🦈🏠🐜❗ Initial Commit ❗🐜🦈🏠

2026-01-27 16:34:43 -05:00 · 2022-10-04 21:48:50 -04:00
commit 4954dce9b1
26 changed files with 1066 additions and 0 deletions
--- a/config/cont-init.d/00-fix-logs.sh
+++ b/config/cont-init.d/00-fix-logs.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/with-contenv sh
+# shellcheck shell=sh
+
+# Fix access rights to stdout and stderr
+chown ${PUID}:${PGID} /proc/self/fd/1 /proc/self/fd/2 || true
--- a/config/cont-init.d/01-fix-uidgid.sh
+++ b/config/cont-init.d/01-fix-uidgid.sh
@@ -0,0 +1,12 @@
+#!/usr/bin/with-contenv sh
+# shellcheck shell=sh
+
+if [ -n "${PGID}" ] && [ "${PGID}" != "$(id -g nextcloud)" ]; then
+  echo "Switching to PGID ${PGID}..."
+  sed -i -e "s/^nextcloud:\([^:]*\):[0-9]*/nextcloud:\1:${PGID}/" /etc/group
+  sed -i -e "s/^nextcloud:\([^:]*\):\([0-9]*\):[0-9]*/nextcloud:\1:\2:${PGID}/" /etc/passwd
+fi
+if [ -n "${PUID}" ] && [ "${PUID}" != "$(id -u nextcloud)" ]; then
+  echo "Switching to PUID ${PUID}..."
+  sed -i -e "s/^nextcloud:\([^:]*\):[0-9]*:\([0-9]*\)/nextcloud:\1:${PUID}:\2/" /etc/passwd
+fi
--- a/config/cont-init.d/02-fix-perms.sh
+++ b/config/cont-init.d/02-fix-perms.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/with-contenv sh
+# shellcheck shell=sh
+
+echo "Fixing perms..."
+mkdir -p /data \
+  /var/run/nginx \
+  /var/run/php-fpm
+chown nextcloud. \
+  /data
+chown -R nextcloud. \
+  /home/nextcloud \
+  /etc/tpls \
+  /var/lib/nginx \
+  /var/log/nginx \
+  /var/log/php* \
+  /var/run/nginx \
+  /var/run/php-fpm
--- a/config/cont-init.d/03-config.sh
+++ b/config/cont-init.d/03-config.sh
@@ -0,0 +1,175 @@
+#!/usr/bin/with-contenv bash
+# shellcheck shell=bash
+
+runas_user() {
+  yasu nextcloud:nextcloud "$@"
+}
+
+# From https://github.com/docker-library/mariadb/blob/master/docker-entrypoint.sh#L21-L41
+# usage: file_env VAR [DEFAULT]
+#    ie: file_env 'XYZ_DB_PASSWORD' 'example'
+# (will allow for "$XYZ_DB_PASSWORD_FILE" to fill in the value of
+#  "$XYZ_DB_PASSWORD" from a file, especially for Docker's secrets feature)
+file_env() {
+  local var="$1"
+  local fileVar="${var}_FILE"
+  local def="${2:-}"
+  if [ "${!var:-}" ] && [ "${!fileVar:-}" ]; then
+    echo >&2 "error: both $var and $fileVar are set (but are exclusive)"
+    exit 1
+  fi
+  local val="$def"
+  if [ "${!var:-}" ]; then
+    val="${!var}"
+  elif [ "${!fileVar:-}" ]; then
+    val="$(<"${!fileVar}")"
+  fi
+  export "$var"="$val"
+  unset "$fileVar"
+}
+
+TZ=${TZ:-UTC}
+MEMORY_LIMIT=${MEMORY_LIMIT:-512M}
+UPLOAD_MAX_SIZE=${UPLOAD_MAX_SIZE:-512M}
+CLEAR_ENV=${CLEAR_ENV:-yes}
+OPCACHE_MEM_SIZE=${OPCACHE_MEM_SIZE:-128}
+LISTEN_IPV6=${LISTEN_IPV6:-true}
+APC_SHM_SIZE=${APC_SHM_SIZE:-128M}
+REAL_IP_FROM=${REAL_IP_FROM:-0.0.0.0/32}
+REAL_IP_HEADER=${REAL_IP_HEADER:-X-Forwarded-For}
+LOG_IP_VAR=${LOG_IP_VAR:-remote_addr}
+
+HSTS_HEADER=${HSTS_HEADER:-max-age=15768000; includeSubDomains}
+XFRAME_OPTS_HEADER=${XFRAME_OPTS_HEADER:-SAMEORIGIN}
+RP_HEADER=${RP_HEADER:-strict-origin}
+
+DB_TYPE=${DB_TYPE:-sqlite}
+DB_HOST=${DB_HOST:-db}
+DB_NAME=${DB_NAME:-nextcloud}
+DB_USER=${DB_USER:-nextcloud}
+
+SIDECAR_CRON=${SIDECAR_CRON:-0}
+SIDECAR_NEWSUPDATER=${SIDECAR_NEWSUPDATER:-0}
+
+# Timezone
+echo "Setting timezone to ${TZ}..."
