nextcloud helm release

nextcloud helm

No introduction found. Create it?

Install

Install with:

helm repo add nextcloud https://nextcloud.github.io/helm/ helm install nextcloud nextcloud/nextcloud -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (3 out of 23)

Name	Repo	Stars	Version	Timestamp
nextcloud	angelnu/k8s-gitops	144	5.5.4	2 days ago
nextcloud	haraldkoch/kochhaus-home	109	5.5.4	3 days ago
nextcloud	ishioni/homelab-ops	94	4.6.8	3 months ago

Name

Repo

Stars

Version

Timestamp

nextcloud

angelnu/k8s-gitops

144

5.5.4

2 days ago

nextcloud

haraldkoch/kochhaus-home

109

5.5.4

3 days ago

nextcloud

ishioni/homelab-ops

4.6.8

3 months ago

Values

See the most popular values for this chart:

Key	Types
internalDatabase.enabled (23) `false`	boolean
nextcloud.host (23) `cloud.${SECRET_DOMAIN}`	string
nextcloud.existingSecret.enabled (18) `true`	boolean, string
nextcloud.existingSecret.secretName (18) `nextcloud-secret`	string
nextcloud.existingSecret.passwordKey (15) `ADMIN_PASS`	string
nextcloud.existingSecret.usernameKey (15) `ADMIN_USER`	string
nextcloud.existingSecret.smtpPasswordKey (9) `SMTP_PASSWORD`	string
nextcloud.existingSecret.smtpUsernameKey (9) `SMTP_USERNAME`	string
nextcloud.existingSecret.smtpHostKey (8) `SMTP_HOST`	string
nextcloud.existingSecret.tokenKey (5) `METRICS_TOKEN`	string
nextcloud.existingSecret.accessKey (1) `OBJECTSTORE_S3_KEY`	string
nextcloud.existingSecret.bucket (1) `OBJECTSTORE_S3_BUCKET`	string
nextcloud.existingSecret.host (1) `OBJECTSTORE_S3_HOST`	string
nextcloud.existingSecret.secretKey (1) `OBJECTSTORE_S3_SECRET`	string
nextcloud.mail.enabled (14) `true`	boolean
nextcloud.mail.domain (13) `${SECRET_DOMAIN}`	string
nextcloud.mail.fromAddress (13) `nextcloud`	string
nextcloud.mail.smtp.port (13) `465`	number, string
nextcloud.mail.smtp.authtype (8) `LOGIN`	string
nextcloud.mail.smtp.secure (8) `ssl`	string
nextcloud.mail.smtp.host (5) `smtp.migadu.com`	string
nextcloud.mail.smtp.name (2)	string
nextcloud.mail.smtp.password (2)	string
nextcloud.mail.smtp.timeout (1) `30`	number
nextcloud.extraEnv[].name (12) `REDIS_HOST REDIS_HOST_PORT`	string
nextcloud.extraEnv[].value (11) `dragonfly.database.svc.cluster.local 6379`	string
nextcloud.extraEnv[].valueFrom.secretKeyRef.key (8) `S3_ACCESS_KEY S3_SECRET_KEY OIDC_CLIENT_ID OIDC_CLIENT_PASSWORD`	string
nextcloud.extraEnv[].valueFrom.secretKeyRef.name (8) `nextcloud-secret nextcloud-secret nextcloud-secret`	string
nextcloud.phpConfigs."uploadLimit.ini" (11) `upload_max_filesize = 16G post_max_size = 16G max_input_time = 3600 max_execution_time = 3600`	string
nextcloud.phpConfigs."www.conf" (6) `[www] user = www-data group = www-data listen = 127.0.0.1:9000 pm = dynamic pm.max_children = 57 pm.start_servers = 14 pm.min_spare_servers = 14 pm.max_spare_servers = 42 pm.max_requests = 500 pm.process_idle_timeout = 10s`	string
nextcloud.configs."proxy.config.php" (10) `<?php $CONFIG = array ( 'trusted_proxies' => array( 0 => '127.0.0.1', 1 => '10.96.0.0/16', ), 'forwarded_for_headers' => array('HTTP_X_FORWARDED_FOR'), );`	string
nextcloud.configs."redis.config.php" (5) `<?php $CONFIG = array ( 'memcache.local' => '\\OC\\Memcache\\Redis', 'memcache.distributed' => '\OC\Memcache\Redis', 'memcache.locking' => '\OC\Memcache\Redis', 'redis' => array( 'host' => getenv('REDIS_HOST'), 'port' => getenv('REDIS_HOST_PORT') ?: 6379, 'password' => getenv('REDIS_HOST_PASSWORD') ) );`	string
nextcloud.configs."bulkupload.config.php" (4) `<?php $CONFIG = array ( 'bulkupload.enabled' => false, );`	string
nextcloud.configs."custom.config.php" (4) `<?php $CONFIG = array ( 'overwriteprotocol' => 'https', 'overwrite.cli.url' => 'https://nextcloud.${SECRET_DOMAIN}', 'filelocking.enabled' => 'true', 'loglevel' => '2', 'enable_previews' => true, 'trusted_domains' => [ 'nextcloud', 'nextcloud.${SECRET_DOMAIN}' ] );`	string
nextcloud.configs."local.config.php" (4) <?php $CONFIG = array ( 'trusted_proxies' => array ( 0 => '127.0.0.1', 1 => '${CLUSTER_CIDR}', 2 => '${SERVICE_CIDR}', ), 'forwarded_for_headers' => array ( 0 => 'HTTP_X_FORWARDED_FOR', ), 'default_phone_region' => 'DE', 'overwrite.cli.url' => 'https://nextcloud.${SECRET_DOMAIN}', 'overwriteprotocol' => 'https', 'quota_include_external_storage' => 'false', 'skeletondirectory' => '', 'knowledgebaseenabled' => 'false', 'maintenance_window_start' => '1', 'enable_previews' => false, 'trashbin_retention_obligation' => 'auto, 30', 'auth.bruteforce.protection.enabled' => true, );	string
nextcloud.configs."sso.config.php" (4) <?php $CONFIG = array ( 'allow_user_to_change_display_name' => false, 'lost_password_link' => 'disabled', 'oidc_login_client_id' => getenv('OIDC_CLIENT_ID'), 'oidc_login_client_secret' => getenv('OIDC_CLIENT_SECRET'), 'oidc_login_provider_url' => 'https://authelia.${SECRET_DOMAIN}', 'oidc_login_auto_redirect' => true, //login?noredir=1 'oidc_login_end_session_redirect' => true, 'oidc_login_button_text' => 'Log in with Authelia', 'oidc_login_hide_password_form' => true, 'oidc_login_use_id_token' => true, 'oidc_login_attributes' => array ( 'id' => 'preferred_username', 'name' => 'name', 'mail' => 'email', 'groups' => 'groups', 'login_filter' => 'groups', ), 'oidc_login_default_group' => 'nextcloud', 'oidc_login_filter_allowed_values' => array('Nextcloud'), 'oidc_login_use_external_storage' => false, 'oidc_login_scope' => 'openid profile email groups', 'oidc_login_proxy_ldap' => false, 'oidc_login_disable_registration' => false, 'oidc_login_redir_fallback' => false, 'oidc_login_tls_verify' => true, 'oidc_create_groups' => true, 'oidc_login_webdav_enabled' => false, 'oidc_login_password_authentication' => false, 'oidc_login_public_key_caching_time' => 86400, 'oidc_login_min_time_between_jwks_requests' => 10, 'oidc_login_well_known_caching_time' => 86400, 'oidc_login_update_avatar' => false, );	string
nextcloud.configs."gitops.config.php" (3) `<?php $CONFIG = array ( 'appstoreenabled' => true, #'appstoreurl' => 'https://apps.nextcloud.com/api/v0', 'mail_domain' => '${CLUSTER_DOMAIN}', );`	string
nextcloud.configs."logging.config.php" (2) `<?php $CONFIG = array ( 'log_type' => 'file', 'logfile' => 'nextcloud.log', 'loglevel' => 1, 'logdateformat' => 'F d, Y H:i:s' );`	string
nextcloud.configs."misc.config.php" (2) `<?php $CONFIG = array ( 'default_phone_region' => 'US', );`	string
