initial commit

2025-11-23 18:58:51 +01:00
commit 376a944abc
1553 changed files with 314731 additions and 0 deletions
--- a/riscv/nextcloud/README.md
+++ b/riscv/nextcloud/README.md
@@ -0,0 +1,171 @@
+INSIDE THE NEXTCLOUD CONTAINER:
+===============================
+
+#controleren of WEBDAV is geinstalleerd:
+
+su -s /bin/sh -c "php occ app:list www-data
+
+=> 
+
+Enabled:
+  - activity: 2.20.0
+  - circles: 28.0.0
+  - cloud_federation_api: 1.11.0
+  - comments: 1.18.0
+  - contactsinteraction: 1.9.0
+  - dashboard: 7.8.0
+  - dav: 1.29.2
+  - federatedfilesharing: 1.18.0
+  - federation: 1.18.0
+  - files: 2.0.0
+  - files_pdfviewer: 2.9.0
+  - files_reminders: 1.1.0
+  - files_sharing: 1.20.0
+  - files_trashbin: 1.18.0
+  - files_versions: 1.21.0
+  - firstrunwizard: 2.17.0
+  - logreader: 2.13.0
+  - lookup_server_connector: 1.16.0
+  - nextcloud_announcements: 1.17.0
+  - notifications: 2.16.0
+  - oauth2: 1.16.4
+  - password_policy: 1.18.0
+  - photos: 2.4.0
+  - privacy: 1.12.0
+  - provisioning_api: 1.18.0
+  - recommendations: 2.0.0
+  - related_resources: 1.3.0
+  - serverinfo: 1.18.0
+  - settings: 1.10.1
+  - sharebymail: 1.18.0
+  - support: 1.11.1
+  - survey_client: 1.16.0
+  - systemtags: 1.18.0
+  - text: 3.9.2
+  - theming: 2.3.0
+  - twofactor_backupcodes: 1.17.0
+  - updatenotification: 1.18.0
+  - user_status: 1.8.1
+  - viewer: 2.2.0
+  - weather_status: 1.8.0
+  - workflowengine: 2.10.0
+Disabled:
+  - admin_audit: 1.18.0
+  - bruteforcesettings: 2.8.0
+  - encryption: 2.16.0
+  - files_external: 1.20.0
+  - suspicious_login: 6.0.0
+  - twofactor_totp: 10.0.0-beta.2
+  - user_ldap: 1.19.0
+
+#zo niet dan:
+
+su -s /bin/sh -c "php occ app:enable dav" www-data
+
+=> dav already enabled
+
+#controleren of nextcloud alle bestanden in var/www/data kan lezen:
+
+su -s /bin/sh -c "php occ files:scan --all" www-data
+
+=>
+
+Starting scan for user 1 out of 1 (admin)
+---------+-------+-----+---------+---------+--------+--------------+
+| Folders | Files | New | Updated | Removed | Errors | Elapsed time |
+---------+-------+-----+---------+---------+--------+--------------+
+| 6       | 44    | 0   | 0       | 0       | 0      | 00:00:01     |
+---------+-------+-----+---------+---------+--------+--------------+
+
+#controleren of de user "admin" een directory heeft:
+
+ls -lah /var/www/html/data/admin/
+
+=>
+total 16K
+drwxrwx---    4 www-data www-data    4.0K Feb  9 16:47 .
+drwxrwx---    4 www-data www-data    4.0K Feb  9 16:46 ..
