From 5b6ec5284e433553b35bc94bfd48058ff4f1af37 Mon Sep 17 00:00:00 2001
From: Bert-Jan Fikse <bert-jan@whatwedo.ch>
Date: Fri, 19 Dec 2025 15:00:11 +0100
Subject: [PATCH] feat: add nextcloud deployment

---
 .../vagrant/host_vars/backend/garage.yml        | 17 ++++++++++++++++-
 .../vagrant/host_vars/backend/nextcloud.yml     |  1 +
 .../vagrant/host_vars/backend/traefik.yml       |  8 ++++++++
 inventories/vagrant/hosts.ini                   |  3 +++
 playbooks/site.yml                              |  6 ++++++
 5 files changed, 34 insertions(+), 1 deletion(-)
 create mode 100644 inventories/vagrant/host_vars/backend/nextcloud.yml

diff --git a/inventories/vagrant/host_vars/backend/garage.yml b/inventories/vagrant/host_vars/backend/garage.yml
index bbe3f69..e989947 100644
--- a/inventories/vagrant/host_vars/backend/garage.yml
+++ b/inventories/vagrant/host_vars/backend/garage.yml
@@ -1,4 +1,19 @@
 # Garage configuration for backend host
 garage_s3_domain: "storage.local.test"
 garage_webui_domain: "console.storage.local.test"
-garage_webui_enabled: true
\ No newline at end of file
+garage_webui_enabled: true
+
+# provisioning
+garage_bootstrap_enabled: true
+garage_bootstrap_zone: "ch1"
+garage_bootstrap_capacity: "1G"
+
+garage_s3_keys:
+   - name: "nextcloud"
+     buckets:
+       - name: "nextcloud"
+         permissions: ["read", "write"]
+   - name: "nextcloud-backup"
+     buckets:
+       - name: "nextcloud"
+         permissions: ["read"]
\ No newline at end of file
diff --git a/inventories/vagrant/host_vars/backend/nextcloud.yml b/inventories/vagrant/host_vars/backend/nextcloud.yml
new file mode 100644
index 0000000..d3f92eb
--- /dev/null
+++ b/inventories/vagrant/host_vars/backend/nextcloud.yml
@@ -0,0 +1 @@
+nextcloud_collabora_disable_cert_verification: true
\ No newline at end of file
diff --git a/inventories/vagrant/host_vars/backend/traefik.yml b/inventories/vagrant/host_vars/backend/traefik.yml
index 6f0c5b0..fe0ba8c 100644
--- a/inventories/vagrant/host_vars/backend/traefik.yml
+++ b/inventories/vagrant/host_vars/backend/traefik.yml
@@ -12,6 +12,14 @@ traefik_services:
     domain: console.storage.local.test
     port: 443
     protocol: https
+  - name: nextcloud
+    domain: nextcloud.local.test
+    port: 443
+    protocol: https
+  - name: nextcloud-collabora
+    domain: office.local.test
+    port: 443
+    protocol: https
 
   # Example: Add more services as you deploy them
   # - name: forgejo
diff --git a/inventories/vagrant/hosts.ini b/inventories/vagrant/hosts.ini
index 5c1ce89..45a6828 100644
--- a/inventories/vagrant/hosts.ini
+++ b/inventories/vagrant/hosts.ini
@@ -36,4 +36,7 @@ backend2
 backend
 
 [garage_servers]
+backend
+
+[nextcloud_servers]
 backend
\ No newline at end of file
diff --git a/playbooks/site.yml b/playbooks/site.yml
index a53c36b..68abc5e 100644
--- a/playbooks/site.yml
+++ b/playbooks/site.yml
@@ -29,6 +29,12 @@
   roles:
     - digitalboard.core.garage
 
+- name: Deploy nextcloud service
+  hosts: nextcloud_servers
+  become: yes
+  roles:
+    - digitalboard.core.nextcloud
+
 - name: Configure reverse proxy on DMZ servers
   hosts: traefik_servers_dmz
   become: yes