2026-01-06 09:30:54 +01:00
|
|
|
---
|
|
|
|
|
# Default variables for nextcloud role
|
|
|
|
|
|
|
|
|
|
# Nextcloud version
|
chore: Post-workshop state - January 23rd, 2026
This commit captures the infrastructure state immediately following
the "Post-Tyranny Tech" workshop on January 23rd, 2026.
Infrastructure Status:
- 13 client servers deployed (white, valk, zwaan, specht, das, uil, vos,
haas, wolf, ree, mees, mus, mol, kikker)
- Services: Authentik SSO, Nextcloud, Collabora Office, Traefik
- Private network architecture with edge NAT gateway
- OIDC integration between Authentik and Nextcloud
- Automated recovery flows and invitation system
- Container update monitoring with Diun
- Uptime monitoring with Uptime Kuma
Changes include:
- Multiple new client host configurations
- Network architecture improvements (private IPs + NAT)
- DNS management automation
- Container update notifications
- Email configuration via Mailgun
- SSH key generation for all clients
- Encrypted secrets for all deployments
- Health check and diagnostic scripts
Known Issues to Address:
- Nextcloud version pinned to v30 (should use 'latest' or v32)
- Zitadel references in templates (migrated to Authentik but templates not updated)
- Traefik dynamic config has obsolete static routes
🤖 Generated with Claude Code (https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-23 20:36:31 +01:00
|
|
|
nextcloud_version: "latest" # Always use latest stable version
|
2026-01-06 09:30:54 +01:00
|
|
|
|
|
|
|
|
# Database configuration
|
|
|
|
|
nextcloud_db_type: "pgsql"
|
|
|
|
|
nextcloud_db_host: "nextcloud-db"
|
|
|
|
|
nextcloud_db_port: "5432"
|
|
|
|
|
nextcloud_db_name: "nextcloud"
|
|
|
|
|
nextcloud_db_user: "nextcloud"
|
|
|
|
|
|
|
|
|
|
# Admin user configuration
|
|
|
|
|
nextcloud_admin_user: "admin"
|
|
|
|
|
|
|
|
|
|
# Nextcloud domain (will be set from client_domain variable)
|
|
|
|
|
nextcloud_domain: "nextcloud.{{ client_domain }}"
|
|
|
|
|
|
|
|
|
|
# Redis configuration for caching and file locking
|
|
|
|
|
nextcloud_redis_host: "nextcloud-redis"
|
|
|
|
|
nextcloud_redis_port: "6379"
|
|
|
|
|
|
|
|
|
|
# OIDC configuration
|
|
|
|
|
nextcloud_oidc_enabled: true
|
|
|
|
|
nextcloud_oidc_provider_url: "https://{{ zitadel_domain }}"
|
|
|
|
|
nextcloud_oidc_client_id: "" # Will be set after creating app in Zitadel
|
|
|
|
|
nextcloud_oidc_client_secret: "" # Will be set after creating app in Zitadel
|
|
|
|
|
|
|
|
|
|
# Trusted domains (for Nextcloud config)
|
|
|
|
|
nextcloud_trusted_domains:
|
|
|
|
|
- "{{ nextcloud_domain }}"
|
|
|
|
|
|
|
|
|
|
# PHP memory limit
|
|
|
|
|
nextcloud_php_memory_limit: "512M"
|
|
|
|
|
nextcloud_php_upload_limit: "16G"
|
2026-01-06 10:34:42 +01:00
|
|
|
|
|
|
|
|
# Collabora Office configuration
|
|
|
|
|
collabora_enabled: true
|
|
|
|
|
collabora_domain: "office.{{ client_domain }}"
|
|
|
|
|
collabora_admin_user: "admin"
|
|
|
|
|
# Password stored in secrets: collabora_admin_password
|
|
|
|
|
|
|
|
|
|
# Two-factor authentication
|
|
|
|
|
twofactor_enforced: true
|