  # annotations:
-  #   cert-manager.io/cluster-issuer: "letsencrypt-production-external"
-  #   traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-  #   traefik.ingress.kubernetes.io/router.middlewares: |
-  #     networking-cloudflare-only@kubernetescrd,
-  #     networking-request-limit@kubernetescrd
-  # tls:
-  #   - hosts:
-  #       - "nextcloud.${EXTERNAL_DOMAIN}"
-  #     secretName: "nextcloud-tls"
-
 service:
   annotations:
     traefik.ingress.kubernetes.io/service.sticky.cookie: "true"
@@ -103,13 +110,15 @@ cronjob:
       cpu: 5m
       memory: 10Mi
     limits:
-      memory: 50Mi
+      memory: 1Gi
 
 postgresql:
   enabled: false
 
 redis:
   enabled: true
+  affinity: *affinity
+  architecture: standalone
   auth:
     enabled: false
 

kubernetes/apps/default/nextcloud/app/helmrelease.yml

@@ -6,6 +6,7 @@ metadata:
   name: nextcloud
 spec:
   interval: 30m
+  timeout: 30m
   chart:
     spec:
       # renovate: registryUrl=https://nextcloud.github.io/helm/
@@ -31,4 +32,4 @@ spec:
       name: nextcloud
       valuesKey: postgresql_pass
       targetPath: externalDatabase.password
-      optional: false
+      optional: false

kubernetes/apps/default/nextcloud/app/route.yml

@@ -14,6 +14,6 @@ spec:
     - "nc.${SECRET_PRIVATE_DOMAIN}"
     - "nc.${SECRET_PUBLIC_DOMAIN1}"
   rules:
-    - backendRefs:
+    - backendRefs: &backendRef
         - name: nextcloud
           port: 8080

kubernetes/apps/network/traefik/addons/external-apps/ingresses/kustomization.yml

@@ -4,7 +4,7 @@ kind: Kustomization
 resources:
   # - adguard.yml
   - hass.yml
-  - nc.yml
+  # - nc.yml
   # - omada.yml
   - omv.yml
   # - opn.yml

kubernetes/apps/network/traefik/addons/external-apps/services/kustomization.yml

@@ -4,7 +4,7 @@ kind: Kustomization
 resources:
   # - adguard.yml
   - hass.yml
-  - nc.yml
+  # - nc.yml
   # - omada.yml
   - omv.yml
   # - opn.yml