f2678d3494
- dbaas: add mysql-sidecar-extra ClusterRole for namespaces/CRD list/watch needed by kopf framework in sidecar containers - kyverno: restrict inject-priority-class-from-tier to CREATE operations only (was blocking pod patches with immutable spec error) - kyverno: add resource-governance/custom-limitrange label opt-out to LimitRange generation policy (mirrors existing custom-quota) - nextcloud: bump memory limit 4Gi -> 6Gi, add custom LimitRange with 8Gi max, opt out of Kyverno-managed LimitRange
73 lines
1.4 KiB
YAML
73 lines
1.4 KiB
YAML
nextcloud:
|
|
host: nextcloud.viktorbarzin.me
|
|
trustedDomains:
|
|
- nextcloud.viktorbarzin.me
|
|
# mail:
|
|
# enabled: true
|
|
# # the user we send email as
|
|
# fromAddress: nextcloud@viktorbarzin.me
|
|
# # the domain we send email from
|
|
# domain: viktorbarzin.me
|
|
# smtp:
|
|
# host: mail.viktorbarzin.me
|
|
# secure: starttls
|
|
# port: 587
|
|
# authtype: LOGIN
|
|
# name: nextcloud@viktorbarzin.me
|
|
# password:
|
|
extraEnv:
|
|
- name: TRUSTED_PROXIES
|
|
value: "10.0.0.0/8"
|
|
# - name: mail_smtpdebug
|
|
# value: "true"
|
|
# - name: loglevel
|
|
# value: "0"
|
|
|
|
# internalDatabase:
|
|
# enabled: false
|
|
|
|
externalRedis:
|
|
enabled: true
|
|
host: ${redis_host}
|
|
|
|
# Currently not in use; we use the nextcloud.db sqlite3
|
|
externalDatabase:
|
|
enabled: false
|
|
type: mysql
|
|
host: ${mysql_host}
|
|
user: nextcloud
|
|
password: ${db_password}
|
|
databse: nextcloud
|
|
|
|
persistence:
|
|
enabled: true
|
|
existingClaim: nextcloud-data-pvc
|
|
|
|
accessMode: ReadWriteOnce
|
|
size: 100Gi
|
|
|
|
startupProbe:
|
|
enabled: true
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 10
|
|
timeoutSeconds: 10
|
|
failureThreshold: 60
|
|
successThreshold: 1
|
|
|
|
podAnnotations:
|
|
diun.enable: "true"
|
|
diun.include_tags: "^[0-9]+(?:.[0-9]+)?(?:.[0-9]+)?.*"
|
|
|
|
collabora:
|
|
enabled: false # Using onlyoffice instead
|
|
|
|
resources:
|
|
limits:
|
|
cpu: "2"
|
|
memory: 6Gi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 1Gi
|
|
|
|
cronjob:
|
|
enabled: true
|