add onlyoffice, and ingress revision

deploy/app/helm-values.yaml

@@ -157,7 +157,12 @@ nextcloud:
           'overwritehost' => 'cloud.limbosolutions.com',
           'overwrite.cli.url' => 'https://cloud.limbosolutions.com',
           'overwriteprotocol' => 'https',
-          'trusted_proxies' => array ( 0 => '127.0.0.1', 1 => '::1', 2 => '10.0.0.0'),
+          'trusted_proxies' =>
+            array (
+              0 => '127.0.0.1',
+              1 => '::1',
+              2 => '10.0.0.0/8',
+            ),
         );
     
     # A value of 1 e.g. will only run these background jobs between 01:00am UTC and 05:00am UTC:
@@ -167,6 +172,17 @@ nextcloud:
         $CONFIG = array (
           'maintenance_window_start' => 1,
         );
+
+    onlyoffice.config.php: |-
+      <?php
+      $CONFIG = array (
+        'onlyoffice' =>
+        array (
+          'verify_peer_off' => true,
+          'allow_local_remote_servers' => true,
+          'allow_external_storage' => true,
+        ),
+      );        
 ingress:
   enabled: false
 

deploy/app/kustomization.yaml

@@ -14,6 +14,7 @@ resources:
   - ./storage-limbosolutions-com/pvc.yaml
   - ./mariadb-deploy.yaml
   - ./backups/backup-pbs-cronjob.yaml
+  - ./onlyoffice
 
 generatorOptions:
   disableNameSuffixHash: true

deploy/app/onlyoffice/.env.d/.gitignore

@@ -0,0 +1,2 @@
+**
+!.gitignore

deploy/app/onlyoffice/deployment.yaml

@@ -0,0 +1,28 @@
+
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: onlyoffice
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: onlyoffice
+  template:
+    metadata:
+      labels:
+        app: onlyoffice
+    spec:
+      containers:
+        - name: onlyoffice
+          image: onlyoffice/documentserver:latest
+          ports:
+            - containerPort: 80
+          env:
+            - name: JWT_ENABLED
+              value: "true"
+            - name: JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: onlyoffice
+                  key: secret

deploy/app/onlyoffice/kustomization.yaml

@@ -0,0 +1,17 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+secretGenerator:
+  - name: onlyoffice
+    envs:
+      - ./.env.d/onlyoffice.env
+
+
+generatorOptions:
+  disableNameSuffixHash: true
+namespace: cloud-limbosolutions-com
+
+resources:
+  - ./deployment.yaml
+  - ./service.yaml
+  - ./pvc.yaml

deploy/app/onlyoffice/service.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: onlyoffice
+spec:
+  ports:
+    - port: 80
+      targetPort: 80
+  selector:
+    app: onlyoffice