---
data:
  name: nextcloud_data
  type: volume
  mounts:
    - service: nextcloud
      target: &var_www_html_target /var/www/html/
    - service: cron
      target: *var_www_html_target
    - service: proxy
      target: *var_www_html_target
      read_only: true

whiteboard_tmp:
  name: nextcloud_whiteboard_tmp
  type: volume
  backup: false
  mounts:
    - service: whiteboard
      target: &tmp_target /tmp

whiteboard_fontcache:
  name: nextcloud_whiteboard_fontcache
  type: volume
  backup: false
  mounts:
    - service: whiteboard
      target: /var/cache/fontconfig

talk_recording_tmp:
  name: nextcloud_talk_recording_tmp
  type: volume
  backup: false
  mounts:
    - service: talk_recording
      target: *tmp_target

nginx_conf:
  type: config
  source: "{{ [ lookup('container', 'web-app-nextcloud', 'directories.volumes'), 'nginx.conf' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: proxy
      target: /etc/nginx/nginx.conf

fpm_pool_conf:
  type: config
  source: "{{ [ lookup('container', 'web-app-nextcloud', 'directories.volumes'), 'fpm-pool.conf' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: nextcloud
      target: /usr/local/etc/php-fpm.d/zzz-infinito.conf

infinito_conf:
  type: bind
  source: "{{ [ lookup('container', 'web-app-nextcloud', 'directories.volumes'), 'infinito' ] | path_join }}"
  read_only: true
  mounts:
    - service: nextcloud
      target: &var_www_infinito_target /var/www/infinito/
    - service: cron
      target: *var_www_infinito_target

php_hardening:
  type: config
  source: "{{ FILE_PHP_HARDENING_INI }}"
  mode: "0444"
  mounts:
    - service: nextcloud
      target: /usr/local/etc/php/conf.d/zz-infinito-hardening.ini

php_fpm_hardening:
  type: config
  source: "{{ FILE_PHP_FPM_HARDENING_CONF }}"
  mode: "0444"
  mounts:
    - service: nextcloud
      target: /usr/local/etc/php-fpm.d/zz-infinito-hardening.conf