nextcloud.configs."previews.config.php" (2) `<?php $CONFIG = array ( 'preview_max_x' => 512, 'preview_max_y' => 512, 'enable_previews' => true, 'enabledPreviewProviders' => array ( 0 => 'OC\\Preview\\TXT', 1 => 'OC\\Preview\\Image', 2 => 'OC\\Preview\\Movie', 3 => 'OC\\Preview\\MP4', 4 => 'OC\\Preview\\HEIC', ), 'previewgenerator' => array ( 'squareSizes' => 256, 'widthSizes' => 512, 'heightSizes' => 512, ), );`	string
nextcloud.configs."s3.config.php" (2) `<?php $CONFIG = array ( 'objectstore' => array( 'class' => '\\OC\\Files\\ObjectStore\\S3', 'arguments' => array( 'hostname' => 's3.${PRIVATE_DOMAIN}', 'port' => 443, 'use_path_style' => true, 'bucket' => getenv('S3_ACCESS_KEY'), 'autocreate' => false, 'key' => getenv('S3_ACCESS_KEY'), 'secret' => getenv('S3_SECRET_KEY'), 'use_ssl' => true, ), ), );`	string
nextcloud.configs."auth.config.php" (1) <?php $CONFIG = array ( 'allow_user_to_change_display_name' => false, 'lost_password_link' => 'disabled', 'oidc_login_provider_url' => 'https://auth.${ROOT_DOMAIN}', 'oidc_login_client_id' => 'nextcloud', 'oidc_login_client_secret' => getenv('OIDC_LOGIN_CLIENT_SECRET'), 'oidc_login_auto_redirect' => false, 'oidc_login_end_session_redirect' => false, 'oidc_login_button_text' => 'Log in with Authelia', 'oidc_login_hide_password_form' => false, 'oidc_login_use_id_token' => true, 'oidc_login_attributes' => array ( 'id' => 'preferred_username', 'name' => 'name', 'mail' => 'email', 'groups' => 'groups', ), 'oidc_login_default_group' => 'oidc', 'oidc_login_use_external_storage' => false, 'oidc_login_scope' => 'openid profile email groups', 'oidc_login_proxy_ldap' => false, 'oidc_login_disable_registration' => true, 'oidc_login_redir_fallback' => false, 'oidc_login_alt_login_page' => 'assets/login.php', 'oidc_login_tls_verify' => true, 'oidc_create_groups' => false, 'oidc_login_webdav_enabled' => false, 'oidc_login_password_authentication' => false, 'oidc_login_public_key_caching_time' => 86400, 'oidc_login_min_time_between_jwks_requests' => 10, 'oidc_login_well_known_caching_time' => 86400, 'oidc_login_update_avatar' => false, );	string
nextcloud.configs."ingress.config.php" (1) `<?php $CONFIG = array ( 'overwrite.cli.url' => 'https://cloud.${SECRET_DOMAIN}', 'overwriteprotocol' => 'https', );`	string
nextcloud.configs."oidc.config.php" (1) <?php $CONFIG = array ( // Some Nextcloud options that might make sense here 'allow_user_to_change_display_name' => false, 'lost_password_link' => 'disabled', 'overwriteprotocol' => 'https', // URL of provider. All other URLs are auto-discovered from .well-known 'oidc_login_provider_url' => 'https://sso.janz.digital/auth/realms/Janz', // Client ID and secret registered with the provider 'oidc_login_client_id' => 'nextcloud', 'oidc_login_client_secret' => getenv('OIDC_CLIENT_SECRET'), // Automatically redirect the login page to the provider 'oidc_login_auto_redirect' => true, // Redirect to this page after logging out the user 'oidc_login_logout_url' => 'https://sso.janz.digital/auth/realms/janz/protocol/openid-connect/logout', // Login button text 'oidc_login_button_text' => 'Log in with Janz SSO', 'oidc_login_hide_password_form' => false, 'oidc_login_disable_registration' => false, 'oidc_login_attributes' => array ( 'id' => 'preferred_username', 'mail' => 'email', ), 'oidc_login_redir_fallback' => true, );	string
nextcloud.configs."smtp-noverify.config.php" (1) `<?php $CONFIG = array( 'mail_smtpstreamoptions' => array( 'ssl' => array( 'allow_self_signed' => true, 'verify_peer' => false, 'verify_peer_name' => false ) ) );`	string
nextcloud.configs."timezone.config.php" (1) `<?php $CONFIG = array ( 'default_timezone' => 'America/Santiago', );`	string
nextcloud.configs."user.config.php" (1) `<?php $CONFIG = array ( 'default_language' => 'de', 'default_locale' => 'de_DE', 'default_phone_region' => 'DE', 'default_timezone' => 'Europe/Berlin', 'maintenance_window_start' => 1, );`	string
nextcloud.extraInitContainers[].envFrom[].secretRef.name (10) `nextcloud-secret`	string
nextcloud.extraInitContainers[].image (10) `ghcr.io/onedr0p/postgres-init:16.3`	string
nextcloud.extraInitContainers[].name (10) `init-db`	string
nextcloud.extraInitContainers[].imagePullPolicy (1) `IfNotPresent`	string
nextcloud.extraVolumeMounts[].mountPath (8) `/var/www/html/data/appdata_oc16gnntk93o/preview`	string
nextcloud.extraVolumeMounts[].name (8) `previews`	string
nextcloud.extraVolumeMounts[].subPath (1) `devices`	string
nextcloud.extraVolumes[].name (8) `previews`	string
nextcloud.extraVolumes[].nfs.path (6) `${NFS_VIDEO} ${NFS_SOFTWARE} ${NFS_MUSIC} ${NFS_DOWNLOADS}`	string
nextcloud.extraVolumes[].nfs.server (6) `${NFS_SERVER} ${NFS_SERVER} ${NFS_SERVER} ${NFS_SERVER}`	string
nextcloud.extraVolumes[].nfs.readOnly (1) `false`	boolean
nextcloud.extraVolumes[].persistentVolumeClaim.claimName (4) `nextcloud-previews-pvc`	string
nextcloud.securityContext.runAsGroup (7) `82`	number, string
nextcloud.securityContext.runAsUser (7) `82`	number, string
nextcloud.securityContext.runAsNonRoot (6) `true`	boolean
nextcloud.securityContext.fsGroup (3) `82`	number
nextcloud.securityContext.fsGroupChangePolicy (3) `OnRootMismatch`	string
nextcloud.securityContext.readOnlyRootFilesystem (2) `false`	boolean
nextcloud.defaultConfigs."redis.config.php" (5) `false`	boolean
nextcloud.defaultConfigs.".htaccess" (2) `true`	boolean
nextcloud.defaultConfigs."apache-pretty-urls.config.php" (2) `true`	boolean
nextcloud.defaultConfigs."apcu.config.php" (2) `true`	boolean
nextcloud.defaultConfigs."apps.config.php" (2) `true`	boolean
nextcloud.defaultConfigs."autoconfig.php" (2) `false`	boolean
nextcloud.defaultConfigs."smtp.config.php" (2) `true`	boolean
nextcloud.datadir (4) `/var/www/data`	string
nextcloud.password (3) `${NEXTCLOUD_PASSWORD:=changeme}`	string
nextcloud.strategy.type (3) `RollingUpdate`	string
nextcloud.username (3) `${NEXTCLOUD_USERNAME:=admin}`	string
nextcloud.containerPort (1) `80`	number
nextcloud.objectstore.s3.autocreate (1) `true`	boolean
nextcloud.objectStore.s3.autoCreate (1) `true`	boolean
nextcloud.objectstore.s3.bucket (1) `nextcloud-data`	string
nextcloud.objectstore.s3.enabled (1) `true`	boolean
nextcloud.objectStore.s3.enabled (1) `true`	boolean
nextcloud.objectstore.s3.existingSecret (1) `nextcloud-secret`	string
nextcloud.objectstore.s3.host (1) `s3.{SECRET_HOME_DOMAIN}`	string
nextcloud.objectStore.s3.legacyAuth (1) `false`	boolean
nextcloud.objectStore.s3.port (1) `443`	number
nextcloud.objectstore.s3.region (1) `us-east-1`	string
nextcloud.objectStore.s3.region (1) `eu-central-2`	string
nextcloud.objectstore.s3.secretKeys.accessKey (1) `S3_ACCESS_KEY`	string
nextcloud.objectstore.s3.secretKeys.secretKey (1) `S3_SECRET_KEY`	string
nextcloud.objectstore.s3.ssl (1) `true`	boolean
nextcloud.objectStore.s3.ssl (1) `true`	boolean
nextcloud.objectstore.s3.usePathStyle (1) `true`	boolean
nextcloud.objectStore.s3.usePathStyle (1) `false`	boolean
nextcloud.podSecurityContext.runAsGroup (1) `0`	number
nextcloud.podSecurityContext.runAsUser (1) `0`	number
nextcloud.podSecurityContext.supplementalGroups[] (1) `- "33"`	number
persistence.enabled (23) `true`	boolean
persistence.existingClaim (20) `nextcloud`	string
persistence.nextcloudData.enabled (9) `true`	boolean
persistence.nextcloudData.existingClaim (7) `nextcloud-data`	string
persistence.nextcloudData.accessMode (3) `ReadWriteMany`	string
persistence.nextcloudData.size (2) `8Gi`	string
persistence.nextcloudData.storageClass (1) `nfs`	string
persistence.accessMode (3) `ReadWriteMany`	string
persistence.size (2) `1Mi`	string
persistence.storageClass (2) `longhorn-ssd`	string
externalDatabase.enabled (22) `true`	boolean
externalDatabase.type (22) `postgresql`	string
externalDatabase.existingSecret.enabled (16) `true`	boolean, string
externalDatabase.existingSecret.passwordKey (16) `POSTGRES_PASSWORD`	string
externalDatabase.existingSecret.secretName (16) `nextcloud-secret`	string
externalDatabase.existingSecret.usernameKey (16) `POSTGRES_USER`	string
externalDatabase.existingSecret.databaseKey (9) `POSTGRES_DB`	string
externalDatabase.existingSecret.hostKey (9) `POSTGRES_HOST`	string
externalDatabase.database (15) `nextcloud`	string
externalDatabase.host (14) `postgres-rw.database.svc.cluster.local`	string
externalDatabase.user (3) `nextcloud`	string
externalDatabase.password (2) `${NEXTCLOUD_DBPASS}`	string
externalDatabase.metrics.enabled (1) `true`	boolean
externalDatabase.metrics.serviceMonitor.enabled (1) `true`	boolean
ingress.enabled (21) `true`	boolean
ingress.tls[].hosts[] (19) `- cloud.${SECRET_DOMAIN}`	string
ingress.tls[].secretName (8) `${SECRET_DOMAIN/./-}-production-tls`	string
ingress.annotations."nginx.ingress.kubernetes.io/server-snippet" (18) server_tokens off; proxy_hide_header X-Powered-By; rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last; rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last; rewrite ^/.well-known/host-meta /public.php?service=host-meta last; rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json; location = /.well-known/carddav { return 301 $scheme://$host/remote.php/dav; } location = /.well-known/caldav { return 301 $scheme://$host/remote.php/dav; } location = /robots.txt { allow all; log_not_found off; access_log off; } location ~ ^/(?:build\|tests\|config\|lib\|3rdparty\|templates\|data)/ { deny all; } location ~ ^/(?:autotest\|occ\|issue\|indie\|db_\|console) { deny all; }	string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" (17) `10G`	string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-buffering" (12) `off`	string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-request-buffering" (12) `off`	string
ingress.annotations."external-dns.alpha.kubernetes.io/target" (9) `external.${SECRET_DOMAIN}`	string
ingress.annotations."hajimari.io/icon" (5) `simple-icons:nextcloud`	string
ingress.annotations."nginx.ingress.kubernetes.io/cors-allow-headers" (5) `X-Forwarded-For, X-Real-IP, X-Frame-Options, X-Content-Type-Options, X-Forwarded-Proto`	string
ingress.annotations."cert-manager.io/cluster-issuer" (4) `letsencrypt-production`	string
ingress.annotations."gethomepage.dev/enabled" (4) `true`	string
ingress.annotations."gethomepage.dev/group" (4) `Application Service`	string
ingress.annotations."gethomepage.dev/icon" (4) `nextcloud.png`	string
ingress.annotations."gethomepage.dev/name" (4) `Nextcloud`	string
ingress.annotations."nginx.ingress.kubernetes.io/custom-http-errors" (4) `418`	string
ingress.annotations."hajimari.io/enable" (3) `true`	string
ingress.annotations."hajimari.io/group" (3) `tools`	string
ingress.annotations."gethomepage.dev/description" (2) `File Hosting Service`	string
ingress.annotations."hajimari.io/info" (2) `File and Calendar server`	string
ingress.annotations."kubernetes.io/tls-acme" (2) `true`	string
ingress.annotations."nginx.ingress.kubernetes.io/backend-protocol" (2) `HTTP`	string
ingress.annotations."nginx.ingress.kubernetes.io/enable-cors" (2) `true`	string
ingress.annotations."nginx.ingress.kubernetes.io/enable-global-auth" (2) `false`	string
ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (2) `websecure`	string
ingress.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (1) `false`	string
ingress.annotations."external-dns.alpha.kubernetes.io/exclude-unifi" (1) `true`	string
ingress.annotations."external-dns.home.arpa/enabled" (1) `true`	string
ingress.annotations."gethomepage.dev/widget.key" (1) `{{HOMEPAGE_VAR_NEXTCLOUD_TOKEN}}`	string
ingress.annotations."gethomepage.dev/widget.type" (1) `nextcloud`	string
ingress.annotations."gethomepage.dev/widget.url" (1) `https://${HOSTNAME}`	string
ingress.annotations."hajimari.io/appName" (1) `Nextcloud`	string
ingress.annotations."ingress.kubernetes.io/ssl-redirect" (1) `true`	string
ingress.annotations."nginx.ingress.kubernetes.io/cors-allow-methods" (1) `GET, PUT, POST, DELETE, PATCH, OPTIONS, PROPFIND`	string
ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1) `networking-traefik-middleware-chain-no-auth@kubernetescrd`	string
ingress.className (18) `nginx`	string
ingress.path (10) `/`	string
ingress.pathType (10) `Prefix`	string
ingress.hosts[].host (1) `cloud.${SECRET_DOMAIN}`	string
ingress.hosts[].paths[].path (1) `/`	string
ingress.hosts[].paths[].pathType (1) `Prefix`	string
ingress.hosts[] (1) `- nextcloud.${SECRET_DOMAIN}`	string
ingress.main.annotations."cert-manager.io/cluster-issuer" (1) `letsencrypt-production`	string
ingress.main.annotations.external-dns/is-public (1) `true`	string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (1) `ipv4.${SECRET_DOMAIN}`	string
ingress.main.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1) `websecure`	string
