Nextcloud ArchitectureΒΆ

Compose 🐳¢

flowchart LR
    subgraph role [web-app-nextcloud]
        svc_proxy["proxy<br>nginx:1.31.8-alpine<br>http 80"]
        svc_context_agent["context_agent<br>ghcr.io/nextcloud/context_agent:2.11.0<br>http 23000"]
        svc_talk["talk<br>alpine:3.23.3<br>websocket 8188"]
        svc_talk_signaling["talk_signaling<br>strukturag/nextcloud-spreed-signaling:2.1.1<br>signaling 8081"]
        svc_talk_nats["talk_nats<br>nats:2.12.6-alpine<br>nats 4222 Β· http 8222"]
        svc_whiteboard["whiteboard<br>ghcr.io/nextcloud-releases/whiteboard:v1.5.9<br>http 3002"]
        svc_cron["cron<br>built here"]
        svc_taskprocessing["taskprocessing<br>built here"]
        svc_talk_recording["talk_recording<br>python:3.14.3-alpine3.23<br>recording 1234"]
        svc_contextagentmcp["contextagentmcp<br>python:3.13.15-slim<br>http 8080"]
    end

Swarm 🐝¢

flowchart LR
    svc_proxy["proxy"]
    svc_proxy --> rep_proxy["replicas: from the host group"]
    svc_context_agent["context_agent"]
    svc_context_agent --> rep_context_agent["replicas: 1"]
    svc_talk["talk"]
    svc_talk --> rep_talk["replicas: 1"]
    svc_talk_signaling["talk_signaling"]
    svc_talk_signaling --> rep_talk_signaling["replicas: 1"]
    svc_talk_nats["talk_nats"]
    svc_talk_nats --> rep_talk_nats["replicas: 1"]
    svc_whiteboard["whiteboard"]
    svc_whiteboard --> rep_whiteboard["replicas: from the host group"]
    svc_cron["cron"]
    svc_cron --> rep_cron["replicas: 1"]
    svc_taskprocessing["taskprocessing"]
    svc_taskprocessing --> rep_taskprocessing["replicas: from the host group"]
    svc_talk_recording["talk_recording"]
    svc_talk_recording --> rep_talk_recording["replicas: 1"]
    svc_contextagentmcp["contextagentmcp"]
    svc_contextagentmcp --> rep_contextagentmcp["replicas: from the host group"]
    classDef pinned fill:#fef7e0,stroke:#b06000,color:#3d2600;

VolumesΒΆ

flowchart LR
    vol_data["nextcloud_data"]
    vol_data -->|"swarm + storage.backend nfs"| nfs_data["shared over NFS"]:::shared
    vol_data -->|"compose, or backend local"| cl_data["node-local"]:::local
    vol_whiteboard_tmp["nextcloud_whiteboard_tmp"]
    vol_whiteboard_tmp -->|"swarm + storage.backend nfs"| nfs_whiteboard_tmp["shared over NFS"]:::shared
    vol_whiteboard_tmp -->|"compose, or backend local"| cl_whiteboard_tmp["node-local"]:::local
    vol_whiteboard_fontcache["nextcloud_whiteboard_fontcache"]
    vol_whiteboard_fontcache -->|"swarm + storage.backend nfs"| nfs_whiteboard_fontcache["shared over NFS"]:::shared
    vol_whiteboard_fontcache -->|"compose, or backend local"| cl_whiteboard_fontcache["node-local"]:::local
    vol_talk_recording_tmp["nextcloud_talk_recording_tmp"]
    vol_talk_recording_tmp -->|"nfs: false"| local_talk_recording_tmp["node-local on every node"]:::local
    classDef shared fill:#e6f4ea,stroke:#137333,color:#0b2e13;
    classDef local fill:#fef7e0,stroke:#b06000,color:#3d2600;

Condition

Effect

swarm, storage.backend: nfs, no nfs: false, role not pinned

shared over NFS

any one of those missing

node-local

All four conditions must hold, so pinning a role takes every one of its volumes node-local. Only the role’s primary entry counts as pinned here: a placement on any other service pins that service alone and leaves the backing of every volume unchanged. The chain is drawn rather than its result, because that coupling is what makes a placement change move data without saying so.

