creation de nextcloud-kustom

2023-08-30 11:35:31 +02:00
parent d3e895d0f3
commit 17b00068c4
53 changed files with 2034 additions and 0 deletions
--- a/base/resources/nextcloud/kustomization.yaml
+++ b/base/resources/nextcloud/kustomization.yaml
@ -0,0 +1,63 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+# namespace: nextcloud
+
+generatorOptions:
+  disableNameSuffixHash: true # suppression des suffixe en hash en bout de nom
+
+resources:
+- ./resources/deployment.yaml
+# - ./resources/namespace.yaml
+- ./resources/nextcloud-tenant.yaml
+- ./resources/nextcloud-service.yaml
+- ./resources/pvc.yaml
+- ./resources/job.yaml
+- ./resources/ConfigMap.yaml
+- ./resources/nextcloud-rolebinding.yaml
+- ./resources/nextcloud-role.yaml
+- ./resources/nextcloud-serviceaccount.yaml
+- ./resources/ingress.yaml
+- ./resources/ConfigMap-ldap-script.yaml
+
+#- ./resources/secret.yaml
+
+
+configMapGenerator:
+- name: nextcloud-parameters
+  files:
+  - ./resources/files/parameters.yaml
+- name: nextcloud-env
+  literals:
+  - MINIO_SERVICE_NAME=$(MINIO_SERVICE_HOST):$(MINIO_SERVICE_PORT) # pas nécessaire je pense
+  - MINIO_SERVICE_HOST=minio
+  - MINIO_SERVICE_PORT=443
+
+secretGenerator:
+# Voir https://github.com/minio/operator/issues/856
+- name: nextcloud-minio-user
+  literals:
+  - CONSOLE_ACCESS_KEY=minio_root
+  - CONSOLE_SECRET_KEY=MinioRootNotSoSecret
+  options:
+    disableNameSuffixHash: true
+# Voir https://github.com/minio/operator/issues/856
+- name: nextcloud-minio-configuration
+  files:
+  - ./resources/files/minio/config.env  # A modifier si modification mot de passe et user CONSOLE [ACCESS-SECRET]
+  options:
+    disableNameSuffixHash: true
+- name: nextcloud-smtp
+  literals:
+    - smtp-username=user
+    - smtp-password=password
+  options:
+    disableNameSuffixHash: true
+
+vars: # génération d'information pour wait-for-bootstrap du pod nextcloud
+- name: MINIO_BOOTSTRAP_JOB_NAME
+  objref:
+    name: create-minio-bucket
+    kind: Job
+    apiVersion: batch/v1
+  fieldref:
+    fieldpath: metadata.name
--- a/base/resources/nextcloud/resources/ConfigMap-ldap-script.yaml
+++ b/base/resources/nextcloud/resources/ConfigMap-ldap-script.yaml
@ -0,0 +1,46 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: script-config-ldap
+data:
+  poststart-ldap.sh: |
+    #!/bin/sh
+
+    NEXTCLOUD_READY=0
+    MAX_RETRIES=30
+    RETRY_INTERVAL=10
+
+    touch /etc/script/validator.txt
+    # Vérifiez si LDAP est déjà activé
+    # if ! su -s /bin/sh -c "/var/www/html/occ app:list --output=json" www-data | jq -e '.enabled | has("user_ldap")'; then
+        # Activez le module LDAP si ce n'est pas déjà fait
+    #    su -s /bin/sh -c "/var/www/html/occ app:enable user_ldap" www-data
+    #fi
+    for i in $(seq 1 $MAX_RETRIES); do
+      if curl -fsS "http://localhost/status.php" > /dev/null; then
+        NEXTCLOUD_READY=1
+        break
+      else
+        echo "En attente de Nextcloud (tentative $i/$MAX_RETRIES)..." >> /etc/script/validator.txt
+        sleep $RETRY_INTERVAL
+      fi
+    done
+
+    if [ $NEXTCLOUD_READY -eq 0 ]; then
+      echo "Nextcloud n'est pas prêt après $MAX_RETRIES tentatives. Abandon de l'initialisation LDAP." >> /etc/script/validator.txt
+      exit 1
+    fi    
+
+    su -s /bin/sh -c "/var/www/html/occ app:enable user_ldap" www-data
+
+    # Configurez LDAP (configuration minimale)
+    su -s /bin/sh -c "/var/www/html/occ config:app:set user_ldap ldapHost --value='ldap.example.com'" www-data
+    su -s /bin/sh -c "/var/www/html/occ config:app:set user_ldap ldapBase --value='dc=example,dc=com'" www-data
+    su -s /bin/sh -c "/var/www/html/occ config:app:set user_ldap ldapAgentName --value='cn=admin,dc=example,dc=com'" www-data
+    su -s /bin/sh -c "/var/www/html/occ config:app:set user_ldap ldapAgentPassword --value='your_password'" www-data
+    
+    # Lancez le processus principal de Nextcloud normalement ça ne marche pas ça ! donc plutot poststart.
+    #exec /entrypoint.sh "$@"
+
+# su -s /bin/sh -c "/var/www/html/occ app:enable user_ldap" www-data 
+# est fonctionnel dans le pods nextcloud ! 
--- a/base/resources/nextcloud/resources/ConfigMap.yaml
+++ b/base/resources/nextcloud/resources/ConfigMap.yaml
@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: update-config
+data:
+  custom-script.sh: |
+    #!/bin/sh
+
+    HOSTS_FILE="/etc/hosts"
+
+    # Ajoutez l'entrée au fichier hosts
+    MINIO_SERVICE_IP="${MINIO_SERVICE_HOST}"
+    MINIO_NAME="${MINIO_SERVICE_NAME}"
+    echo "$MINIO_SERVICE_IP" minio >> $HOSTS_FILE
--- a/base/resources/nextcloud/resources/deployment.yaml
+++ b/base/resources/nextcloud/resources/deployment.yaml
@ -0,0 +1,231 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: nextcloud
+    component: app
+  name: app
+spec:
+#  serviceName: nextcloud
+  replicas: 1
+  selector:
+    matchLabels:
+      app: nextcloud
+      component: app
+  template:
+    metadata:
+      labels:
+        app: nextcloud
+        component: app
+    spec:
+      containers:
+      - image: reg.cadoles.com/proxy_cache/library/nextcloud:27.0.2-apache
+        imagePullPolicy: Always
+        name: app
+        ports:
+        - containerPort: 80
+        lifecycle:
+          postStart:
+            exec:
+              command: ["/bin/sh", "-c", "cp /var/run/secrets/kubernetes.io/serviceaccount/ca.crt /usr/local/share/ca-certificates/ks.crt && update-ca-certificates && /etc/script/poststart-ldap.sh && touch /etc/script/try01.txt"]
+#        envFrom:
+#        - configMapRef:
+#            name: nextcloud-env
+        env:
+        - name: POSTGRES_DB
+          value: nextcloud
+        - name: POSTGRES_USER
+          valueFrom:
+            secretKeyRef:
+              name: nextcloud-postgres-app
+              key: username
+        - name: POSTGRES_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: nextcloud-postgres-app
+              key: password
+        - name: POSTGRES_HOST
+          value: $(NEXTCLOUD_POSTGRES_RW_SERVICE_HOST) #value: nextcloud-postgres-rw.nextcloud.svc.cluster.local
+        - name: NEXTCLOUD_ADMIN_USER
+          value: admin
+        - name: NEXTCLOUD_ADMIN_PASSWORD  # 5
+          value: cadoles
+        - name: NEXTCLOUD_TRUSTED_DOMAINS
+          value: "*.cadoles.fr"
+        - name: NEXTCLOUD_INIT_LOCK
+          value: "true"
+        - name: PHP_MEMORY_LIMIT
+          value: 512M
+        - name: PHP_UPLOAD_LIMIT
+          value: 4G
+        - name: POD_INDEX
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.name
+        - name: REDIS_HOST
+          value: redis # équivaut à redis.nextcloud.svc.cluster.local
+#          value: $(RFS_NEXTCLOUD_REDIS_SERVICE_HOST) => For redis-operator
+        - name: REDIS_HOST_PORT
+          value: "6379"
+        ######################
+        # Partie minio S3
+        - name: OBJECTSTORE_S3_HOST
+          value: minio:$(MINIO_SERVICE_PORT)
+#          value: $(MINIO_SERVICE_NAME):$(MINIO_SERVICE_PORT)
+        - name: OBJECTSTORE_S3_BUCKET
+          value: nextcloud-minio
+        - name: OBJECTSTORE_S3_KEY  # 15
+          value: minio_root
+        - name: OBJECTSTORE_S3_SECRET
+          value: MinioRootNotSoSecret
+        - name: OBJECTSTORE_S3_USEPATH_STYLE
+          value: "true"
+        - name: OBJECTSTORE_S3_SSL  # 18
+          value: "true"
+        ##################################
+# Mise en place SMTP
+        - name: MAIL_FROM_ADDRESS
+          value: "user"
+        - name: MAIL_DOMAIN
+          value: "domain.com"
+        - name: SMTP_HOST
+          value: "domain.com"
+        - name: SMTP_SECURE
+          value: "ssl"
+        - name: SMTP_PORT
+          value: "465"
+        - name: SMTP_AUTHTYPE
+          value: "LOGIN"
+        - name: SMTP_NAME
+          valueFrom:
+            secretKeyRef:
+              name: nextcloud-smtp
+              key: smtp-username
+        - name: SMTP_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: nextcloud-smtp
+              key: smtp-password
+
+        - name: NEXTCLOUD_DATA_DIR
+          value: "/var/www/html/data"
+        livenessProbe:    # vérifie si c'est planté ou non
+          httpGet:
+            path: /status.php
+            port: 80    # en reférence à ingress.yaml ? 
