Newer
Older
ingress:
enabled: true
annotations:
# Tell cert-manager to automatically get a TLS certificate
kubernetes.io/tls-acme: "true"
hosts:
- "files.your.domain"
# This information is important for cert-manager, if you use it.
tls:
- hosts:
- "files.your.domain"
secretName: files-cert
# Configure MariaDB chart
password: CHANGE_ME
rootPassword: CHANGE_ME
# Enable persistence
# primary:
# persistence:
# ## Enable mariadb persistence using Persistent Volume Claims.
# enabled: true
# size: 512Mi
# Creates a kubernetes cronJob object that runs nextcloud's cron.php
# every 5 minutes (*/5 * * * *)
# cronjob:
# enabled: true
# persistence:
# enabled: true
# size: 2Gi
global:
onlyofficeDb:
password: CHANGE_ME
onlyoffice:
jwtSecret: CHANGE_ME
annotations:
# Tell cert-manager to automatically get a TLS certificate
kubernetes.io/tls-acme: "true"
tls:
- hosts:
- "office.your.domain"
secretName: office-cert
rabbitmq:
# apps controls which apps will be installed and enabled in nextcloud
# apps:
# - name: sociallogin
# # apps[0].enabled needs to be set to true if you want to enable login via an external
# # oauth server. In that case you need to configure all the values in `sociallogin`
# enabled: false
# - name: onlyoffice
# enabled: true

Maarten de Waard
committed
# - name: polls
# # Install an app from a github repository. This has the advantage that you
# # can pin the version number, so it does not get auto-updated to breaking
# # versions.
# # Note: you can use the version number in the release_filename variable if
# # needed, as written here:

Maarten de Waard
committed
# github_repository: nextcloud/polls
# version: 3.8.1
# release_filename: polls-{{ .version }}.tar.gz

Maarten de Waard
committed
# enabled: true
# sociallogin enables login via oAuth/Open-ID Connect
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
# sociallogin:
# # Because of how we import these settings, single quotes (') are not allowed
# # in any of the values below
# custom_oidc:
# name: stackspin
# title: Stackspin
# # The oAuth server needs to provide the endpoints `/userinfo`,
# # `/oauth2/token` and `/oauth2/auth` and according to the oauth2 standard it
# # needs to be accessible via https with valid certificates
# authorizeUrl: https://sso.stackspin.example.net/oauth2/auth
# tokenUrl: https://sso.stackspin.example.net/oauth2/token
# userInfoUrl: https://sso.stackspin.example.net/userinfo
# logoutUrl: ""
# # The client name nextcloud will use to communicate with the oAuth server
# clientId: nextcloud
# # The password that nextcloud uses when communicating with the oauth server
# # clientSecret: YouReallyNeedToChangeThis
# scope: "openid profile email stackspin_roles"
# # The name of a claim that the nextcloud server can retrieve by querying the
# # userInfoUrl of the openID Connect server. For every value in the
# # groups_claim a corresponding group with an `stackspin_` prefix will be created
# # if they don't exist yet. The user will then be added to those groups. If
# # the claim contains the value `admin` the user will be granted admin
# # privileges.
# groupsClaim: "stackspin_roles"
# style: ""
# defaultGroup: ""
# groupMapping:
# admin: admin