jarno / nextcloud.yaml

apiVersion: v1 kind: ConfigMap metadata: name: nextcloud-config data: POSTGRES_USER: postgres_username POSTGRES_DB: postgres_db_for_nextcloud_name POSTGRES_PASSWORD: postgres_password POSTGRES_HOST: 127.0.0.1 # Don't change unless using a separate DB NEXTCLOUD_ADMIN_USER: nextcloud-admin NEXTCLOUD_ADMIN_PASSWORD: nextcloud-admin-password NEXTCLOUD_TRUSTED_DOMAINS: nextcloud.example.com 192.168.23.45 REDIS_HOST: 127.0.0.1 REDIS_PORT: 6379 ## Tune these if necessary PHP_MEMORY_LIMIT: 3G PHP_UPLOAD_LIMIT: 10G TZ: Europe/Helsinki --- apiVersion: v1 kind: Pod metadata: name: nextcloud creationTimestamp: "2022-05-25T09:38:11Z" labels: app: nextcloud annotations: spec: volumes: - hostPath: path: /path/to/clamav/config/directory/on/host ## EDIT type: Directory name: clamav-config-host-1 - hostPath: path: /path/to/nextcloud/webroot/on/host ## EDIT type: Directory name: nextcloud-app-host-0 - hostPath: path: /path/to/redis/dump/on/host ## EDIT type: Directory name: nextcloud-redis-host-0 - name: clamav-db persistentVolumeClaim: claimName: clamav-db - name: nextcloud-psql persistentVolumeClaim: claimName: nextcloud-psql containers: - name: clamav image: docker.io/clamav/clamav:latest #image: ghcr.io/0ranki/clamav-docker-arm64:v1.1.0 resources: {} securityContext: capabilities: drop: - CAP_MKNOD - CAP_NET_RAW - CAP_AUDIT_WRITE volumeMounts: - mountPath: /var/lib/clamav name: clamav-db - mountPath: /etc/clamav name: clamav-config-host-1 - name: redis image: docker.io/library/redis:alpine args: - redis-server - --save - 60 - 1 - --loglevel - warning resources: {} securityContext: capabilities: drop: - CAP_MKNOD - CAP_NET_RAW - CAP_AUDIT_WRITE volumeMounts: - mountPath: /data name: nextcloud-redis-host-0 - name: psql image: docker.io/postgres:14-alpine args: - postgres command: - docker-entrypoint.sh envFrom: - configMapRef: name: nextcloud-config optional: false resources: {} securityContext: allowPrivilegeEscalation: true capabilities: drop: - CAP_MKNOD - CAP_NET_RAW - CAP_AUDIT_WRITE privileged: false readOnlyRootFilesystem: false seLinuxOptions: {} volumeMounts: - mountPath: /var/lib/postgresql/data name: nextcloud-psql workingDir: / - name: app ## Remember to change cron container version! image: ghcr.io/0ranki/nextcloud-previews/nextcloud:latest ## Remember to change cron container version! #imagePullPolicy: never ports: - containerPort: 80 hostPort: 8082 envFrom: - configMapRef: name: nextcloud-config optional: false resources: {} securityContext: capabilities: drop: - CAP_MKNOD - CAP_NET_RAW - CAP_AUDIT_WRITE volumeMounts: - mountPath: /var/www/html name: nextcloud-app-host-0 - name: cron # Remember to change main image version! image: ghcr.io/0ranki/nextcloud-previews/nextcloud:latest # Remember to change main image version! #imagePullPolicy: never args: - busybox - crond - -f - -l - 0 - -L - /dev/stdout env: - name: TZ value: Europe/Helsinki resources: {} securityContext: capabilities: drop: - CAP_MKNOD - CAP_NET_RAW - CAP_AUDIT_WRITE volumeMounts: - mountPath: /var/www/html name: nextcloud-app-host-0 # - name: cloudflared # image: docker.io/cloudflare/cloudflared:latest # args: # - tunnel # - --no-autoupdate # - run # - --token # - ### CLOUDFLARE TOKEN TÄHÄN ### # resources: {} # securityContext: {} restartPolicy: Always status: {}

[Unit] Description=Podman pod - Nextcloud After=network-online.target AssertPathExists=/path/to/nextcloud/webroot/on/host [Service] Type=forking Restart=on-failure RestartSec=30 ExecStartPre=/path/to/nextcloud/webroot/on/host/bin/fix-htaccess ExecStart=podman play kube --replace /path/to/nextcloud.yaml ExecStop=podman play kube --down /path/to/nextcloud.yaml ## Uncomment to export named volumes after stopping the pod #ExecStopPost=podman volume export -o /path/to/clamav-db.tar clamav-db #ExecStopPost=podman volume export -o /path/to/nextcloud-psql.tar nextcloud-psql [Install] WantedBy=default.target