From 3e7b1d811671bc1cd4234e26f7c4e24e7206947c Mon Sep 17 00:00:00 2001
From: Pim Kunis <pim@kunis.nl>
Date: Fri, 5 May 2023 13:47:27 +0200
Subject: [PATCH] disable nextcloud for now

---
 ansible/playbooks/stacks.yml              |  2 +-
 ansible/roles/nextcloud/docker-stack.yml  | 17 +++++++++++++++++
 ansible/roles/traefik/docker-stack.yml.j2 |  2 ++
 3 files changed, 20 insertions(+), 1 deletion(-)

diff --git a/ansible/playbooks/stacks.yml b/ansible/playbooks/stacks.yml
index e8412c7..b847e9c 100644
--- a/ansible/playbooks/stacks.yml
+++ b/ansible/playbooks/stacks.yml
@@ -16,4 +16,4 @@
     - {role: kms, tags: kms}
     - {role: swarm_dashboard, tags: swarm_dashboard}
     - {role: shephard, tags: shephard}
-    - {role: nextcloud, tags: nextcloud}
+    # - {role: nextcloud, tags: nextcloud}
diff --git a/ansible/roles/nextcloud/docker-stack.yml b/ansible/roles/nextcloud/docker-stack.yml
index c8cce95..7a2dea4 100644
--- a/ansible/roles/nextcloud/docker-stack.yml
+++ b/ansible/roles/nextcloud/docker-stack.yml
@@ -6,6 +6,21 @@ networks:
   nextcloud:
 
 services:
+  redis:
+    image: redis:5
+    networks:
+      - nextcloud
+    expose:
+      - 6379
+    volumes:
+      - type: bind
+        source: /mnt/data/nextcloud/redis
+        target: /data
+    deploy:
+      placement:
+        constraints:
+          - "node.labels.nextcloud == true"
+
   db:
     image: mariadb:10.6
     networks:
@@ -41,6 +56,8 @@ services:
       - MYSQL_DATABASE=nextcloud
       - MYSQL_USER=nextcloud
       - MYSQL_HOST=db
+      - REDIS_HOST=redis
+      - REDIS_HOST_PASSWORD=
     deploy:
       placement:
         constraints:
diff --git a/ansible/roles/traefik/docker-stack.yml.j2 b/ansible/roles/traefik/docker-stack.yml.j2
index 75621ac..1551673 100644
--- a/ansible/roles/traefik/docker-stack.yml.j2
+++ b/ansible/roles/traefik/docker-stack.yml.j2
@@ -73,3 +73,5 @@ services:
       - --certificatesresolvers.letsencrypt.acme.email=pim@kunis.nl
       - --certificatesresolvers.letsencrypt.acme.httpchallenge=true
       - --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web
+
+      - --serversTransport.insecureSkipVerify=true