Add service account for nextcloud app

Update deployed version of bitwarden-web to 2.19

playbooks/deploy-compose.yml

@@ -73,7 +73,7 @@
       register: _stack_file_state
 
     - name: Remove the existing stack
-      when: _stack_file_state.changed is true
+      when: _stack_file_state.changed is true or omni_compose_apps[_runtime_application].force_clean | default(false) is true
       docker_stack:
         name: "{{ _runtime_application }}"
         state: absent

resources/docker-compose/nextcloud.yaml.j2

@@ -0,0 +1,81 @@
+---
+version: "{{ omni_compose_version | string }}"
+
+
+networks:
+  nextcloud:
+    name: nextcloud
+    driver: overlay
+    ipam:
+      driver: default
+      config:
+        - subnet: {{ omni_compose_apps.nextcloud.networks.main }}
+
+
+volumes:
+  database:
+    name: datastore{{ omni_compose_apps.nextcloud.datastore }}/database
+    driver: glusterfs
+  data:
+    name: datastore{{ omni_compose_apps.nextcloud.datastore }}/data
+    driver: glusterfs
+  config:
+    name: datastore{{ omni_compose_apps.nextcloud.datastore }}/config
+    driver: glusterfs
+
+
+services:
+  server:
+    image: nextcloud:{{ omni_compose_apps.nextcloud.versions.server | default(omni_compose_apps.nextcloud.versions.default) }}
+    hostname: nextcloud-server
+    networks:
+      - nextcloud
+    ports:
+      - published: {{ omni_compose_apps.nextcloud.ports.8080 }}
+        target: 8080
+        protocol: tcp
+        mode: ingress
+    volumes:
+      - type: volume
+        source: data
+        target: /data
+        read_only: false
+      - type: volume
+        source: config
+        target: /var/www/html
+        read_only: false
+    environment:
+      NEXTCLOUD_DATA_DIR: /data
+      NEXTCLOUD_ADMIN_USER: admin
+      NEXTCLOUD_ADMIN_PASSWORD: {{ omni_compose_app_secrets.nextcloud.admin_password }}
+      MYSQL_DATABASE: nextcloud
+      MYSQL_USER: root
+      MYSQL_PASSWORD: {{ omni_compose_app_secrets.nextcloud.database_password }}
+      MYSQL_HOST: database
+      REDIS_HOST: cache
+    deploy:
+      replicas: 1
+
+  database:
+    image: mariadb:{{ omni_compose_apps.nextcloud.versions.database | default(omni_compose_apps.nextcloud.versions.default) }}
+    hostname: nextcloud-database
+    networks:
+      - nextcloud
+    volumes:
+      - type: volume
+        source: database
+        target: /var/lib/mysql
+        read_only: false
+    environment:
+      MYSQL_ROOT_PASSWORD: {{ omni_compose_app_secrets.nextcloud.database_password }}
+      MYSQL_DATABASE: nextcloud
+    deploy:
+      replicas: 1
+
+  cache:
+    image: redis:{{ omni_compose_apps.nextcloud.versions.cache | default(omni_compose_apps.nextcloud.versions.default) }}
+    hostname: nextcloud-cache
+    networks:
+      - nextcloud
+    deploy:
+      replicas: 1

vars/accounts.yml

@@ -77,3 +77,8 @@ omni_users:
     uid: 1291
     targets: [datastore]
     svc: true
+
+  - name: mech_nextcloud
+    uid: 1290
+    targets: [datastore]
+    svc: true

vars/applications.yaml

@@ -17,9 +17,8 @@ omni_compose_apps:
       internal: 192.168.104.0/24
       external: 192.168.105.0/24
     versions:
-      default: 1.36.1
-      web: 2.15.1
-      attachments: 1.34.0
+      default: 1.40.0
+      web: 2.19.0
 
   gitea:
     datastore: /appdata/gitea
@@ -34,7 +33,7 @@ omni_compose_apps:
     networks:
       main: 192.168.103.0/24
     versions:
-      default: 1.11.5
+      default: 1.14.1
 
   minecraft:
     datastore: /appdata/minecraft
@@ -51,6 +50,7 @@ omni_compose_apps:
       server: 1.16.5
 
   plex:
+    force_clean: true
     datastore: /appdata/plex
     account:
       name: mech_plex
@@ -109,3 +109,19 @@ omni_compose_apps:
       default: 1.1.2
       database: "10"
       cache: "6.2"
+
+  nextcloud:
+    datastore: /appdata/nextcloud
+    account:
+      name: mech_nextcloud
+      uid: 1290
+    published:
+      host: wsd.enp.one
+      ports:
+        8080: 8082
+    networks:
+      main: 192.168.107.0/24
+    versions:
+      server: 21.0.1
+      database: "10"
+      cache: "6.2"

vars/secrets

@@ -1 +1 @@
-Subproject commit 0248a5772ab9f35ce8cdf43dfe5926d59636baee
+Subproject commit 140d4a2a5a5cc57b091745d0b4ee26847817a70f