+            httpHeaders:
+            - name: Host
+              value: nxt.cadoles.fr   # valeurs égale à celle dans ingress.yaml
+          initialDelaySeconds: 50
+          periodSeconds: 15
+          timeoutSeconds: 5
+          successThreshold: 1
+          failureThreshold: 5
+        readinessProbe:   # vérifie si c'est ok pour envoyer des requête ou non
+          httpGet:
+            path: /status.php
+            port: 80    # en référence à ingress.yaml ? 
+            httpHeaders:
+            - name: Host
+              value: nxt.cadoles.fr   # valeurs égale à celle dans ingress.yaml
+          initialDelaySeconds: 50
+          periodSeconds: 15
+          timeoutSeconds: 5
+          successThreshold: 1
+          failureThreshold: 5
+
+        volumeMounts:
+        - mountPath: /var/www/
+          name: nextcloud-main-volume
+        - mountPath: /var/www/html
+          name: nextcloud-html-volume
+        - mountPath: /var/www/html/data
+          name: nextcloud-data-volume
+        - mountPath: /var/www/html/config
+          name: nextcloud-config-volume
+        - mountPath: /var/www/html/custom_apps
+          name: nextcloud-custom-volume
+        - mountPath: /var/www/tmp
+          name: nextcloud-tmp-volume
+        - mountPath: /var/www/html/themes
+          name: nextcloud-themes-volume
+
+# ICI montage pour les script !
+        - mountPath: /etc/script/poststart-ldap.sh
+          name: script-config-ldap
+          subPath: poststart-ldap.sh
+        - mountPath: /etc/script/custom-script.sh
+          name: update-config-script
+          subPath: custom-script.sh
+        - mountPath: /etc/minio-ccerts
+          name: minio-certs
+          readOnly: true
+
+          # MOUNT-TRY-multi-instance
+#        - name: nextcloud-config-volume     # monte le fichier de configuration dans 
+#          mountPath: /var/www/html/config   # les instances supplémentaire
+#          readOnly: false                    # via le configmap ConfigMaps-php.yaml
+
+      restartPolicy: Always
+      serviceAccountName: nextcloud-sa # declare user for initcontainer
+
+      # trois volumes pour les script
+      volumes:
+      - name: minio-certs
+        secret:
+          secretName: nextcloud-minio-tls # montage des certificat de minio
+      - name: update-config-script
+        configMap:
+          name: update-config
+          defaultMode: 0744
+      - name: script-config-ldap
+        configMap:
+          name: script-config-ldap
+          defaultMode: 0744
+
+# MOUNT-TRY-multi-instance
+#      - name: nextcloud-config-volume       # permet de monter le fichier de configuration dans 
+#        configMap:                          # les instances supplémentaires
+#          name: nextcloud-config            # via le configmap ConfigMaps-php.yaml
+
+      - name: nextcloud-main-volume
+        persistentVolumeClaim:
+          claimName: nextcloud-main-pvc
+      - name: nextcloud-html-volume
+        persistentVolumeClaim:
+          claimName: nextcloud-html-pvc
+      - name: nextcloud-data-volume
+        persistentVolumeClaim:
+          claimName: nextcloud-data-pvc
+      - name: nextcloud-config-volume
+        persistentVolumeClaim:
+          claimName: nextcloud-config-pvc
+      - name: nextcloud-custom-volume
+        persistentVolumeClaim:
+          claimName: nextcloud-custom-pvc
+      - name: nextcloud-tmp-volume
+        persistentVolumeClaim:
+          claimName: nextcloud-tmp-pvc
+      - name: nextcloud-themes-volume
+        persistentVolumeClaim:
+          claimName: nextcloud-themes-pvc
+
+      initContainers: # cf README.md part ##YAML explain / ### PODS WAIT
+      - name: wait-for-bootstrap
+        image: reg.cadoles.com/proxy_cache/groundnuty/k8s-wait-for:v1.3
+        args:
+        - job
+        - $(MINIO_BOOTSTRAP_JOB_NAME)
+
+
+#####################################################
+#     For REDIS-OPERATOR USE THIS TO SET PORT
+#####################################################
+#        - name: REDIS_HOST_PORT
