feature/sso-hardening #9

Merged
bstein merged 685 commits from feature/sso-hardening into main 2026-01-13 20:23:26 +00:00
2 changed files with 41 additions and 2 deletions
Showing only changes of commit c954fb7546 - Show all commits

View File

@ -0,0 +1,38 @@
# services/nextcloud/db-reset-job.yaml
apiVersion: batch/v1
kind: Job
metadata:
name: nextcloud-db-reset
namespace: nextcloud
spec:
backoffLimit: 0
ttlSecondsAfterFinished: 600
template:
spec:
restartPolicy: Never
containers:
- name: psql
image: postgres:16
env:
- name: PGHOST
value: postgres-service.postgres.svc.cluster.local
- name: PGUSER
valueFrom:
secretKeyRef:
name: nextcloud-db
key: db-username
- name: PGPASSWORD
valueFrom:
secretKeyRef:
name: nextcloud-db
key: db-password
- name: NC_DB
valueFrom:
secretKeyRef:
name: nextcloud-db
key: database
command: ["/bin/sh", "-c"]
args:
- |
set -euo pipefail
psql -d "${NC_DB}" -v ON_ERROR_STOP=1 -c "DROP SCHEMA public CASCADE; CREATE SCHEMA public;"

View File

@ -6,11 +6,12 @@ resources:
- namespace.yaml
- configmap.yaml
- pvc.yaml
- db-reset-job.yaml
- deployment.yaml
- service.yaml
- ingress.yaml
- cronjob.yaml
- maintenance-cronjob.yaml
- service.yaml
- ingress.yaml
configMapGenerator:
- name: nextcloud-maintenance-script
files: