Post-Tyranny-Tech-Infrastru.../ansible/roles/nextcloud/tasks/main.yml

---
# Main tasks for Nextcloud deployment

- name: Include Docker deployment tasks
  include_tasks: docker.yml
  tags:
    - nextcloud
    - docker

- name: Include installation tasks
  include_tasks: install.yml
  tags:
    - nextcloud
    - install

- name: Include OIDC configuration tasks
  include_tasks: oidc.yml
  when: nextcloud_oidc_enabled | default(true)
  tags:
    - nextcloud
    - oidc
Deploy Nextcloud file sync/share with automated installation (#4) This commit implements a complete Nextcloud deployment with PostgreSQL, Redis, automated installation, and preparation for OIDC/SSO integration with Zitadel. ## Nextcloud Deployment ### New Ansible Role (ansible/roles/nextcloud/) - Complete Nextcloud v30 deployment with Docker Compose - PostgreSQL 16 backend with persistent volumes - Redis 7 for caching and file locking - Automated installation via Docker environment variables - Post-installation configuration via occ commands ### Features Implemented - Database: PostgreSQL with proper credentials and persistence - Caching: Redis for memory caching and file locking - HTTPS: Traefik integration with Let's Encrypt SSL - Security: Proper security headers and HSTS - WebDAV: CalDAV/CardDAV redirect middleware - Configuration: Automated trusted domain, reverse proxy, and Redis setup - OIDC Preparation: user_oidc app installed and enabled ### Traefik Updates - Added Nextcloud routing to dynamic.yml (static file-based config) - Configured CalDAV/CardDAV redirect middleware - Added Nextcloud-specific security headers ### Configuration Tasks - Automated trusted domain configuration for nextcloud.test.vrije.cloud - Reverse proxy overwrite settings (protocol, host, CLI URL) - Redis cache and locking configuration - Default phone region (NL) - Background jobs via cron ## Deployment Status ✅ Successfully deployed and tested: - Nextcloud: https://nextcloud.test.vrije.cloud/ - Admin login working - PostgreSQL database initialized - Redis caching operational - HTTPS with Let's Encrypt SSL - user_oidc app installed (ready for Zitadel integration) ## Next Steps To complete OIDC/SSO integration: 1. Create OIDC application in Zitadel console 2. Use redirect URI: https://nextcloud.test.vrije.cloud/apps/user_oidc/code 3. Configure provider in Nextcloud with Zitadel credentials Partially addresses #4 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> 2026-01-06 09:30:54 +01:00			`---`
			`# Main tasks for Nextcloud deployment`

			`- name: Include Docker deployment tasks`
			`include_tasks: docker.yml`
			`tags:`
			`- nextcloud`
			`- docker`

			`- name: Include installation tasks`
			`include_tasks: install.yml`
			`tags:`
			`- nextcloud`
			`- install`

			`- name: Include OIDC configuration tasks`
			`include_tasks: oidc.yml`
			`when: nextcloud_oidc_enabled \| default(true)`
			`tags:`
			`- nextcloud`
			`- oidc`