mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-16 08:56:46 +02:00
• Add config.performance.async.wait_for and expose as nextcloud_wait_for_async_enabled to toggle waiting for async jobs. • Split system/admin/index maintenance into separate tasks: 02_add_missing_indices.yml, 03_admin.yml, 04_system_config.yml. • Refactor plugin flow: rename 02_plugin→05_plugin, 03_plugin_routines→06_plugin_routines, 04_plugin_enable_and_configure→07_plugin_enable_and_configure; remove old 03_plugin_routines and 05_system. • Harden async handling: filter async_status loops by ansible_job_id; conditionally wait only when nextcloud_wait_for_async_enabled; reduce delay to 1s. • Reorder main.yml to run system steps before plugin setup; keep handlers flush earlier. • env.j2: simplify get_app_conf lookups (drop extra True flag). • vars/main.yml: add nextcloud_host_nginx_path and nextcloud_wait_for_async_enabled. https://chatgpt.com/share/689c9d4a-1748-800f-b490-06a5a48dd831
53 lines
2.4 KiB
Django/Jinja
53 lines
2.4 KiB
Django/Jinja
# @See https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/config_sample_php_parameters.html
|
|
# @See https://github.com/nextcloud/docker/blob/master/README.md
|
|
|
|
# Database Configuration
|
|
MYSQL_DATABASE= "{{database_name}}"
|
|
MYSQL_USER= "{{database_username}}"
|
|
MYSQL_PASSWORD= "{{database_password}}"
|
|
MYSQL_HOST= "{{database_host}}:{{database_port}}"
|
|
|
|
# PHP
|
|
PHP_MEMORY_LIMIT= "{{applications | get_app_conf(application_id, 'performance.php.memory_limit')}}"
|
|
PHP_UPLOAD_LIMIT= "{{applications | get_app_conf(application_id, 'performance.php.upload_limit')}}"
|
|
PHP_OPCACHE_MEMORY_CONSUMPTION= "{{applications | get_app_conf(application_id, 'performance.php.opcache_memory_consumption')}}"
|
|
|
|
# Email Configuration
|
|
SMTP_HOST= {{system_email.host}}
|
|
SMTP_SECURE= {{ 'ssl' if system_email.tls else '' }}
|
|
SMTP_PORT= {{system_email.port}}
|
|
SMTP_NAME= {{ users['no-reply'].email }}
|
|
SMTP_PASSWORD= {{ users['no-reply'].mailu_token }}
|
|
|
|
# Email from configuration
|
|
MAIL_FROM_ADDRESS= "{{ users['no-reply'].username }}"
|
|
MAIL_DOMAIN= "{{ system_email.domain }}"
|
|
|
|
# Initial Admin Data
|
|
NEXTCLOUD_ADMIN_USER= "{{applications | get_app_conf(application_id, 'users.administrator.username')}}"
|
|
NEXTCLOUD_ADMIN_PASSWORD= "{{applications | get_app_conf(application_id, 'credentials.administrator_password')}}"
|
|
|
|
# Security
|
|
|
|
NEXTCLOUD_TRUSTED_DOMAINS= "{{ domains[application_id] | select | join(',') }}"
|
|
# Whitelist local docker gateway in Nextcloud to prevent brute-force throtteling
|
|
TRUSTED_PROXIES= "{{ networks.internet.values() | select | join(',') }}"
|
|
OVERWRITECLIURL= "{{ domains | get_url(application_id, WEB_PROTOCOL) }}"
|
|
OVERWRITEPROTOCOL= "https"
|
|
|
|
# Redis Configuration
|
|
REDIS_HOST= redis
|
|
REDIS_PORT= 6379
|
|
|
|
{% if nextcloud_talk_enabled %}
|
|
# Talk Configuration
|
|
# This code was just moved here during refactoring and isn't tested yet.
|
|
# @todo move it to an own env file for encapsulation reasons
|
|
NC_DOMAIN=cloud.yourdomain.tld
|
|
TALK_HOST=signaling.yourdomain.tld
|
|
TURN_SECRET=${TURN_SECRET}
|
|
SIGNALING_SECRET=${SIGNALING_SECRET}
|
|
TZ=Europe/Berlin
|
|
TALK_PORT=3478
|
|
INTERNAL_SECRET=${INTERNAL_SECRET}
|
|
{% endif %} |