Files
wild-directory/nextcloud/versions/34/deployment.yaml
Paul Payne ef2c7ea8b3 Bump 5 PHP apps to upstream images patched for PHP2Shell (CVE-2026-109618, CVE-2026-109619)
- nextcloud: 34.0.0 -> 34.0.5 (PHP 8.5.12)
- mediawiki: 1.43.1 -> 1.43.11 (PHP 8.3.36)
- firefly-iii: 6.6.3 -> 6.7.7 (PHP 8.5.12)
- bookstack: 26.05.1 -> 26.09.2 (PHP patched)
- limesurvey: 6.17.5 -> 6.17.18 (PHP 8.4.27)
2026-10-23 13:47:15 +00:00

107 lines
3.0 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: nextcloud
namespace: {{ .namespace }}
spec:
replicas: 1
strategy:
type: Recreate
selector:
matchLabels:
component: web
template:
metadata:
labels:
component: web
spec:
securityContext:
runAsUser: 0
runAsNonRoot: false
seccompProfile:
type: RuntimeDefault
containers:
- name: nextcloud
image: nextcloud:34.0.5-apache
ports:
- name: http
containerPort: 80
protocol: TCP
env:
- name: NEXTCLOUD_TRUSTED_DOMAINS
value: {{ .domain }}
- name: NEXTCLOUD_ADMIN_USER
value: {{ .adminUser }}
- name: NEXTCLOUD_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: nextcloud-secrets
key: adminPassword
- name: POSTGRES_DB
value: {{ .db.name }}
- name: POSTGRES_USER
value: {{ .db.user }}
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: nextcloud-secrets
key: dbPassword
- name: POSTGRES_HOST
value: {{ .db.host }}
- name: REDIS_HOST
value: {{ .redis.host }}
- name: REDIS_HOST_PORT
value: "6379"
- name: REDIS_HOST_PASSWORD
valueFrom:
secretKeyRef:
name: nextcloud-secrets
key: redis.password
- name: OVERWRITEPROTOCOL
value: https
- name: OVERWRITECLIURL
value: https://{{ .domain }}
- name: TRUSTED_PROXIES
value: 10.0.0.0/8
resources:
limits:
cpu: 1000m
ephemeral-storage: 1Gi
memory: 1Gi
requests:
cpu: 50m
ephemeral-storage: 50Mi
memory: 256Mi
volumeMounts:
- name: nextcloud-data
mountPath: /var/www/html
livenessProbe:
httpGet:
path: /status.php
port: 80
httpHeaders:
- name: Host
value: {{ .domain }}
initialDelaySeconds: 120
timeoutSeconds: 5
periodSeconds: 30
failureThreshold: 6
readinessProbe:
httpGet:
path: /status.php
port: 80
httpHeaders:
- name: Host
value: {{ .domain }}
initialDelaySeconds: 60
timeoutSeconds: 3
periodSeconds: 15
failureThreshold: 3
securityContext:
readOnlyRootFilesystem: false
volumes:
- name: nextcloud-data
persistentVolumeClaim:
claimName: nextcloud-data
restartPolicy: Always