Change nextcloud trusted_proxies to pod range

templates/nextcloud-onlyoffice-config.yaml

@@ -83,33 +83,32 @@ data:
     php $occ db:add-missing-primary-keys --no-interaction
     php $occ db:convert-filecache-bigint --no-interaction
 
-  #
   # All values in config.json are applied by the nextcloud occ command
   #   config:import.
-  # system.trusted_proxies contains a list of proxies that are considered
-  #   to be trusted. 10.43.0.0/16 contains all ip addresses that are
-  #   assigned to kubernetes services which includes the ip address of
-  #   the ingress service that functions as a proxy.
-  # system.overwriteprotocol overwrites the protocol of links that are
-  #   generated by nextcloud to HTTPS.
-  # apps.core.backgroundjobs_mode set to cron disables the unreliable ajax
-  #   scheduling that is enabled by default. Ajax scheduling is not needed
-  #   because cronjobs are regularly executed by a kubernetes resource.
-  #
   config.json: |
     {
-        "system":{
-            "trusted_proxies": "10.43.0.0/16",
-            "overwriteprotocol": "https",
-            "appstoreenabled": false,
-            "debug": {{ .Values.nextcloud.debug | quote }}
+      "system":{
+        # system.trusted_proxies contains a list of proxies that are considered
+        # to be trusted. 10.42.0.0/16 contains all ip addresses that are
+        # assigned to kubernetes pods which includes the ip address of
+        # the ingress controller pod that functions as a reverse proxy.
+        "trusted_proxies": "10.42.0.0/16",
+        # system.overwriteprotocol overwrites the protocol of links that are
+        # generated by nextcloud to HTTPS.
+        "overwriteprotocol": "https",
+        "appstoreenabled": false,
+        "debug": {{ .Values.nextcloud.debug | quote }}
+      },
+      "apps":{
+        "core":{
+          # apps.core.backgroundjobs_mode set to webcron disables the
+          # unreliable ajax scheduling that is enabled by default. Ajax
+          # scheduling is not needed because cronjobs are regularly executed by
+          # a kubernetes resource.
+          "backgroundjobs_mode": "webcron"
         },
-        "apps":{
-            "core":{
-                "backgroundjobs_mode": "webcron"
-            },
-            "onlyoffice":{
-                "sameTab": "true"
-            }
+        "onlyoffice":{
+          "sameTab": "true"
         }
+      }
     }