jaggar/iac-cljs-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Swap to using externalDb because Nextcloud chart absolutely sucks with defining custom values for the login info of the DB...

Browse Source
This commit is contained in:
GigiaJ
2025-12-04 03:02:01 -06:00
parent cff8972366
commit 6243db3cba
1 changed files with 28 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
src/main/k8s/services/nextcloud/service.cljs
View File

@@ -1,7 +1,7 @@
(ns k8s.services.nextcloud.service) (ns k8s.services.nextcloud.service)
(def config (def config
{:stack [:vault:prepare :k8s:chart :k8s:httproute] {:stack [:vault:prepare [:k8s :httproute :chart]]
:app-namespace "nextcloud" :app-namespace "nextcloud"
:app-name "nextcloud" :app-name "nextcloud"
:image-port 80 :image-port 80
@@ -9,15 +9,28 @@
:k8s:chart-opts {:repositoryOpts {:repo "https://nextcloud.github.io/helm/"} :k8s:chart-opts {:repositoryOpts {:repo "https://nextcloud.github.io/helm/"}
:values :values
{:podAnnotations {"backup.velero.io/backup-volumes" "data"} {:podAnnotations {"backup.velero.io/backup-volumes" "data"}
:nextcloud {:host 'host :trustedDomains ['host 'app-name]
:nextcloud {:username 'username
:password 'password
:host 'host
:containerPort 80 :containerPort 80
:trustedDomains ['host 'app-name]
:persistence {:enabled true :persistence {:enabled true
:storageClass "juicefs-sc" :storageClass "juicefs-sc"
:accessMode "ReadWriteMany" :accessMode "ReadWriteMany"
:size "1Ti"}} :size "1Ti"}}
:service {:port 80} :service {:port 80}
:mariadb {:enabled true :redis {:auth {:password 'redis-password}}
:externalDatabase {:enabled true
:type "mysql"
:host "nextcloud-db.nextcloud.svc.cluster.local"
:database "nextcloud"
:user 'username
:password 'mariadb-password}
:internalDatabase {:enabled false}
:mariadb {:enabled false
:auth {:username 'username
:password 'mariadb-password
:rootPassword 'mariadb-root-password}
:architecture "standalone" :architecture "standalone"
:primary {:podAnnotations {"backup.velero.io/backup-volumes" "data"} :primary {:podAnnotations {"backup.velero.io/backup-volumes" "data"}
:persistence {:enabled true :persistence {:enabled true
@@ -28,8 +41,7 @@
:image {:registry "docker.io" :image {:registry "docker.io"
:repository "bitnami/os-shell" :repository "bitnami/os-shell"
:tag "latest" :tag "latest"
:pullPolicy "Always"}} :pullPolicy "Always"}}}
}
:transformations (fn [args _opts] :transformations (fn [args _opts]
(let [kind (get-in args [:resource :kind])] (let [kind (get-in args [:resource :kind])]
@@ -37,4 +49,13 @@
(update-in args [:resource :metadata :annotations] (update-in args [:resource :metadata :annotations]
#(assoc (or % {}) "pulumi.com/skipAwait" "true")) #(assoc (or % {}) "pulumi.com/skipAwait" "true"))
args)))}} args)))}}
:k8s:httproute-opts {:spec {::hostnames ['host]}}}) :k8s:httproute-opts {:spec {::hostnames ['host]
:rules [{:matches [{:path {:type "PathPrefix" :value "/"}}]
:filters [{:type "ResponseHeaderModifier"
:responseHeaderModifier
{:set [{:name "Content-Security-Policy"
:value "frame-src 'self' https://cinny.hampter.quest https://productive.chickensalad.quest https://gitea.chickensalad.quest;"}]
:remove ["X-Content-Security-Policy"]}}]
:backendRefs [{:name "nextcloud"
:port 80}]}]}}})