nextcloud helm

No introduction found. Create it?

Install

Install with:

helm repo add nextcloud oci://ghcr.io/bjw-s-labs/charts/
helm install nextcloud nextcloud/nextcloud -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 17)

NameRepoStarsVersionTimestamp
nextcloudbjw-s-labs/home-ops8679.4.18 days ago
nextcloudharaldkoch/kochhaus-home1809.4.113 days ago
nextclouddrag0n141/home-ops669.4.1a month ago

Resources

250Mi256Mi363Mi512Mi536Mi768Mi2048Mi
512Mi2048Mi3072Mi5120Mi8192Mi
17m50m60m100m300m500m1000m

Values

See the most popular values for this chart:

KeyTypes
cronjob.enabled (14)
true
boolean
cronjob.cronjob.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].key (5)
app.kubernetes.io/instance
app.kubernetes.io/component
string
cronjob.cronjob.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].operator (5)
In
In
string
cronjob.cronjob.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].values[] (5)
- nextcloud
- app
string
cronjob.cronjob.affinity.podAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (5)
kubernetes.io/hostname
string
cronjob.cronjob.successfulJobsHistoryLimit (4)
1
number
cronjob.cronjob.securityContext.runAsGroup (3)
82
number
cronjob.cronjob.securityContext.runAsUser (3)
82
number
cronjob.cronjob.securityContext.runAsNonRoot (2)
true
boolean
cronjob.cronjob.resources.limits.memory (2)
512Mi
string
cronjob.cronjob.resources.requests.cpu (2)
10m
string
cronjob.cronjob.resources.requests.memory (2)
128Mi
string
cronjob.cronjob.failedJobsHistoryLimit (1)
1
number
cronjob.cronjob.podLabels."egress.policy.home.arpa/internet" (1)
true
string
cronjob.type (5)
cronjob
string
cronjob.curlInsecure (3)
true
boolean
cronjob.failedJobsHistoryLimit (2)
5
number
cronjob.resources.limits.memory (2)
192Mi
string
cronjob.resources.requests.cpu (2)
10m
string
cronjob.resources.requests.memory (2)
96Mi
string
cronjob.successfulJobsHistoryLimit (2)
2
number
cronjob.securityContext.fsGroup (1)
${PGID}
string
cronjob.securityContext.readOnlyRootFilesystem (1)
true
boolean
cronjob.securityContext.runAsGroup (1)
${PGID}
string
cronjob.securityContext.runAsNonRoot (1)
true
boolean
cronjob.securityContext.runAsUser (1)
${PUID}
string
cronjob.sidecar.securityContext.runAsGroup (1)
1022
number
nextcloud.existingSecret.enabled (14)
true
boolean
nextcloud.existingSecret.secretName (14)
nextcloud-secret
string
nextcloud.existingSecret.passwordKey (9)
ADMIN_PASS
string
nextcloud.existingSecret.smtpHostKey (9)
SMTP_HOST
string
nextcloud.existingSecret.smtpPasswordKey (9)
SMTP_PASSWORD
string
nextcloud.existingSecret.smtpUsernameKey (9)
SMTP_USERNAME
string
nextcloud.existingSecret.usernameKey (9)
ADMIN_USER
string
nextcloud.host (14)
cloud.${SECRET_DOMAIN}
string
nextcloud.mail.enabled (12)
true
boolean
nextcloud.mail.domain (10)
${SECRET_DOMAIN}
string
nextcloud.mail.fromAddress (10)
nextcloud
string
nextcloud.mail.smtp.port (9)
25
string, number
nextcloud.mail.smtp.authtype (7)
NONE
string
nextcloud.mail.smtp.secure (7)
ssl
string
nextcloud.mail.smtp.host (5)
smtp-relay.default.svc.cluster.local
string
nextcloud.mail.smtp.name (1)

string
nextcloud.mail.smtp.password (1)

string
nextcloud.extraEnv[].name (11)
REDIS_HOST
REDIS_HOST_PORT
string
nextcloud.extraEnv[].valueFrom.secretKeyRef.key (8)
REDIS_HOST
REDIS_HOST_PORT
OIDC_CLIENT_ID
OIDC_CLIENT_SECRET
OIDC_ISSUER
string
nextcloud.extraEnv[].valueFrom.secretKeyRef.name (8)
nextcloud-secret
nextcloud-secret
nextcloud-secret
nextcloud-secret
nextcloud-secret
string
nextcloud.extraEnv[].value (7)
nextcloud-dragonfly.default.svc
6379
string
nextcloud.extraInitContainers[].image (11)
ghcr.io/home-operations/postgres-init:18
string
nextcloud.extraInitContainers[].name (11)
init-db
string
nextcloud.extraInitContainers[].envFrom[].secretRef.name (8)
nextcloud-secret
string
nextcloud.extraInitContainers[].command[] (3)
- touch
- /usr/local/etc/php/conf.d/redis-session.ini
string
nextcloud.extraInitContainers[].volumeMounts[].mountPath (3)
/php-confd
string
nextcloud.extraInitContainers[].volumeMounts[].name (3)
php-confd
string
nextcloud.extraInitContainers[].securityContext.runAsGroup (1)
82
number
nextcloud.extraInitContainers[].securityContext.runAsUser (1)
82
number
nextcloud.datadir (9)
/var/www/data
string
nextcloud.extraVolumes[].name (9)
nfs-media
string
nextcloud.extraVolumes[].nfs.path (3)
/mnt/data/home
string
nextcloud.extraVolumes[].nfs.server (3)
nas01.${SECRET_DOMAIN_INT}
string
nextcloud.extraVolumes[].configMap.defaultMode (2)
755
number
nextcloud.extraVolumes[].configMap.name (2)
nextcloud-startup-hooks
string
nextcloud.extraVolumes[].persistentVolumeClaim.claimName (2)
nextcloud-media-nfs
string
nextcloud.extraVolumeMounts[].mountPath (8)
/nfs/media
string
nextcloud.extraVolumeMounts[].name (8)
nfs-media
string
nextcloud.extraVolumeMounts[].subPath (3)
before-starting.sh
redis-session.ini
string