+drwxrwx---    2 www-data www-data    4.0K Feb  9 16:47 cache
+drwxrwx---    5 www-data www-data    4.0K Feb  9 16:17 files
+
+su -s /bin/sh -c "php occ user:list" www-data
+
+#controleren of gebruiker bestaat:
+
+=>  - admin: admin
+
+#enable gebruiker admin:
+
+su -s /bin/sh -c "php occ user:enable admin" www-data
+
+=> The specified user is enabled
+
+su -s /bin/sh -c "php occ security:bruteforce:reset admin" www-data
+
+=>
+#controleren log of specifieke meldingen mbt admin:
+
+cat /var/www/html/data/nextcloud.log | grep "admin"
+
+
+=> 
+
+{"reqId":"up3RdhwXxxGTV3nlIMH9","level":2,
+ "time":"2025-02-09T20:15:15+00:00",
+ "remoteAddr":"10.42.0.82",
+ "user":"--",
+ "app":"no app in context",
+ "method":"POST",
+ "url":"/index.php/login",
+ "message":"Login failed: admin (Remote IP: 10.42.0.82)",
+ "userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15",
+ "version":"28.0.14.1",
+ "data":[]}
+
+#controleren of .htaccess goed is geconfigureerd:
+
+cat /var/www/html/.htaccess | grep dav
+
+=>
+
+  RewriteRule ^$ /remote.php/webdav/ [L,R=302]
+  RewriteRule ^\.well-known/carddav /remote.php/dav/ [R=301,L]
+  RewriteRule ^\.well-known/caldav /remote.php/dav/ [R=301,L]
+
+#  - https://docs.nextcloud.com/server/latest/admin_manual/issues/general_troubleshooting.html#troubleshooting-webdav
+
+#legen cache:
+
+su -s /bin/sh -c "php occ maintenance:mode --on" www-data
+=> Nextcloud is in maintenance mode, no apps are loaded.
+
+su -s /bin/sh -c "php occ maintenance:data-fingerprint" www-data
+
+=>
+Commands provided by apps are unavailable.
+Updated data-fingerprint to 60f73f9b70daee107c27b5a064670c28
+
+su -s /bin/sh -c "php occ cache:clear" www-data
+
+=>
+Commands provided by apps are unavailable.
+Updated data-fingerprint to 60f73f9b70daee107c27b5a064670c28
+There are no commands defined in the "cache" namespace.
+
+su -s /bin/sh -c "php occ maintenance:mode --off" www-data
+=>
+Maintenance mode disabled
+su -s /bin/sh -c "php occ config:system:get overwrite.cli.url" www-data
+
+
+
+#OUTSIDE NEXTCLOUD CONTAINER
+============================
+#herstarten:
+
+kubectl rollout restart deployment nextcloud -n nextcloud
+
+#testen webdav:
+
+curl -v -u admin:Nextcloud01@ -X PROPFIND https://nextcloud-riscv.allarddcs.nl/remote.php/dav/files/admin/
+
--- a/riscv/nextcloud/catalog-info.yaml
+++ b/riscv/nextcloud/catalog-info.yaml
@@ -0,0 +1,11 @@
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: riscv-nextcloud
+  title: Nextcloud (riscv)
+spec:
+  type: service
+  lifecycle: production
+  owner: platform-team
+  partOf:
+    - ../catalog-info.yaml
--- a/riscv/nextcloud/ingressroutes.yaml
+++ b/riscv/nextcloud/ingressroutes.yaml
@@ -0,0 +1,90 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: nextcloud-http
+  namespace: nextcloud
+spec:
+  entryPoints:
+    - web
+  routes:
+    - match: Host(`nextcloud-riscv.allarddcs.nl`)
+      kind: Rule
+      services:
+        - name: nginx
+          port: 80
+      middlewares:
+        - name: redirect-to-https
+          namespace: nextcloud
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: nextcloud-tls
+  namespace: nextcloud
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`nextcloud-riscv.allarddcs.nl`)
+      kind: Rule
+      middlewares:
+        - name: nextcloud-well-known
+        - name: nextcloud-headers
+      services:
+        - name: nginx
+          port: 80
+    - match: Host(`nextcloud-riscv.allarddcs.nl`) && PathPrefix(`/ocs/`)
+      kind: Rule
+      middlewares:
+        - name: nextcloud-well-known
+        - name: nextcloud-headers
+      services:
+        - name: nginx
+          port: 80
+    - match: Host(`nextcloud-riscv.allarddcs.nl`) && PathPrefix(`/ocs-provider/`)
+      kind: Rule
+      middlewares:
+        - name: nextcloud-headers
+      services:
+        - name: nginx
+          port: 80
+  tls:
+    certResolver: letsencrypt
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-to-https
+  namespace: nextcloud
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: nextcloud-headers
+  namespace: nextcloud
+spec:
+  headers:
+    stsSeconds: 15552000
+    browserXssFilter: true
+    contentTypeNosniff: true
+    forceSTSHeader: true
+    frameDeny: true
+    sslRedirect: true
+    stsIncludeSubdomains: true
+    stsPreload: true
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: nextcloud-well-known
+  namespace: nextcloud
+spec:
+  redirectRegex:
+    regex: "^/.well-known/(carddav|caldav|webdav)"
+    replacement: "/remote.php/dav"
+    permanent: true
+
--- a/riscv/nextcloud/nextcloud.yaml
+++ b/riscv/nextcloud/nextcloud.yaml
@@ -0,0 +1,130 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nextcloud                  # < name of the deploymentand reference
+  namespace: nextcloud
+  labels:
+    app: nextcloud                 # < label for tagging and reference
+spec:
+  replicas: 1                      # < number of pods to deploy
+  selector:
+    matchLabels:
+      app: nextcloud
+  strategy:
+    rollingUpdate:
+      maxSurge: 0                  # < The number of pods that can be created above the desired amount of pods during an update
+      maxUnavailable: 1            # < The number of pods that can be unavailable during the update process
+    type: RollingUpdate            # < New pods are added gradually, and old pods are terminated gradually
+  template:
+    metadata:
+      labels:
+        app: nextcloud
+    spec:
+      containers:
+      - image: riscv64/nextcloud:28.0.14-fpm-alpine                # < the name of the docker image we will use
+        name: nextcloud                    # < name of container
+        imagePullPolicy: Always            # < always use the latest image when creating container/pod
+        env:                               # < environment variables. See https://hub.docker.com/r/linuxserver/nextcloud
+        - name: PGID
+          value: "1000"                    # < group "ubuntu"
+        - name: PUID
+          value: "1000"                    # < user "ubuntu"
+        - name: MYSQL_HOST
+          value: mariadb.mariadb.svc.cluster.local
+        - name: MYSQL_DATABASE
+          value: "nextcloud"
+        - name: MYSQL_USER
+          value: "nextcloud"
+        - name: MYSQL_PASSWORD
+          value: "nextcloud"
+        - name: MYSQL_ROOT_PASSWORD
+          value: "password"
+        - name: NEXTCLOUD_HOSTNAME
+          value: "nextcloud-riscv.allarddcs.nl"
+        - name: TZ
+          value: Europe/Amsterdam
+        - name: OVERWRITEPROTOCOL
+          value: "https"
+        - name: APACHE_SERVER_NAME
+          value: "nextcloud-riscv.allarddcs.nl"
+        ports:
+         - containerPort: 9000              # < required network portnumber. See https://hub.docker.com/r/linuxserver/nextcloud
+           name: http
+           protocol: TCP
+        volumeMounts:                      # < the volume mount in the container. Look at the relation volumelabel->pvc->pv
+#         - name: nfs-nextcloud
+#           mountPath: /var/www/html
+#           subPath: html
+         - name: nfs-nextcloud
+           mountPath: /var/www/html/data
+           subPath: data
+         - name: nfs-nextcloud
+           mountPath: /var/www/html/config
+           subPath: config
+#         - name: nfs-nextcloud
+#           mountPath: /var/www/html/custom_apps
+#           subPath: nextapps
+      - name: nginx
+        image: riscv64/nginx:1.27.4-alpine
+        ports:
+          - containerPort: 80
+        volumeMounts:
+          - name: nfs-nextcloud
+            mountPath: /var/www/html
+            subPath: html
+          - name: nfs-nextcloud
+            mountPath: /etc/nginx/conf.d/default.conf
+            subPath: default.conf
+      volumes:
+      - name: nfs-nextcloud                # < linkname of the volume for the pvc
+        persistentVolumeClaim:
+          claimName: nextcloud-pvc         # < pvc name we created in the previous yaml
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: nginx
+  namespace: nextcloud
+spec:
+  selector:
+    app: nextcloud
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: 80
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: nextcloud-pv
+spec:
+  storageClassName: ""
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  mountOptions:
+    - hard
+    - nfsvers=4.1
+  nfs:
+    server: 192.168.2.110
+    path: /mnt/nfs_share/nextcloud-riscv
+    readOnly: false
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nextcloud-pvc
+  namespace: nextcloud
+spec:
+  storageClassName: ""
+  volumeName: nextcloud-pv
+  accessModes:
+    - ReadWriteMany
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 10Gi
+
--- a/riscv/nextcloud/restart.sh
+++ b/riscv/nextcloud/restart.sh
@@ -0,0 +1,4 @@
+kubectl delete -f nextcloud.yaml
+kubectl delete -f nginx-config.yaml
+kubectl apply -f nginx-config.yaml
+kubectl apply -f nextcloud.yaml
--- a/riscv/nextcloud/test.txt
+++ b/riscv/nextcloud/test.txt