fix: add TRUSTED_PROXIES for reverse proxy headers and cron job for background tasks

deployment/kustomization.yaml

@@ -11,3 +11,4 @@ resources:
   - nextcloud-deployment.yaml
   - nextcloud-service.yaml
   - ingress.yaml
+  - nextcloud-cronjob.yaml

deployment/nextcloud-cronjob.yaml

@@ -0,0 +1,27 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: nextcloud-cron
+  namespace: nextcloud
+spec:
+  schedule: "*/5 * * * *"
+  concurrencyPolicy: Forbid
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          restartPolicy: OnFailure
+          containers:
+            - name: nextcloud-cron
+              image: nextcloud:33
+              command:
+                - php
+                - -f
+                - /var/www/html/cron.php
+              volumeMounts:
+                - name: nextcloud-data
+                  mountPath: /var/www/html
+          volumes:
+            - name: nextcloud-data
+              persistentVolumeClaim:
+                claimName: nextcloud-pvc

deployment/nextcloud-deployment.yaml

@@ -30,6 +30,8 @@ spec:
               value: mariadb-nextcloud
             - name: OVERWRITEPROTOCOL
               value: https
+            - name: TRUSTED_PROXIES
+              value: "10.244.0.0/16"
           ports:
             - containerPort: 80
           volumeMounts: