apiVersion: apps/v1
kind: Deployment
metadata:
  name: nextcloud-app
spec:
  replicas: 3
  template:
    spec:
      initContainers:
      - name: wait-for-bootstrap
        image: reg.cadoles.com/proxy_cache/groundnuty/k8s-wait-for:v1.3
        args:
        - job
        - $(MINIO_BOOTSTRAP_JOB_NAME)
      containers:
      - name: nextcloud
        env:
        - name: POSTGRES_USER
          valueFrom:
            secretKeyRef:
              name: nextcloud-postgres-app
              key: username
        - name: POSTGRES_PASSWORD
          valueFrom:
            secretKeyRef:
              name: nextcloud-postgres-app
              key: password
        - name: OBJECTSTORE_S3_BUCKET
          value: nxt-minio
        - name: OBJECTSTORE_S3_AUTOCREATE
          value: "true"
        - name: OBJECTSTORE_S3_KEY
          valueFrom:
            secretKeyRef:
              name: nextcloud-minio-user
              key: CONSOLE_ACCESS_KEY
        - name: OBJECTSTORE_S3_SECRET
          valueFrom:
            secretKeyRef:
              name: nextcloud-minio-user
              key: CONSOLE_SECRET_KEY
        - name: OBJECTSTORE_S3_HOST
          value: minio:$(MINIO_SERVICE_PORT)
        - name: OBJECTSTORE_S3_PORT
          value: "443"
        - name: OBJECTSTORE_S3_SSL
          value: "true"
        - name: OBJECTSTORE_S3_USEPATH_STYLE
          value: "true"

        livenessProbe:
          httpGet:
            path: /status.php
            port: 80
            httpHeaders:
            - name: Host
              value: nxt.cadoles.lan
          initialDelaySeconds: 50
          periodSeconds: 10
          timeoutSeconds: 5
          successThreshold: 1
          failureThreshold: 6
        readinessProbe:
          httpGet:
            path: /status.php
            port: 80
            httpHeaders:
            - name: Host
              value: nxt.cadoles.lan
          initialDelaySeconds: 50
          periodSeconds: 10
          timeoutSeconds: 5
          successThreshold: 1
          failureThreshold: 6
        volumeMounts:
        - mountPath: /docker-entrypoint-hooks.d/post-installation/ldap.sh
          name: script-config-ldap
          subPath: poststart-ldap.sh
        - mountPath: /etc/minio-ccerts
          name: minio-certs
          readOnly: true
      volumes:
      - name: minio-certs
        secret:
          secretName: nextcloud-minio-tls
      - name: script-config-ldap
        configMap:
          name: script-config-ldap
          defaultMode: 0755
      restartPolicy: Always
      serviceAccountName: nextcloud-sa