nextcloud helm release

nextcloud helm

No introduction found. Create it?

More popular helm chart found

nextcloud from nextcloud is more popular with 22 repositories.

Install

Install with:

helm repo add nextcloud oci://ghcr.io/home-operations/charts-mirror/nextcloud
helm install nextcloud nextcloud/nextcloud -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (3 out of 6)

Name	Repo	Stars	Version	Timestamp
nextcloud	haraldkoch/kochhaus-home	151	7.0.2	5 days ago
nextcloud	drag0n141/home-ops	43	6.6.10	18 days ago
nextcloud	budimanjojo/home-cluster	214	6.6.10	2 months ago

Name

Repo

Stars

Version

Timestamp

nextcloud

haraldkoch/kochhaus-home

151

7.0.2

5 days ago

nextcloud

drag0n141/home-ops

6.6.10

18 days ago

nextcloud

budimanjojo/home-cluster

214

6.6.10

2 months ago

Values

See the most popular values for this chart:

Key	Types
externalDatabase.enabled (6) `true`	boolean
externalDatabase.existingSecret.enabled (6) `true`	boolean
externalDatabase.existingSecret.passwordKey (6) `INIT_POSTGRES_PASS`	string
externalDatabase.existingSecret.secretName (6) `nextcloud-secret`	string
externalDatabase.existingSecret.usernameKey (6) `INIT_POSTGRES_USER`	string
externalDatabase.existingSecret.databaseKey (1) `POSTGRES_DB`	string
externalDatabase.existingSecret.hostKey (1) `POSTGRES_HOST`	string
externalDatabase.type (6) `postgresql`	string
externalDatabase.database (5) `nextcloud`	string
externalDatabase.host (5) `postgres16-rw.database.svc.cluster.local:5432`	string
internalDatabase.enabled (6) `false`	boolean
nextcloud.existingSecret.enabled (6) `true`	boolean
nextcloud.existingSecret.secretName (6) `nextcloud-secret`	string
nextcloud.existingSecret.passwordKey (5) `nextcloud-password`	string
nextcloud.existingSecret.usernameKey (5) `nextcloud-username`	string
nextcloud.existingSecret.smtpHostKey (4) `SMTP_HOST`	string
nextcloud.existingSecret.smtpPasswordKey (4) `SMTP_PASSWORD`	string
nextcloud.existingSecret.smtpUsernameKey (4) `SMTP_USERNAME`	string
nextcloud.extraEnv[].name (6) `REDIS_HOST REDIS_HOST_PORT PHP_MEMORY_LIMIT PHP_UPLOAD_LIMIT PHP_POST_MAX_SIZE PHP_FPM_PM PHP_FPM_PM_MAX_CHILDREN PHP_FPM_PM_START_SERVERS PHP_FPM_PM_MIN_SPARE_SERVERS PHP_FPM_PM_MAX_SPARE_SERVERS PHP_FPM_PM_MAX_REQUESTS OPCACHE_MEMORY_CONSUMPTION OPCACHE_MAX_ACCELERATED_FILES OPCACHE_REVALIDATE_FREQ`	string
nextcloud.extraEnv[].value (5) `dragonfly.database.svc.cluster.local. 6379 8G 16G 10G dynamic 120 12 6 18 500 512 20000 60`	string
nextcloud.extraEnv[].valueFrom.secretKeyRef.key (3) `redis-password oidc-client-secret`	string
nextcloud.extraEnv[].valueFrom.secretKeyRef.name (3) `nextcloud-secret nextcloud-secret nextcloud-secret`	string
nextcloud.host (6) `nextcloud.${SECRET_DOMAIN}`	string
nextcloud.mail.domain (6) `${SECRET_DOMAIN}`	string
nextcloud.mail.enabled (6) `true`	boolean
nextcloud.mail.fromAddress (6) `${FROM_ADDRESS}`	string
nextcloud.mail.smtp.port (6) `2525`	number
nextcloud.mail.smtp.secure (5) `starttls`	string
nextcloud.mail.smtp.authtype (4) `NONE`	string
nextcloud.mail.smtp.host (4) `${SMTP_HOST}`	string
nextcloud.mail.smtp.name (1)	string
nextcloud.mail.smtp.password (1)	string
nextcloud.extraInitContainers[].envFrom[].secretRef.name (5) `nextcloud-secret`	string
nextcloud.extraInitContainers[].image (5) `ghcr.io/home-operations/postgres-init:17`	string
nextcloud.extraInitContainers[].name (5) `init-db`	string
nextcloud.configs."misc.config.php" (3) `<?php $CONFIG = array ( 'default_phone_region' => 'BE', 'maintenance_window_start' => 2, 'debug' => false, 'loglevel' => 1, );`	string
nextcloud.configs."proxy.config.php" (3) `<?php $CONFIG = array ( 'trusted_proxies' => array( 0 => '127.0.0.1', 1 => '10.0.0.0/8', 2 => '172.16.0.0/12', 3 => '192.168.0.0/16', ), 'trusted_domains' => array( 0 => 'nextcloud.${SECRET_DOMAIN}', 1 => 'localhost', 2 => '127.0.0.1', ), 'forwarded_for_headers' => array('HTTP_X_FORWARDED_FOR'), );`	string
nextcloud.configs."ingress.config.php" (2) `<?php $CONFIG = array ( 'overwrite.cli.url' => 'https://nextcloud.${SECRET_DOMAIN}', 'overwriteprotocol' => 'https', );`	string
nextcloud.configs."local.config.php" (2) `<?php $CONFIG = array ( 'trusted_proxies' => array ( 0 => '127.0.0.1', 1 => '10.96.0.0/12', 2 => '10.244.0.0/16', ), 'trusted_domains' => array ( 0 => 'nextcloud.${SECRET_DOMAIN_0}', ), 'forwarded_for_headers' => array('HTTP_X_FORWARDED_FOR'), 'overwrite.cli.url' => 'https://nextcloud.${SECRET_DOMAIN_0}', 'overwriteprotocol' => 'https', 'default_phone_region' => 'ID', 'maintenance_window_start' => 20, );`	string
nextcloud.configs."logging.config.php" (2) `<?php $CONFIG = array ( 'log_type' => 'file', 'logfile' => 'nextcloud.log', 'loglevel' => 1, 'logdateformat' => 'F d, Y H:i:s' );`	string
nextcloud.configs."sso.config.php" (2) <?php $CONFIG = array ( 'allow_user_to_change_display_name' => false, 'lost_password_link' => 'disabled', 'oidc_login_client_id' => getenv('OIDC_CLIENT_ID'), 'oidc_login_client_secret' => getenv('OIDC_CLIENT_SECRET'), 'oidc_login_provider_url' => 'https://id.${SECRET_DOMAIN}', 'oidc_login_auto_redirect' => true, //login?noredir=1 'oidc_login_end_session_redirect' => true, 'oidc_login_button_text' => 'Log in with Pocket ID', 'oidc_login_hide_password_form' => true, 'oidc_login_use_id_token' => false, 'oidc_login_attributes' => array ( 'id' => 'preferred_username', 'name' => 'name', 'mail' => 'email', 'groups' => 'groups', 'login_filter' => 'groups', 'photoURL' => 'picture', 'is_admin' => 'groups_ID-Admin', ), 'oidc_login_filter_allowed_values' => array('ID-Nextcloud'), 'oidc_login_use_external_storage' => false, 'oidc_login_scope' => 'openid profile email groups', 'oidc_login_proxy_ldap' => false, 'oidc_login_disable_registration' => false, 'oidc_login_redir_fallback' => false, 'oidc_login_tls_verify' => true, 'oidc_create_groups' => false, 'oidc_login_webdav_enabled' => false, 'oidc_login_password_authentication' => false, 'oidc_login_public_key_caching_time' => 86400, 'oidc_login_min_time_between_jwks_requests' => 10, 'oidc_login_well_known_caching_time' => 86400, 'oidc_login_update_avatar' => false, );	string
nextcloud.configs."caching.config.php" (1) `<?php $CONFIG = array ( 'memcache.local' => '\\OC\\Memcache\\APCu', 'memcache.distributed' => '\\OC\\Memcache\\Redis', 'memcache.locking' => '\\OC\\Memcache\\Redis', 'filelocking.enabled' => true, 'redis' => array( 'host' => 'dragonfly.database.svc.cluster.local.', 'port' => 6379, 'timeout' => 0.0, 'password' => '', ), );`	string
nextcloud.configs."custom.config.php" (1) `<?php $CONFIG = array ( 'overwriteprotocol' => 'https', 'overwrite.cli.url' => 'https://cloud.${SECRET_DOMAIN}', 'overewritehost' => 'cloud.${SECRET_DOMAIN}', 'filelocking.enabled' => 'true', 'default_phone_region' => 'DE', 'loglevel' => '2', 'enable_previews' => true, 'log_type' => 'syslog', 'maintenance_window_start' => 1, 'trusted_proxies' => array ( 0 => '127.0.0.1', 1 => '10.42.0.0/16', 2 => '10.43.0.0/16', ), );`	string
nextcloud.configs."oidc.config.php" (1) <?php $CONFIG = array ( 'allow_user_to_change_display_name' => false, 'lost_password_link' => 'disabled', 'oidc_login_provider_url' => 'https://auth.${SECRET_DOMAIN_0}', 'oidc_login_client_id' => 'nextcloud', 'oidc_login_client_secret' => getenv('OIDC_CLIENT_SECRET'), 'oidc_login_auto_redirect' => false, 'oidc_login_button_text' => 'Log in with Authelia', 'oidc_login_hide_password_form' => false, 'oidc_login_use_id_token' => false, 'oidc_login_attributes' => array( 'id' => 'preferred_username', 'name' => 'name', 'mail' => 'email', 'groups' => 'groups', 'is_admin' => 'is_nextcloud_admin', ), 'oidc_login_default_group' => 'oidc', 'oidc_login_use_external_storage' => false, 'oidc_login_scope' => 'openid profile email groups nextcloud_userinfo', 'oidc_login_proxy_ldap' => false, 'oidc_login_disable_registration' => true, 'oidc_login_redir_fallback' => false, 'oidc_login_tls_verify' => true, 'oidc_create_groups' => false, 'oidc_login_webdav_enabled' => false, 'oidc_login_password_authentication' => false, 'oidc_login_public_key_caching_time' => 86400, 'oidc_login_min_time_between_jwks_requests' => 10, 'oidc_login_well_known_caching_time' => 86400, 'oidc_login_update_avatar' => false, 'oidc_login_code_challenge_method' => 'S256', );	string
nextcloud.configs."performance.config.php" (1) `<?php $CONFIG = array ( 'enable_previews' => true, 'enabledPreviewProviders' => array( 'OC\Preview\PNG', 'OC\Preview\JPEG', 'OC\Preview\GIF', 'OC\Preview\BMP', 'OC\Preview\XBitmap', 'OC\Preview\MP3', 'OC\Preview\TXT', 'OC\Preview\MarkDown', 'OC\Preview\OpenDocument', 'OC\Preview\Krita', 'OC\Preview\HEIC', 'OC\Preview\PDF', ), 'preview_max_x' => 2048, 'preview_max_y' => 2048, 'preview_max_scale_factor' => 1, 'preview_concurrency_new' => 4, 'preview_concurrency_all' => 4, 'jpeg_quality' => 60, );`	string
nextcloud.configs."redis.config.php" (1) `<?php $CONFIG = array( 'memcache.distributed' => '\OC\Memcache\Redis', 'memcache.locking' => '\OC\Memcache\Redis', 'redis' => array( 'host' => 'dragonfly.database.svc.cluster.local', 'port' => getenv('REDIS_PORT') ?: 6379, 'dbindex' => getenv('REDIS_DATABASE') ?: 10, 'password' => getenv('REDIS_PASSWORD'), ), );`	string
nextcloud.datadir (3) `/var/www/data`	string
nextcloud.lifecycle.postStartCommand[] (3) `- /bin/sh - -c - echo "Waiting for Nextcloud to be ready..." su -s /bin/sh www-data -c 'php occ maintenance:repair --include-expensive' \|\| true su -s /bin/sh www-data -c 'php occ files:scan --all' \|\| true su -s /bin/sh www-data -c 'php occ files:cleanup' \|\| true su -s /bin/sh www-data -c 'php occ db:add-missing-indices' \|\| true su -s /bin/sh www-data -c 'php occ db:add-missing-primary-keys' \|\| true su -s /bin/sh www-data -c 'php occ db:add-missing-columns' \|\| true`	string
nextcloud.phpConfigs."www.conf" (3) `[www] user = www-data group = www-data listen = 127.0.0.1:9000 pm = dynamic pm.max_children = 57 pm.start_servers = 14 pm.min_spare_servers = 14 pm.max_spare_servers = 42 pm.max_requests = 500 pm.process_idle_timeout = 10s`	string
nextcloud.phpConfigs."uploadLimit.ini" (2) `upload_max_filesize = 16G post_max_size = 16G max_input_time = 3600 max_execution_time = 3600`	string
nextcloud.securityContext.runAsGroup (3) `33`	number
nextcloud.securityContext.runAsNonRoot (3) `true`	boolean
nextcloud.securityContext.runAsUser (3) `33`	number
nextcloud.securityContext.fsGroup (2) `33`	number
nextcloud.containerPort (2) `80`	number
nextcloud.defaultConfigs."redis.config.php" (1) `false`	boolean
nextcloud.extraVolumeMounts[].mountPath (1) `/mnt/data/home`	string
nextcloud.extraVolumeMounts[].name (1) `nfs-home`	string
nextcloud.extraVolumes[].name (1) `nfs-home`	string
nextcloud.extraVolumes[].nfs.path (1) `/mnt/data/home`	string
nextcloud.extraVolumes[].nfs.server (1) `nas01.${SECRET_DOMAIN_INT}`	string
nextcloud.objectstore.s3.autocreate (1) `true`	boolean
nextcloud.objectstore.s3.bucket (1) `nextcloud-data`	string
nextcloud.objectstore.s3.enabled (1) `true`	boolean
nextcloud.objectstore.s3.existingSecret (1) `nextcloud-secret`	string
nextcloud.objectstore.s3.host (1) `s3.{SECRET_HOME_DOMAIN}`	string
nextcloud.objectstore.s3.region (1) `us-east-1`	string
nextcloud.objectstore.s3.secretKeys.accessKey (1) `S3_ACCESS_KEY`	string
nextcloud.objectstore.s3.secretKeys.secretKey (1) `S3_SECRET_KEY`	string
nextcloud.objectstore.s3.ssl (1) `true`	boolean
nextcloud.objectstore.s3.usePathStyle (1) `true`	boolean
persistence.enabled (6) `true`	boolean
persistence.existingClaim (6) `nextcloud`	string
persistence.nextcloudData.enabled (2) `true`	boolean
persistence.nextcloudData.existingClaim (2) `nextcloud-pvc`	string
persistence.nextcloudData.accessMode (1) `ReadWriteMany`	string
startupProbe.enabled (6) `true`	boolean
startupProbe.failureThreshold (4) `10`	number
startupProbe.initialDelaySeconds (4) `60`	number
startupProbe.periodSeconds (4) `30`	number
startupProbe.successThreshold (4) `1`	number
startupProbe.timeoutSeconds (4) `10`	number
cronjob.enabled (5) `true`	boolean
image.flavor (5) `fpm-alpine`	string
ingress.enabled (5) `true`	boolean
ingress.className (4) `external`	string
ingress.path (4) `/`	string
ingress.pathType (4) `Prefix`	string
ingress.annotations."external-dns.alpha.kubernetes.io/target" (3) `external.${SECRET_DOMAIN}`	string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" (3) `16G`	string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-buffering" (3) `off`	string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-request-buffering" (3) `off`	string
ingress.annotations."nginx.ingress.kubernetes.io/server-snippet" (3) `location = /robots.txt { return 200 "User-agent: *\nDisallow: /\n"; } location ~ ^/(?:build\|tests\|config\|lib\|3rdparty\|templates\|data)/ { deny all; } location ~ ^/(?:autotest\|occ\|issue\|indie\|db_\|console) { deny all; }`	string
ingress.annotations."nginx.org/proxy-hide-headers" (3) `X-Powered-By`	string
ingress.annotations."nginx.org/rewrites" (3) `/.well-known/webfinger /index.php/.well-known/webfinger; /.well-known/nodeinfo /index.php/.well-known/nodeinfo; /.well-known/host-meta /public.php?service=host-meta; /.well-known/host-meta.json /public.php?service=host-meta-json; /.well-known/carddav $scheme://$host/remote.php/dav redirect=301; /.well-known/caldav $scheme://$host/remote.php/dav redirect=301;`	string
ingress.annotations."nginx.org/server-tokens" (3) `off`	string
ingress.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (2) `more_set_headers "X-Content-Type-Options: nosniff"; more_set_headers "X-Frame-Options: SAMEORIGIN"; more_set_headers "X-Permitted-Cross-Domain-Policies: none"; more_set_headers "X-Robots-Tag: noindex, nofollow"; more_set_headers "Referrer-Policy: no-referrer";`	string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-connect-timeout" (2) `20`	string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-read-timeout" (2) `14400`	string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-send-timeout" (2) `14400`	string
ingress.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (1) `false`	string
ingress.annotations."external-dns.alpha.kubernetes.io/exclude-unifi" (1) `true`	string
ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1) `websecure`	string
ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1) `networking-traefik-middleware-chain-no-auth@kubernetescrd`	string
ingress.tls[].hosts[] (1) `- nextcloud.${SECRET_DOMAIN}`	string
ingress.tls[].secretName (1) `${SECRET_DOMAIN/./-}-production-tls`	string
nginx.enabled (5) `true`	boolean
nginx.config.headers.Strict-Transport-Security (1) `max-age=15552000; includeSubDomains; preload;`	string
nginx.resources.limits.memory (1) `250M`	string
nginx.resources.requests.cpu (1) `10m`	string
nginx.resources.requests.memory (1) `100M`	string
deploymentAnnotations."reloader.stakater.com/auto" (4) `true`	string
deploymentAnnotations."secret.reloader.stakater.com/reload" (1) `nextcloud-secret`	string
resources.limits.memory (4) `8Gi`	string
resources.limits.cpu (1) `4`	number
resources.requests.cpu (4) `1`	number, string
resources.requests.memory (4) `1Gi`	string
phpClientHttpsFix.enabled (3) `true`	boolean
phpClientHttpsFix.protocol (3) `https`	string
deploymentLabels.nfsMount (1) `true`	string
deploymentLabels.postgres (1) `true`	string
fullnameOverride (1) `nextcloud`	string
hpa.enabled (1) `false`	boolean
livenessProbe.enabled (1) `false`	boolean
readinessProbe.enabled (1) `false`	boolean
redis.enabled (1) `false`	boolean
securityContext.fsGroupChangePolicy (1) `OnRootMismatch`	string

Key

Types

externalDatabase.enabled (6)

true

boolean

externalDatabase.existingSecret.enabled (6)

true

boolean

externalDatabase.existingSecret.passwordKey (6)

INIT_POSTGRES_PASS

string

externalDatabase.existingSecret.secretName (6)

nextcloud-secret

string

externalDatabase.existingSecret.usernameKey (6)

INIT_POSTGRES_USER

string

externalDatabase.existingSecret.databaseKey (1)

POSTGRES_DB

string

externalDatabase.existingSecret.hostKey (1)

POSTGRES_HOST

string

externalDatabase.type (6)

postgresql

string

externalDatabase.database (5)

nextcloud

string

externalDatabase.host (5)

postgres16-rw.database.svc.cluster.local:5432

string

internalDatabase.enabled (6)

false

boolean

nextcloud.existingSecret.enabled (6)

true

boolean

nextcloud.existingSecret.secretName (6)

nextcloud-secret

string

nextcloud.existingSecret.passwordKey (5)

nextcloud-password

string

nextcloud.existingSecret.usernameKey (5)

nextcloud-username

string

nextcloud.existingSecret.smtpHostKey (4)

SMTP_HOST

string

nextcloud.existingSecret.smtpPasswordKey (4)

SMTP_PASSWORD

string

nextcloud.existingSecret.smtpUsernameKey (4)

SMTP_USERNAME

string

nextcloud.extraEnv[].name (6)

REDIS_HOST
REDIS_HOST_PORT
PHP_MEMORY_LIMIT
PHP_UPLOAD_LIMIT
PHP_POST_MAX_SIZE
PHP_FPM_PM
PHP_FPM_PM_MAX_CHILDREN
PHP_FPM_PM_START_SERVERS
PHP_FPM_PM_MIN_SPARE_SERVERS
PHP_FPM_PM_MAX_SPARE_SERVERS
PHP_FPM_PM_MAX_REQUESTS
OPCACHE_MEMORY_CONSUMPTION
OPCACHE_MAX_ACCELERATED_FILES
OPCACHE_REVALIDATE_FREQ

string

nextcloud.extraEnv[].value (5)

dragonfly.database.svc.cluster.local.
6379
8G
16G
10G
dynamic
120
12
6
18
500
512
20000
60

string

nextcloud.extraEnv[].valueFrom.secretKeyRef.key (3)

redis-password
oidc-client-secret

string

nextcloud.extraEnv[].valueFrom.secretKeyRef.name (3)

nextcloud-secret
nextcloud-secret
nextcloud-secret

string

nextcloud.host (6)

nextcloud.${SECRET_DOMAIN}

string

nextcloud.mail.domain (6)

${SECRET_DOMAIN}

string

nextcloud.mail.enabled (6)

true

boolean

nextcloud.mail.fromAddress (6)

${FROM_ADDRESS}

string

nextcloud.mail.smtp.port (6)

number

nextcloud.mail.smtp.secure (5)

starttls

string

nextcloud.mail.smtp.authtype (4)

NONE

string

nextcloud.mail.smtp.host (4)

${SMTP_HOST}

string

nextcloud.mail.smtp.name (1)

string

nextcloud.mail.smtp.password (1)

string

nextcloud.extraInitContainers[].envFrom[].secretRef.name (5)

nextcloud-secret

string

nextcloud.extraInitContainers[].image (5)

ghcr.io/home-operations/postgres-init:17

string

nextcloud.extraInitContainers[].name (5)

init-db

string

nextcloud.configs."misc.config.php" (3)

<?php
$CONFIG = array (
  'default_phone_region' => 'BE',
  'maintenance_window_start' => 2,
  'debug' => false,
  'loglevel' => 1,
);

string

nextcloud.configs."proxy.config.php" (3)

<?php
$CONFIG = array (
  'trusted_proxies' => array(
    0 => '127.0.0.1',
    1 => '10.0.0.0/8',
    2 => '172.16.0.0/12',
    3 => '192.168.0.0/16',
  ),
  'trusted_domains' => array(
    0 => 'nextcloud.${SECRET_DOMAIN}',
    1 => 'localhost',
    2 => '127.0.0.1',
  ),
  'forwarded_for_headers' => array('HTTP_X_FORWARDED_FOR'),
);

string

nextcloud.configs."ingress.config.php" (2)

<?php
$CONFIG = array (
  'overwrite.cli.url' => 'https://nextcloud.${SECRET_DOMAIN}',
  'overwriteprotocol' => 'https',
);

string

nextcloud.configs."local.config.php" (2)

<?php
$CONFIG = array (
  'trusted_proxies' =>
  array (
    0 => '127.0.0.1',
    1 => '10.96.0.0/12',
    2 => '10.244.0.0/16',
  ),
  'trusted_domains' =>
  array (
    0 => 'nextcloud.${SECRET_DOMAIN_0}',
  ),
  'forwarded_for_headers' => array('HTTP_X_FORWARDED_FOR'),
  'overwrite.cli.url' => 'https://nextcloud.${SECRET_DOMAIN_0}',
  'overwriteprotocol' => 'https',
  'default_phone_region' => 'ID',
  'maintenance_window_start' => 20,
);

string

nextcloud.configs."logging.config.php" (2)

<?php
$CONFIG = array (
  'log_type' => 'file',
  'logfile' => 'nextcloud.log',
  'loglevel' => 1,
  'logdateformat' => 'F d, Y H:i:s'
  );

string

nextcloud.configs."sso.config.php" (2)

<?php
$CONFIG = array (
  'allow_user_to_change_display_name' => false,
  'lost_password_link' => 'disabled',
  'oidc_login_client_id' => getenv('OIDC_CLIENT_ID'),
  'oidc_login_client_secret' => getenv('OIDC_CLIENT_SECRET'),
  'oidc_login_provider_url' => 'https://id.${SECRET_DOMAIN}',
  'oidc_login_auto_redirect' => true, //login?noredir=1
  'oidc_login_end_session_redirect' => true,
  'oidc_login_button_text' => 'Log in with Pocket ID',
  'oidc_login_hide_password_form' => true,
  'oidc_login_use_id_token' => false,
  'oidc_login_attributes' => array (
        'id' => 'preferred_username',
        'name' => 'name',
        'mail' => 'email',
        'groups' => 'groups',
        'login_filter' => 'groups',
        'photoURL' => 'picture',
        'is_admin' => 'groups_ID-Admin',
    ),
  'oidc_login_filter_allowed_values' => array('ID-Nextcloud'),
  'oidc_login_use_external_storage' => false,
  'oidc_login_scope' => 'openid profile email groups',
  'oidc_login_proxy_ldap' => false,
  'oidc_login_disable_registration' => false,
  'oidc_login_redir_fallback' => false,
  'oidc_login_tls_verify' => true,
  'oidc_create_groups' => false,
  'oidc_login_webdav_enabled' => false,
  'oidc_login_password_authentication' => false,
  'oidc_login_public_key_caching_time' => 86400,
  'oidc_login_min_time_between_jwks_requests' => 10,
  'oidc_login_well_known_caching_time' => 86400,
  'oidc_login_update_avatar' => false,
);

string

nextcloud.configs."caching.config.php" (1)

<?php
$CONFIG = array (
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'filelocking.enabled' => true,
  'redis' => array(
    'host' => 'dragonfly.database.svc.cluster.local.',
    'port' => 6379,
    'timeout' => 0.0,
    'password' => '',
  ),
);

string

nextcloud.configs."custom.config.php" (1)

<?php
$CONFIG = array (
  'overwriteprotocol' => 'https',
  'overwrite.cli.url' => 'https://cloud.${SECRET_DOMAIN}',
  'overewritehost' => 'cloud.${SECRET_DOMAIN}',
  'filelocking.enabled' => 'true',
  'default_phone_region' => 'DE',
  'loglevel' => '2',
  'enable_previews' => true,
  'log_type' => 'syslog',
  'maintenance_window_start' => 1,
  'trusted_proxies' =>
    array (
      0 => '127.0.0.1',
      1 => '10.42.0.0/16',
      2 => '10.43.0.0/16',
    ),
);

string

nextcloud.configs."oidc.config.php" (1)