DependenciesΒΆ

flowchart LR
    subgraph deps [Dependencies]
        dep_svc_ai_litellm["svc-ai-litellm 🐳🐝"]
        dep_svc_bkp_volume_2_local["svc-bkp-volume-2-local πŸ’»"]
        dep_svc_db_mariadb["svc-db-mariadb 🐳🐝"]
        dep_svc_db_openldap["svc-db-openldap 🐳🐝"]
        dep_svc_db_redis["svc-db-redis 🐳🐝"]
        dep_svc_net_tor["svc-net-tor 🐳🐝"]
        dep_web_app_bigbluebutton["web-app-bigbluebutton 🐳🐝"]
        dep_web_app_dashboard["web-app-dashboard 🐳🐝"]
        dep_web_app_discourse["web-app-discourse 🐳🐝"]
        dep_web_app_docs["web-app-docs 🐳🐝"]
        dep_web_app_gitlab["web-app-gitlab 🐳🐝"]
        dep_web_app_hermes["web-app-hermes 🐳🐝"]
        dep_web_app_keycloak["web-app-keycloak 🐳🐝"]
        dep_web_app_mastodon["web-app-mastodon 🐳🐝"]
        dep_web_app_matomo["web-app-matomo 🐳🐝"]
        dep_web_app_matrix["web-app-matrix 🐳🐝"]
        dep_web_app_mattermost["web-app-mattermost 🐳🐝"]
        dep_web_app_openclaw["web-app-openclaw 🐳🐝"]
        dep_web_app_openproject["web-app-openproject 🐳🐝"]
        dep_web_app_openwebui["web-app-openwebui 🐳🐝"]
        dep_web_app_peertube["web-app-peertube 🐳🐝"]
        dep_web_app_prometheus["web-app-prometheus 🐳🐝"]
        dep_web_app_stalwart["web-app-stalwart 🐳🐝"]
        dep_web_app_xwiki["web-app-xwiki 🐳🐝"]
        dep_web_app_zammad["web-app-zammad 🐳🐝"]
        dep_web_svc_collabora["web-svc-collabora 🐳🐝"]
        dep_web_svc_coturn["web-svc-coturn 🐳🐝"]
        dep_web_svc_design["web-svc-design πŸ’»"]
        dep_web_svc_logout["web-svc-logout 🐳🐝"]
        dep_web_svc_onlyoffice["web-svc-onlyoffice 🐳🐝"]
        dep_web_svc_seaweedfs["web-svc-seaweedfs 🐳🐝"]
    end
    subgraph role [web-app-nextcloud 🐳🐝]
        svc_sso["sso"]
        svc_coturn["coturn"]
        svc_logout["logout"]
        svc_ldap["ldap"]
        svc_dashboard["dashboard"]
        svc_matomo["matomo"]
        svc_email["email"]
        svc_redis["redis"]
        svc_mariadb["mariadb"]
        svc_nextcloud["nextcloud"]
        svc_proxy["proxy"]
        svc_context_agent["context_agent"]
        svc_contextagentmcp["contextagentmcp"]
        svc_cron["cron"]
        svc_taskprocessing["taskprocessing"]
        svc_talk["talk"]
        svc_talk_signaling["talk_signaling"]
        svc_talk_nats["talk_nats"]
        svc_whiteboard["whiteboard"]
        svc_onlyoffice["onlyoffice"]
        svc_collabora["collabora"]
        svc_bigbluebutton["bigbluebutton"]
        svc_xwiki["xwiki"]
        svc_minio["minio ❌"]
        svc_seaweedfs["seaweedfs"]
        svc_talk_recording["talk_recording"]
        svc_design["design"]
        svc_hcaptcha["hcaptcha"]
        svc_prometheus["prometheus"]
        svc_tor["tor"]
        svc_openproject["openproject"]
        svc_gitlab["gitlab"]
        svc_discourse["discourse"]
