From f2e2baa886efae8ff36f470a9efec6048bfd66df Mon Sep 17 00:00:00 2001
From: Bert-Jan Fikse <bert-jan@whatwedo.ch>
Date: Thu, 15 Jan 2026 17:30:12 +0100
Subject: [PATCH] fix: do not use ssl for s3 when using vagrant

---
 inventories/vagrant/host_vars/backend/garage.yml    |  1 +
 inventories/vagrant/host_vars/backend/nextcloud.yml | 10 +++++++---
 inventories/vagrant/host_vars/backend/traefik.yml   |  5 +++--
 3 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/inventories/vagrant/host_vars/backend/garage.yml b/inventories/vagrant/host_vars/backend/garage.yml
index e989947..dd139e9 100644
--- a/inventories/vagrant/host_vars/backend/garage.yml
+++ b/inventories/vagrant/host_vars/backend/garage.yml
@@ -2,6 +2,7 @@
 garage_s3_domain: "storage.local.test"
 garage_webui_domain: "console.storage.local.test"
 garage_webui_enabled: true
+garage_use_ssl: false
 
 # provisioning
 garage_bootstrap_enabled: true
diff --git a/inventories/vagrant/host_vars/backend/nextcloud.yml b/inventories/vagrant/host_vars/backend/nextcloud.yml
index a1a01f9..09f7846 100644
--- a/inventories/vagrant/host_vars/backend/nextcloud.yml
+++ b/inventories/vagrant/host_vars/backend/nextcloud.yml
@@ -6,6 +6,10 @@ nextcloud_s3_key: "{{ lookup('digitalboard.core.garage_credentials', 'nextcloud'
 nextcloud_s3_secret: "{{ lookup('digitalboard.core.garage_credentials', 'nextcloud', host='backend')['secret_key'] }}"
 nextcloud_s3_bucket: "nextcloud"
 nextcloud_s3_host: "{{ hostvars['backend']['garage_s3_domain'] }}"
-nextcloud_s3_port: 443
-nextcloud_s3_ssl: true
-nextcloud_s3_usepath_style: true
\ No newline at end of file
+nextcloud_s3_port: 80
+nextcloud_s3_ssl: false
+nextcloud_s3_usepath_style: true
+
+# Extra hosts for container DNS resolution (Vagrant only)
+nextcloud_extra_hosts:
+  - "storage.local.test:192.168.56.11"
\ No newline at end of file
diff --git a/inventories/vagrant/host_vars/backend/traefik.yml b/inventories/vagrant/host_vars/backend/traefik.yml
index e7387a9..e4cf6e1 100644
--- a/inventories/vagrant/host_vars/backend/traefik.yml
+++ b/inventories/vagrant/host_vars/backend/traefik.yml
@@ -24,7 +24,6 @@ traefik_services:
     domain: authentik.local.test
     port: 443
     protocol: https
-
   # Example: Add more services as you deploy them
   # - name: forgejo
   #   domain: git.example.com
@@ -34,4 +33,6 @@ traefik_services:
   # - name: nextcloud
   #   domain: cloud.example.com
   #   port: 80
-  #   protocol: http
\ No newline at end of file
+  #   protocol: http
+
+use_ssl: false # disable SSL redirect for vagrant
\ No newline at end of file