First stage refactor for dynamic app specs (napps.scm).

all-apps/nextcloud/34/docker-compose.yaml

@@ -0,0 +1,74 @@
+version: '3'
+
+secrets:
+  nextcloud_postgres_db:
+    file: ./nextcloud/postgres_db
+  nextcloud_postgres_password:
+    file: ./nextcloud/postgres_password
+  nextcloud_postgres_user:
+    file: ./nextcloud/postgres_user
+  nextcloud_redis_password:
+    file: ./nextcloud/redis_password
+
+services:
+  nextcloud_db:
+    image: postgres:18-trixie
+    env_file:
+      - ./nextcloud/nextcloud.env
+    shm_size: 128mb
+    restart: always
+    volumes:
+      - /nassella/nextcloud/var-lib-postgresql:/var/lib/postgresql
+    networks:
+      - nextcloud_internal
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -d `cat $$POSTGRES_DB_FILE` -U `cat $$POSTGRES_USER_FILE`"]
+      start_period: 15s
+      interval: 30s
+      retries: 3
+      timeout: 5s
+    secrets:
+      - nextcloud_postgres_db
+      - nextcloud_postgres_password
+      - nextcloud_postgres_user
+  nextcloud_redis:
+    image: redis:8-trixie
+    env_file:
+      - ./nextcloud/nextcloud.env
+    command: bash -c 'redis-server --requirepass "$$(cat /run/secrets/nextcloud_redis_password)"'
+    secrets:
+      - nextcloud_redis_password
+    restart: always
+    healthcheck:
+      test: ["CMD-SHELL", "redis-cli --no-auth-warning -a \"$$(cat /run/secrets/nextcloud_redis_password)\" ping | grep PONG"]
+      start_period: 10s
+      interval: 30s
+      retries: 3
+      timeout: 3s
+    networks:
+      - nextcloud_internal
+  nextcloud:
+    image: nextcloud:34-apache
+    depends_on:
+      nextcloud_redis:
+        condition: service_healthy
+      nextcloud_db:
+        condition: service_healthy
+    env_file:
+      - ./nextcloud/nextcloud.env
+    secrets:
+      - nextcloud_postgres_db
+      - nextcloud_postgres_password
+      - nextcloud_postgres_user
+      - nextcloud_redis_password
+    networks:
+      - lb
+      - nextcloud_internal
+    volumes:
+      - /nassella/nextcloud/var-www-html:/var/www/html
+    restart: unless-stopped
+networks:
+  lb:
+  nextcloud_internal:
+    driver: bridge
+    internal: true

all-apps/nextcloud/34/nextcloud.env

@@ -0,0 +1,20 @@
+DOMAIN="nextcloud.nassella.cc"
+NEXTCLOUD_TRUSTED_DOMAINS=${DOMAIN}
+
+# reverse proxy config
+OVERWRITEHOST=${DOMAIN}
+OVERWRITECLIURL=https://${DOMAIN}
+OVERWRITEPROTOCOL=https
+TRUSTED_PROXIES=172.16.0.0/24 # trust the local lb
+PHP_MEMORY_LIMIT=1G
+PHP_UPLOAD_LIMIT=10G
+POSTGRES_HOST=db
+POSTGRES_DB_FILE=/run/secrets/postgres_db
+POSTGRES_USER_FILE=/run/secrets/postgres_user
+POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
+# admin user
+NEXTCLOUD_ADMIN_PASSWORD_FILE=/run/secrets/nextcloud_admin_password
+NEXTCLOUD_ADMIN_USER_FILE=/run/secrets/nextcloud_admin_user
+# redis
+REDIS_HOST=redis
+REDIS_HOST_PASSWORD_FILE=/run/secrets/redis_password

all-apps/nextcloud/34/nextcloud.env.tmpl

@@ -0,0 +1,16 @@
+NEXTCLOUD_TRUSTED_DOMAINS=${DOMAIN}
+
+# reverse proxy config
+OVERWRITEHOST=${DOMAIN}
+OVERWRITECLIURL=https://${DOMAIN}
+OVERWRITEPROTOCOL=https
+TRUSTED_PROXIES=172.16.0.0/24 # trust the local lb
+PHP_MEMORY_LIMIT=1G
+PHP_UPLOAD_LIMIT=10G
+POSTGRES_HOST=nextcloud_db
+POSTGRES_DB_FILE=/run/secrets/nextcloud_postgres_db
+POSTGRES_USER_FILE=/run/secrets/nextcloud_postgres_user
+POSTGRES_PASSWORD_FILE=/run/secrets/nextcloud_postgres_password
+# redis
+REDIS_HOST=nextcloud_redis
+REDIS_HOST_PASSWORD_FILE=/run/secrets/nextcloud_redis_password

all-apps/nextcloud/34/nextcloud_admin_password

@@ -0,0 +1 @@
+foodisgood

all-apps/nextcloud/34/nextcloud_admin_user

@@ -0,0 +1 @@
+admin

all-apps/nextcloud/34/postgres_db

@@ -0,0 +1 @@
+nextcloud

all-apps/nextcloud/34/postgres_password

@@ -0,0 +1 @@
+dbpassword

all-apps/nextcloud/34/postgres_user

@@ -0,0 +1 @@
+nextcloud

all-apps/nextcloud/34/redis_password

@@ -0,0 +1 @@
+redispassword