ingress.main.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1) `networking-cloudflare-only@kubernetescrd`	string
ingress.main.enabled (1) `true`	boolean
ingress.main.hosts[].host (1) `nextcloud.${SECRET_DOMAIN}`	string
ingress.main.hosts[].paths[].path (1) `/`	string
ingress.main.hosts[].paths[].pathType (1) `Prefix`	string
ingress.main.ingressClassName (1) `traefik`	string
ingress.main.tls[].hosts[] (1) `- nextcloud.${SECRET_DOMAIN}`	string
ingress.main.tls[].secretName (1) `nextcloud-tls`	string
cronjob.enabled (19) `true`	boolean
cronjob.failedJobsHistoryLimit (6) `5`	number
cronjob.successfulJobsHistoryLimit (6) `2`	number
cronjob.curlInsecure (3) `false`	boolean
cronjob.schedule (3) `/5 * * *`	string
cronjob.securityContext.runAsGroup (3) `${APP_GID}`	string, number
cronjob.securityContext.fsGroup (1) `568`	number
cronjob.securityContext.fsGroupChangePolicy (1) `OnRootMismatch`	string
cronjob.securityContext.runAsNonRoot (1) `true`	boolean
cronjob.securityContext.runAsUser (1) `568`	number
livenessProbe.enabled (16) `false`	boolean
livenessProbe.failureThreshold (5) `3`	number
livenessProbe.initialDelaySeconds (5) `5`	number
livenessProbe.periodSeconds (5) `10`	number
livenessProbe.successThreshold (5) `1`	number
livenessProbe.timeoutSeconds (5) `5`	number
readinessProbe.enabled (16) `false`	boolean
readinessProbe.failureThreshold (5) `3`	number
readinessProbe.initialDelaySeconds (5) `5`	number
readinessProbe.periodSeconds (5) `10`	number
readinessProbe.successThreshold (5) `1`	number
readinessProbe.timeoutSeconds (5) `5`	number
image.repository (14) `nextcloud`	string
image.tag (14) `29.0.6`	string
image.flavor (8) `fpm-alpine`	string
image.pullPolicy (4) `IfNotPresent`	string
redis.enabled (14) `true`	boolean
redis.master.persistence.enabled (8) `false`	boolean
redis.master.resources.limits.memory (2) `100Mi`	string
redis.master.resources.requests.cpu (2) `50m`	string
redis.master.resources.requests.memory (2) `50Mi`	string
redis.master.podLabels."policy.gabe565.com/ingress-namespace" (1) `true`	string
redis.auth.enabled (5) `false`	boolean
redis.auth.existingSecret (2) `nextcloud-secret`	string
redis.auth.existingSecretPasswordKey (2) `REDIS_PASSWORD`	string
redis.auth.password (2) `${redis_password}`	string
redis.architecture (4) `standalone`	string
redis.replica.persistence.enabled (3) `false`	boolean
redis.replica.replicaCount (1) `0`	number
redis.commonConfiguration (2) `# Enable AOF https://redis.io/topics/persistence#append-only-file appendonly yes # Disable RDB persistence, AOF persistence already enabled. save "" maxmemory 94371840 maxmemory-policy allkeys-lru`	string
redis.metrics.enabled (2) `true`	boolean
redis.metrics.resources.requests.cpu (2) `10m`	string
redis.metrics.resources.requests.memory (2) `10Mi`	string
redis.metrics.resources.limits.memory (1) `20Mi`	string
redis.metrics.serviceMonitor.enabled (2) `true`	boolean
redis.cluster.enabled (1) `false`	boolean
redis.password (1) `redis-password`	string
redis.resources.limits.memory (1) `50M`	string
redis.resources.requests.cpu (1) `10m`	string
redis.resources.requests.memory (1) `21M`	string
redis.usePassword (1) `true`	boolean
nginx.enabled (13) `true`	boolean
nginx.config.default (6) `true`	boolean
nginx.image.repository (5) `public.ecr.aws/nginx/nginx`	string
nginx.image.tag (4) `1.27.1`	string
nginx.resources.requests.cpu (5) `50m`	string
nginx.resources.requests.memory (5) `20Mi`	string
nginx.resources.limits.memory (4) `100Mi`	string
nginx.securityContext.runAsGroup (2) `${APP_GID}`	string, number
resources.requests.cpu (10) `200m`	string
resources.requests.memory (10) `300Mi`	string
resources.limits.memory (9) `2000Mi`	string
resources.limits.cpu (3) `4000m`	string, number
startupProbe.enabled (10) `true`	boolean
startupProbe.failureThreshold (8) `30`	number
startupProbe.initialDelaySeconds (8) `5`	number
startupProbe.periodSeconds (8) `10`	number
startupProbe.successThreshold (8) `1`	number
startupProbe.timeoutSeconds (8) `5`	number
metrics.enabled (7) `false`	boolean
metrics.serviceMonitor.enabled (5) `false`	boolean
metrics.https (4) `true`	boolean
metrics.image.repository (1) `docker.io/xperimental/nextcloud-exporter`	string
metrics.image.tag (1) `0.7.0`	string
deploymentAnnotations."secret.reloader.stakater.com/reload" (6) `nextcloud-secret`	string
deploymentAnnotations."reloader.stakater.com/auto" (3) `true`	string
postgresql.enabled (4) `true`	boolean
postgresql.persistence.enabled (2) `true`	boolean
postgresql.persistence.existingClaim (2) `nextcloud-postgresql-config-v1`	string
postgresql.persistence.size (1) `1Mi`	string
postgresql.global.postgresql.postgresqlDatabase (1) `nextcloud`	string
postgresql.global.postgresql.postgresqlPassword (1) `${SECRET_NEXTCLOUD_DB_PASSWORD}`	string
postgresql.global.postgresql.postgresqlUsername (1) `ncuser`	string
postgresql.postgresqlDatabase (1) `nextcloud`	string
postgresql.postgresqlUsername (1) `nextcloud`	string
replicaCount (4) `1`	number
env.PHP_MEMORY_LIMIT (2) `256M`	string
env.TZ (2) `UTC`	string
hpa.enabled (2) `false`	boolean
hpa.cputhreshold (1) `60`	number
hpa.maxPods (1) `5`	number
hpa.minPods (1) `2`	number
lifecycle.postStartCommand[] (2) `- /bin/bash - -c - apt update -y && apt install ffmpeg -y`	string
securityContext.fsGroupChangePolicy (2) `OnRootMismatch`	string
fullnameOverride (1) `nextcloud`	string
mariadb.db.name (1) `nextcloud`	string
mariadb.db.password (1) `db-password`	string
mariadb.db.user (1) `nextcloud`	string
mariadb.enabled (1) `true`	boolean
mariadb.master.persistence.accessMode (1) `ReadWriteOnce`	string
mariadb.master.persistence.enabled (1) `true`	boolean
mariadb.master.persistence.size (1) `8Gi`	string
mariadb.replication.enabled (1) `false`	boolean
mariadb.rootUser.forcePassword (1) `true`	boolean
mariadb.rootUser.password (1) `root-db-password`	string
phpClientHttpsFix.enabled (1) `true`	boolean
podAnnotations."configmap.reloader.stakater.com/reload" (1) `nextcloud-settings`	string
podLabels."policy.gabe565.com/egress-namespace" (1) `true`	string
podLabels."policy.gabe565.com/egress-world" (1) `true`	string
podLabels."policy.gabe565.com/ingress-ingress" (1) `true`	string
podSecurityContext.supplementalGroups[] (1) `- "100"`	number
rbac.enabled (1) `false`	boolean
rbac.serviceaccount.create (1) `true`	boolean
rbac.serviceaccount.name (1) `nextcloud-serviceaccount`	string

