From 12fcf7b62ba5cb08ceb32aff898e92ea04fe89fa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Szymon=20Wa=C5=82achowski?= <szymi.walachowski@gmail.com>
Date: Wed, 1 Apr 2026 23:57:24 +0200
Subject: [PATCH] fix: add TRUSTED_PROXIES for reverse proxy headers and cron
 job for background tasks

---
 deployment/kustomization.yaml        |  1 +
 deployment/nextcloud-cronjob.yaml    | 27 +++++++++++++++++++++++++++
 deployment/nextcloud-deployment.yaml |  2 ++
 3 files changed, 30 insertions(+)
 create mode 100644 deployment/nextcloud-cronjob.yaml

diff --git a/deployment/kustomization.yaml b/deployment/kustomization.yaml
index 35b388d..cbe8393 100644
--- a/deployment/kustomization.yaml
+++ b/deployment/kustomization.yaml
@@ -11,3 +11,4 @@ resources:
   - nextcloud-deployment.yaml
   - nextcloud-service.yaml
   - ingress.yaml
+  - nextcloud-cronjob.yaml
diff --git a/deployment/nextcloud-cronjob.yaml b/deployment/nextcloud-cronjob.yaml
new file mode 100644
index 0000000..8d85f3d
--- /dev/null
+++ b/deployment/nextcloud-cronjob.yaml
@@ -0,0 +1,27 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: nextcloud-cron
+  namespace: nextcloud
+spec:
+  schedule: "*/5 * * * *"
+  concurrencyPolicy: Forbid
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          restartPolicy: OnFailure
+          containers:
+            - name: nextcloud-cron
+              image: nextcloud:33
+              command:
+                - php
+                - -f
+                - /var/www/html/cron.php
+              volumeMounts:
+                - name: nextcloud-data
+                  mountPath: /var/www/html
+          volumes:
+            - name: nextcloud-data
+              persistentVolumeClaim:
+                claimName: nextcloud-pvc
diff --git a/deployment/nextcloud-deployment.yaml b/deployment/nextcloud-deployment.yaml
index 84f64f5..5424ac0 100644
--- a/deployment/nextcloud-deployment.yaml
+++ b/deployment/nextcloud-deployment.yaml
@@ -30,6 +30,8 @@ spec:
               value: mariadb-nextcloud
             - name: OVERWRITEPROTOCOL
               value: https
+            - name: TRUSTED_PROXIES
+              value: "10.244.0.0/16"
           ports:
             - containerPort: 80
           volumeMounts: