stack.basicstack.de/apps/opencloud/opencloud-db-sealed.yaml
CTO Agent 0e3f27610e Deploy OpenCloud (Nextcloud 29) with OIDC and encrypted storage
- Created opencloud namespace with Nextcloud 29, PostgreSQL 16, and Redis 7
- Configured Pocket ID OIDC integration with opencloud_admins group
- Added andreas.leinen@basicstack.de to opencloud_admins group
- Used encrypted hcloud volumes for persistent storage (50Gi data, 10Gi database)
- Configured SMTP with mail.basicstack.de for email notifications
- Set up DNS A record for opencloud.basicstack.de
- Deployed with TLS certificate from Let's Encrypt
- Created backup CronJob configuration (requires S3 credentials to activate)

All credentials stored as SealedSecrets for security.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-04 18:27:12 +00:00

15 lines
1 KiB
YAML

apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
name: opencloud-db-secret
namespace: opencloud
spec:
encryptedData:
postgres-password: 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
template:
metadata:
creationTimestamp: null
name: opencloud-db-secret
namespace: opencloud
---