nextcloud.extraVolumeMounts[].readOnly (2)
true
boolean
nextcloud.configs."misc.config.php" (7)
<?php $CONFIG = array ( 'default_phone_region' => 'PL', 'maintenance_window_start' => 2, ); ?>
string
nextcloud.configs."proxy.config.php" (7)
<?php $CONFIG = array ( 'trusted_proxies' => array( 0 => '127.0.0.1', 1 => '10.43.0.0/16', 1 => '10.0.0.0/16', ), 'forwarded_for_headers' => array('HTTP_X_FORWARDED_FOR'), ); ?>
string
nextcloud.configs."local.config.php" (6)
<?php $CONFIG = array ( 'trusted_proxies' => array ( 0 => '127.0.0.1', 1 => '${K8S_CLUSTER_CIDR}', 2 => '${K8S_SERVICE_CIDR}', ), 'forwarded_for_headers' => array ( 0 => 'HTTP_X_FORWARDED_FOR', ), 'overwrite.cli.url' => 'https://nextcloud.${SECRET_DOMAIN}', // Collabora's internal callbacks use HTTP; public and CLI URLs remain HTTPS. 'overwriteprotocol' => ($_SERVER['HTTP_HOST'] ?? '') === 'nextcloud.default.svc.cluster.local:8080' ? 'http' : 'https', 'quota_include_external_storage' => 'false', 'skeletondirectory' => '', 'knowledgebaseenabled' => 'false', 'maintenance_window_start' => '20', 'enable_previews' => false, 'trashbin_retention_obligation' => 'auto, 30', 'auth.bruteforce.protection.enabled' => true, );
string
nextcloud.configs."oidc.config.php" (4)
<?php $CONFIG = array ( 'allow_user_to_change_display_name' => false, 'lost_password_link' => 'disabled', 'oidc_login_provider_url' => 'https://auth.${SECRET_DOMAIN}', 'oidc_login_client_id' => getenv('NEXTCLOUD_OAUTH_CLIENT_ID'), 'oidc_login_client_secret' => getenv('NEXTCLOUD_OAUTH_CLIENT_SECRET'), 'oidc_login_auto_redirect' => false, 'oidc_login_end_session_redirect' => false, 'oidc_login_button_text' => 'Log in with Authelia', 'oidc_login_hide_password_form' => false, 'oidc_login_use_id_token' => false, 'oidc_login_attributes' => array ( 'id' => 'preferred_username', 'name' => 'name', 'mail' => 'email', 'groups' => 'groups', 'is_admin' => 'is_nextcloud_admin', ), 'oidc_login_default_group' => 'oidc', 'oidc_login_use_external_storage' => false, 'oidc_login_scope' => 'openid profile email groups nextcloud_userinfo', 'oidc_login_proxy_ldap' => false, 'oidc_login_disable_registration' => true, 'oidc_login_redir_fallback' => false, 'oidc_login_tls_verify' => true, 'oidc_create_groups' => false, 'oidc_login_webdav_enabled' => false, 'oidc_login_password_authentication' => false, 'oidc_login_public_key_caching_time' => 86400, 'oidc_login_min_time_between_jwks_requests' => 10, 'oidc_login_well_known_caching_time' => 86400, 'oidc_login_update_avatar' => false, 'oidc_login_code_challenge_method' => 'S256' ); ?>
string
nextcloud.configs."redis.config.php" (4)
<?php $CONFIG = array( 'memcache.distributed' => '\OC\Memcache\Redis', 'memcache.locking' => '\OC\Memcache\Redis', 'redis' => array( 'host' => getenv('REDIS_HOST'), 'port' => getenv('REDIS_HOST_PORT') ?: 6379, 'dbindex' => getenv('REDIS_DATABASE') ?: 0, 'password' => getenv('REDIS_PASSWORD'), ), );
string
nextcloud.configs."sso.config.php" (3)
<?php $CONFIG = array ( 'oidc_login_provider_url' => 'https://authelia.${SECRET_DOMAIN}', 'oidc_login_client_id' => 'nextcloud', 'oidc_login_client_secret' => getenv('NEXTCLOUD_OAUTH_CLIENT_SECRET'), 'oidc_login_button_text' => 'Log in with Authelia', 'oidc_login_attributes' => array ( 'id' => 'preferred_username', 'name' => 'name', 'mail' => 'email', ), 'oidc_login_scope' => 'openid profile email', 'oidc_login_disable_registration' => true, 'oidc_login_password_authentication' => true, 'oidc_login_end_session_on_logout' => true, );
string
nextcloud.configs."collabora.config.php" (2)
<?php $CONFIG = array ( 'richdocuments' => array( 'wopi_url' => 'https://${SECRET_CLOUD_COLLABORA_DOMAIN}', ), );
string
nextcloud.configs."ingress.config.php" (2)
<?php $CONFIG = array ( 'overwrite.cli.url' => 'https://cloud.${SECRET_DOMAIN}', 'overwriteprotocol' => 'https', );
string
nextcloud.configs."logging.config.php" (2)
<?php $CONFIG = array ( 'log_type' => 'file', 'logfile' => '/var/www/html/data/nextcloud.log', 'loglevel' => 1, 'logdateformat' => 'F d, Y H:i:s' );
string
nextcloud.configs."bulkupload.config.php" (1)
<?php $CONFIG = array ( 'bulkupload.enabled' => false, );
string
nextcloud.configs."caching.config.php" (1)
<?php $CONFIG = array ( 'memcache.local' => '\\OC\\Memcache\\APCu', 'memcache.distributed' => '\\OC\\Memcache\\Redis', 'memcache.locking' => '\\OC\\Memcache\\Redis', 'filelocking.enabled' => true, 'redis' => array( 'host' => 'dragonfly.database.svc.cluster.local', 'port' => 6379, 'timeout' => 0.0, 'password' => '', ), );
string
nextcloud.configs."custom.config.php" (1)
<?php $CONFIG = array ( 'overwriteprotocol' => 'https', 'overwrite.cli.url' => 'https://cloud.${SECRET_DOMAIN}', 'overwritehost' => 'cloud.${SECRET_DOMAIN}', 'filelocking.enabled' => 'true', 'default_phone_region' => 'DE', 'loglevel' => '2', 'enable_previews' => true, 'log_type' => 'syslog', 'maintenance_window_start' => 1, 'upgrade.disable-web' => false, 'trusted_proxies' => array ( 0 => '127.0.0.1', 1 => '10.42.0.0/16', 2 => '10.43.0.0/16', ), );
