k8s-manifests/customers/base/nextcloud-configmap.yml

apiVersion: v1
kind: ConfigMap
metadata:
  name: nextcloud-configmap
data:
  000-default.conf: |
    LoadModule remoteip_module /usr/lib/apache2/modules/mod_remoteip.so
    <VirtualHost *:8080>
        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/html
        SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded
        ErrorLog /dev/stderr
        CustomLog /dev/stdout common
        TransferLog /dev/stdout

        # Header config
        RemoteIPHeader X-Forwarded-For
        RemoteIPInternalProxy 37.156.195.11
        RemoteIPInternalProxy 37.156.195.12
        RemoteIPInternalProxy 37.156.195.21
        RemoteIPInternalProxy 37.156.195.22
        # TODO: Package 404 for k8s
        # ErrorDocument 404 /404.html
        <Directory /var/www/html/>
            LimitRequestBody 0
            Require all granted
            AllowOverride All
            Options FollowSymLinks MultiViews

            <IfModule mod_dav.c>
                Dav off
            </IfModule>
        </Directory>
    </VirtualHost>
  apache2.conf: |
    DefaultRuntimeDir ${APACHE_RUN_DIR}
    PidFile ${APACHE_PID_FILE}
    Timeout 300
    KeepAlive On
    MaxKeepAliveRequests 100
    KeepAliveTimeout 5
    User ${APACHE_RUN_USER}
    Group ${APACHE_RUN_GROUP}
    HostnameLookups Off
    ErrorLog /dev/stderr
    CustomLog /dev/stdout common
    TransferLog /dev/stdout
    LogLevel debug
    IncludeOptional mods-enabled/*.load
    IncludeOptional mods-enabled/*.conf
    Include ports.conf
    <Directory />
      Options FollowSymLinks
      AllowOverride None
      Require all denied
    </Directory>
    <Directory /usr/share>
      AllowOverride None
      Require all granted
    </Directory>
    <Directory /var/www/>
      Options Indexes FollowSymLinks
      AllowOverride None
      Require all granted
    </Directory>
    AccessFileName .htaccess
    <FilesMatch "^\.ht">
      Require all denied
    </FilesMatch>
    LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
    LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %O" common
    LogFormat "%{Referer}i -> %U" referer
    LogFormat "%{User-agent}i" agent
    IncludeOptional conf-enabled/*.conf
    IncludeOptional sites-enabled/*.conf
  config.php: |
    <?php
    $CONFIG = array (
      'memcache.local' => '\\OC\\Memcache\\APCu',
      'appstoreenabled' => false,
      'apps_paths' =>
      array (
        0 =>
        array (
          'path' => '/var/www/html/apps',
          'url' => '/apps',
          'writable' => false,
        ),
        1 =>
        array (
          'path' => '/var/www/html/custom_apps',
          'url' => '/custom_apps',
          'writable' => true,
        ),
      ),
      'memcache.distributed' => '\\OC\\Memcache\\Redis',
      'memcache.locking' => '\\OC\\Memcache\\Redis',
      'redis' =>
      array (
        'host' => '{{REDIS_HOST}}',
        'password' => '{{REDIS_PASSWORD}}',
        'port' => 6379,
      ),
      'forcessl' => true,
      'overwriteprotocol' => 'https',
      'objectstore' =>
      array (
        'class' => '\\OC\\Files\\ObjectStore\\S3',
        'arguments' =>
        array (
          'bucket' => '{{OBJECTSTORE_S3_BUCKET}}',
          'key' => '{{OBJECTSTORE_S3_KEY}}',
          'secret' => '{{OBJECTSTORE_S3_SECRET}}',
          'region' => '{{OBJECTSTORE_S3_REGION}}',
          'hostname' => '{{OBJECTSTORE_S3_HOST}}',
          'port' => '',
          'objectPrefix' => 'urn:oid:',
          'autocreate' => false,
          'use_ssl' => true,
          'use_path_style' => true,
          'legacy_auth' => false,
        ),
      ),
      'csrf.disabled' => true,
      'passwordsalt' => '{{NEXTCLOUD_PASSWORDSALT}}',
      'secret' => '{{NEXTCLOUD_SECRET}}',
      'trusted_domains' =>
      array (
        0 => '{{NEXTCLOUD_TRUSTED_DOMAINS}}'
      ),
      'config_is_read_only' => true,
      'datadirectory' => '/var/www/html/data',
      'dbhost' => '{{MYSQL_HOST}}',
      'dbname' => '{{MYSQL_DATABASE}}',
      'dbpassword' => '{{MYSQL_PASSWORD}}',
      'dbport' => '{{MYSQL_PORT}}',
      'dbtableprefix' => 'oc_',
      'dbtype' => 'mysql',
      'dbuser' => '{{MYSQL_USER}}',
      'gs.enabled' => 'true',
      'gs.federation' => 'global',
      'gs.trustedHosts' => ['*.sunet.se'],
      'gss.jwt.key' => '{{GSS_JWT_KEY}}',
      'gss.master.url' => '{{GSS_MASTER_URL}}',
      'gss.mode' => 'slave',
      'gss.user.discovery.module' => '\\OCA\\GlobalSiteSelector\\UserDiscoveryModules\\ManualUserMapping',
      'installed' => true,
      'instanceid' => '{{NEXTCLOUD_INSTANCEID}}',
      'log_type' => 'file',
      'loglevel' => 0,
      'lookup_server' => '{{LOOKUP_SERVER}}',
      'mail_domain' => '{{MAIL_DOMAIN}}',
      'mail_from_address' => '{{MAIL_FROM_ADDRESS}}',
      'mail_sendmailmode' => 'smtp',
      'mail_smtpauth' => 1,
      'mail_smtpauthtype' => 'LOGIN',
      'mail_smtphost' => '{{MAIL_SMTPHOST}}',
      'mail_smtpmode' => 'smtp',
      'mail_smtpname' => '{{MAIL_SMTPNAME}}',
      'mail_smtppassword' => '{{MAIL_SMTPPASSWORD}}',
      'mail_smtpport' => '587',
      'mail_smtpsecure' => 'tls',
      'mail_template_class' => 'OCA\DriveEmailTemplate\EMailTemplate',
      'mysql.utf8mb4' => true,
      'overwritehost' => '{{SITE_NAME}}',
      'overwrite.cli.url' => 'https://{{SITE_NAME}}',
      'templatedirectory' => '',
      'skeletondirectory' => '',
      'twofactor_enforced' => 'true',
      'twofactor_enforced_groups' =>
      array (
        0 => 'admin',
      ),
      'version' => '{{NEXTCLOUD_VERSION_STRING}}',
      'app_install_overwrite' =>
      array (
        0 => 'globalsiteselector',
      ),

    );
  envars: |
    unset HOME
    if [ "${APACHE_CONFDIR##/etc/apache2-}" != "${APACHE_CONFDIR}" ] ; then
      SUFFIX="-${APACHE_CONFDIR##/etc/apache2-}"
    else
      SUFFIX=
    fi
    export APACHE_RUN_USER=www-data
    export APACHE_RUN_GROUP=www-data
    export APACHE_PID_FILE=/var/run/apache2$SUFFIX/apache2.pid
    export APACHE_RUN_DIR=/var/run/apache2$SUFFIX
    export APACHE_LOCK_DIR=/var/lock/apache2$SUFFIX
    export APACHE_LOG_DIR=/tmp$SUFFIX
    export LANG=C
    export LANG
  ports.conf: |
    Listen 8080