This commit implements a complete Nextcloud deployment with PostgreSQL, Redis, automated installation, and preparation for OIDC/SSO integration with Zitadel. ## Nextcloud Deployment ### New Ansible Role (ansible/roles/nextcloud/) - Complete Nextcloud v30 deployment with Docker Compose - PostgreSQL 16 backend with persistent volumes - Redis 7 for caching and file locking - Automated installation via Docker environment variables - Post-installation configuration via occ commands ### Features Implemented - **Database**: PostgreSQL with proper credentials and persistence - **Caching**: Redis for memory caching and file locking - **HTTPS**: Traefik integration with Let's Encrypt SSL - **Security**: Proper security headers and HSTS - **WebDAV**: CalDAV/CardDAV redirect middleware - **Configuration**: Automated trusted domain, reverse proxy, and Redis setup - **OIDC Preparation**: user_oidc app installed and enabled ### Traefik Updates - Added Nextcloud routing to dynamic.yml (static file-based config) - Configured CalDAV/CardDAV redirect middleware - Added Nextcloud-specific security headers ### Configuration Tasks - Automated trusted domain configuration for nextcloud.test.vrije.cloud - Reverse proxy overwrite settings (protocol, host, CLI URL) - Redis cache and locking configuration - Default phone region (NL) - Background jobs via cron ## Deployment Status ✅ Successfully deployed and tested: - Nextcloud: https://nextcloud.test.vrije.cloud/ - Admin login working - PostgreSQL database initialized - Redis caching operational - HTTPS with Let's Encrypt SSL - user_oidc app installed (ready for Zitadel integration) ## Next Steps To complete OIDC/SSO integration: 1. Create OIDC application in Zitadel console 2. Use redirect URI: https://nextcloud.test.vrije.cloud/apps/user_oidc/code 3. Configure provider in Nextcloud with Zitadel credentials Partially addresses #4 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
29 lines
640 B
YAML
29 lines
640 B
YAML
---
|
|
# Docker deployment tasks for Nextcloud
|
|
|
|
- name: Create Nextcloud directory
|
|
file:
|
|
path: /opt/nextcloud
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
- name: Deploy Nextcloud Docker Compose file
|
|
template:
|
|
src: docker-compose.nextcloud.yml.j2
|
|
dest: /opt/nextcloud/docker-compose.yml
|
|
mode: '0600'
|
|
notify: Restart Nextcloud
|
|
|
|
- name: Start Nextcloud services
|
|
community.docker.docker_compose_v2:
|
|
project_src: /opt/nextcloud
|
|
state: present
|
|
register: nextcloud_deploy
|
|
|
|
- name: Wait for Nextcloud to be ready
|
|
wait_for:
|
|
host: localhost
|
|
port: 80
|
|
delay: 10
|
|
timeout: 120
|
|
when: nextcloud_deploy.changed
|