Key

Types

internalDatabase.enabled (23)

false

boolean

nextcloud.host (23)

cloud.${SECRET_DOMAIN}

string

nextcloud.existingSecret.enabled (18)

true

boolean, string

nextcloud.existingSecret.secretName (18)

nextcloud-secret

string

nextcloud.existingSecret.passwordKey (15)

ADMIN_PASS

string

nextcloud.existingSecret.usernameKey (15)

ADMIN_USER

string

nextcloud.existingSecret.smtpPasswordKey (9)

SMTP_PASSWORD

string

nextcloud.existingSecret.smtpUsernameKey (9)

SMTP_USERNAME

string

nextcloud.existingSecret.smtpHostKey (8)

SMTP_HOST

string

nextcloud.existingSecret.tokenKey (5)

METRICS_TOKEN

string

nextcloud.existingSecret.accessKey (1)

OBJECTSTORE_S3_KEY

string

nextcloud.existingSecret.bucket (1)

OBJECTSTORE_S3_BUCKET

string

nextcloud.existingSecret.host (1)

OBJECTSTORE_S3_HOST

string

nextcloud.existingSecret.secretKey (1)

OBJECTSTORE_S3_SECRET

string

nextcloud.mail.enabled (14)

true

boolean

nextcloud.mail.domain (13)

${SECRET_DOMAIN}

string

nextcloud.mail.fromAddress (13)

nextcloud

string

nextcloud.mail.smtp.port (13)

number, string

nextcloud.mail.smtp.authtype (8)

LOGIN

string

nextcloud.mail.smtp.secure (8)

ssl

string

nextcloud.mail.smtp.host (5)

smtp.migadu.com

string

nextcloud.mail.smtp.name (2)

string

nextcloud.mail.smtp.password (2)

string

nextcloud.mail.smtp.timeout (1)

number

nextcloud.extraEnv[].name (12)

REDIS_HOST
REDIS_HOST_PORT

string

nextcloud.extraEnv[].value (11)

dragonfly.database.svc.cluster.local
6379

string

nextcloud.extraEnv[].valueFrom.secretKeyRef.key (8)

S3_ACCESS_KEY
S3_SECRET_KEY
OIDC_CLIENT_ID
OIDC_CLIENT_PASSWORD

string

nextcloud.extraEnv[].valueFrom.secretKeyRef.name (8)

nextcloud-secret
nextcloud-secret
nextcloud-secret

string

nextcloud.phpConfigs."uploadLimit.ini" (11)

upload_max_filesize = 16G
post_max_size = 16G
max_input_time = 3600
max_execution_time = 3600

string

nextcloud.phpConfigs."www.conf" (6)

[www]
user = www-data
group = www-data
listen = 127.0.0.1:9000
pm = dynamic
pm.max_children = 57
pm.start_servers = 14
pm.min_spare_servers = 14
pm.max_spare_servers = 42
pm.max_requests = 500
pm.process_idle_timeout = 10s

string

nextcloud.configs."proxy.config.php" (10)

<?php
$CONFIG = array (
  'trusted_proxies' => array(
    0 => '127.0.0.1',
    1 => '10.96.0.0/16',
  ),
  'forwarded_for_headers' => array('HTTP_X_FORWARDED_FOR'),
);

string

nextcloud.configs."redis.config.php" (5)

<?php
$CONFIG = array (
  'memcache.local' => '\\OC\\Memcache\\Redis',
  'memcache.distributed' => '\OC\Memcache\Redis',
  'memcache.locking' => '\OC\Memcache\Redis',
  'redis' => array(
    'host' => getenv('REDIS_HOST'),
    'port' => getenv('REDIS_HOST_PORT') ?: 6379,
    'password' => getenv('REDIS_HOST_PASSWORD')
  )
);

string

nextcloud.configs."bulkupload.config.php" (4)

<?php
$CONFIG = array (
  'bulkupload.enabled' => false,
);

string

nextcloud.configs."custom.config.php" (4)

<?php
$CONFIG = array (
  'overwriteprotocol' => 'https',
  'overwrite.cli.url' => 'https://nextcloud.${SECRET_DOMAIN}',
  'filelocking.enabled' => 'true',
  'loglevel' => '2',
  'enable_previews' => true,
  'trusted_domains' =>
      [
        'nextcloud',
        'nextcloud.${SECRET_DOMAIN}'
      ]
);

string

nextcloud.configs."local.config.php" (4)

<?php
$CONFIG = array (
  'trusted_proxies' =>
  array (
    0 => '127.0.0.1',
    1 => '${CLUSTER_CIDR}',
    2 => '${SERVICE_CIDR}',
  ),
  'forwarded_for_headers' =>
  array (
    0 => 'HTTP_X_FORWARDED_FOR',
  ),
  'default_phone_region' => 'DE',
  'overwrite.cli.url' => 'https://nextcloud.${SECRET_DOMAIN}',
  'overwriteprotocol' => 'https',
  'quota_include_external_storage' => 'false',
  'skeletondirectory' => '',
  'knowledgebaseenabled' => 'false',
  'maintenance_window_start' => '1',
  'enable_previews' => false,
  'trashbin_retention_obligation' => 'auto, 30',
  'auth.bruteforce.protection.enabled' => true,
);

string

nextcloud.configs."sso.config.php" (4)

<?php
$CONFIG = array (
  'allow_user_to_change_display_name' => false,
  'lost_password_link' => 'disabled',
  'oidc_login_client_id' => getenv('OIDC_CLIENT_ID'),
  'oidc_login_client_secret' => getenv('OIDC_CLIENT_SECRET'),
  'oidc_login_provider_url' => 'https://authelia.${SECRET_DOMAIN}',
  'oidc_login_auto_redirect' => true, //login?noredir=1
  'oidc_login_end_session_redirect' => true,
  'oidc_login_button_text' => 'Log in with Authelia',
  'oidc_login_hide_password_form' => true,
  'oidc_login_use_id_token' => true,
  'oidc_login_attributes' => array (
        'id' => 'preferred_username',
        'name' => 'name',
        'mail' => 'email',
        'groups' => 'groups',
        'login_filter' => 'groups',
    ),
  'oidc_login_default_group' => 'nextcloud',
  'oidc_login_filter_allowed_values' => array('Nextcloud'),
  'oidc_login_use_external_storage' => false,
  'oidc_login_scope' => 'openid profile email groups',
  'oidc_login_proxy_ldap' => false,
  'oidc_login_disable_registration' => false,
  'oidc_login_redir_fallback' => false,
  'oidc_login_tls_verify' => true,
  'oidc_create_groups' => true,
  'oidc_login_webdav_enabled' => false,
  'oidc_login_password_authentication' => false,
  'oidc_login_public_key_caching_time' => 86400,
  'oidc_login_min_time_between_jwks_requests' => 10,
  'oidc_login_well_known_caching_time' => 86400,
  'oidc_login_update_avatar' => false,
);

string

nextcloud.configs."gitops.config.php" (3)

<?php
$CONFIG = array (
  'appstoreenabled' => true,
  #'appstoreurl' => 'https://apps.nextcloud.com/api/v0',
  'mail_domain' => '${CLUSTER_DOMAIN}',
);

string

nextcloud.configs."logging.config.php" (2)

<?php
$CONFIG = array (
  'log_type' => 'file',
  'logfile' => 'nextcloud.log',
  'loglevel' => 1,
  'logdateformat' => 'F d, Y H:i:s'
  );

string

nextcloud.configs."misc.config.php" (2)

<?php
$CONFIG = array (
  'default_phone_region' => 'US',
);

string

nextcloud.configs."previews.config.php" (2)

<?php
  $CONFIG = array (
  'preview_max_x' => 512,
  'preview_max_y' => 512,
  'enable_previews' => true,
  'enabledPreviewProviders' =>
    array (
      0 => 'OC\\Preview\\TXT',
      1 => 'OC\\Preview\\Image',
      2 => 'OC\\Preview\\Movie',
      3 => 'OC\\Preview\\MP4',
      4 => 'OC\\Preview\\HEIC',
    ),
  'previewgenerator' =>
    array (
      'squareSizes' => 256,
      'widthSizes' => 512,
      'heightSizes' => 512,
    ),
  );

string

nextcloud.configs."s3.config.php" (2)

<?php
$CONFIG = array (
  'objectstore' => array(
    'class' => '\\OC\\Files\\ObjectStore\\S3',
    'arguments' => array(
      'hostname'       => 's3.${PRIVATE_DOMAIN}',
      'port'           => 443,
      'use_path_style' => true,
      'bucket'         => getenv('S3_ACCESS_KEY'),
      'autocreate'     => false,
      'key'            => getenv('S3_ACCESS_KEY'),
      'secret'         => getenv('S3_SECRET_KEY'),
      'use_ssl'        => true,
    ),
  ),
);

string

nextcloud.configs."auth.config.php" (1)

<?php
$CONFIG = array (
    'allow_user_to_change_display_name' => false,
    'lost_password_link' => 'disabled',
    'oidc_login_provider_url' => 'https://auth.${ROOT_DOMAIN}',
    'oidc_login_client_id' => 'nextcloud',
    'oidc_login_client_secret' => getenv('OIDC_LOGIN_CLIENT_SECRET'),
    'oidc_login_auto_redirect' => false,
    'oidc_login_end_session_redirect' => false,
    'oidc_login_button_text' => 'Log in with Authelia',
    'oidc_login_hide_password_form' => false,
    'oidc_login_use_id_token' => true,
    'oidc_login_attributes' => array (
        'id' => 'preferred_username',
        'name' => 'name',
        'mail' => 'email',
        'groups' => 'groups',
    ),
    'oidc_login_default_group' => 'oidc',
    'oidc_login_use_external_storage' => false,
    'oidc_login_scope' => 'openid profile email groups',
    'oidc_login_proxy_ldap' => false,
    'oidc_login_disable_registration' => true,
    'oidc_login_redir_fallback' => false,
    'oidc_login_alt_login_page' => 'assets/login.php',
    'oidc_login_tls_verify' => true,
    'oidc_create_groups' => false,
    'oidc_login_webdav_enabled' => false,
    'oidc_login_password_authentication' => false,
    'oidc_login_public_key_caching_time' => 86400,
    'oidc_login_min_time_between_jwks_requests' => 10,
    'oidc_login_well_known_caching_time' => 86400,
    'oidc_login_update_avatar' => false,
);

string

nextcloud.configs."ingress.config.php" (1)

<?php
$CONFIG = array (
  'overwrite.cli.url' => 'https://cloud.${SECRET_DOMAIN}',
  'overwriteprotocol' => 'https',
);

string

nextcloud.configs."oidc.config.php" (1)

<?php
$CONFIG = array (
  // Some Nextcloud options that might make sense here
  'allow_user_to_change_display_name' => false,
  'lost_password_link' => 'disabled',
  'overwriteprotocol' => 'https',

  // URL of provider. All other URLs are auto-discovered from .well-known
  'oidc_login_provider_url' => 'https://sso.janz.digital/auth/realms/Janz',

  // Client ID and secret registered with the provider
  'oidc_login_client_id' => 'nextcloud',
  'oidc_login_client_secret' => getenv('OIDC_CLIENT_SECRET'),

  // Automatically redirect the login page to the provider
  'oidc_login_auto_redirect' => true,

  // Redirect to this page after logging out the user
  'oidc_login_logout_url' => 'https://sso.janz.digital/auth/realms/janz/protocol/openid-connect/logout',

  // Login button text
  'oidc_login_button_text' => 'Log in with Janz SSO',
  'oidc_login_hide_password_form' => false,
  'oidc_login_disable_registration' => false,

  'oidc_login_attributes' => array (
      'id' => 'preferred_username',
      'mail' => 'email',
  ),
  'oidc_login_redir_fallback' => true,

);

string

nextcloud.configs."smtp-noverify.config.php" (1)

<?php
$CONFIG = array(
  'mail_smtpstreamoptions' => array(
    'ssl' => array(
      'allow_self_signed' => true,
      'verify_peer' => false,
      'verify_peer_name' => false
    )
  )
);

string

nextcloud.configs."timezone.config.php" (1)

<?php
$CONFIG = array (
  'default_timezone' => 'America/Santiago',
);

string

nextcloud.configs."user.config.php" (1)

<?php
$CONFIG = array (
  'default_language' => 'de',
  'default_locale' => 'de_DE',
  'default_phone_region' => 'DE',
  'default_timezone' => 'Europe/Berlin',
  'maintenance_window_start' => 1,
);

string

nextcloud.extraInitContainers[].envFrom[].secretRef.name (10)

nextcloud-secret

string

nextcloud.extraInitContainers[].image (10)

ghcr.io/onedr0p/postgres-init:16.3

string

nextcloud.extraInitContainers[].name (10)

init-db

string

nextcloud.extraInitContainers[].imagePullPolicy (1)

IfNotPresent

string

nextcloud.extraVolumeMounts[].mountPath (8)

/var/www/html/data/appdata_oc16gnntk93o/preview

string

nextcloud.extraVolumeMounts[].name (8)

previews

string

nextcloud.extraVolumeMounts[].subPath (1)

devices

string

nextcloud.extraVolumes[].name (8)

previews

string

nextcloud.extraVolumes[].nfs.path (6)

${NFS_VIDEO}
${NFS_SOFTWARE}
${NFS_MUSIC}
${NFS_DOWNLOADS}

string

nextcloud.extraVolumes[].nfs.server (6)

${NFS_SERVER}
${NFS_SERVER}
${NFS_SERVER}
${NFS_SERVER}

string

nextcloud.extraVolumes[].nfs.readOnly (1)

false

boolean

nextcloud.extraVolumes[].persistentVolumeClaim.claimName (4)

nextcloud-previews-pvc

string

nextcloud.securityContext.runAsGroup (7)

number, string

nextcloud.securityContext.runAsUser (7)

number, string

nextcloud.securityContext.runAsNonRoot (6)

true

boolean

nextcloud.securityContext.fsGroup (3)

number

nextcloud.securityContext.fsGroupChangePolicy (3)

OnRootMismatch

string

nextcloud.securityContext.readOnlyRootFilesystem (2)

false

boolean

nextcloud.defaultConfigs."redis.config.php" (5)

false

boolean

nextcloud.defaultConfigs.".htaccess" (2)

true

boolean

nextcloud.defaultConfigs."apache-pretty-urls.config.php" (2)

true

boolean

nextcloud.defaultConfigs."apcu.config.php" (2)

true

boolean

nextcloud.defaultConfigs."apps.config.php" (2)

true

boolean

nextcloud.defaultConfigs."autoconfig.php" (2)

false

boolean

nextcloud.defaultConfigs."smtp.config.php" (2)

true

boolean

nextcloud.datadir (4)

/var/www/data

string

nextcloud.password (3)

${NEXTCLOUD_PASSWORD:=changeme}

string

nextcloud.strategy.type (3)

RollingUpdate

string

nextcloud.username (3)

${NEXTCLOUD_USERNAME:=admin}

string

nextcloud.containerPort (1)

number

nextcloud.objectstore.s3.autocreate (1)

true

boolean

nextcloud.objectStore.s3.autoCreate (1)

true

boolean

nextcloud.objectstore.s3.bucket (1)

nextcloud-data

string

nextcloud.objectstore.s3.enabled (1)

true

boolean

nextcloud.objectStore.s3.enabled (1)

true

boolean

nextcloud.objectstore.s3.existingSecret (1)

nextcloud-secret

string

nextcloud.objectstore.s3.host (1)

s3.{SECRET_HOME_DOMAIN}

string

nextcloud.objectStore.s3.legacyAuth (1)

false

boolean

nextcloud.objectStore.s3.port (1)

number

nextcloud.objectstore.s3.region (1)

us-east-1

string

nextcloud.objectStore.s3.region (1)

eu-central-2

string

nextcloud.objectstore.s3.secretKeys.accessKey (1)

S3_ACCESS_KEY

string

nextcloud.objectstore.s3.secretKeys.secretKey (1)

S3_SECRET_KEY

string

nextcloud.objectstore.s3.ssl (1)

true

boolean

nextcloud.objectStore.s3.ssl (1)

true

boolean

nextcloud.objectstore.s3.usePathStyle (1)

true

boolean

nextcloud.objectStore.s3.usePathStyle (1)

false

boolean

nextcloud.podSecurityContext.runAsGroup (1)

number

nextcloud.podSecurityContext.runAsUser (1)

number

nextcloud.podSecurityContext.supplementalGroups[] (1)

- "33"

number

persistence.enabled (23)

true

boolean

persistence.existingClaim (20)

nextcloud

string

persistence.nextcloudData.enabled (9)

true

boolean

persistence.nextcloudData.existingClaim (7)

nextcloud-data

string

persistence.nextcloudData.accessMode (3)

ReadWriteMany

string

persistence.nextcloudData.size (2)

8Gi

string

persistence.nextcloudData.storageClass (1)

nfs

string

persistence.accessMode (3)

ReadWriteMany

string

persistence.size (2)

1Mi

string

persistence.storageClass (2)

longhorn-ssd

string

externalDatabase.enabled (22)

true

boolean

externalDatabase.type (22)

postgresql

string

externalDatabase.existingSecret.enabled (16)

true

boolean, string

externalDatabase.existingSecret.passwordKey (16)

POSTGRES_PASSWORD

string

externalDatabase.existingSecret.secretName (16)

nextcloud-secret

string

externalDatabase.existingSecret.usernameKey (16)

POSTGRES_USER

string

externalDatabase.existingSecret.databaseKey (9)

POSTGRES_DB

string

externalDatabase.existingSecret.hostKey (9)

POSTGRES_HOST

string

externalDatabase.database (15)

nextcloud

string

externalDatabase.host (14)

postgres-rw.database.svc.cluster.local

string

externalDatabase.user (3)

nextcloud

string

externalDatabase.password (2)

${NEXTCLOUD_DBPASS}

string

externalDatabase.metrics.enabled (1)

true

boolean

externalDatabase.metrics.serviceMonitor.enabled (1)

true

boolean

ingress.enabled (21)

true

boolean

ingress.tls[].hosts[] (19)

- cloud.${SECRET_DOMAIN}

string

ingress.tls[].secretName (8)

${SECRET_DOMAIN/./-}-production-tls

string

ingress.annotations."nginx.ingress.kubernetes.io/server-snippet" (18)

server_tokens off;
proxy_hide_header X-Powered-By;
rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last;
rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last;
rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json;
location = /.well-known/carddav {
  return 301 $scheme://$host/remote.php/dav;
}
location = /.well-known/caldav {
  return 301 $scheme://$host/remote.php/dav;
}
location = /robots.txt {
  allow all;
  log_not_found off;
  access_log off;
}
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
  deny all;
}
location ~ ^/(?:autotest|occ|issue|indie|db_|console) {
  deny all;
}

string

ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" (17)

10G

string

ingress.annotations."nginx.ingress.kubernetes.io/proxy-buffering" (12)

off

string

ingress.annotations."nginx.ingress.kubernetes.io/proxy-request-buffering" (12)

off

string

ingress.annotations."external-dns.alpha.kubernetes.io/target" (9)

external.${SECRET_DOMAIN}

string

ingress.annotations."hajimari.io/icon" (5)

simple-icons:nextcloud

string

ingress.annotations."nginx.ingress.kubernetes.io/cors-allow-headers" (5)

X-Forwarded-For, X-Real-IP, X-Frame-Options, X-Content-Type-Options, X-Forwarded-Proto

string

ingress.annotations."cert-manager.io/cluster-issuer" (4)

letsencrypt-production

string

ingress.annotations."gethomepage.dev/enabled" (4)

true

string

ingress.annotations."gethomepage.dev/group" (4)

Application Service

string

ingress.annotations."gethomepage.dev/icon" (4)

nextcloud.png

string

ingress.annotations."gethomepage.dev/name" (4)

Nextcloud

string

ingress.annotations."nginx.ingress.kubernetes.io/custom-http-errors" (4)

string

ingress.annotations."hajimari.io/enable" (3)

true

string

ingress.annotations."hajimari.io/group" (3)

tools

string

ingress.annotations."gethomepage.dev/description" (2)

File Hosting Service

string

ingress.annotations."hajimari.io/info" (2)

File and Calendar server

string

ingress.annotations."kubernetes.io/tls-acme" (2)

true

string

ingress.annotations."nginx.ingress.kubernetes.io/backend-protocol" (2)

HTTP

string

ingress.annotations."nginx.ingress.kubernetes.io/enable-cors" (2)

true

string

ingress.annotations."nginx.ingress.kubernetes.io/enable-global-auth" (2)

false

string

ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (2)

websecure

string

ingress.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (1)

false

string

ingress.annotations."external-dns.alpha.kubernetes.io/exclude-unifi" (1)

true

string

ingress.annotations."external-dns.home.arpa/enabled" (1)

true

string

ingress.annotations."gethomepage.dev/widget.key" (1)

{{HOMEPAGE_VAR_NEXTCLOUD_TOKEN}}

string

ingress.annotations."gethomepage.dev/widget.type" (1)

nextcloud

string

ingress.annotations."gethomepage.dev/widget.url" (1)

https://${HOSTNAME}

string

ingress.annotations."hajimari.io/appName" (1)

Nextcloud

string

ingress.annotations."ingress.kubernetes.io/ssl-redirect" (1)

true

string

ingress.annotations."nginx.ingress.kubernetes.io/cors-allow-methods" (1)

GET, PUT, POST, DELETE, PATCH, OPTIONS, PROPFIND

string

ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)

networking-traefik-middleware-chain-no-auth@kubernetescrd

string

ingress.className (18)

nginx

string

ingress.path (10)

string

ingress.pathType (10)

Prefix

string

ingress.hosts[].host (1)

cloud.${SECRET_DOMAIN}

string

ingress.hosts[].paths[].path (1)

string

ingress.hosts[].paths[].pathType (1)

Prefix

string

ingress.hosts[] (1)

