stack.basicstack.de/apps/opencloud/opencloud-admin-sealed.yaml
CTO Agent 0e3f27610e Deploy OpenCloud (Nextcloud 29) with OIDC and encrypted storage
- Created opencloud namespace with Nextcloud 29, PostgreSQL 16, and Redis 7
- Configured Pocket ID OIDC integration with opencloud_admins group
- Added andreas.leinen@basicstack.de to opencloud_admins group
- Used encrypted hcloud volumes for persistent storage (50Gi data, 10Gi database)
- Configured SMTP with mail.basicstack.de for email notifications
- Set up DNS A record for opencloud.basicstack.de
- Deployed with TLS certificate from Let's Encrypt
- Created backup CronJob configuration (requires S3 credentials to activate)

All credentials stored as SealedSecrets for security.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-04 18:27:12 +00:00

15 lines
1.1 KiB
YAML

apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
name: opencloud-admin-secret
namespace: opencloud
spec:
encryptedData:
admin-password: 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
template:
metadata:
creationTimestamp: null
name: opencloud-admin-secret
namespace: opencloud
---