homey/templates/nextcloud.yaml

---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: nextcloud-pvc
spec:
  accessModes:
  - ReadWriteMany
  resources:
    requests:
      storage: 30Gi
  storageClassName: longhorn
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: nextcloud-postgres-pvc
spec:
  accessModes:
  - ReadWriteMany
  resources:
    requests:
      storage: 5Gi
  storageClassName: longhorn
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: nextcloud-data-pvc
spec:
  accessModes:
  - ReadWriteMany
  resources:
    requests:
      storage: 30Gi
  storageClassName: longhorn
---
apiVersion: v1
kind: Secret
metadata:
  name: nextcloud-postgres-pass
  annotations:
    "helm.sh/resource-policy": "keep"
type: Opaque
data:
  {{- $secretObj := (lookup "v1" "Secret" .Release.Namespace "nextcloud-postgres-pass") | default dict }}
  {{- $secretData := (get $secretObj "data") | default dict }}
  {{- $pass := (get $secretData "password") | default (randAlphaNum 32 | b64enc) }}
  password: {{ $pass | quote }}
---
# apiVersion: extensions/v1beta1
apiVersion: v1
kind: ConfigMap
metadata:
  name: nextcloud-postgres-config
  labels:
    app: nextcloud-postgres
data:
  POSTGRES_DB: nextcloud_db
  POSTGRES_USER: postgres
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nextcloud-postgres
  labels:
    app: nextcloud-postgres
spec:
  replicas: 1
  selector:
    matchLabels:
      app: nextcloud-postgres
  template:
    metadata:
      labels:
        app: nextcloud-postgres
        name: nextcloud-postgres
    spec:
      containers:
      - name: nextcloud-postgres
        image: postgres:10.4
        imagePullPolicy: "IfNotPresent"
        ports:
        - containerPort: 5432
        envFrom:
        - configMapRef:
            name: nextcloud-postgres-config
        env:
        - name: POSTGRES_PASSWORD
          valueFrom:
            secretKeyRef:
              name: nextcloud-postgres-pass
              key: password
        volumeMounts:
        - mountPath: /var/lib/postgresql/data
          subPath: nextcloud/db
          name: nextcloud-postgredb
      volumes:
      - name: nextcloud-postgredb
        persistentVolumeClaim:
          claimName: nextcloud-postgres-pvc
---
apiVersion: v1
kind: Service
metadata:
  name: nextcloud-postgres
  labels:
    app: nextcloud-postgres
spec:
  ports:
   - port: 5432
  selector:
    app: nextcloud-postgres
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nextcloud
  labels:
    app: nextcloud
spec:
  replicas: 1
  selector:
    matchLabels:
      app: nextcloud
  template:
    metadata:
      labels:
        app: nextcloud
        name: nextcloud
    spec:
      containers:
      - name: nextcloud
        image: nextcloud
        imagePullPolicy: Always
        volumeMounts:
        - name: nextcloud-volume
          mountPath: "/var/www/html"
          subPath: nextcloud/html
        - name: nextcloud-media
          mountPath: "/var/www/html/data"
          subPath: nextcloud/html/data
        envFrom:
        - configMapRef:
            name: nextcloud-postgres-config
        env:
        - name: POSTGRES_HOST
          value: "nextcloud-postgres"
        - name: POSTGRES_PASSWORD
          valueFrom:
            secretKeyRef:
              name: nextcloud-postgres-pass
              key: password
        - name: OVERWRITEPROTOCOL
          value: "https"
      volumes:
      - name: nextcloud-volume
        persistentVolumeClaim:
          claimName: nextcloud-pvc
      - name: nextcloud-media
        persistentVolumeClaim:
          claimName: nextcloud-data-pvc
---
apiVersion: v1
kind: Service
metadata:
  name: nextcloud
spec:
  selector:
    app: nextcloud
  ports:
  - port: 80
    targetPort: 80
    name: nextcloud
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: nextcloud-ingress
  annotations:
    nginx.ingress.kubernetes.io/proxy-body-size: 5g
    nginx.ingress.kubernetes.io/server-snippet: |
        # Make a regex exception for `/.well-known` so that clients can still
        # access it despite the existence of the regex rule
        # `location ~ /(\.|autotest|...)` which would otherwise handle requests
        # for `/.well-known`.
        location = /.well-known/carddav { return 301  https://nextcloud.zakobar.com/remote.php/dav/; }
        location = /.well-known/caldav  { return 301  https://nextcloud.zakobar.com/remote.php/dav/; }
spec:
  ingressClassName: {{ .Values.homey.ingress_class }}
  tls:
    - hosts:
      - nextcloud.{{ .Values.homey.url }}
      secretName: {{ .Values.homey.certname }}
  rules:
   - host: nextcloud.{{ .Values.homey.url }}
     http:
       paths:
       - path: /
         pathType: Prefix
         backend:
           service:
             name: nextcloud
             port:
               number: 80
---