string
nextcloud.configs."gitops.config.php" (1)
<?php $CONFIG = array ( 'appstoreenabled' => true, 'mail_domain' => '${SECRET_DOMAIN}', );
string
nextcloud.configs."notify_push.config.php" (1)
<?php $CONFIG = array ( 'notify_push' => array( 'base_endpoint' => 'https://${SECRET_CLOUD_DOMAIN}/push', ), );
string
nextcloud.configs."office.config.php" (1)
<?php $CONFIG = array ( 'allow_local_remote_servers' => true, 'trusted_domains' => array ( 'nextcloud.${SECRET_DOMAIN}', 'nextcloud.default.svc.cluster.local', ), );
string
nextcloud.configs."preview.config.php" (1)
<?php $CONFIG = array ( 'enabledPreviewProviders' => array( 'OC\Preview\PNG', 'OC\Preview\JPEG', 'OC\Preview\GIF', 'OC\Preview\BMP', 'OC\Preview\XBitmap', 'OC\Preview\MP3', 'OC\Preview\TXT', 'OC\Preview\MarkDown', 'OC\Preview\OpenDocument', 'OC\Preview\Krita', 'OC\Preview\HEIC', ), );
string
nextcloud.phpConfigs."uploadLimit.ini" (7)
upload_max_filesize = 16G post_max_size = 16G max_input_time = 3600 max_execution_time = 3600
string
nextcloud.phpConfigs."www.conf" (6)
[www] user = www-data group = www-data listen = 127.0.0.1:9000 pm = dynamic pm.max_children = 57 pm.start_servers = 14 pm.min_spare_servers = 14 pm.max_spare_servers = 42 pm.max_requests = 500 pm.process_idle_timeout = 10s
string
nextcloud.phpConfigs."zzz-pool.conf" (1)
[www] pm = dynamic pm.max_children = 30 pm.start_servers = 6 pm.min_spare_servers = 3 pm.max_spare_servers = 12 pm.max_requests = 500
string
nextcloud.defaultConfigs."redis.config.php" (4)
false
boolean
nextcloud.defaultConfigs."imaginary.config.php" (3)
true
boolean
nextcloud.hooks.before-starting (4)
# disable unneceserry apps for appname in activity circles systemtags federation privacy \ nextcloud_announcements announcementcenter support survey_client \ user_status weather_status dashboard do php occ app:disable "$appname" done
string
nextcloud.hooks.post-upgrade (2)
# based on https://github.com/nextcloud/all-in-one/blob/25c580bca370eaead5f1fad9d3842a9c49562dff/Containers/nextcloud/entrypoint.sh#L451-L457 php occ maintenance:repair --include-expensive php occ db:add-missing-indices php occ db:add-missing-columns php occ db:add-missing-primary-keys
string
nextcloud.hooks.post-installation (1)
printf "Add missing DB indices\n" php occ db:add-missing-indices
string
nextcloud.securityContext.runAsGroup (3)
1022
number, string
nextcloud.securityContext.runAsNonRoot (3)
true
boolean
nextcloud.securityContext.runAsUser (3)
1022
number, string
nextcloud.securityContext.fsGroup (1)
${PGID:-100}
string
nextcloud.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
nextcloud.securityContext.readOnlyRootFilesystem (1)
false
boolean
nextcloud.containerPort (2)
80
number
nextcloud.lifecycle.postStartCommand[] (2)
- /bin/sh
- -c
- cd /var/www/html; ./occ maintenance:repair --include-expensive; ./occ db:add-missing-indices; /bin/true
string
nextcloud.extraSidecarContainers[].args[] (1)
- --port
- "7867"
string
nextcloud.extraSidecarContainers[].command[] (1)
- /var/www/html/custom_apps/notify_push/bin/x86_64/notify_push
- /var/www/html/config/config.php
string
nextcloud.extraSidecarContainers[].env[].name (1)
NEXTCLOUD_URL
PORT
string
nextcloud.extraSidecarContainers[].env[].value (1)
http://nextcloud.self-hosted.svc:8080
7867
string
nextcloud.extraSidecarContainers[].image (1)
nextcloud:35.0.2-fpm-alpine
string
nextcloud.extraSidecarContainers[].name (1)
notify-push
string
nextcloud.extraSidecarContainers[].ports[].containerPort (1)
7867
number
nextcloud.extraSidecarContainers[].ports[].name (1)
push
string
nextcloud.extraSidecarContainers[].ports[].protocol (1)
TCP
string
nextcloud.extraSidecarContainers[].resources.limits.memory (1)
192Mi
string
nextcloud.extraSidecarContainers[].resources.requests.cpu (1)
10m
string
nextcloud.extraSidecarContainers[].resources.requests.memory (1)
96Mi
string
nextcloud.extraSidecarContainers[].volumeMounts[].mountPath (1)
/var/www/html
/var/www/data
string
nextcloud.extraSidecarContainers[].volumeMounts[].name (1)
nextcloud-main
nextcloud-data
string
nextcloud.extraSidecarContainers[].volumeMounts[].readOnly (1)
true
true
boolean
nextcloud.objectStorage.s3.autoCreate (1)
true
boolean
nextcloud.objectStorage.s3.bucket (1)
nextcloud
string
nextcloud.objectStorage.s3.enabled (1)
true
boolean
nextcloud.objectStorage.s3.existingSecret (1)
nextcloud-secrets
string
nextcloud.objectStorage.s3.host (1)
minio.storage.svc.cluster.local
string
nextcloud.objectStorage.s3.port (1)
9000
number
nextcloud.objectStorage.s3.secretKeys.accessKey (1)
MINIO_ACCESS_KEY
string
nextcloud.objectStorage.s3.secretKeys.secretKey (1)
MINIO_SECRET_KEY
string
nextcloud.objectStorage.s3.ssl (1)
false
boolean
nextcloud.podSecurityContext.fsGroup (1)
