continuous deploy - service account and gitea workflow

2026-03-20 13:36:48 +00:00
parent 23c4b440ee
commit 249b1fb567
22 changed files with 275 additions and 106 deletions
--- a/deploy/app/helm-values.yaml
+++ b/deploy/app/helm-values.yaml
@@ -0,0 +1,154 @@
+image:
+  repository: nextcloud
+  flavor: apache
+  tag:
+  pullPolicy: Always
+  
+replicaCount: 1
+
+livenessProbe:
+  initialDelaySeconds: 60
+  periodSeconds: 10
+  timeoutSeconds: 5
+  failureThreshold: 6
+
+readinessProbe:
+  initialDelaySeconds: 60
+  periodSeconds: 10
+  timeoutSeconds: 5
+  failureThreshold: 12
+
+# ------------------------------------------------------------------------------
+# Nextcloud maintenance mode & Kubernetes probes
+# ------------------------------------------------------------------------------
+# When performing upgrades or running `occ upgrade`, Nextcloud may return 503
+# on /status.php until the database migration is complete. During this period,
+# Kubernetes will repeatedly kill the pod because the readiness/liveness probes
+# fail before the upgrade finishes.
+#
+# To prevent Kubernetes from terminating the pod during maintenance or upgrades,
+# temporarily disable both probes. This allows the container to stay alive long
+# enough for you to exec into it and run:
+#
+#     php occ upgrade
+#
+# After the upgrade completes, re‑enable the probes.
+#
+# Example:
+#
+# livenessProbe:
+#   enabled: false
+#
+# readinessProbe:
+#   enabled: false
+# ------------------------------------------------------------------------------
+
+
+
+internalDatabase:
+  enabled: false
+
+mariadb:
+  enabled: false
+
+externalDatabase:
+  enabled: true
+  type: mysql
+  host: nextcloud-mariadb.cloud-limbosolutions-com.svc.cluster.local
+  user: "???"
+  password: "???"
+  database: "???"
+  port: 3306
+
+persistence:
+  enabled: true
+  accessMode: ReadWriteOnce
+  size: 8Gi
+
+  nextcloudData:
+    accessMode: ReadWriteOnce
+    size: 8Gi
+
+resources:
+  limits:
+    cpu: "1"
+    memory: 3000Mi
+  requests:
+    cpu: "0.5"
+    memory: 512Mi
+
+
+## Cronjob to execute Nextcloud background tasks
+## ref: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/background_jobs_configuration.html#cron
+##
+cronjob:
+  enabled: true
+
+nextcloud:
+  extraVolumes:
+    - name: mf-documents
+      persistentVolumeClaim:
+        claimName: mf-documents-limbosolutions-com
+    - name: mf-photos
+      persistentVolumeClaim:
+        claimName: mf-gallery-limbosolutions-com
+    - name: media-gaming
+      persistentVolumeClaim:
+        claimName: media-gaming-limbosolutions-com
+    - name: media-music
+      persistentVolumeClaim:
+        claimName: media-music-limbosolutions-com
+    - name: media-videos
+      persistentVolumeClaim:
+        claimName: media-videos-limbosolutions-com
+    - name: it-storage
+      persistentVolumeClaim:
+        claimName: it-storage-limbosolutions-com
+    - name: mf-nextcloud
+      persistentVolumeClaim:
+        claimName: mf-nextcloud-limbosolutions-com
+
+
+  extraVolumeMounts:
+      - name: mf-nextcloud
+        mountPath: /var/www/html/data/marcio.fernandes/files
+
+      - name: mf-documents
+        mountPath: /var/www/html/data/marcio.fernandes/files/Documents
+
+      - name: mf-photos
+        mountPath: /var/www/html/data/marcio.fernandes/files/Photos
+
+      - name: media-gaming
+        mountPath: /var/www/html/data/marcio.fernandes/files/Gaming
+
+      - name: media-music
+        mountPath: /var/www/html/data/marcio.fernandes/files/Music
+
+      - name: media-videos
+        mountPath: /var/www/html/data/marcio.fernandes/files/Videos
+
+      - name: it-storage
+        mountPath: /var/www/html/data/marcio.fernandes/files/NeirdStorage
+  configs:
+    https.config.php: |-
+      <?php
+        $CONFIG = array (
+          'overwritehost' => 'cloud.limbosolutions.com',
+          'overwrite.cli.url' => 'https://cloud.limbosolutions.com',
+          'overwriteprotocol' => 'https',
+          'trusted_proxies' => array ( 0 => '127.0.0.1', 1 => '::1', 2 => '10.0.0.0'),
+        );
+    
+    # A value of 1 e.g. will only run these background jobs between 01:00am UTC and 05:00am UTC:
+    # https://docs.nextcloud.com/server/30/admin_manual/configuration_server/background_jobs_configuration.html
+    maintenance.config.php: |-
+      <?php
+        $CONFIG = array (
+          'maintenance_window_start' => 1,
+        );
+ingress:
+  enabled: false
+
+
+