<?php
$CONFIG = array (
  'allow_user_to_change_display_name' => false,
  'lost_password_link' => 'disabled',
  'oidc_login_provider_url' => 'https://auth.${SECRET_DOMAIN_0}',
  'oidc_login_client_id' => 'nextcloud',
  'oidc_login_client_secret' => getenv('OIDC_CLIENT_SECRET'),
  'oidc_login_auto_redirect' => false,
  'oidc_login_button_text' => 'Log in with Authelia',
  'oidc_login_hide_password_form' => false,
  'oidc_login_use_id_token' => false,
  'oidc_login_attributes' => array(
    'id' => 'preferred_username',
    'name' => 'name',
    'mail' => 'email',
    'groups' => 'groups',
    'is_admin' => 'is_nextcloud_admin',
  ),
  'oidc_login_default_group' => 'oidc',
  'oidc_login_use_external_storage' => false,
  'oidc_login_scope' => 'openid profile email groups nextcloud_userinfo',
  'oidc_login_proxy_ldap' => false,
  'oidc_login_disable_registration' => true,
  'oidc_login_redir_fallback' => false,
  'oidc_login_tls_verify' => true,
  'oidc_create_groups' => false,
  'oidc_login_webdav_enabled' => false,
  'oidc_login_password_authentication' => false,
  'oidc_login_public_key_caching_time' => 86400,
  'oidc_login_min_time_between_jwks_requests' => 10,
  'oidc_login_well_known_caching_time' => 86400,
  'oidc_login_update_avatar' => false,
  'oidc_login_code_challenge_method' => 'S256',
);

string

nextcloud.configs."performance.config.php" (1)

<?php
$CONFIG = array (
  'enable_previews' => true,
  'enabledPreviewProviders' => array(
    'OC\Preview\PNG',
    'OC\Preview\JPEG',
    'OC\Preview\GIF',
    'OC\Preview\BMP',
    'OC\Preview\XBitmap',
    'OC\Preview\MP3',
    'OC\Preview\TXT',
    'OC\Preview\MarkDown',
    'OC\Preview\OpenDocument',
    'OC\Preview\Krita',
    'OC\Preview\HEIC',
    'OC\Preview\PDF',
  ),
  'preview_max_x' => 2048,
  'preview_max_y' => 2048,
  'preview_max_scale_factor' => 1,
  'preview_concurrency_new' => 4,
  'preview_concurrency_all' => 4,
  'jpeg_quality' => 60,
);

string

nextcloud.configs."redis.config.php" (1)

<?php
$CONFIG = array(
  'memcache.distributed' => '\OC\Memcache\Redis',
  'memcache.locking' => '\OC\Memcache\Redis',
  'redis' => array(
    'host' => 'dragonfly.database.svc.cluster.local',
    'port' => getenv('REDIS_PORT') ?: 6379,
    'dbindex' => getenv('REDIS_DATABASE') ?: 10,
    'password' => getenv('REDIS_PASSWORD'),
  ),
);

string

nextcloud.datadir (3)

/var/www/data

string

nextcloud.lifecycle.postStartCommand[] (3)

- /bin/sh
- -c
- echo "Waiting for Nextcloud to be ready..."
su -s /bin/sh www-data -c 'php occ maintenance:repair --include-expensive' || true
su -s /bin/sh www-data -c 'php occ files:scan --all' || true
su -s /bin/sh www-data -c 'php occ files:cleanup' || true
su -s /bin/sh www-data -c 'php occ db:add-missing-indices' || true
su -s /bin/sh www-data -c 'php occ db:add-missing-primary-keys' || true
su -s /bin/sh www-data -c 'php occ db:add-missing-columns' || true

string

nextcloud.phpConfigs."www.conf" (3)

[www]
user = www-data
group = www-data
listen = 127.0.0.1:9000
pm = dynamic
pm.max_children = 57
pm.start_servers = 14
pm.min_spare_servers = 14
pm.max_spare_servers = 42
pm.max_requests = 500
pm.process_idle_timeout = 10s

string

nextcloud.phpConfigs."uploadLimit.ini" (2)

upload_max_filesize = 16G
post_max_size = 16G
max_input_time = 3600
max_execution_time = 3600

string

nextcloud.securityContext.runAsGroup (3)

number

nextcloud.securityContext.runAsNonRoot (3)

true

boolean

nextcloud.securityContext.runAsUser (3)

number

nextcloud.securityContext.fsGroup (2)

number

nextcloud.containerPort (2)

number

nextcloud.defaultConfigs."redis.config.php" (1)

false

boolean

nextcloud.extraVolumeMounts[].mountPath (1)

/mnt/data/home

string

nextcloud.extraVolumeMounts[].name (1)

nfs-home

string

nextcloud.extraVolumes[].name (1)

nfs-home

string

nextcloud.extraVolumes[].nfs.path (1)

/mnt/data/home

string

nextcloud.extraVolumes[].nfs.server (1)

nas01.${SECRET_DOMAIN_INT}

string

nextcloud.objectstore.s3.autocreate (1)

true

boolean

nextcloud.objectstore.s3.bucket (1)

nextcloud-data

string

nextcloud.objectstore.s3.enabled (1)

true

boolean

nextcloud.objectstore.s3.existingSecret (1)

nextcloud-secret

string

nextcloud.objectstore.s3.host (1)

s3.{SECRET_HOME_DOMAIN}

string

nextcloud.objectstore.s3.region (1)

us-east-1

string

nextcloud.objectstore.s3.secretKeys.accessKey (1)