- nextcloud.${SECRET_DOMAIN}

string

ingress.main.annotations."cert-manager.io/cluster-issuer" (1)

letsencrypt-production

string

ingress.main.annotations.external-dns/is-public (1)

true

string

ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (1)

ipv4.${SECRET_DOMAIN}

string

ingress.main.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)

websecure

string

ingress.main.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)

networking-cloudflare-only@kubernetescrd

string

ingress.main.enabled (1)

true

boolean

ingress.main.hosts[].host (1)

nextcloud.${SECRET_DOMAIN}

string

ingress.main.hosts[].paths[].path (1)

string

ingress.main.hosts[].paths[].pathType (1)

Prefix

string

ingress.main.ingressClassName (1)

traefik

string

ingress.main.tls[].hosts[] (1)

- nextcloud.${SECRET_DOMAIN}

string

ingress.main.tls[].secretName (1)

nextcloud-tls

string

cronjob.enabled (19)

true

boolean

cronjob.failedJobsHistoryLimit (6)

number

cronjob.successfulJobsHistoryLimit (6)

number

cronjob.curlInsecure (3)

false

boolean

cronjob.schedule (3)

*/5 * * * *

string

cronjob.securityContext.runAsGroup (3)

${APP_GID}

string, number

cronjob.securityContext.fsGroup (1)

number

cronjob.securityContext.fsGroupChangePolicy (1)

OnRootMismatch

string

cronjob.securityContext.runAsNonRoot (1)

true

boolean

cronjob.securityContext.runAsUser (1)

number

livenessProbe.enabled (16)

false

boolean

livenessProbe.failureThreshold (5)

number

livenessProbe.initialDelaySeconds (5)

number

livenessProbe.periodSeconds (5)

number

livenessProbe.successThreshold (5)

number

livenessProbe.timeoutSeconds (5)

number

readinessProbe.enabled (16)

false

boolean

readinessProbe.failureThreshold (5)

number

readinessProbe.initialDelaySeconds (5)

number

readinessProbe.periodSeconds (5)

number

readinessProbe.successThreshold (5)

number

readinessProbe.timeoutSeconds (5)

number

image.repository (14)

nextcloud

string

image.tag (14)

29.0.6

string

image.flavor (8)

fpm-alpine

string

image.pullPolicy (4)

IfNotPresent

string

redis.enabled (14)

true

boolean

redis.master.persistence.enabled (8)

false

boolean

redis.master.resources.limits.memory (2)

100Mi

string

redis.master.resources.requests.cpu (2)

50m

string

redis.master.resources.requests.memory (2)

50Mi

string

redis.master.podLabels."policy.gabe565.com/ingress-namespace" (1)

true

string

redis.auth.enabled (5)

false

boolean

redis.auth.existingSecret (2)

nextcloud-secret

string

redis.auth.existingSecretPasswordKey (2)

REDIS_PASSWORD

string

redis.auth.password (2)

${redis_password}

string

redis.architecture (4)

standalone

string

redis.replica.persistence.enabled (3)

false

boolean

redis.replica.replicaCount (1)

number

redis.commonConfiguration (2)

# Enable AOF https://redis.io/topics/persistence#append-only-file
appendonly yes
# Disable RDB persistence, AOF persistence already enabled.
save ""
maxmemory 94371840
maxmemory-policy allkeys-lru

string

redis.metrics.enabled (2)

true

boolean

redis.metrics.resources.requests.cpu (2)

10m

string

redis.metrics.resources.requests.memory (2)

10Mi

string

redis.metrics.resources.limits.memory (1)

20Mi

string

redis.metrics.serviceMonitor.enabled (2)

true

boolean

redis.cluster.enabled (1)

false

boolean

redis.password (1)

redis-password

string

redis.resources.limits.memory (1)

50M

string

redis.resources.requests.cpu (1)

10m

string

redis.resources.requests.memory (1)

21M

string

redis.usePassword (1)

true

boolean

nginx.enabled (13)

true

boolean

nginx.config.default (6)

true

boolean

nginx.image.repository (5)

public.ecr.aws/nginx/nginx

string

nginx.image.tag (4)

1.27.1

string

nginx.resources.requests.cpu (5)

50m

string

nginx.resources.requests.memory (5)

20Mi

string

nginx.resources.limits.memory (4)

100Mi

string

nginx.securityContext.runAsGroup (2)

${APP_GID}

string, number

resources.requests.cpu (10)

200m

string

resources.requests.memory (10)

300Mi

string

resources.limits.memory (9)

2000Mi

string

resources.limits.cpu (3)

4000m

string, number

startupProbe.enabled (10)

true

boolean

startupProbe.failureThreshold (8)

number

startupProbe.initialDelaySeconds (8)

number

startupProbe.periodSeconds (8)

number

startupProbe.successThreshold (8)

number

startupProbe.timeoutSeconds (8)

number

metrics.enabled (7)

false

boolean

metrics.serviceMonitor.enabled (5)

false

boolean

metrics.https (4)

true

boolean

metrics.image.repository (1)

docker.io/xperimental/nextcloud-exporter

string

metrics.image.tag (1)

0.7.0

string

deploymentAnnotations."secret.reloader.stakater.com/reload" (6)

nextcloud-secret

string

deploymentAnnotations."reloader.stakater.com/auto" (3)

true

string

postgresql.enabled (4)

true

boolean

postgresql.persistence.enabled (2)

true

boolean

postgresql.persistence.existingClaim (2)

nextcloud-postgresql-config-v1

string

postgresql.persistence.size (1)

1Mi

string

postgresql.global.postgresql.postgresqlDatabase (1)

nextcloud

string

postgresql.global.postgresql.postgresqlPassword (1)

${SECRET_NEXTCLOUD_DB_PASSWORD}

string

postgresql.global.postgresql.postgresqlUsername (1)

ncuser

string

postgresql.postgresqlDatabase (1)

nextcloud

string

postgresql.postgresqlUsername (1)

nextcloud

string

replicaCount (4)

number

env.PHP_MEMORY_LIMIT (2)

256M

string

env.TZ (2)

UTC

string

hpa.enabled (2)

false

boolean

hpa.cputhreshold (1)

number

hpa.maxPods (1)

number

hpa.minPods (1)

number

lifecycle.postStartCommand[] (2)

- /bin/bash
- -c
- apt update -y && apt install ffmpeg -y

string

securityContext.fsGroupChangePolicy (2)

OnRootMismatch

string

fullnameOverride (1)

nextcloud

string

mariadb.db.name (1)

nextcloud

string

mariadb.db.password (1)

db-password

string

mariadb.db.user (1)

nextcloud

string

mariadb.enabled (1)

true

boolean

mariadb.master.persistence.accessMode (1)

ReadWriteOnce

string

mariadb.master.persistence.enabled (1)

true

boolean

mariadb.master.persistence.size (1)

8Gi

string

mariadb.replication.enabled (1)

false

boolean

mariadb.rootUser.forcePassword (1)

true

boolean

mariadb.rootUser.password (1)

root-db-password

string

phpClientHttpsFix.enabled (1)

true

boolean

podAnnotations."configmap.reloader.stakater.com/reload" (1)

nextcloud-settings

string

podLabels."policy.gabe565.com/egress-namespace" (1)

true

string

podLabels."policy.gabe565.com/egress-world" (1)

true

string

podLabels."policy.gabe565.com/ingress-ingress" (1)

true

string

podSecurityContext.supplementalGroups[] (1)

- "100"

number

rbac.enabled (1)

false

boolean

rbac.serviceaccount.create (1)

true

boolean

rbac.serviceaccount.name (1)

nextcloud-serviceaccount

string

nextcloud helm

Install

Examples

Top Repositories (3 out of 23)

Resources

Values