메뉴
Deploy Nextcloud on Kubernetes via Helm with PostgreSQL/Redis, Rook-Ceph storage, Traefik IngressRoute, Authentik SAML SSO, Collabora CODE, ArgoCD GitOps, or day-2 ops (upgrades, backups, occ, cron).
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Reviews code comments across languages before a PR opens. Use when finishing a development branch, before merging, or when a pr create was blocked pending comment review.
Create, promote, categorize, and validate skills for the kettleofskills marketplace. Use when syncing dotfiles skills into the marketplace, adding skills, assigning categories, or preparing a release.
Build Go terminal UIs (TUIs) and CLIs with charmbracelet — Bubble Tea runtime, Lip Gloss styling, Bubbles components, Glamour markdown, Harmonica animation, BubbleZone mouse. For any bubbletea TUI.
Copier templating — author copier.yml templates (questions, Jinja, _tasks, migrations), scaffold via `copier copy`, sync via `copier update`. Use for copier.yml, .copier-answers.yml, or .jinja.
Copyparty portable file server (HTTP/WebDAV/FTP/SFTP/SMB). This skill should be used when deploying via Docker/pip/NixOS, configuring accounts/volumes, indexer, hooks, or forward-auth IdP integration.
Sway tiling Wayland compositor on NixOS. This skill should be used when configuring programs.sway, GPU rendering (Intel/AMD/NVIDIA), Wails/webkit2gtk fixes, xdg portals, home-manager, or wallpapers.
| name | nextcloud |
| description | Deploy Nextcloud on Kubernetes via Helm with PostgreSQL/Redis, Rook-Ceph storage, Traefik IngressRoute, Authentik SAML SSO, Collabora CODE, ArgoCD GitOps, or day-2 ops (upgrades, backups, occ, cron). |
Self-hosted Nextcloud deployment on Kubernetes using the official Helm chart with PostgreSQL, Redis, Rook-Ceph storage, Traefik ingress, Authentik SAML SSO, and Collabora CODE.
| Component | Solution | License |
|---|---|---|
| Nextcloud | Official Helm chart nextcloud/nextcloud | AGPL v3 |
| Database | PostgreSQL (Bitnami subchart) | PostgreSQL License |
| Cache/Locking | Redis (Bitnami subchart) | BSD-3 |
| Storage | Rook-Ceph (ceph-block RWO, ceph-filesystem RWX) | Apache 2.0 |
| Ingress | Traefik IngressRoute CRD | MIT |
| SSO | Authentik SAML (free tier, unlimited users) | MIT |
| Office | Collabora CODE (bundled subchart) | MPL-2.0 |
| GitOps | ArgoCD app-of-apps | Apache 2.0 |
helm repo add nextcloud https://nextcloud.github.io/helm/
# Chart: nextcloud/nextcloud (v8.9+, app v32+)
# Requires: Kubernetes 1.24+, Helm 3.7.0+
values.yaml -- see references/deployment.md for full values template| Task | Reference |
|---|---|
| Helm values template, secrets, Traefik IngressRoute | references/deployment.md |
| ArgoCD Application, app-of-apps, storage classes | references/argocd-storage.md |
| Authentik SAML SSO setup | references/authentik-saml.md |
| App configuration (Calendar, Contacts, Talk, Collabora) | references/apps-config.md |
| Upgrades, backups, occ commands, troubleshooting | references/day2-operations.md |
initialDelaySeconds: 10 is too low; use startupProbe with 5min timeoutRecreate with RWO volumes (default); RollingUpdate only with RWX + sticky sessions| Symptom | Cause | Fix |
|---|---|---|
| "Access through untrusted domain" | Missing trusted_proxies or trustedDomains | Add pod/node CIDRs to trusted_proxies config |
| Login redirect loop | overwriteprotocol not set behind TLS proxy | Set phpClientHttpsFix.enabled: true |
| Slow background jobs | Cron not enabled, using AJAX mode | Enable cronjob.enabled with sidecar |
| File lock timeout errors | No Redis, using DB locking | Enable Redis subchart |
| Pod stuck in CrashLoop on upgrade | Major version skip | Restore backup, upgrade sequentially |
| Collabora "WOPI host not allowed" | aliasgroups misconfigured | Set aliasgroups host to Nextcloud external URL |