nextcloud-helm

Nextcloud Helm

Overview

Nextcloud deployed via HelmRelease (Flux) with optional external PostgreSQL, Redis caching, S3 primary storage. Chart uses Docker images from docker.io/library/nextcloud with apache or fpm flavor. Built-in HTTPRoute (Gateway API v1) support, Ingress, nginx sidecar when using fpm image.

Latest stable: chart 9.2.x → Nextcloud v34. See artifacthub for latest version.

Dependencies:

• PostgreSQL 16.7.4 (bitnami, OCI)
• MariaDB 20.5.5 (bitnami, OCI)
• Redis 21.1.3 (bitnami, OCI)
• Collabora Online 1.1.60

Architecture

Cilium Gateway / Ingress
  └── HTTPRoute / Ingress → nextcloud:8080

Nextcloud Deployment (apache image)
  ├── Sidecar: crond (optional, sidecar mode)
  ├── InitContainer: DB wait (PostgreSQL or MariaDB)
  └── Volume: /var/www/html (PVC)

External PostgreSQL (recommended)
  └── nextcloud-db-rw:5432

External Redis (caching)
  └── redis:6379

S3 Object Store (primary storage, optional)
  └── S3 bucket via env vars

Imaginary (image previews, optional)
  └── nextcloud-imaginary:9000

Key Configuration

Image

image:
  registry: docker.io
  repository: library/nextcloud
  flavor: apache        # "apache" or "fpm"
  tag: ""                # generated from appVersion
  pullPolicy: IfNotPresent

Two flavors: apache (all-in-one, simpler) or fpm (needs nginx sidecar, more configurable).

Gateway API (HTTPRoute)

Built-in HTTPRoute support — no Ingress needed:

httpRoute:
  enabled: true
  apiVersion: gateway.networking.k8s.io/v1
  kind: HTTPRoute
  hostnames:
    - "nextcloud.example.com"
  parentRefs:
    - name: cilium-gateway
      namespace: cilium-gateway
      sectionName: https
  rules:
    - matches:
        - path:
            type: PathPrefix
            value: "/"
  # Automatically adds .well-known/carddav and .well-known/caldav redirects
  wellKnown:
    enabled: true

The chart's wellKnown.enabled: true (default) automatically adds Gateway API RequestRedirect rules for /.well-known/carddav and /.well-known/caldav → /remote.php/dav.