79 lines
2.6 KiB
YAML
79 lines
2.6 KiB
YAML
|
version: "3.9"
|
||
|
|
services:
|
||
|
|
nextcloud:
|
||
|
|
image: nextcloud:latest
|
||
|
|
container_name: nextcloud
|
||
|
|
restart: always
|
||
|
|
networks:
|
||
|
|
- traefik-net
|
||
|
|
environment:
|
||
|
|
- PUID=1000
|
||
|
|
- PGID=1000
|
||
|
|
- TZ=America/Toronto
|
||
|
|
# Database connection
|
||
|
|
- MYSQL_HOST=nextcloud_mariadb
|
||
|
|
- MYSQL_DATABASE=nextcloud
|
||
|
|
- MYSQL_USER=nextcloud
|
||
|
|
- MYSQL_PASSWORD=${NEXTCLOUD_MYSQL_PASSWORD}
|
||
|
|
# Reverse Proxy Overrides (Crucial for HTTPS behind Traefik)
|
||
|
|
- OVERWRITEPROTOCOL=https
|
||
|
|
- OVERWRITECLIURL=https://cloud.lazyworkhorse.net
|
||
|
|
- NEXTCLOUD_TRUSTED_DOMAINS=cloud.lazyworkhorse.net
|
||
|
|
volumes:
|
||
|
|
- /mnt/HoardingCow_docker_data/NextCloud/data:/var/www/html:rw
|
||
|
|
depends_on:
|
||
|
|
- nextcloud_mariadb
|
||
|
|
labels:
|
||
|
|
- "traefik.enable=true"
|
||
|
|
|
||
|
|
# Router for HTTP -> HTTPS Redirection (Matching your Gitea style)
|
||
|
|
- "traefik.http.routers.nextcloud-http.rule=Host(`cloud.lazyworkhorse.net`)"
|
||
|
|
- "traefik.http.routers.nextcloud-http.entrypoints=web"
|
||
|
|
- "traefik.http.routers.nextcloud-http.middlewares=redirect-to-https"
|
||
|
|
|
||
|
|
# Router for HTTPS
|
||
|
|
- "traefik.http.routers.nextcloud-https.rule=Host(`cloud.lazyworkhorse.net`)"
|
||
|
|
- "traefik.http.routers.nextcloud-https.entrypoints=websecure"
|
||
|
|
- "traefik.http.routers.nextcloud-https.tls=true"
|
||
|
|
- "traefik.http.routers.nextcloud-https.tls.certresolver=njalla"
|
||
|
|
|
||
|
|
# Middlewares: Redirection + Nextcloud DAV fixes
|
||
|
|
- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
|
||
|
|
- "traefik.http.middlewares.nextcloud-dav.redirectregex.permanent=true"
|
||
|
|
- "traefik.http.middlewares.nextcloud-dav.redirectregex.regex=https://(.*)/.well-known/(card|cal)dav"
|
||
|
|
- "traefik.http.middlewares.nextcloud-dav.redirectregex.replacement=https://$$1/remote.php/dav/"
|
||
|
|
|
||
|
|
# Apply both redirection and DAV fixes
|
||
|
|
- "traefik.http.routers.nextcloud-https.middlewares=nextcloud-dav"
|
||
|
|
|
||
|
|
nextcloud_cron:
|
||
|
|
image: nextcloud:latest
|
||
|
|
container_name: nextcloud_cron
|
||
|
|
restart: always
|
||
|
|
networks:
|
||
|
|
- traefik-net
|
||
|
|
entrypoint: /cron.sh
|
||
|
|
volumes:
|
||
|
|
- /mnt/HoardingCow_docker_data/NextCloud/data:/var/www/html:rw
|
||
|
|
depends_on:
|
||
|
|
- nextcloud
|
||
|
|
|
||
|
|
nextcloud_mariadb:
|
||
|
|
image: mariadb:latest
|
||
|
|
container_name: nextcloud_mariadb
|
||
|
|
restart: always
|
||
|
|
networks:
|
||
|
|
- traefik-net
|
||
|
|
environment:
|
||
|
|
- MYSQL_RANDOM_ROOT_PASSWORD=yes
|
||
|
|
- MYSQL_USER=nextcloud
|
||
|
|
- MYSQL_PASSWORD=${NEXTCLOUD_MYSQL_PASSWORD}
|
||
|
|
- MYSQL_DATABASE=nextcloud
|
||
|
|
volumes:
|
||
|
|
- /mnt/HoardingCow_docker_data/NextCloud/database:/var/lib/mysql:rw
|
||
|
|
# command: ["--innodb-force-recovery=6"]
|
||
|
|
|
||
|
|
networks:
|
||
|
|
traefik-net:
|
||
|
|
external: true
|