+ln -snf /usr/share/zoneinfo/${TZ} /etc/localtime
+echo ${TZ} >/etc/timezone
+
+# PHP-FPM
+echo "Setting PHP-FPM configuration..."
+sed -e "s/@MEMORY_LIMIT@/$MEMORY_LIMIT/g" \
+  -e "s/@UPLOAD_MAX_SIZE@/$UPLOAD_MAX_SIZE/g" \
+  -e "s/@CLEAR_ENV@/$CLEAR_ENV/g" \
+  /etc/tpls/etc/php/php-fpm.d/www.conf >/etc/php/php-fpm.d/www.conf
+
+# PHP
+echo "Setting PHP configuration..."
+sed -e "s/@APC_SHM_SIZE@/$APC_SHM_SIZE/g" \
+  /etc/tpls/etc/php/conf.d/apcu.ini >/etc/php/conf.d/apcu.ini
+sed -e "s/@OPCACHE_MEM_SIZE@/$OPCACHE_MEM_SIZE/g" \
+  /etc/tpls/etc/php/conf.d/opcache.ini >/etc/php/conf.d/opcache.ini
+sed -e "s/@MEMORY_LIMIT@/$MEMORY_LIMIT/g" \
+  -e "s#@TIMEZONE@#$TZ#g" \
+  /etc/tpls/etc/php/conf.d/override.ini >/etc/php/conf.d/override.ini
+
+# Nginx
+echo "Setting Nginx configuration..."
+sed -e "s/@UPLOAD_MAX_SIZE@/$UPLOAD_MAX_SIZE/g" \
+  -e "s#@REAL_IP_FROM@#$REAL_IP_FROM#g" \
+  -e "s#@REAL_IP_HEADER@#$REAL_IP_HEADER#g" \
+  -e "s#@LOG_IP_VAR@#$LOG_IP_VAR#g" \
+  -e "s/@HSTS_HEADER@/$HSTS_HEADER/g" \
+  -e "s/@XFRAME_OPTS_HEADER@/$XFRAME_OPTS_HEADER/g" \
+  -e "s/@RP_HEADER@/$RP_HEADER/g" \
+  -e "s#@SUBDIR@#$SUBDIR#g" \
+  /etc/tpls/etc/nginx/nginx.conf >/etc/nginx/nginx.conf
+
+if [ "$LISTEN_IPV6" != "true" ]; then
+  sed -e '/listen \[::\]:/d' -i /etc/nginx/nginx.conf
+fi
+
+# Init Nextcloud
+echo "Initializing Nextcloud files/folders..."
+mkdir -p /data/config /data/data /data/session /data/tmp /data/userapps
+if [ ! -d /data/themes ]; then
+  if [ -d /var/www/themes ]; then
+    mv -f /var/www/themes /data/
+    chown -R nextcloud. /data/themes
+  fi
+  mkdir -p /data/themes
+elif [ -d /var/www/themes ]; then
+  rm -rf /var/www/themes
+fi
+chown nextcloud. /data/config /data/data /data/session /data/tmp /data/userapps /data/themes
+ln -sf /data/config/config.php /var/www/config/config.php &>/dev/null
+ln -sf /data/themes /var/www/themes &>/dev/null
+ln -sf /data/userapps /var/www/userapps &>/dev/null
+
+file_env 'DB_PASSWORD'
+if [ -z "$DB_PASSWORD" ]; then
+  echo >&2 "ERROR: Either DB_PASSWORD or DB_PASSWORD_FILE must be defined"
+  exit 1
+fi
+
+# Install Nextcloud if config not found
+if [ ! -f /data/config/config.php ]; then
+  # https://docs.nextcloud.com/server/stable/admin_manual/configuration_server/automatic_configuration.html
+  touch /tmp/first-install
+  echo "Creating automatic configuration..."