${PGID}
string
nextcloud.podSecurityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
nextcloud.podSecurityContext.runAsGroup (1)
${PGID}
string
nextcloud.podSecurityContext.runAsNonRoot (1)
true
boolean
nextcloud.podSecurityContext.runAsUser (1)
${PUID}
string
persistence.enabled (14)
true
boolean
persistence.existingClaim (14)
nextcloud
string
persistence.nextcloudData.enabled (5)
true
boolean
persistence.nextcloudData.existingClaim (5)
nextcloud-data
string
persistence.nextcloudData.accessMode (4)
ReadWriteMany
string
persistence.config.advancedMounts.nextcloud.app[].path (2)
/usr/local/etc/php-fpm.d/zz-tuning.conf
/var/www/html/config/eurooffice.config.php
string
persistence.config.advancedMounts.nextcloud.app[].readOnly (2)
true
true
boolean
persistence.config.advancedMounts.nextcloud.app[].subPath (2)
zz-tuning.conf
eurooffice.config.php
string
persistence.config.advancedMounts.nextcloud.cron[].path (2)
/var/www/html/config/eurooffice.config.php
string
persistence.config.advancedMounts.nextcloud.cron[].readOnly (2)
true
boolean
persistence.config.advancedMounts.nextcloud.cron[].subPath (2)
eurooffice.config.php
string
persistence.config.advancedMounts.nextcloud.nginx[].path (2)
/etc/nginx/nginx.conf
string
persistence.config.advancedMounts.nextcloud.nginx[].readOnly (2)
true
boolean
persistence.config.advancedMounts.nextcloud.nginx[].subPath (2)
nginx.conf
string
persistence.config.name (2)
nextcloud-configmap
string
persistence.config.type (2)
configMap
string
persistence.data.advancedMounts.nextcloud.app[].path (2)
/var/www/data
string
persistence.data.advancedMounts.nextcloud.cron[].path (2)
/var/www/data
string
persistence.data.path (2)
/mnt/tank/Nextcloud
string
persistence.data.server (2)
horrea-10.${SECRET_DOMAIN}
string
persistence.data.type (2)
nfs
string
persistence.data.existingClaim (1)
{{ .Release.Name }}
string
persistence.data.globalMounts[].path (1)
/var/www/html
string
persistence.hooks.advancedMounts.nextcloud.app[].path (2)
/docker-entrypoint-hooks.d/before-starting/whiteboard.sh
/docker-entrypoint-hooks.d/post-upgrade/post-upgrade.sh
string
persistence.hooks.advancedMounts.nextcloud.app[].readOnly (2)
true
true
boolean
persistence.hooks.advancedMounts.nextcloud.app[].subPath (2)
whiteboard.sh
post-upgrade.sh
string
persistence.hooks.defaultMode (2)
493
number
persistence.hooks.name (2)
nextcloud-configmap
string
persistence.hooks.type (2)
configMap
string
persistence.html.advancedMounts.nextcloud.app[].path (2)
/var/www/html
string
persistence.html.advancedMounts.nextcloud.cron[].path (2)
/var/www/html
string
persistence.html.advancedMounts.nextcloud.nginx[].path (2)
/var/www/html
string
persistence.html.advancedMounts.nextcloud.nginx[].readOnly (2)
true
boolean
persistence.html.advancedMounts.nextcloud.push[].path (2)
/var/www/html
string
persistence.html.advancedMounts.nextcloud.push[].readOnly (2)
true
boolean
persistence.html.existingClaim (2)
nextcloud
string
persistence.php-conf.advancedMounts.nextcloud.02-php-conf[].path (2)
/conf.d
string
persistence.php-conf.advancedMounts.nextcloud.app[].path (2)
/usr/local/etc/php/conf.d
string
persistence.php-conf.type (2)
emptyDir
string
persistence.tmp.advancedMounts.nextcloud.app[].path (2)
/tmp
string
persistence.tmp.advancedMounts.nextcloud.cron[].path (2)
/tmp
string
persistence.tmp.advancedMounts.nextcloud.nginx[].path (2)
/tmp
string
persistence.tmp.type (2)
emptyDir
string
persistence.alex-nfs.globalMounts[].path (1)
/var/www/html/data/alex/files
string
persistence.alex-nfs.path (1)
/mnt/Fast/Alex
string
persistence.alex-nfs.server (1)
192.168.42.20
string
persistence.alex-nfs.type (1)
nfs
string
persistence.config-file.globalMounts[].path (1)
/var/www/html/config/custom.config.php
/usr/local/etc/php/conf.d/php.ini
/usr/local/etc/php-fpm.d/www.conf
/etc/apache2/conf-available/remoteip.conf
string
persistence.config-file.globalMounts[].subPath (1)
custom.config.php
php.ini
www.conf
remoteip.conf
string
persistence.config-file.identifier (1)
config
string
persistence.config-file.type (1)
configMap
string
persistence.tmpfs.globalMounts[].path (1)
/tmp
/cache
/var/run
string
persistence.tmpfs.globalMounts[].subPath (1)
tmp
cache
run
string
persistence.tmpfs.type (1)
emptyDir
string
externalDatabase.enabled (13)
true
boolean
externalDatabase.existingSecret.enabled (13)
true
boolean
externalDatabase.existingSecret.passwordKey (13)
INIT_POSTGRES_PASS
string
externalDatabase.existingSecret.secretName (13)
nextcloud-secret
string
externalDatabase.existingSecret.usernameKey (13)
INIT_POSTGRES_USER
string
externalDatabase.existingSecret.databaseKey (5)
POSTGRES_DB
string
externalDatabase.existingSecret.hostKey (4)
POSTGRES_HOST
string
externalDatabase.type (13)
postgresql
string
externalDatabase.database (9)
nextcloud
string
externalDatabase.host (9)
postgres-lb.database.svc.cluster.local.