S3_ACCESS_KEY

string

nextcloud.objectstore.s3.secretKeys.secretKey (1)

S3_SECRET_KEY

string

nextcloud.objectstore.s3.ssl (1)

true

boolean

nextcloud.objectstore.s3.usePathStyle (1)

true

boolean

persistence.enabled (6)

true

boolean

persistence.existingClaim (6)

nextcloud

string

persistence.nextcloudData.enabled (2)

true

boolean

persistence.nextcloudData.existingClaim (2)

nextcloud-pvc

string

persistence.nextcloudData.accessMode (1)

ReadWriteMany

string

startupProbe.enabled (6)

true

boolean

startupProbe.failureThreshold (4)

number

startupProbe.initialDelaySeconds (4)

number

startupProbe.periodSeconds (4)

number

startupProbe.successThreshold (4)

number

startupProbe.timeoutSeconds (4)

number

cronjob.enabled (5)

true

boolean

image.flavor (5)

fpm-alpine

string

ingress.enabled (5)

true

boolean

ingress.className (4)

external

string

ingress.path (4)

string

ingress.pathType (4)

Prefix

string

ingress.annotations."external-dns.alpha.kubernetes.io/target" (3)

external.${SECRET_DOMAIN}

string

ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" (3)

16G

string

ingress.annotations."nginx.ingress.kubernetes.io/proxy-buffering" (3)

off

string

ingress.annotations."nginx.ingress.kubernetes.io/proxy-request-buffering" (3)

off

string

ingress.annotations."nginx.ingress.kubernetes.io/server-snippet" (3)

location = /robots.txt {
  return 200 "User-agent: *\nDisallow: /\n";
}
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
  deny all;
}
location ~ ^/(?:autotest|occ|issue|indie|db_|console) {
  deny all;
}

string

ingress.annotations."nginx.org/proxy-hide-headers" (3)

X-Powered-By

string

ingress.annotations."nginx.org/rewrites" (3)

/.well-known/webfinger /index.php/.well-known/webfinger;
/.well-known/nodeinfo /index.php/.well-known/nodeinfo;
/.well-known/host-meta /public.php?service=host-meta;
/.well-known/host-meta.json /public.php?service=host-meta-json;
/.well-known/carddav $scheme://$host/remote.php/dav redirect=301;
/.well-known/caldav $scheme://$host/remote.php/dav redirect=301;

string

ingress.annotations."nginx.org/server-tokens" (3)

off

string

ingress.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (2)

more_set_headers "X-Content-Type-Options: nosniff";
more_set_headers "X-Frame-Options: SAMEORIGIN";
more_set_headers "X-Permitted-Cross-Domain-Policies: none";
more_set_headers "X-Robots-Tag: noindex, nofollow";
more_set_headers "Referrer-Policy: no-referrer";

string

ingress.annotations."nginx.ingress.kubernetes.io/proxy-connect-timeout" (2)

string

ingress.annotations."nginx.ingress.kubernetes.io/proxy-read-timeout" (2)

string

ingress.annotations."nginx.ingress.kubernetes.io/proxy-send-timeout" (2)

string

ingress.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (1)

false

string

ingress.annotations."external-dns.alpha.kubernetes.io/exclude-unifi" (1)

true

string

ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)

websecure

string

ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)

networking-traefik-middleware-chain-no-auth@kubernetescrd

string

ingress.tls[].hosts[] (1)

- nextcloud.${SECRET_DOMAIN}

string

ingress.tls[].secretName (1)

${SECRET_DOMAIN/./-}-production-tls

string

nginx.enabled (5)

true

boolean

nginx.config.headers.Strict-Transport-Security (1)

max-age=15552000; includeSubDomains; preload;

string

nginx.resources.limits.memory (1)

250M

string

nginx.resources.requests.cpu (1)

10m

string

nginx.resources.requests.memory (1)

100M

string

deploymentAnnotations."reloader.stakater.com/auto" (4)

true

string

deploymentAnnotations."secret.reloader.stakater.com/reload" (1)

nextcloud-secret

string

resources.limits.memory (4)

8Gi

string

resources.limits.cpu (1)

number

resources.requests.cpu (4)

number, string

resources.requests.memory (4)

1Gi

string

phpClientHttpsFix.enabled (3)

true

boolean

phpClientHttpsFix.protocol (3)

https

string

deploymentLabels.nfsMount (1)

true

string

deploymentLabels.postgres (1)

true

string

fullnameOverride (1)

nextcloud

string

hpa.enabled (1)

false

boolean

livenessProbe.enabled (1)

false

boolean

readinessProbe.enabled (1)

false

boolean

redis.enabled (1)

false

boolean

securityContext.fsGroupChangePolicy (1)

OnRootMismatch

string