1
0

6 Коммитууд 16dfb86a78 ... 45e0b5f8e2

Эзэн SHA1 Мессеж Огноо
  Victor Lavaud 45e0b5f8e2 Rewrite flexo.yaml 3 сар өмнө
  Victor Lavaud 0e64a2dfc9 Upgrade nextcloud to version 29.0.1 3 сар өмнө
  Victor Lavaud c94789759b Always redirect photos to HSTS 3 сар өмнө
  Victor Lavaud 46746f0242 Install CORS rule on GET 3 сар өмнө
  Victor Lavaud d13a520391 Add photos to dashy 3 сар өмнө
  Victor Lavaud e87522ac35 Upgrade nextcloud image 3 сар өмнө

+ 4 - 0
dashy/conf.yml

@@ -121,6 +121,10 @@ sections:
         description: Privacy-aware DNS
         url: https://dns.dodges.it/admin
         icon: https://wp-cdn.pi-hole.net/wp-content/uploads/2016/12/Vortex-R.png
+      - title: Photos
+        description: Photos
+        url: https://pics.dodges.it/library/login
+        icon: https://www.photoprism.app/static/icons/logo.svg
   - name: Blogs
     icon: fas fa-at
     items:

+ 4 - 2
flexo/flexo.yaml

@@ -32,6 +32,8 @@ spec:
           value: "0.0.0.0"
         - name: FLEXO_MIRRORS_AUTO_ALLOWED_COUNTRIES
           value: "CH,DE,FR"
+        - name: FLEXO_CUSTOM_REPO
+          value: "blackarch@http://mirror.easyname.ch/blackarch"
         ports:
         - containerPort: 31787
         volumeMounts:
@@ -39,8 +41,8 @@ spec:
           mountPath: /var/cache/flexo/pkg
       volumes:
       - name: storage-nfs
-        persistentVolumeClaim:
-          claimName: nroi-flexo-pvc
+        emptyDir:
+          sizeLimit: 50Gi
       - name: config
         configMap:
           name: flexo

+ 8 - 3
ingress/ingress.yaml

@@ -332,6 +332,11 @@ metadata:
     ingress.kubernetes.io/ssl-redirect: "true"
     nginx.org/redirect-to-https: "false"
     nginx.org/location-snippets: |
+     if ($request_method = 'GET') {
+       add_header 'Access-Control-Allow-Origin' '*';
+       add_header 'Access-Control-Allow-Methods' 'GET,POST,OPTIONS,PUT';
+       add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
+     }
      if ($request_method = 'POST') {
        add_header 'Access-Control-Allow-Origin' '*';
        add_header 'Access-Control-Allow-Methods' 'GET,POST,OPTIONS,PUT';
@@ -474,9 +479,9 @@ metadata:
     nginx.org/proxy-connect-timeout: "60s"
     nginx.org/proxy-read-timeout: "60s"
     # Uncomment to allow solving HTTP01 challenge
-    nginx.org/hsts: "false"
-    ingress.kubernetes.io/ssl-redirect: "false"
-    nginx.org/redirect-to-https: "false"
+    nginx.org/hsts: "true"
+    ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.org/redirect-to-https: "true"
 spec:
   tls:
   - hosts:

+ 2 - 2
nextcloud/image/Dockerfile

@@ -1,4 +1,4 @@
-FROM nextcloud:29.0.0-apache
+FROM nextcloud:29.0.1-apache
 
 RUN apt-get update && apt-get install -y \
     supervisor \
@@ -9,7 +9,7 @@ COPY supervisord.conf /
 
 ENV NEXTCLOUD_UPDATE=1
 
-RUN echo '*/15 * * * * php /var/www/html/occ preview:generate' >> /var/spool/cron/crontabs/www-data
+RUN echo '*/15 * * * * php /var/www/html/occ preview:generate-all --no-interaction' >> /var/spool/cron/crontabs/www-data
 RUN echo '0 2 * * 0 php /var/www/html/occ recognize:recrawl' >> /var/spool/cron/crontabs/www-data
 RUN echo '1 2 * * 0 php /var/www/html/occ recognize:cleanup-tags' >> /var/spool/cron/crontabs/www-data
 

+ 1 - 1
nextcloud/nextcloud-dply.yaml

@@ -26,7 +26,7 @@ spec:
                   - amd64
       containers:
         - name: nextcloud
-          image: qdii/nextcloud:29.0.0-apache
+          image: qdii/nextcloud:29.0.1-apache
           env:
           - name: MYSQL_DATABASE
             value: "nextcloud"