string
internalDatabase.enabled (13)
false
boolean
nginx.enabled (12)
true
boolean
nginx.resources.requests.cpu (5)
10m
string
nginx.resources.requests.memory (5)
96Mi
string
nginx.resources.limits.memory (4)
192Mi
string
nginx.image.repository (3)
mirror.gcr.io/library/nginx
string
nginx.image.tag (1)
1.31.8
string
nginx.config.headers.Strict-Transport-Security (2)
max-age=15552000; includeSubDomains; preload;
string
nginx.config.default (1)
true
boolean
startupProbe.enabled (12)
true
boolean
startupProbe.failureThreshold (10)
30
number
startupProbe.initialDelaySeconds (10)
10
number
startupProbe.periodSeconds (10)
20
number
startupProbe.successThreshold (10)
1
number
startupProbe.timeoutSeconds (10)
5
number
image.flavor (10)
fpm-alpine
string
image.tag (8)
35.0.2-fpm-alpine
string
image.repository (4)
library/nextcloud
string
image.registry (2)
docker.io
string
image.pullPolicy (1)
IfNotPresent
string
ingress.enabled (8)
false
boolean
ingress.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.annotations.external-dns/enabled (1)
true
string
ingress.annotations."nginx.ingress.kubernetes.io/backend-protocol" (1)
HTTP
string
ingress.annotations."nginx.ingress.kubernetes.io/cors-allow-headers" (1)
X-Forwarded-For, X-Real-IP, X-Frame-Options, X-Content-Type-Options, X-Forwarded-Proto
string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" (1)
10G
string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-buffering" (1)
off
string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-request-buffering" (1)
off
string
ingress.annotations."nginx.ingress.kubernetes.io/server-snippet" (1)
server_tokens off; proxy_hide_header X-Powered-By; location = /robots.txt { allow all; log_not_found off; access_log off; } location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ { deny all; } location ~ ^/(?:autotest|occ|issue|indie|db_|console) { deny all; }
string
ingress.className (1)
nginx-internal
string
ingress.tls[].hosts[] (1)
- nc.${SECRET_DOMAIN}
string
ingress.tls[].secretName (1)
tls.nextcloud
string
resources.requests.cpu (8)
60m
string
resources.requests.memory (8)
256Mi
string
resources.limits.memory (7)
8Gi
string
resources.limits.cpu (1)
4
number
deploymentAnnotations."reloader.stakater.com/auto" (6)
true
string
deploymentAnnotations."secret.reloader.stakater.com/reload" (2)
nextcloud-secret
string
controllers.nextcloud.annotations."reloader.stakater.com/auto" (3)
true
string
controllers.nextcloud.containers.app.env.NEXTCLOUD_DATA_DIR (3)
/var/www/data
string
controllers.nextcloud.containers.app.env.NEXTCLOUD_TRUSTED_DOMAINS (3)
cloud.${SECRET_DOMAIN}
string
controllers.nextcloud.containers.app.env.EUROOFFICE_JWT_SECRET.valueFrom.secretKeyRef.key (2)
JWT_SECRET
string
controllers.nextcloud.containers.app.env.EUROOFFICE_JWT_SECRET.valueFrom.secretKeyRef.name (2)
euro-office-secret
string
controllers.nextcloud.containers.app.env.NC_allow_local_remote_servers (2)
true
string
controllers.nextcloud.containers.app.env.NC_default_phone_region (2)
SE
string
controllers.nextcloud.containers.app.env.NC_maintenance_window_start (2)
1
string
controllers.nextcloud.containers.app.env.NC_serverid (2)
1
string
controllers.nextcloud.containers.app.env.NC_token_auth_enforced (2)
true
string
controllers.nextcloud.containers.app.env.OVERWRITECLIURL (2)
https://cloud.${SECRET_DOMAIN}
string
controllers.nextcloud.containers.app.env.OVERWRITEPROTOCOL (2)
https
string
controllers.nextcloud.containers.app.env.PHP_MEMORY_LIMIT (2)
1G
string
controllers.nextcloud.containers.app.env.PHP_UPLOAD_LIMIT (2)
10G
string
controllers.nextcloud.containers.app.env.POSTGRES_DB (2)
nextcloud
string
controllers.nextcloud.containers.app.env.POSTGRES_HOST (2)
postgres-rw.databases.svc.cluster.local
string
controllers.nextcloud.containers.app.env.REDIS_HOST (2)
nextcloud-dragonfly
string
controllers.nextcloud.containers.app.env.REDIS_HOST_PORT (2)
6379
string
controllers.nextcloud.containers.app.env.TRUSTED_PROXIES (2)
10.42.0.0/16 127.0.0.1
string
controllers.nextcloud.containers.app.env.TZ (2)
${TZ}
string
controllers.nextcloud.containers.app.env.WHITEBOARD_JWT_SECRET.valueFrom.secretKeyRef.key (2)
JWT_SECRET_KEY
string
controllers.nextcloud.containers.app.env.WHITEBOARD_JWT_SECRET.valueFrom.secretKeyRef.name (2)
whiteboard-secret
string
controllers.nextcloud.containers.app.env.WHITEBOARD_URL (2)
https://whiteboard.${SECRET_DOMAIN}
string
controllers.nextcloud.containers.app.envFrom[].secretRef.name (3)
nextcloud-secret
string
controllers.nextcloud.containers.app.image.repository (3)
docker.io/library/nextcloud
string
controllers.nextcloud.containers.app.image.tag (3)
35.0.2-fpm-alpine@sha256:83a9c44d3f738527258cd9bec0da768d78f381176e7d822ee48c2654db5e3179
string
controllers.nextcloud.containers.app.probes.liveness.custom (3)
true
boolean
controllers.nextcloud.containers.app.probes.liveness.enabled (3)
true
boolean
controllers.nextcloud.containers.app.probes.liveness.spec.periodSeconds (2)
30
number
controllers.nextcloud.containers.app.probes.liveness.spec.tcpSocket.port (2)
9000
number
controllers.nextcloud.containers.app.probes.liveness.spec.timeoutSeconds (2)
5
number
controllers.nextcloud.containers.app.probes.liveness.spec.httpGet.httpHeaders[].name (1)
Host
string
controllers.nextcloud.containers.app.probes.liveness.spec.httpGet.httpHeaders[].value (1)
storage.hyde.services