+#          value: $(RFS_NEXTCLOUD_REDIS_SERVICE_PORT)
+#        - name: REDIS_HOST_PASSWORD
+#          valueFrom:
+#            secretKeyRef:
+#              name: redis-secret
+#              key: password
+#####################################################
--- a/base/resources/nextcloud/resources/files/minio/config.env
+++ b/base/resources/nextcloud/resources/files/minio/config.env
@ -0,0 +1,4 @@
+export MINIO_ROOT_USER="minio_root"
+export MINIO_ROOT_PASSWORD="MinioRootNotSoSecret"
+export MINIO_STORAGE_CLASS_STANDARD="EC:2"
+export MINIO_BROWSER="on"
--- a/base/resources/nextcloud/resources/files/minio/configurations/tenants.minio.min.io.yaml
+++ b/base/resources/nextcloud/resources/files/minio/configurations/tenants.minio.min.io.yaml
@ -0,0 +1,14 @@
+---
+nameReference:
+- kind: Secret
+  fieldSpecs:
+  - path: spec/credsSecret/name
+    kind: Tenant
+- kind: Secret
+  fieldSpecs:
+  - path: spec/configuration/name
+    kind: Tenant
+- kind: Secret
+  fieldSpecs:
+  - path: spec/users/name
+    kind: Tenant
--- a/base/resources/nextcloud/resources/files/parameters.yaml
+++ b/base/resources/nextcloud/resources/files/parameters.yaml
@ -0,0 +1,8 @@
+  #API minio
+  minio_url: 'http://%env(string:MINIO_SERVICE_NAME)%:9000'
+  minio_key: '%env(string:MINIO_KEY)%'
+  minio_secret: '%env(string:MINIO_SECRET)%'
+  minio_bucket: 'nextcloud'
+  minio_root: ''
+  minio_path_style: true
+  minio_secure: false
--- a/base/resources/nextcloud/resources/ingress.yaml
+++ b/base/resources/nextcloud/resources/ingress.yaml
@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: nextcloud
+
+  annotations:
+#    kustomize.config.k8s.io/needs: configmap/nextcloud-envi
+    nginx.ingress.kubernetes.io/proxy-body-size: "138m"
+    nginx.ingress.kubernetes.io/enable-cors: "true"                   #cf 01
+    nginx.ingress.kubernetes.io/cors-allow-headers: "X-Forwarded-For" #cf 01
+#    nginx.ingress.kubernetes.io/client_max_body_size: "100m"
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: nxt.cadoles.fr
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: nextcloud
+            port:
+              number: 80
+
+# cf 01 => https://artifacthub.io/packages/helm/nextcloud/nextcloud
--- a/base/resources/nextcloud/resources/job.yaml
+++ b/base/resources/nextcloud/resources/job.yaml
@ -0,0 +1,63 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: create-minio-bucket
+spec:
+  template:
+    spec:
+      initContainers:
+      - name: wait-for-minio
+        image: busybox
+        envFrom:
+        - configMapRef:
+            name: nextcloud-env
+        command: ["sh", "-c"]
+        args:
+        - |
+          echo "attente du service minio..."
+          cnt=0
+          tout=300
+          while [ 1 ]
+          do
+            http_code=$(wget --server-response https://${MINIO_SERVICE_HOST}:${MINIO_SERVICE_PORT}/minio/health/live 2>&1 | awk '/^  HTTP/{print $2}')
+            if [ "${http_code}" != "200" ]; then
+              echo "waiting for https://${MINIO_SERVICE_HOST}:${MINIO_SERVICE_PORT}"
+              sleep 1
+            else
+              exit 0
+            fi
+
+            cnt=$((cnt+1))
+            if [ "${cnt}" -ge "${tout}" ]; then
+              exit 3
+            fi
+          done
+# Encore nécessaire ? 
+      containers:
+      - name: create-bucket
+        image: minio/mc
+        envFrom:
+        - configMapRef:
+            name: nextcloud-env
+        env:
+        - name: CONSOLE_ACCESS_KEY
+          valueFrom:
+            secretKeyRef:
+              name: nextcloud-minio-user
+              key: CONSOLE_ACCESS_KEY
+        - name: CONSOLE_SECRET_KEY
+          valueFrom:
+            secretKeyRef:
+              name: nextcloud-minio-user
+              key: CONSOLE_SECRET_KEY
+        command: ["sh", "-c"]
+        args:
+        - |
+          echo "création de l'alias my-minio"
+          mc alias set --insecure my-minio http://${MINIO_SERVICE_HOST}:${MINIO_SERVICE_PORT} ${CONSOLE_ACCESS_KEY} ${CONSOLE_SECRET_KEY}
+          echo "création du bucket..."
