our own nextcloud image, of course!

apps/web/nextcloud/Dockerfile

@@ -0,0 +1,5 @@
+FROM nextcloud:apache
+
+#patch curl wrapper 
+RUN sed -i '/CURLOPT_HEADERFUNCTION.*$/a $conf[CURLOPT_SSL_VERIFYPEER] = false;' /usr/src/nextcloud/3rdparty/guzzlehttp/guzzle/src/Handler/CurlFactory.php
+COPY config.php /usr/src/nextcloud/config/

apps/web/nextcloud/config.php

@@ -0,0 +1,59 @@
+<?php
+//
+//Manually deployed by yourself
+//
+$CONFIG = array (
+  'htaccess.RewriteBase' => '/',
+  'memcache.local' => '\\OC\\Memcache\\APCu',
+  'apps_paths' => 
+  array (
+    0 => 
+    array (
+      'path' => '/var/www/html/apps',
+      'url' => '/apps',
+      'writable' => false,
+    ),
+    1 => 
+    array (
+      'path' => '/var/www/html/custom_apps',
+      'url' => '/custom_apps',
+      'writable' => true,
+    ),
+  ),
+  'objectstore' => 
+  array (
+    'class' => '\\OC\\Files\\ObjectStore\\S3',
+    'arguments' => 
+    array (
+      'bucket' => 'buckets/nextcloud',
+      'key' => 'nextcloud',
+      'secret' => 'tWnc3zdxcDUvcX5f9uY7RRYvKLcWI1KY',
+      'region' => '',
+      'hostname' => 'minio.live-infra.svc.cluster.local',
+      'port' => '443',
+      'objectPrefix' => 'urn:oid:',
+      'autocreate' => false,
+      'use_ssl' => true,
+      'use_path_style' => true,
+      'legacy_auth' => false,
+    ),
+  ),
+  'instanceid' => 'ocsxqijfvpf7',
+  'passwordsalt' => 'OTjmXJP0VKlw+OLja6wUxbHlZk4Txw',
+  'secret' => '0g94SdF7A2k/LHTKUM+8HwEDFgF1zz7I/sMauap02/d8G677',
+  'trusted_domains' => 
+  array (
+    0 => 'nc.lan',
+  ),
+  'datadirectory' => '/var/www/html/data',
+  'dbtype' => 'pgsql',
+  'version' => '20.0.9.1',
+  'overwrite.cli.url' => 'http://nc.lan',
+  'dbname' => 'nextcloud',
+  'dbhost' => 'postgres.live-env.svc.cluster.local:5432',
+  'dbport' => '',
+  'dbtableprefix' => 'oc_',
+  'dbuser' => 'nextcloud',
+  'dbpassword' => 'Vb7yHzmE5HIjfU4hf89aXAmEEmxAnMdB',
+  'installed' => true,
+);

apps/web/nextcloud/deployment.yaml

@@ -23,7 +23,7 @@ spec:
     spec:
       containers:
         - name: nextcloud
-          image: docker.io/nextcloud:stable-fpm
+          image: docker.io/nextcloud:stable-apache
           imagePullPolicy: Always 
           env:
             - name: TZ
@@ -38,6 +38,22 @@ spec:
               value: Vb7yHzmE5HIjfU4hf89aXAmEEmxAnMdB
             - name: NEXTCLOUD_TRUSTED_DOMAINS
               value: nc nc.lan 172.23.255.1
+            - name: OBJECTSTORE_S3_HOST
+              # values: hdd-ebin01-ss-0-{0...2}.hdd-ebin01-hl.live-infra.svc.cluster.local
+              #value: hdd-ebin01-ss-0-0.hdd-ebin01-hl.live-infra.svc.cluster.local
+              value: minio.live-infra.svc.cluster.local
+            - name: OBJECTSTORE_S3_BUCKET
+              value: nextcloud
+            - name: OBJECTSTORE_S3_KEY
+              value: nextcloud
+            - name: OBJECTSTORE_S3_SECRET
+              value: tWnc3zdxcDUvcX5f9uY7RRYvKLcWI1KY
+            - name: OBJECTSTORE_S3_PORT
+              value: "443"
+            - name: OBJECTSTORE_S3_USEPATH_STYLE
+              value: "true"
+            - name: OBJECTSTORE_S3_SSL
+              value: "true"
           ports:
             - name: http
               containerPort: 80

apps/web/nextcloud/tekton-image-build.yaml

@@ -0,0 +1,77 @@
+apiVersion: tekton.dev/v1alpha1
+kind: PipelineResource
+metadata:
+  name: chaos-kubernetes-git
+spec:
+  type: git
+  params:
+    - name: revision
+      value: master
+    - name: url
+      value: http://git-ui.lan/chaos/kubernetes.git
+    - name: submodules
+      value: "false"
+---
+apiVersion: tekton.dev/v1alpha1
+kind: PipelineResource
+metadata:
+  name: img-nextcloud
+spec:
+  type: image
+  params:
+    - name: url
+      value: cr.lan/nextcloud
+---
+apiVersion: tekton.dev/v1beta1
+kind: Task
+metadata:
+  name: build-nextcloud
+spec:
+  params:
+    - name: pathToDockerFile
+      type: string
+      default: $(resources.inputs.source.path)/apps/web/nextcloud/Dockerfile
+    - name: pathToContext
+      type: string
+      default: $(resources.inputs.source.path)/apps/web/nextcloud
+  resources:
+    inputs:
+      - name: source
+        type: git
+    outputs:
+      - name: builtImage
+        type: image
+  steps:
+    - name: build-and-push
+      image: gcr.io/kaniko-project/executor:arm64
+      command:
+        - /kaniko/executor
+      args:
+        - --dockerfile=$(params.pathToDockerFile)
+        - --destination=$(resources.outputs.builtImage.url)
+        - --context=$(params.pathToContext)
+        - --snapshotMode=redo
+        - --skip-tls-verify
+---
+apiVersion: tekton.dev/v1beta1
+kind: TaskRun
+metadata:
+  name: img-nextcloud-taskrun
+spec:
+  #serviceAccountName: dockerhub-service
+  taskRef:
+    name: build-nextcloud
+  params:
+    - name: pathToDockerFile
+      value: Dockerfile
+  resources:
+    inputs:
+      - name: source
+        resourceRef:
+          name: chaos-kubernetes-git
+    outputs:
+      - name: builtImage
+        resourceRef:
+          name: img-nextcloud
+          
+