+  cat >/var/www/config/autoconfig.php <<EOL
+<?php
+\$AUTOCONFIG = array(
+    'directory' => '/data/data',
+    'dbtype' => '${DB_TYPE}',
+    'dbname' => '${DB_NAME}',
+    'dbuser' => '${DB_USER}',
+    'dbpass' => '${DB_PASSWORD}',
+    'dbhost' => '${DB_HOST}',
+    'dbtableprefix' => '',
+);
+EOL
+  runas_user cat >/data/config/config.php <<EOL
+<?php
+\$CONFIG = array(
+    'datadirectory' => '/data/data',
+    'tempdirectory' => '/data/tmp',
+    'supportedDatabases' => array(
+        'sqlite',
+        'mysql',
+        'pgsql'
+    ),
+    'logtimezone' => '${TZ}',
+    'logdateformat' => 'Y-m-d H:i:s',
+    'memcache.local' => '\\\OC\\\Memcache\\\APCu',
+    'apps_paths' => array(
+        array(
+            'path'=> '/var/www/apps',
+            'url' => '/apps',
+            'writable' => false,
+        ),
+        array(
+            'path'=> '/data/userapps',
+            'url' => '/userapps',
+            'writable' => true,
+        ),
+    ),
+    'mail_smtpmode' => 'smtp'
+);
+EOL
+fi
+unset DB_USER
+unset DB_PASSWORD
+
+# https://docs.nextcloud.com/server/stable/admin_manual/configuration_server/config_sample_php_parameters.html#proxy-configurations
+if [ -n "$SUBDIR" ]; then
+  cat >/var/www/config/subdir.config.php <<EOL
+<?php
+\$CONFIG = array(
+    'overwritewebroot' => '${SUBDIR}',
+);
+EOL
+fi
+
+# config directory must be writable
+chown -R nextcloud. /var/www/config
--- a/config/cont-init.d/04-svc-main.sh
+++ b/config/cont-init.d/04-svc-main.sh
@@ -0,0 +1,51 @@
+#!/usr/bin/with-contenv sh
+# shellcheck shell=sh
+
+SIDECAR_CRON=${SIDECAR_CRON:-0}
+SIDECAR_PREVIEWGEN=${SIDECAR_PREVIEWGEN:-0}
+SIDECAR_NEWSUPDATER=${SIDECAR_NEWSUPDATER:-0}
+
+if [ "$SIDECAR_CRON" = "1" ] || [ "$SIDECAR_PREVIEWGEN" = "1" ] || [ "$SIDECAR_NEWSUPDATER" = "1" ]; then
+  exit 0
+fi
+
+# Override several config values of Nextcloud
+echo "Bootstrapping configuration..."
+yasu nextcloud:nextcloud php -f /etc/tpls/bootstrap.php >/tmp/config.php
+yasu nextcloud:nextcloud cp /tmp/config.php /data/config/config.php
+yasu nextcloud:nextcloud sed -i -e "s#@TZ@#$TZ#g" /data/config/config.php
+
+# Upgrade Nextcloud if installed
+if [ "$(occ status --no-ansi | grep 'installed: true')" != "" ]; then
+  echo "Upgrading Nextcloud..."
+  occ upgrade --no-ansi
+fi
+
+# First install ?
+if [ -f /tmp/first-install ]; then
+  echo "Installing Nextcloud ${NEXTCLOUD_VERSION}..."
+  yasu nextcloud:nextcloud php /var/www/index.php &>/dev/null
+  rm -f /tmp/first-install
+
+  echo ">>"
+  echo ">> Open your browser to configure your admin account"
+  echo ">>"
+fi
+
+mkdir -p /etc/services.d/nginx
+cat >/etc/services.d/nginx/run <<EOL
+#!/usr/bin/execlineb -P
+with-contenv
+s6-setuidgid ${PUID}:${PGID}
+nginx -g "daemon off;"
+EOL
+chmod +x /etc/services.d/nginx/run
+
+mkdir -p /etc/services.d/php-fpm
+cat >/etc/services.d/php-fpm/run <<EOL
+#!/usr/bin/execlineb -P
+with-contenv
+s6-setuidgid ${PUID}:${PGID}
+php-fpm -F
+EOL
+chmod +x /etc/services.d/php-fpm/run
--- a/config/cont-init.d/05-svc-cron.sh
+++ b/config/cont-init.d/05-svc-cron.sh
@@ -0,0 +1,40 @@
+#!/usr/bin/with-contenv sh
+# shellcheck shell=sh
+
+CRONTAB_PATH="/var/spool/cron/crontabs"
+SIDECAR_CRON=${SIDECAR_CRON:-0}
+
+# Continue only if sidecar cron container
+if [ "$SIDECAR_CRON" != "1" ]; then
+  exit 0
+fi
+
+echo ">>"
+echo ">> Sidecar cron container detected for Nextcloud"
+echo ">>"
+
+# Init
+rm -rf ${CRONTAB_PATH}
+mkdir -m 0644 -p ${CRONTAB_PATH}
+touch ${CRONTAB_PATH}/nextcloud
+
+# Cron
+if [ -n "$CRON_PERIOD" ]; then
+  echo "Creating Nextcloud cron task with the following period fields : $CRON_PERIOD"
+  echo "${CRON_PERIOD} php -f /var/www/cron.php" >> ${CRONTAB_PATH}/nextcloud
+else
+  echo "CRON_PERIOD env var empty..."
+fi
+
+# Fix perms
+echo "Fixing crontabs permissions..."
+chmod -R 0644 ${CRONTAB_PATH}
+
+# Create service
+mkdir -p /etc/services.d/cron
+cat > /etc/services.d/cron/run <<EOL
+#!/usr/bin/execlineb -P
+with-contenv
+exec busybox crond -f -L /dev/stdout
+EOL
+chmod +x /etc/services.d/cron/run
--- a/config/cont-init.d/06-svc-previewgen.sh
+++ b/config/cont-init.d/06-svc-previewgen.sh
@@ -0,0 +1,40 @@
+#!/usr/bin/with-contenv sh
+# shellcheck shell=sh
+
+CRONTAB_PATH="/var/spool/cron/crontabs"
+SIDECAR_PREVIEWGEN=${SIDECAR_PREVIEWGEN:-0}
+
+# Continue only if previewgen container
+if [ "$SIDECAR_PREVIEWGEN" != "1" ]; then
+  exit 0
+fi
+
+echo ">>"
+echo ">> Sidecar previews generator container detected for Nextcloud"
+echo ">>"
+
+# Init
+rm -rf ${CRONTAB_PATH}
+mkdir -m 0644 -p ${CRONTAB_PATH}
+touch ${CRONTAB_PATH}/nextcloud
+
+# Cron
+if [ -n "$PREVIEWGEN_PERIOD" ]; then
+  echo "Creating Previews Generator cron task with the following period fields : $PREVIEWGEN_PERIOD"
+  echo "${PREVIEWGEN_PERIOD} php -f /var/www/occ preview:pre-generate" >> ${CRONTAB_PATH}/nextcloud
+else
+  echo "PREVIEWGEN_PERIOD env var empty..."
+fi
+
+# Fix perms
+echo "Fixing crontabs permissions..."
+chmod -R 0644 ${CRONTAB_PATH}
+
+# Create service
+mkdir -p /etc/services.d/cron
+cat > /etc/services.d/cron/run <<EOL
+#!/usr/bin/execlineb -P
+with-contenv
+exec busybox crond -f -L /dev/stdout
+EOL
+chmod +x /etc/services.d/cron/run
--- a/config/cont-init.d/07-svc-news-updater.sh
+++ b/config/cont-init.d/07-svc-news-updater.sh
@@ -0,0 +1,38 @@
+#!/usr/bin/with-contenv sh
+# shellcheck shell=sh
+
+SIDECAR_NEWSUPDATER=${SIDECAR_NEWSUPDATER:-0}
+NC_NEWSUPDATER_THREADS=${NC_NEWSUPDATER_THREADS:-10}
+NC_NEWSUPDATER_TIMEOUT=${NC_NEWSUPDATER_TIMEOUT:-300}
+NC_NEWSUPDATER_INTERVAL=${NC_NEWSUPDATER_INTERVAL:-900}
+NC_NEWSUPDATER_LOGLEVEL=${NC_NEWSUPDATER_LOGLEVEL:-error}
+
+# Continue only if sidecar news updater container
+if [ "$SIDECAR_NEWSUPDATER" != "1" ]; then
+  exit 0
+fi
+
+echo ">>"
+echo ">> Sidecar news updater container detected for Nextcloud"
+echo ">>"
+
+# Nextcloud News Updater config file (https://github.com/nextcloud/news-updater#usage)
+cat > /etc/news_updater.ini <<EOL
+[updater]
+threads = ${NC_NEWSUPDATER_THREADS}
+timeout = ${NC_NEWSUPDATER_TIMEOUT}
+interval = ${NC_NEWSUPDATER_INTERVAL}
+loglevel = ${NC_NEWSUPDATER_LOGLEVEL}
+url = /var/www
+mode = endless
+EOL
+
+# Create service
+mkdir -p /etc/services.d/news-updater
+cat > /etc/services.d/news-updater/run <<EOL
+#!/usr/bin/execlineb -P
+with-contenv
+s6-setuidgid ${PUID}:${PGID}
+/usr/bin/nextcloud-news-updater -c /etc/news_updater.ini
+EOL
+chmod +x /etc/services.d/news-updater/run