stack.basicstack.de/apps/opencloud/opencloud-oidc-sealed.yaml

apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  creationTimestamp: null
  name: opencloud-oidc-secret
  namespace: opencloud
spec:
  encryptedData:
    oidc-client-id: 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
    oidc-client-secret: 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
  template:
    metadata:
      creationTimestamp: null
      name: opencloud-oidc-secret
      namespace: opencloud
---
Deploy OpenCloud (Nextcloud 29) with OIDC and encrypted storage - Created opencloud namespace with Nextcloud 29, PostgreSQL 16, and Redis 7 - Configured Pocket ID OIDC integration with opencloud_admins group - Added andreas.leinen@basicstack.de to opencloud_admins group - Used encrypted hcloud volumes for persistent storage (50Gi data, 10Gi database) - Configured SMTP with mail.basicstack.de for email notifications - Set up DNS A record for opencloud.basicstack.de - Deployed with TLS certificate from Let's Encrypt - Created backup CronJob configuration (requires S3 credentials to activate) All credentials stored as SealedSecrets for security. Co-Authored-By: Paperclip <noreply@paperclip.ing> 2026-07-04 18:27:12 +00:00			`apiVersion: bitnami.com/v1alpha1`
			`kind: SealedSecret`
			`metadata:`
			`creationTimestamp: null`
			`name: opencloud-oidc-secret`
			`namespace: opencloud`
			`spec:`
			`encryptedData:`
			oidc-client-id: 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
			oidc-client-secret: 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
			`template:`
			`metadata:`
			`creationTimestamp: null`
			`name: opencloud-oidc-secret`
			`namespace: opencloud`
			`---`