string
controllers.nextcloud.containers.app.probes.liveness.spec.httpGet.path (1)
/status.php
string
controllers.nextcloud.containers.app.probes.liveness.spec.httpGet.port (1)
80
number
controllers.nextcloud.containers.app.probes.readiness.custom (3)
true
boolean
controllers.nextcloud.containers.app.probes.readiness.enabled (3)
true
boolean
controllers.nextcloud.containers.app.probes.readiness.spec.periodSeconds (2)
30
number
controllers.nextcloud.containers.app.probes.readiness.spec.tcpSocket.port (2)
9000
number
controllers.nextcloud.containers.app.probes.readiness.spec.timeoutSeconds (2)
5
number
controllers.nextcloud.containers.app.probes.readiness.spec.httpGet.httpHeaders[].name (1)
Host
string
controllers.nextcloud.containers.app.probes.readiness.spec.httpGet.httpHeaders[].value (1)
storage.hyde.services
string
controllers.nextcloud.containers.app.probes.readiness.spec.httpGet.path (1)
/status.php
string
controllers.nextcloud.containers.app.probes.readiness.spec.httpGet.port (1)
80
number
controllers.nextcloud.containers.app.probes.startup.enabled (3)
true
boolean
controllers.nextcloud.containers.app.probes.startup.spec.failureThreshold (3)
90
number
controllers.nextcloud.containers.app.probes.startup.spec.periodSeconds (2)
10
number
controllers.nextcloud.containers.app.probes.startup.spec.tcpSocket.port (2)
9000
number
controllers.nextcloud.containers.app.probes.startup.custom (2)
true
boolean
controllers.nextcloud.containers.app.resources.limits.memory (3)
4Gi
string
controllers.nextcloud.containers.app.resources.requests.cpu (3)
100m
string
controllers.nextcloud.containers.app.resources.requests.memory (3)
512Mi
string
controllers.nextcloud.containers.app.securityContext.allowPrivilegeEscalation (3)
false
boolean
controllers.nextcloud.containers.app.securityContext.capabilities.drop[] (3)
- ALL
string
controllers.nextcloud.containers.app.securityContext.readOnlyRootFilesystem (3)
true
boolean
controllers.nextcloud.containers.cron.command[] (2)
- sh
- -c
- trap 'exit 0' TERM INT # php-fpm only listens once the entrypoint finished installing/upgrading until php -r 'exit(@fsockopen("127.0.0.1", 9000) ? 0 : 1);'; do sleep 10 & wait $! done while true; do php -f /var/www/html/cron.php sleep 300 & wait $! done
string
controllers.nextcloud.containers.cron.env.EUROOFFICE_JWT_SECRET.valueFrom.secretKeyRef.key (2)
JWT_SECRET
string
controllers.nextcloud.containers.cron.env.EUROOFFICE_JWT_SECRET.valueFrom.secretKeyRef.name (2)
euro-office-secret
string
controllers.nextcloud.containers.cron.env.NC_allow_local_remote_servers (2)
true
string
controllers.nextcloud.containers.cron.env.NC_default_phone_region (2)
SE
string
controllers.nextcloud.containers.cron.env.NC_maintenance_window_start (2)
1
string
controllers.nextcloud.containers.cron.env.NC_serverid (2)
1
string
controllers.nextcloud.containers.cron.env.NC_token_auth_enforced (2)
true
string
controllers.nextcloud.containers.cron.env.NEXTCLOUD_DATA_DIR (2)
/var/www/data
string
controllers.nextcloud.containers.cron.env.NEXTCLOUD_TRUSTED_DOMAINS (2)
cloud.${SECRET_DOMAIN}
string
controllers.nextcloud.containers.cron.env.OVERWRITECLIURL (2)
https://cloud.${SECRET_DOMAIN}
string
controllers.nextcloud.containers.cron.env.OVERWRITEPROTOCOL (2)
https
string
controllers.nextcloud.containers.cron.env.PHP_MEMORY_LIMIT (2)
1G
string
controllers.nextcloud.containers.cron.env.PHP_UPLOAD_LIMIT (2)
10G
string
controllers.nextcloud.containers.cron.env.POSTGRES_DB (2)
nextcloud
string
controllers.nextcloud.containers.cron.env.POSTGRES_HOST (2)
postgres-rw.databases.svc.cluster.local
string
controllers.nextcloud.containers.cron.env.REDIS_HOST (2)
nextcloud-dragonfly
string
controllers.nextcloud.containers.cron.env.REDIS_HOST_PORT (2)
6379
string
controllers.nextcloud.containers.cron.env.TRUSTED_PROXIES (2)
10.42.0.0/16 127.0.0.1
string
controllers.nextcloud.containers.cron.env.TZ (2)
${TZ}
string
controllers.nextcloud.containers.cron.env.WHITEBOARD_JWT_SECRET.valueFrom.secretKeyRef.key (2)
JWT_SECRET_KEY
string
controllers.nextcloud.containers.cron.env.WHITEBOARD_JWT_SECRET.valueFrom.secretKeyRef.name (2)
whiteboard-secret
string
controllers.nextcloud.containers.cron.env.WHITEBOARD_URL (2)
https://whiteboard.${SECRET_DOMAIN}
string
controllers.nextcloud.containers.cron.envFrom[].secretRef.name (2)
nextcloud-secret
string
controllers.nextcloud.containers.cron.image.repository (2)
docker.io/library/nextcloud
string
controllers.nextcloud.containers.cron.image.tag (2)
35.0.2-fpm-alpine@sha256:83a9c44d3f738527258cd9bec0da768d78f381176e7d822ee48c2654db5e3179
string
controllers.nextcloud.containers.cron.resources.limits.memory (2)
2Gi
string
controllers.nextcloud.containers.cron.resources.requests.cpu (2)
10m
string
controllers.nextcloud.containers.cron.resources.requests.memory (2)
128Mi
string
controllers.nextcloud.containers.cron.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.nextcloud.containers.cron.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.nextcloud.containers.cron.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.nextcloud.containers.nginx.env.NGINX_ENTRYPOINT_QUIET_LOGS (2)
1
string
controllers.nextcloud.containers.nginx.image.repository (2)
ghcr.io/nginx/nginx-unprivileged
string
controllers.nextcloud.containers.nginx.image.tag (2)
1.31.7-alpine@sha256:378d0c32f6562f7fd9629170797f57d2b953aa09be983b3daaf4809bb039ca00
string
controllers.nextcloud.containers.nginx.probes.liveness.custom (2)
true
boolean
controllers.nextcloud.containers.nginx.probes.liveness.enabled (2)
true
boolean
controllers.nextcloud.containers.nginx.probes.liveness.spec.periodSeconds (2)
30
number
controllers.nextcloud.containers.nginx.probes.liveness.spec.tcpSocket.port (2)
8080
number
controllers.nextcloud.containers.nginx.probes.readiness.custom (2)
true
boolean
controllers.nextcloud.containers.nginx.probes.readiness.enabled (2)
true
boolean
controllers.nextcloud.containers.nginx.probes.readiness.spec.httpGet.httpHeaders[].name (2)
Host
string
controllers.nextcloud.containers.nginx.probes.readiness.spec.httpGet.httpHeaders[].value (2)
cloud.${SECRET_DOMAIN}
string
controllers.nextcloud.containers.nginx.probes.readiness.spec.httpGet.path (2)
/status.php
string
controllers.nextcloud.containers.nginx.probes.readiness.spec.httpGet.port (2)
8080
number
controllers.nextcloud.containers.nginx.probes.readiness.spec.periodSeconds (2)
15
number
controllers.nextcloud.containers.nginx.probes.readiness.spec.timeoutSeconds (2)
5
number
controllers.nextcloud.containers.nginx.resources.limits.memory (2)
256Mi
string
controllers.nextcloud.containers.nginx.resources.requests.cpu (2)
10m
string
controllers.nextcloud.containers.nginx.resources.requests.memory (2)
32Mi
string
controllers.nextcloud.containers.nginx.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.nextcloud.containers.nginx.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.nextcloud.containers.nginx.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.nextcloud.containers.push.command[] (2)
- sh
- -c
- trap 'kill -TERM $pid 2>/dev/null; exit 0' TERM INT bin=/var/www/html/custom_apps/notify_push/bin/x86_64/notify_push # Only exists once the app is installed from the app store until [ -x "$bin" ]; do sleep 30 & wait $! done sum=$(md5sum "$bin") "$bin" /var/www/html/config/config.php & pid=$! # App updates replace the binary, so exit to restart on the new one while kill -0 "$pid" 2>/dev/null; do sleep 60 & wait $! if [ "$(md5sum "$bin" 2>/dev/null)" != "$sum" ]; then echo "notify_push binary changed, restarting" kill -TERM "$pid" wait "$pid" exit 0 fi done wait "$pid"
string
controllers.nextcloud.containers.push.env.BIND (2)
127.0.0.1
string
controllers.nextcloud.containers.push.env.NEXTCLOUD_URL (2)
http://127.0.0.1:8080
string
controllers.nextcloud.containers.push.env.NO_ANSI (2)
true
string
controllers.nextcloud.containers.push.env.PORT (2)
7867
string
controllers.nextcloud.containers.push.env.REDIS_URL (2)
redis://nextcloud-dragonfly:6379
string
controllers.nextcloud.containers.push.env.TZ (2)
${TZ}
string
controllers.nextcloud.containers.push.image.repository (2)
docker.io/library/nextcloud
string
controllers.nextcloud.containers.push.image.tag (2)
35.0.2-fpm-alpine@sha256:83a9c44d3f738527258cd9bec0da768d78f381176e7d822ee48c2654db5e3179
string
controllers.nextcloud.containers.push.resources.limits.memory (2)
256Mi
string
controllers.nextcloud.containers.push.resources.requests.cpu (2)
10m
string
controllers.nextcloud.containers.push.resources.requests.memory (2)
32Mi
string
controllers.nextcloud.containers.push.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.nextcloud.containers.push.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.nextcloud.containers.push.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.nextcloud.initContainers.01-init-db.envFrom[].secretRef.name (2)
nextcloud-secret
string
controllers.nextcloud.initContainers.01-init-db.image.repository (2)
ghcr.io/home-operations/postgres-init
string
controllers.nextcloud.initContainers.01-init-db.image.tag (2)
18@sha256:b6d3af974df781c673d37e49bdddfa14a6f5be28b18d2cb7713f0449bea4057b
string
controllers.nextcloud.initContainers.02-php-conf.command[] (2)
- sh
- -c
- cp -R /usr/local/etc/php/conf.d/. /conf.d/
string
controllers.nextcloud.initContainers.02-php-conf.image.repository (2)
docker.io/library/nextcloud
string
controllers.nextcloud.initContainers.02-php-conf.image.tag (2)
35.0.2-fpm-alpine@sha256:83a9c44d3f738527258cd9bec0da768d78f381176e7d822ee48c2654db5e3179
string
controllers.nextcloud.initContainers.02-php-conf.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.nextcloud.initContainers.02-php-conf.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.nextcloud.initContainers.02-php-conf.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.nextcloud.initContainers.copy-config.command[] (1)
- sh
- -c
- cp -r /usr/src/nextcloud/config/*.php /var/www/html/config/
string
controllers.nextcloud.initContainers.copy-config.image.repository (1)
docker.io/library/nextcloud
string
controllers.nextcloud.initContainers.copy-config.image.tag (1)
35.0.2@sha256:6b015097ca6c30f97d172365f886c27f865e16f8e6ac2d1e80bc1433bc2580da
string
controllers.nextcloud.initContainers.copy-config.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.nextcloud.initContainers.copy-config.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.nextcloud.initContainers.copy-config.securityContext.readOnlyRootFilesystem (1)
true
boolean
defaultPodOptions.securityContext.fsGroup (3)
82
number
defaultPodOptions.securityContext.fsGroupChangePolicy (3)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsGroup (3)
82
number
defaultPodOptions.securityContext.runAsNonRoot (3)