        svc_mattermost["mattermost"]
        svc_matrix["matrix"]
        svc_zammad["zammad"]
        svc_openwebui["openwebui"]
        svc_litellm["litellm"]
        svc_mastodon["mastodon"]
        svc_peertube["peertube"]
        svc_moodle["moodle ❌"]
        svc_suitecrm["suitecrm ❌"]
        svc_container_backup["container_backup"]
        svc_hermes["hermes"]
        svc_openclaw["openclaw"]
        svc_flowise["flowise ❌"]
        svc_docs["docs"]
    end
    subgraph dependents [Dependents]
        dpt_web_app_moodle["web-app-moodle 🐳🐝"]
        dpt_web_app_odoo["web-app-odoo 🐳🐝"]
        dpt_web_app_openproject["web-app-openproject 🐳🐝"]
    end
    dep_svc_ai_litellm -. "0..1" .-> svc_litellm
    dep_svc_bkp_volume_2_local -. "0..1" .-> svc_container_backup
    dep_svc_db_mariadb -. "0..1" .-> svc_mariadb
    dep_svc_db_openldap -. "0..1" .-> svc_ldap
    dep_svc_db_redis -. "0..1" .-> svc_redis
    dep_svc_net_tor -. "0..1" .-> svc_tor
    dep_web_app_bigbluebutton -. "0..1" .-> svc_bigbluebutton
    dep_web_app_dashboard -. "0..1" .-> svc_dashboard
    dep_web_app_discourse -. "0..1" .-> svc_discourse
    dep_web_app_docs -. "0..1" .-> svc_docs
    dep_web_app_gitlab -. "0..1" .-> svc_gitlab
    dep_web_app_hermes -. "0..1" .-> svc_hermes
    dep_web_app_keycloak -. "0..1" .-> svc_sso
    dep_web_app_mastodon -. "0..1" .-> svc_mastodon
    dep_web_app_matomo -. "0..1" .-> svc_matomo
    dep_web_app_matrix -. "0..1" .-> svc_matrix
    dep_web_app_mattermost -. "0..1" .-> svc_mattermost
    dep_web_app_openclaw -. "0..1" .-> svc_openclaw
    dep_web_app_openproject -. "0..1" .-> svc_openproject
    dep_web_app_openwebui -. "0..1" .-> svc_openwebui
    dep_web_app_peertube -. "0..1" .-> svc_peertube
    dep_web_app_prometheus -. "0..1" .-> svc_prometheus
    dep_web_app_stalwart -. "0..1" .-> svc_email
    dep_web_app_xwiki -. "0..1" .-> svc_xwiki
    dep_web_app_zammad -. "0..1" .-> svc_zammad
    dep_web_svc_collabora -. "0..1" .-> svc_collabora
    dep_web_svc_coturn -. "0..1" .-> svc_coturn
    dep_web_svc_coturn -. "0..1" .-> svc_talk
    dep_web_svc_design -. "0..1" .-> svc_design
    dep_web_svc_logout -. "0..1" .-> svc_logout
    dep_web_svc_onlyoffice -. "0..1" .-> svc_onlyoffice
    dep_web_svc_seaweedfs -. "0..1" .-> svc_seaweedfs
    svc_sso -. "0..1" .-> dpt_web_app_moodle
    svc_sso -. "0..1" .-> dpt_web_app_odoo
    svc_sso -. "0..1" .-> dpt_web_app_openproject

Symbol

Meaning

1:1 solid

fixed relationship

0..1 dashed

conditional, enabled only in matching deployments

0..0 red

declared but turned off in this role

πŸ’»

deploys to the host

🐳

deploys under compose

🐝

deploys under swarm

❌

service explicitly turned off

βš™οΈ

Ansible role dependency from meta/main.yml

Every dependency and dependent is listed; the graph is not truncated.