disable middlewares on internal ingress

deploy/app/helm-values.yaml

@@ -89,10 +89,57 @@ cronjob:
 
 
 nextcloud:
+
+  extraInitContainers: 
+    - name: data-folder-structure-fix
+      image: busybox
+      command:
+        - sh
+        - -c
+        - |
+          # Create only parents
+          mkdir -p /mnt/users
+          mkdir -p /mnt/shared
+
+          # Fix permissions on parents pvc folder data-folder-structure
+          chown 33:33 /mnt/users
+          chown 33:33 /mnt/shared
+          chown 33:33 /mnt/users/marcio.fernandes
+          chown 33:33 /mnt/users/marcio.fernandes/Documents
+          chown 33:33 /mnt/users/marcio.fernandes/Photos
+          chown 33:33 /mnt/shared/Gaming
+          chown 33:33 /mnt/shared/Music
+          chown 33:33 /mnt/shared/Videos
+          chown 33:33 /mnt/shared/NerdStuff
+
+      volumeMounts:
+        - name: data-folder-structure
+          mountPath: /mnt
+        - name: mf-nextcloud
+          mountPath: /mnt/users/marcio.fernandes
+        - name: mf-documents
+          mountPath: /mnt/users/marcio.fernandes/Documents
+        - name: mf-photos
+          mountPath: /mnt/users/marcio.fernandes/Photos
+        - name: media-gaming
+          mountPath: /mnt/shared/Gaming
+        - name: media-music
+          mountPath: /mnt/shared/Music
+        - name: media-videos
+          mountPath: /mnt/shared/Videos
+        - name: it-storage
+          mountPath: /mnt/shared/NerdStuff
+  securityContext:
+    runAsUser: 33
+    runAsGroup: 33
+    fsGroup: 33
+    fsGroupChangePolicy: "OnRootMismatch"
+  
   phpConfigs:
     php.ini: |-
       memory_limit = 512M
   extraVolumes:
+
     - name: mf-documents
       persistentVolumeClaim:
         claimName: mf-documents-limbosolutions-com
@@ -114,9 +161,14 @@ nextcloud:
     - name: mf-nextcloud
       persistentVolumeClaim:
         claimName: mf-nextcloud-limbosolutions-com
-
+    - name: data-folder-structure
+      emptyDir: {}
 
   extraVolumeMounts:
+  
+      - name: data-folder-structure
+        mountPath: /mnt
+
       - name: mf-nextcloud
         mountPath: /mnt/users/marcio.fernandes
 

deploy/infra/ingress-web.yaml

@@ -15,47 +15,47 @@ spec:
 
   routes:
 
-    # AUTHENTIK OUTPOST
-    - match: Host(`cloud.limbosolutions.com`)  && PathPrefix(`/outpost.goauthentik.io`)
-      kind: Rule
-      services:
-        - name: ak-outpost-authentik-embedded-outpost
-          namespace: id-limbosolutions-com
-          port: 9000
+    # # AUTHENTIK OUTPOST
+    # - match: Host(`cloud.limbosolutions.com`)  && PathPrefix(`/outpost.goauthentik.io`)
+    #   kind: Rule
+    #   services:
+    #     - name: ak-outpost-authentik-embedded-outpost
+    #       namespace: id-limbosolutions-com
+    #       port: 9000
 
 
-    # PUBLIC SHARES (NO SSO)
-    - match: Host(`cloud.limbosolutions.com`) &&
-            (PathPrefix(`/s/`) ||
-              PathPrefix(`/index.php/s/`) ||
-              PathPrefix(`/public.php/`) ||
-              PathPrefix(`/remote.php/dav/public-files/`))
-      kind: Rule
-      services:
-        - name: nextcloud
-          port: 8080
-      middlewares:
-        - name: rate-limit
-        - name: nextcloud-security-headers
+    # # PUBLIC SHARES (NO SSO)
+    # - match: Host(`cloud.limbosolutions.com`) &&
+    #         (PathPrefix(`/s/`) ||
+    #           PathPrefix(`/index.php/s/`) ||
+    #           PathPrefix(`/public.php/`) ||
+    #           PathPrefix(`/remote.php/dav/public-files/`))
+    #   kind: Rule
+    #   services:
+    #     - name: nextcloud
+    #       port: 8080
+    #   middlewares:
+    #     - name: rate-limit
+    #     - name: nextcloud-security-headers
 
-    # Sync clients + mobile app (no SSO)
-    - match: Host(`cloud.limbosolutions.com`) &&
-         (PathPrefix(`/remote.php/dav`) ||
-          PathPrefix(`/remote.php/webdav`) ||
-          PathPrefix(`/remote.php/caldav`) ||
-          PathPrefix(`/remote.php/carddav`) ||
-          PathPrefix(`/ocs/v1.php`) ||
-          PathPrefix(`/ocs/v2.php`) ||
-          PathPrefix(`/status.php`) ||
-          PathPrefix(`/index.php/login/v2`) ||
-          PathPrefix(`/index.php/login/v2/poll`))
-      kind: Rule
-      services:
-        - name: nextcloud
-          port: 8080
-      middlewares:
-        - name: webdav-strip-auth
-        - name: rate-limit
+    # # Sync clients + mobile app (no SSO)
+    # - match: Host(`cloud.limbosolutions.com`) &&
+    #      (PathPrefix(`/remote.php/dav`) ||
+    #       PathPrefix(`/remote.php/webdav`) ||
+    #       PathPrefix(`/remote.php/caldav`) ||
+    #       PathPrefix(`/remote.php/carddav`) ||
+    #       PathPrefix(`/ocs/v1.php`) ||
+    #       PathPrefix(`/ocs/v2.php`) ||
+    #       PathPrefix(`/status.php`) ||
+    #       PathPrefix(`/index.php/login/v2`) ||
+    #       PathPrefix(`/index.php/login/v2/poll`))
+    #   kind: Rule
+    #   services:
+    #     - name: nextcloud
+    #       port: 8080
+    #   middlewares:
+    #     #- name: webdav-strip-auth
+    #     #- name: rate-limit
 
     # 3) EVERYTHING ELSE (SSO REQUIRED)
     - match: Host(`cloud.limbosolutions.com`)
@@ -63,10 +63,10 @@ spec:
       services:
         - name: nextcloud
           port: 8080
-      middlewares:
+      middlewares: []
          #- name: authentik-forward-auth
-         - name: nextcloud-security-headers
-         - name: rate-limit
+         #- name: nextcloud-security-headers
+         #- name: rate-limit