securityContext: allowPrivilegeEscalation: false containers: - name: nextcloud image: "nextcloud/{{ elevate_media_nextcloud_instance_name }}:{{ elevate_media_nextcloud_instance.version }}" securityContext: runAsUser: {{ elevate_media_share_uid }} runAsGroup: {{ elevate_media_share_gid }} resources: limits: memory: "4Gi" env: {% if elevate_media_nextcloud_max_upload_size is defined %} - name: PHP_UPLOAD_LIMIT value: "{{ elevate_media_nextcloud_max_upload_size }}" {% endif %} {% if elevate_media_nextcloud_memory_limit is defined %} - name: PHP_MEMORY_LIMIT value: "{{ elevate_media_nextcloud_memory_limit }}" {% endif %} volumeMounts: - name: nextcloud mountPath: /var/www/html - name: config mountPath: /etc/apache2/sites-available/000-default.conf subPath: apache-site.conf readOnly: true - name: config mountPath: /etc/apache2/ports.conf subPath: ports.conf readOnly: true - name: external-share mountPath: /srv/external/share ports: - containerPort: 8080 hostPort: {{ elevate_media_nextcloud_instance.port }} hostIP: 127.0.0.1 - name: database image: "mariadb:{{ elevate_media_nextcloud_instance.database.version }}" args: - --transaction-isolation=READ-COMMITTED - --log-bin=binlog - --binlog-format=ROW securityContext: runAsUser: {{ elevate_media_nextcloud_db_uid }} runAsGroup: {{ elevate_media_nextcloud_db_gid }} resources: limits: memory: "2Gi" env: - name: MYSQL_RANDOM_ROOT_PASSWORD value: "true" - name: MYSQL_DATABASE value: nextcloud - name: MYSQL_USER value: nextcloud - name: MYSQL_PASSWORD value: "{{ elevate_media_nextcloud_instance.database.password }}" volumeMounts: - name: database mountPath: /var/lib/mysql volumes: - name: config hostPath: path: "{{ elevate_media_nextcloud_base_path }}/{{ elevate_media_nextcloud_instance_name }}/config/" type: Directory - name: nextcloud hostPath: path: "{{ elevate_media_nextcloud_base_path }}/{{ elevate_media_nextcloud_instance_name }}/nextcloud" type: Directory - name: database hostPath: path: "{{ elevate_media_nextcloud_base_path }}/{{ elevate_media_nextcloud_instance_name }}/{{ elevate_media_nextcloud_instance.database.type }}" type: Directory - name: external-share hostPath: path: /srv/_samba_/share type: Directory