true
boolean
defaultPodOptions.securityContext.runAsUser (3)
82
number
httpRoute.enabled (3)
true
boolean
httpRoute.hostnames[] (3)
- files.bjw-s.dev
string
httpRoute.parentRefs[].name (3)
envoy-external
string
httpRoute.parentRefs[].namespace (3)
network
string
httpRoute.rules[].matches[].path.type (3)
PathPrefix
string
httpRoute.rules[].matches[].path.value (3)
/
string
httpRoute.rules[].filters[].responseHeaderModifier.add[].name (2)
strict-transport-security
string
httpRoute.rules[].filters[].responseHeaderModifier.add[].value (2)
max-age=31536000
string
httpRoute.rules[].filters[].type (2)
ResponseHeaderModifier
string
httpRoute.annotations."gatus.home-operations.com/enabled" (1)
false
string
httpRoute.annotations."gatus.home-operations.com/endpoint" (1)
path: /status.php
string
imaginary.enabled (3)
true
boolean
postgresql.enabled (3)
false
boolean
redis.enabled (3)
false
boolean
redis.auth.enabled (1)
true
boolean
redis.auth.existingSecret (1)
nextcloud-secret
string
redis.auth.existingSecretPasswordKey (1)
REDIS_PASSWORD
string
redis.host (1)
nextcloud-valkey.selfhosted.svc.cluster.local
string
redis.port (1)
6379
number
route.app.hostnames[] (3)
- cloud.${SECRET_DOMAIN}
string
route.app.parentRefs[].name (3)
envoy-external
string
route.app.parentRefs[].namespace (3)
network
string
route.app.parentRefs[].sectionName (2)
https
string
route.app.annotations."gethomepage.dev/description" (2)
File sync and share
string
route.app.annotations."gethomepage.dev/enabled" (2)
true
string
route.app.annotations."gethomepage.dev/group" (2)
Home
string
route.app.annotations."gethomepage.dev/icon" (2)
nextcloud.png
string
route.app.annotations."gethomepage.dev/name" (2)
Nextcloud
string
route.app.annotations."external-dns.kubernetes.io/cloudflare-proxied" (1)
false
string
route.app.annotations."gatus.home-operations.com/endpoint" (1)
url: https://storage.hyde.services/cron.php
string
route.app.rules[].backendRefs[].identifier (1)
app
string
route.app.rules[].backendRefs[].port (1)
80
number
route.app.rules[].filters[].responseHeaderModifier.add[].name (1)
Strict-Transport-Security
string
route.app.rules[].filters[].responseHeaderModifier.add[].value (1)
max-age=31536000; includeSubDomains; preload
string
route.app.rules[].filters[].type (1)
ResponseHeaderModifier
string
service.app.ports.http.port (3)
8080
number
service.app.controller (2)
nextcloud
string
deploymentLabels.postgres (2)
true
string
deploymentLabels.nfsMount (1)
true
string
externalRedis.enabled (2)
true
boolean
externalRedis.host (2)
nextcloud-dragonfly
string
externalRedis.port (2)
6379
number, string
global.image.registry (2)
mirror.gcr.io
string
livenessProbe.enabled (2)
false
boolean
livenessProbe.failureThreshold (1)
3
number
livenessProbe.initialDelaySeconds (1)
7200
number
livenessProbe.periodSeconds (1)
10
number
livenessProbe.successThreshold (1)
1
number
livenessProbe.timeoutSeconds (1)
5
number
phpClientHttpsFix.enabled (2)
true
boolean
phpClientHttpsFix.protocol (2)
https
string
readinessProbe.enabled (2)
false
boolean
readinessProbe.failureThreshold (1)
3
number
readinessProbe.initialDelaySeconds (1)
7200
number
readinessProbe.periodSeconds (1)
10
number
readinessProbe.successThreshold (1)
1
number
readinessProbe.timeoutSeconds (1)
5
number
configMaps.config.data."custom.config.php" (1)
<?php $CONFIG = array( 'overwriteprotocol' => 'https', 'overwrite.cli.url' => 'https://storage.hyde.services', 'overwritehost' => 'storage.hyde.services', 'check_data_directory_permissions' => false, 'default_phone_region' => 'AU', 'trusted_proxies' => array( 0 => '127.0.0.1', 1 => '10.42.0.0/16', ), 'trusted_domains' => array( 0 => '127.0.0.1', 1 => 'storage.hyde.services', ), 'simpleSignUpLink.shown' => false, 'cache_path' => '/cache', 'forwarded_for_headers' => array('X-Forwarded-For'), 'maintenance_window_start' => 100, 'memcache.distributed' => '\OC\Memcache\Redis', 'memcache.locking' => '\OC\Memcache\Redis', 'redis' => array( 'host' => 'dragonfly.databases.svc.cluster.local', 'port' => 6379, 'dbindex' => 1, ), );
string
configMaps.config.data."php.ini" (1)
session.save_handler = redis session.save_path = "tcp://dragonfly.databases.svc.cluster.local:6379/1" redis.session.locking_enabled = 1 redis.session.lock_retries = -1 redis.session.lock_wait_time = 10000 upload_max_filesize = 16G post_max_size = 16G memory_limit = 512M max_execution_time = 3600
string
configMaps.config.data."remoteip.conf" (1)
RemoteIPHeader X-Forwarded-For RemoteIPInternalProxy 10.42.0.0/16
string
configMaps.config.data."www.conf" (1)
[www] listen = 127.0.0.1:9000 pm = dynamic pm.max_children = 50 pm.start_servers = 12 pm.min_spare_servers = 6 pm.max_spare_servers = 18
string
extraManifests[] (1)
- apiVersion: v1 kind: Service metadata: name: nextcloud-push labels: app.kubernetes.io/name: {{ include "nextcloud.name" . }} app.kubernetes.io/instance: {{ .Release.Name }} spec: type: ClusterIP ports: - name: push port: 7867 targetPort: 7867 protocol: TCP selector: app.kubernetes.io/name: {{ include "nextcloud.name" . }} app.kubernetes.io/instance: {{ .Release.Name }}
string
fullnameOverride (1)
nextcloud
string
podAnnotations."reloader.stakater.com/search" (1)
true
string
podLabels."egress.policy.home.arpa/internet" (1)
true
string
securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string