+          mc mb --insecure my-minio/nextcloud-minio
+          echo "Bucket créé. normalement"
+      restartPolicy: OnFailure
+# Est-ce que je mettrais pas mon ldap ici ? => ConfigMap-ldap-script.yaml ? 
+
--- a/base/resources/nextcloud/resources/namespace.yaml
+++ b/base/resources/nextcloud/resources/namespace.yaml
@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+    name: nextcloud
--- a/base/resources/nextcloud/resources/nextcloud-role.yaml
+++ b/base/resources/nextcloud/resources/nextcloud-role.yaml
@ -0,0 +1,42 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: status-reader
+rules:
+- apiGroups:
+  - batch
+  - v1
+  resources:
+  - jobs
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - ""
+  - v1
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - patch
+
+# Declaration d'un role nommé status-reader et attribution de droit 
+
+#- apiGroups:
+#  - ""
+#  - v1
+#  resources:
+#  - services
+#  verbs:
+#  - get
+#  - list
+#- apiGroups:
+#  - ""
+#  - v1
+#  resources:
+#  - pods
+#  verbs:
+#  - get
+#  - list
--- a/base/resources/nextcloud/resources/nextcloud-rolebinding.yaml
+++ b/base/resources/nextcloud/resources/nextcloud-rolebinding.yaml
@ -0,0 +1,14 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: status-reader
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: status-reader
+subjects:
+- kind: ServiceAccount
+  name: nextcloud-sa
+
+# Sert à lier le role status-reader (nextcloud-role.yaml) et l'utilisateur nextcloud-sa (nextcloud-serviceaccount.yaml)
--- a/base/resources/nextcloud/resources/nextcloud-service.yaml
+++ b/base/resources/nextcloud/resources/nextcloud-service.yaml
@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: nextcloud
+  labels:
+    app: nextcloud
+    component: app
+spec:
+  ports:
+  - port: 80
+  selector:
+    app: nextcloud
+    component: app
+
--- a/base/resources/nextcloud/resources/nextcloud-serviceaccount.yaml
+++ b/base/resources/nextcloud/resources/nextcloud-serviceaccount.yaml
@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: nextcloud-sa
+
+# déclaration d'un user nextcloud-sa
--- a/base/resources/nextcloud/resources/nextcloud-tenant.yaml
+++ b/base/resources/nextcloud/resources/nextcloud-tenant.yaml
@ -0,0 +1,33 @@
+apiVersion: minio.min.io/v2
+kind: Tenant
+metadata:
+  name: nextcloud-minio
+spec:
+  certConfig:
+    dnsNames:
+    - "minio"
+  pools:
+  - servers: 2
+    name: pool-0
+    volumesPerServer: 2
+    volumeClaimTemplate:
+      metadata:
+        name: nextcloud-minio-data # juste son nom dans le cluster
+      spec:
+        accessModes:
+        - ReadWriteOnce
+        resources:
+          requests:
+            storage: 2Gi
+            #        env:
+            #          - name: MINIO_CONSOLE_TLS_ENABLE
+            #            value: "off"
+    containerSecurityContext:
+      runAsUser: 1000 # droit d'accès user
+      runAsGroup: 1000 # droit d'accès group
+      runAsNonRoot: true # accès sans être root
+  configuration:
+    name: nextcloud-minio-configuration # cf resources/nextcloud/resources/kustomization.yaml
+  users:
+  - name: nextcloud-minio-user # cf resources/nextcloud/resources/kustomization.yaml
+
--- a/base/resources/nextcloud/resources/nodeport-service.yaml
+++ b/base/resources/nextcloud/resources/nodeport-service.yaml
@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: nextcloud-nodeport  # nom du service
+  labels:
+#    app: nextcloud
+#    component: app
+spec:
+  type: NodePort
+  ports:
+    - port: 80
+      targetPort: 80  # port du pods
+      nodePort: 30080 # port de la machine locale detenant les noeuds
+  selector:
+    app: nextcloud
+    component: app
--- a/base/resources/nextcloud/resources/pvc.yaml
+++ b/base/resources/nextcloud/resources/pvc.yaml
@ -0,0 +1,83 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nextcloud-main-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 5Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nextcloud-html-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 5Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nextcloud-data-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 20Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nextcloud-config-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 1Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nextcloud-custom-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 2Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nextcloud-tmp-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 5Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nextcloud-themes-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 2Gi