volumes.yml

---
data:
  name: nextcloud_data
  type: volume
  mounts:
    - service: nextcloud
      target: &var_www_html_target /var/www/html/
    - service: cron
      target: *var_www_html_target
    - service: taskprocessing
      target: *var_www_html_target
    - service: proxy
      target: *var_www_html_target
      read_only: true

whiteboard_tmp:
  name: nextcloud_whiteboard_tmp
  type: volume
  backup: false
  mounts:
    - service: whiteboard
      target: &tmp_target /tmp

whiteboard_fontcache:
  name: nextcloud_whiteboard_fontcache
  type: volume
  backup: false
  mounts:
    - service: whiteboard
      target: /var/cache/fontconfig

talk_recording_tmp:
  name: nextcloud_talk_recording_tmp
  type: volume
  backup: false
  # nocheck: nfs-false-data-loss  Reason: scratch for Xvfb sockets, the Firefox profile and the ffmpeg output before its upload; single replica, nothing persists.
  nfs: false
  mounts:
    - service: talk_recording
      target: *tmp_target

nginx_conf:
  type: config
  source: "{{ [ lookup('container', 'web-app-nextcloud', 'directories.volumes'), 'nginx.conf' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: proxy
      target: /etc/nginx/nginx.conf

fpm_pool_conf:
  type: config
  source: "{{ [ lookup('container', 'web-app-nextcloud', 'directories.volumes'), 'fpm-pool.conf' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: nextcloud
      target: /usr/local/etc/php-fpm.d/zzz-infinito.conf

infinito_conf:
  type: bind
  source: "{{ [ lookup('container', 'web-app-nextcloud', 'directories.volumes'), 'infinito' ] | path_join }}"
  read_only: true
  mounts:
    - service: nextcloud
      target: &var_www_infinito_target /var/www/infinito/
    - service: cron
      target: *var_www_infinito_target
    - service: taskprocessing
      target: *var_www_infinito_target

janus_conf:
  type: config
  source: "{{ [ lookup('container', 'web-app-nextcloud', 'directories.volumes'), 'janus.jcfg' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: talk
      target: /usr/local/etc/janus/janus.jcfg
      when: "{{ lookup('config', 'web-app-nextcloud', 'services.talk.enabled') | bool }}"

talk_signaling_conf:
  type: secret
  source: "{{ [ lookup('container', 'web-app-nextcloud', 'directories.volumes'), 'signaling.conf' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: talk_signaling
      target: /config/server.conf
      when: "{{ lookup('config', 'web-app-nextcloud', 'services.talk.enabled') | bool }}"

talk_recording_conf:
  type: secret
  source: "{{ [ lookup('container', 'web-app-nextcloud', 'directories.volumes'), 'recording.conf' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: talk_recording
      target: /conf/recording.conf
      when: "{{ lookup('config', 'web-app-nextcloud', 'services.talk.enabled') | bool }}"

php_hardening:
  type: config
  source: "{{ FILE_PHP_HARDENING_INI }}"
  mode: "0444"
  mounts:
    - service: nextcloud
      target: /usr/local/etc/php/conf.d/zz-infinito-hardening.ini

php_fpm_hardening:
  type: config
  source: "{{ FILE_PHP_FPM_HARDENING_CONF }}"
  mode: "0444"
  mounts:
    - service: nextcloud
      target: /usr/local/etc/php-fpm.d/zz-infinito-hardening.conf