starting to switch to nginx-ingress

nextcloud-linode/templates/ingress.yaml

@@ -0,0 +1,16 @@
+# apiVersion: networking.k8s.io/v1
+# kind: Ingress
+# metadata:
+  # name: ts-nextcloud
+  # annotations:
+    # tailscale.com/funnel: "false"
+# spec:
+  # defaultBackend:
+    # service:
+      # name: {{ .Release.Name }}
+      # port:
+        # number: 8080
+  # ingressClassName: tailscale
+  # tls:
+    # - hosts:
+        # - "{{ .Values.tailscaleHostName }}"

nextcloud-linode/templates/ts-ingress.yaml

@@ -1,16 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: ts-nextcloud
-  annotations:
-    tailscale.com/funnel: "false"
-spec:
-  defaultBackend:
-    service:
-      name: {{ .Release.Name }}
-      port:
-        number: 8080
-  ingressClassName: tailscale
-  tls:
-    - hosts:
-        - "{{ .Values.tailscaleHostName }}"

nextcloud-linode/values.yaml

@@ -34,3 +34,36 @@ nextcloud:
     nextcloudData:
       enabled: true
       size: 8Gi
+  image:
+    flavor: fpm
+  nginx:
+    enabled: true
+  ingress:
+    className: nginx
+    annotations:
+      nginx.ingress.kubernetes.io/server-snippet: |-
+        server_tokens off;
+        proxy_hide_header X-Powered-By;
+        rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last;
+        rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last;
+        rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+        rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json;
+        location = /.well-known/carddav {
+          return 301 $scheme://$host/remote.php/dav;
+        }
+        location = /.well-known/caldav {
+          return 301 $scheme://$host/remote.php/dav;
+        }
+        location = /robots.txt {
+          allow all;
+          log_not_found off;
+          access_log off;
+        }
+        location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
+          deny all;
+        }
+        location ~ ^/(?:autotest|occ|issue|indie|db_|console) {
+          deny all;
+        }
+      nginx.ingress.kubernetes.io/enable-cors: "true"
+      nginx.ingress.kubernetes.io/cors-allow-headers: "X-Forwarded-For"