apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: nextcloud-helm
  namespace: argocd
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    namespace: nextcloud
    server: https://kubernetes.default.svc
  project: default
  source:
    repoURL: https://nextcloud.github.io/helm/
    targetRevision: 6.6.3
    chart: nextcloud
    helm:
      values: |
        nextcloud:
          host: drive.hensen.io
        ingress:
          enabled: false
          # className: nginx
          annotations:
            nginx.ingress.kubernetes.io/proxy-body-size: 100G
          #  kubernetes.io/tls-acme: "true"
            cert-manager.io/cluster-issuer: prod-cluster-issuer
          #  # Keep this in sync with the README.md:
          #  nginx.ingress.kubernetes.io/server-snippet: |-
          #    server_tokens off;
          #    proxy_hide_header X-Powered-By;
          #    rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last;
          #    rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last;
          #    rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
          #    rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json;
          #    location = /.well-known/carddav {
          #      return 301 $scheme://$host/remote.php/dav;
          #    }
          #    location = /.well-known/caldav {
          #      return 301 $scheme://$host/remote.php/dav;
          #    }
          #    location = /robots.txt {
          #      allow all;
          #      log_not_found off;
          #      access_log off;
          #    }
          #    location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
          #      deny all;
          #    }
          #    location ~ ^/(?:autotest|occ|issue|indie|db_|console) {
          #      deny all;
          #    }
          tls:
            - secretName: nextcloud-tls
              hosts:
                - drive.hensen.io
          labels: {}
          path: /
          pathType: Prefix

  syncPolicy:
    syncOptions:
    - CreateNamespace=true
    automated:
      selfHeal: true