Optimized PHP performance

roles/docker-nextcloud/tasks/main.yml

@@ -16,7 +16,8 @@
     owner:  "{{nextcloud_docker_user_id}}"
     group:  "{{nextcloud_docker_user_id}}"
   loop:     "{{ lookup('fileglob', role_path ~ '/templates/config/*.j2', wantlist=True) }}"
-  notify: docker compose restart
+  # Not all type of changes take instantly place. Due to this reason a rebuild is required.
+  notify: docker compose project setup
 
 - name: "include role for {{application_id}} to recieve certs & do modification routines"
   include_role:

roles/docker-nextcloud/templates/config/memcache.config.php.j2

@@ -4,10 +4,11 @@
 return array (
   # For single server setup APCu is recommended, for multi server setup Redis
   'memcache.local' => '\\OC\\Memcache\\{% if deployment_mode == "single" %}APCu{% else %}Redis{% endif %}',
-  'memcache.locking' => '\\OC\\Memcache\\Redis',
-  'redis' =>
-  array (
-    'host' => 'redis',
-    'port' => 6379,
-  )
+  # The following lines are configured via the environment variables
+  # 'memcache.locking' => '\\OC\\Memcache\\Redis',
+  # 'redis' =>
+  # array (
+  #   'host' => 'redis',
+  #   'port' => 6379,
+  # )
 );

roles/docker-nextcloud/templates/config/turnserver.config.php.j2.draft

@@ -1,6 +1,7 @@
 <?php
 # Activates the turn server
 # @see https://nextcloud-talk.readthedocs.io/en/latest/TURN/
+
 return 'turn_servers' => [
     [
         'host' => 'coturn',

roles/docker-nextcloud/templates/env.j2

@@ -2,27 +2,39 @@
 # @See https://github.com/nextcloud/docker/blob/master/README.md
 
 # Database Configuration
-MYSQL_DATABASE=             "{{database_name}}"
-MYSQL_USER=                 "{{database_username}}"
-MYSQL_PASSWORD=             "{{database_password}}"
-MYSQL_HOST=                 "{{database_host}}:{{database_port}}"
+MYSQL_DATABASE=                 "{{database_name}}"
+MYSQL_USER=                     "{{database_username}}"
+MYSQL_PASSWORD=                 "{{database_password}}"
+MYSQL_HOST=                     "{{database_host}}:{{database_port}}"
       
-# Memory
-PHP_MEMORY_LIMIT=           1G # Required for plugin duplicate finder
+# PHP
+PHP_MEMORY_LIMIT=               "{{applications[application_id].perfomance.php.memory_limit}}"
+PHP_UPLOAD_LIMIT=               "{{applications[application_id].perfomance.php.upload_limit}}"
+PHP_OPCACHE_MEMORY_CONSUMPTION= "{{applications[application_id].perfomance.php.opcache_memory_consumption}}"
       
 # Email Configuration
-SMTP_HOST=                  {{system_email.host}}
-SMTP_SECURE=                {{ 'ssl' if system_email.tls else '' }}
-SMTP_PORT=                  {{system_email.port}}
-SMTP_NAME=                  {{system_email.username}}
-SMTP_PASSWORD=              {{system_email.password}}
+SMTP_HOST=                      {{system_email.host}}
+SMTP_SECURE=                    {{ 'ssl' if system_email.tls else '' }}
+SMTP_PORT=                      {{system_email.port}}
+SMTP_NAME=                      {{system_email.username}}
+SMTP_PASSWORD=                  {{system_email.password}}
 
 # Email from configuration
-MAIL_FROM_ADDRESS=          "{{system_email.local}}"
-MAIL_DOMAIN=                "{{system_email.domain}}"
+MAIL_FROM_ADDRESS=              "{{system_email.local}}"
+MAIL_DOMAIN=                    "{{system_email.domain}}"
 
 # Initial Admin Data
-NEXTCLOUD_ADMIN_USER=       "{{applications[application_id].users.administrator.username}}"
-NEXTCLOUD_ADMIN_PASSWORD=   "{{applications[application_id].users.administrator.initial_password}}"
+NEXTCLOUD_ADMIN_USER=           "{{applications[application_id].users.administrator.username}}"
+NEXTCLOUD_ADMIN_PASSWORD=       "{{applications[application_id].users.administrator.initial_password}}"
 
-NEXTCLOUD_TRUSTED_DOMAINS=  "{{domains[application_id]}}"
+# Security
+
+NEXTCLOUD_TRUSTED_DOMAINS=      "{{domains[application_id]}}"
+# Whitelist local docker gateway in Nextcloud to prevent brute-force throtteling
+TRUSTED_PROXIES=                "192.168.102.65"
+OVERWRITECLIURL=                "https://{{domains[application_id]}}"
+OVERWRITEPROTOCOL=              "https"
+
+# Redis Configuration
+REDIS_HOST=                     redis
+REDIS_PORT=                     6379

roles/docker-nextcloud/vars/system.yml

@@ -12,12 +12,4 @@ nextcloud_system_config:
     value: "{{ on_calendar_nextcloud }}"
 
   - parameter: "default_phone_region"
-    value: "{{ locale | upper }}"
-
-  # Force https  
-  - parameter: "overwrite.cli.url"
-    value: "https://{{domains[application_id]}}"
-
-  # Force https
-  - parameter: "overwriteprotocol"
-    value: "https"
+    value: "{{ locale | upper }}"