---
# tasks file for nextcloud
- name: Add NextCloud repo
  kubernetes.core.helm_repository:
    name: nextcloud
    repo_url: https://nextcloud.github.io/helm/
  register: repo

- name: Update Helm repos
  command: helm repo update
  when: repo.changed

- name: Deploy NextCloud
  kubernetes.core.helm:
    name: nextcloud
    chart_ref: nextcloud/nextcloud
    release_namespace: nextcloud
    create_namespace: true
    values:
      image:
        pullPolicy: Always
        tag: latest
      nextcloud:
        host: nextcloud.eom.dev
        username: nextcloud_admin
        password: "{{ nextcloud_admin_password }}"
        configs:
          proxy.config.php: |-
            <?php
            $CONFIG = array (
              'overwriteprotocol' => 'https',
              'trusted_proxies' => array(
                0 => '127.0.0.1',
                1 => '10.0.0.0/8',
              ),
              'forwarded_for_headers' => array('HTTP_X_FORWARDED_FOR'),
            );
      mail:
        enabled: true
        fromAddress: nextcloud
        domain: postfix.eom.dev
        smtp:
          host: postfix.eom.dev
          secure: ssl
          port: 587
          authtype: LOGIN
          name: nextcloud
          password: "{{ nextcloud_admin_password }}"
      internalDatabase:
        enabled: false
      externalDatabase:
        enabled: true
        type: postgresql
        host: postgresql
        user: nextcloud
        password: "{{ nextcloud_admin_password }}"
        database: nextcloud
      persistence:
        enabled: true
        size: 8Ti
      metrics:
        enabled: true
      cronjob:
        enabled: true
      redis:
        enabled: true
        auth:
          password: "{{ redis_auth_password }}"
      ingress:
        enabled: true
        className: nginx
        annotations:
          nginx.ingress.kubernetes.io/enable-cors: "true"
          nginx.ingress.kubernetes.io/cors-allow-headers: "X-Forwarded-For"
          cert-manager.io/cluster-issuer: ca-issuer
        tls:
          - hosts:
            - nextcloud.eom.dev
            secretName: nextcloud-tls
      postgresql:
        enabled: true
        global:
          postgresql:
            auth:
              username: nextcloud
              password: "{{ nextcloud_admin_password }}"
              database: nextcloud
        primary:
          persistence:
            enabled: true
            size: 2Ti