From be8d4a098df24050e5856850cbf3915183a29367 Mon Sep 17 00:00:00 2001
From: "Andreas S. Turriff" <andreas@calliope.home.msad.turriff.local>
Date: Thu, 27 Jun 2024 17:02:27 -0700
Subject: [PATCH] Document Sharing

---
 collabora.yaml | 22 ++++++++++++++++++++++
 nextcloud.yaml | 47 +++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 69 insertions(+)
 create mode 100644 collabora.yaml
 create mode 100644 nextcloud.yaml

diff --git a/collabora.yaml b/collabora.yaml
new file mode 100644
index 0000000..0769d77
--- /dev/null
+++ b/collabora.yaml
@@ -0,0 +1,22 @@
+  collabora:
+    deploy:
+      replicas: 1
+      labels:
+        traefik.enable: "true"
+        traefik.http.routers.collabora-rtr.entrypoints: "websecure"
+        traefik.http.routers.collabora-rtr.rule: "Host(`collabora.your.domain`)"
+        traefik.http.routers.collabora-rtr.service: "collabora"
+        traefik.http.services.collabora.loadbalancer.server.port: "9980"
+    environment:
+      PUID: 10021
+      PGID: 10021
+      password: "<secret password that is never used>"
+      username: "admin"
+      domain: "[collabora\\.your\\.domain]"
+      extra_params: "--o:ssl.enable=false --o:ssl.termination=true"
+    image: "collabora/code"
+    logging:
+      driver: journald
+    networks:
+      - homelab
+    restart: on-failure
diff --git a/nextcloud.yaml b/nextcloud.yaml
new file mode 100644
index 0000000..4e3a44e
--- /dev/null
+++ b/nextcloud.yaml
@@ -0,0 +1,47 @@
+  nextcloud:
+    container_name: "nextcloud"
+    deploy:
+      labels:
+        traefik.enable: "true"
+        traefik.http.routers.nextcloud-rtr.entrypoints: websecure
+        traefik.http.routers.nextcloud-rtr.middlewares: "nextcloud-dav@swarm, nextcloud-index@swarm"
+        traefik.http.routers.nextcloud-rtr.rule: "Host(`nextcloud.your.domain`)"
+        traefik.http.routers.nextcloud-rtr.service: "nextcloud"
+        traefik.http.services.nextcloud.loadbalancer.server.port: "80"
+        traefik.http.middlewares.nextcloud-dav.redirectregex.regex: "https://(.*t)/.well-known/(card|cal)dav"
+        traefik.http.middlewares.nextcloud-dav.redirectregex.replacement: "https://$$1/remote.php/dav/"
+        traefik.http.middlewares.nextcloud-dav.redirectregex.permanent: "true"
+        traefik.http.middlewares.nextcloud-index.redirectregex.regex: "https://(.*t)/.well-known/(webfinger|nodeinfo)"
+        traefik.http.middlewares.nextcloud-index.redirectregex.replacement: "https://$$1/index.php/.well-known/$$2"
+        traefik.http.middlewares.nextcloud-index.redirectregex.permanent: "true"
+      replicas: 1
+    environment:
+      POSTGRES_DB: "nextcloud"
+      POSTGRES_USER: "nextcloud"
+      POSTGRES_PASSWORD_FILE: "/run/secrets/nextcloud"
+      POSTGRES_HOST: "postgres"
+      NEXTCLOUD_ADMIN_USER: "admin"
+      NEXTCLOUD_ADMIN_PASSWORD_FILE: "/run/secrets/nextcloud-admin"
+      NEXTCLOUD_TRUSTED_DOMAINS: "nextcloud.your.domain"
+      REDIS_HOST: "valkey"
+      SMTP_HOST: "your.mail.server"
+      SMTP_SECURE: "starttls"
+      SMTP_PORT: "25"
+      SMTP_AUTHTYPE: "PLAIN"
+      MAIL_FROM_ADDRESS: "nextcloud@your.domain"
+      MAIL_DOAIN: "your.domain"
+      TRUSTED_PROXIES: "10.64.0.0/16"
+      APACHE_DISABLE_REWRITE_IP: 1
+    image: "nextcloud:production"
+    logging:
+      driver: journald
+    networks:
+      - homelab
+    ports:
+      - "8080:80"
+    restart: on-failure
+    secrets:
+      - nextcloud
+      - nextcloud-admin
+    volumes:
+      - "/srv/data/docker/nextcloud/data:/var/www/html"