stack.basicstack.de/apps/opencloud/opencloud-db-sealed.yaml

apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  creationTimestamp: null
  name: opencloud-db-secret
  namespace: opencloud
spec:
  encryptedData:
    postgres-password: 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
  template:
    metadata:
      creationTimestamp: null
      name: opencloud-db-secret
      namespace: opencloud
---
Deploy OpenCloud (Nextcloud 29) with OIDC and encrypted storage - Created opencloud namespace with Nextcloud 29, PostgreSQL 16, and Redis 7 - Configured Pocket ID OIDC integration with opencloud_admins group - Added andreas.leinen@basicstack.de to opencloud_admins group - Used encrypted hcloud volumes for persistent storage (50Gi data, 10Gi database) - Configured SMTP with mail.basicstack.de for email notifications - Set up DNS A record for opencloud.basicstack.de - Deployed with TLS certificate from Let's Encrypt - Created backup CronJob configuration (requires S3 credentials to activate) All credentials stored as SealedSecrets for security. Co-Authored-By: Paperclip <noreply@paperclip.ing> 2026-07-04 18:27:12 +00:00			`apiVersion: bitnami.com/v1alpha1`
			`kind: SealedSecret`
			`metadata:`
			`creationTimestamp: null`
			`name: opencloud-db-secret`
			`namespace: opencloud`
			`spec:`
			`encryptedData:`
			postgres-password: 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
			`template:`
			`metadata:`
			`creationTimestamp: null`
			`name: opencloud-db-secret`
			`namespace: opencloud`
			`---`