Post-Tyranny-Tech-Infrastru.../ansible/roles/nextcloud/tasks/docker.yml

---
# Docker deployment tasks for Nextcloud

- name: Create Nextcloud directory
  file:
    path: /opt/nextcloud
    state: directory
    mode: '0755'

- name: Deploy Nextcloud Docker Compose file
  template:
    src: docker-compose.nextcloud.yml.j2
    dest: /opt/nextcloud/docker-compose.yml
    mode: '0600'
  notify: Restart Nextcloud

- name: Start Nextcloud services
  community.docker.docker_compose_v2:
    project_src: /opt/nextcloud
    state: present
  register: nextcloud_deploy

- name: Wait for Nextcloud to be ready
  wait_for:
    host: localhost
    port: 80
    delay: 10
    timeout: 300
  when: nextcloud_deploy.changed
Deploy Nextcloud file sync/share with automated installation (#4) This commit implements a complete Nextcloud deployment with PostgreSQL, Redis, automated installation, and preparation for OIDC/SSO integration with Zitadel. ## Nextcloud Deployment ### New Ansible Role (ansible/roles/nextcloud/) - Complete Nextcloud v30 deployment with Docker Compose - PostgreSQL 16 backend with persistent volumes - Redis 7 for caching and file locking - Automated installation via Docker environment variables - Post-installation configuration via occ commands ### Features Implemented - Database: PostgreSQL with proper credentials and persistence - Caching: Redis for memory caching and file locking - HTTPS: Traefik integration with Let's Encrypt SSL - Security: Proper security headers and HSTS - WebDAV: CalDAV/CardDAV redirect middleware - Configuration: Automated trusted domain, reverse proxy, and Redis setup - OIDC Preparation: user_oidc app installed and enabled ### Traefik Updates - Added Nextcloud routing to dynamic.yml (static file-based config) - Configured CalDAV/CardDAV redirect middleware - Added Nextcloud-specific security headers ### Configuration Tasks - Automated trusted domain configuration for nextcloud.test.vrije.cloud - Reverse proxy overwrite settings (protocol, host, CLI URL) - Redis cache and locking configuration - Default phone region (NL) - Background jobs via cron ## Deployment Status ✅ Successfully deployed and tested: - Nextcloud: https://nextcloud.test.vrije.cloud/ - Admin login working - PostgreSQL database initialized - Redis caching operational - HTTPS with Let's Encrypt SSL - user_oidc app installed (ready for Zitadel integration) ## Next Steps To complete OIDC/SSO integration: 1. Create OIDC application in Zitadel console 2. Use redirect URI: https://nextcloud.test.vrije.cloud/apps/user_oidc/code 3. Configure provider in Nextcloud with Zitadel credentials Partially addresses #4 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> 2026-01-06 09:30:54 +01:00			`---`
			`# Docker deployment tasks for Nextcloud`

			`- name: Create Nextcloud directory`
			`file:`
			`path: /opt/nextcloud`
			`state: directory`
			`mode: '0755'`

			`- name: Deploy Nextcloud Docker Compose file`
			`template:`
			`src: docker-compose.nextcloud.yml.j2`
			`dest: /opt/nextcloud/docker-compose.yml`
			`mode: '0600'`
			`notify: Restart Nextcloud`

			`- name: Start Nextcloud services`
			`community.docker.docker_compose_v2:`
			`project_src: /opt/nextcloud`
			`state: present`
			`register: nextcloud_deploy`

			`- name: Wait for Nextcloud to be ready`
			`wait_for:`
			`host: localhost`
			`port: 80`
			`delay: 10`
fix: Increase Nextcloud wait timeout to 300s and make invitation flow non-blocking - Nextcloud initialization can take 3-5 minutes on first deploy - Both recovery and invitation flows now non-blocking - Fixes deployment failures during fresh server builds 2026-01-13 13:14:47 +01:00			`timeout: 300`
Deploy Nextcloud file sync/share with automated installation (#4) This commit implements a complete Nextcloud deployment with PostgreSQL, Redis, automated installation, and preparation for OIDC/SSO integration with Zitadel. ## Nextcloud Deployment ### New Ansible Role (ansible/roles/nextcloud/) - Complete Nextcloud v30 deployment with Docker Compose - PostgreSQL 16 backend with persistent volumes - Redis 7 for caching and file locking - Automated installation via Docker environment variables - Post-installation configuration via occ commands ### Features Implemented - Database: PostgreSQL with proper credentials and persistence - Caching: Redis for memory caching and file locking - HTTPS: Traefik integration with Let's Encrypt SSL - Security: Proper security headers and HSTS - WebDAV: CalDAV/CardDAV redirect middleware - Configuration: Automated trusted domain, reverse proxy, and Redis setup - OIDC Preparation: user_oidc app installed and enabled ### Traefik Updates - Added Nextcloud routing to dynamic.yml (static file-based config) - Configured CalDAV/CardDAV redirect middleware - Added Nextcloud-specific security headers ### Configuration Tasks - Automated trusted domain configuration for nextcloud.test.vrije.cloud - Reverse proxy overwrite settings (protocol, host, CLI URL) - Redis cache and locking configuration - Default phone region (NL) - Background jobs via cron ## Deployment Status ✅ Successfully deployed and tested: - Nextcloud: https://nextcloud.test.vrije.cloud/ - Admin login working - PostgreSQL database initialized - Redis caching operational - HTTPS with Let's Encrypt SSL - user_oidc app installed (ready for Zitadel integration) ## Next Steps To complete OIDC/SSO integration: 1. Create OIDC application in Zitadel console 2. Use redirect URI: https://nextcloud.test.vrije.cloud/apps/user_oidc/code 3. Configure provider in Nextcloud with Zitadel credentials Partially addresses #4 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> 2026-01-06 09:30:54 +01:00			`when: nextcloud_deploy.changed`