43 lines
1.6 KiB
Django/Jinja
43 lines
1.6 KiB
Django/Jinja
[Quadlet]
|
|
DefaultDependencies=false
|
|
|
|
[Unit]
|
|
Description=Nextcloud
|
|
|
|
After=redis_nextcloud.service
|
|
Wants=redis_nextcloud.service
|
|
|
|
[Container]
|
|
Image=docker.io/library/nextcloud:{{ version['containers']['nextcloud'] }}
|
|
ContainerName=nextcloud
|
|
HostName=nextcloud
|
|
|
|
PublishPort={{ services['nextcloud']['ports']['http'] }}:80
|
|
|
|
Volume=%h/containers/nextcloud/ssl:/etc/ssl/nextcloud:ro
|
|
Volume=%h/containers/nextcloud/ini/opcache.ini:/usr/local/etc/php/conf.d/opcache-recommended.ini:ro
|
|
Volume=%h/containers/nextcloud/ini/upload.ini:/usr/local/etc/php/conf.d/upload.ini:ro
|
|
Volume=%h/data/containers/nextcloud/html:/var/www/html:rw
|
|
|
|
# General
|
|
Environment="TZ={{ timezone }}"
|
|
Environment="APACHE_DISABLE_REWRITE_IP=1"
|
|
Environment="TRUSTED_PROXIES={{ hostvars['fw']['network']['podman']['ipv4']['lla'] }} {{ hostvars['fw']['network']['auth']['ipv4']['server'] }} {{ hostvars['fw']['network']['auth']['ipv6']['server'] }}"
|
|
# PostgreSQL
|
|
Environment="PGSSLMODE=verify-full"
|
|
Environment="PGSSLROOTCERT=/etc/ssl/nextcloud/{{ root_cert_filename }}"
|
|
## libpq in Nextcloud automatically tries to use a client certificate for mTLS. Therefore, when only TLS is required, then disable the option explicitly.
|
|
Environment="PGSSLCERTMODE=disable"
|
|
# Redis
|
|
Environment="REDIS_HOST=host.containers.internal"
|
|
Environment="REDIS_HOST_PORT={{ services['nextcloud']['ports']['redis'] }}"
|
|
|
|
[Service]
|
|
ExecStartPre=/usr/bin/nc -zv {{ services['postgresql']['domain']['internal'] }}.{{ domain['internal'] }} {{ services['postgresql']['ports']['tcp'] }}
|
|
Restart=always
|
|
RestartSec=10s
|
|
TimeoutStopSec=120
|
|
|
|
[Install]
|
|
WantedBy=default.target
|