coop-cloud/nextcloud
6
2
Fork 6
Code Issues 10 Pull Requests Releases Wiki Activity

Update nginx and nextcloud images to latest versions

Browse Source
This commit is contained in:
Christian Galo
2024-05-28 20:02:04 +00:00
parent 9d2ec0f0b5
commit cc47e2b531
2 changed files with 16 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
compose.yaml
View File

@ -1,6 +1,6 @@
services:
web:
image: nginx:1.25.1
image: nginx:1.26.0
configs:
- source: nginx_conf
target: /etc/nginx/nginx.conf
@ -32,6 +32,9 @@ services:
- "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
- "caddy=${DOMAIN}"
- "caddy.reverse_proxy={{upstreams 80}}"
- "caddy.tls.on_demand="
healthcheck:
test: ["CMD-SHELL", 'curl -s -N curl -Ns localhost/status.php | grep "installed\":true"']
interval: 30s
@ -40,7 +43,7 @@ services:
start_period: 5m
app:
image: nextcloud:27.0.1-fpm
image: nextcloud:29.0.0-fpm
depends_on:
- db
configs:
@ -94,7 +97,7 @@ services:
start_period: 5m
cron:
image: nextcloud:27.0.1-fpm
image: nextcloud:29.0.0-fpm
volumes:
- nextcloud:/var/www/html/
- nextapps:/var/www/html/custom_apps:cached
@ -106,7 +109,7 @@ services:
entrypoint: /cron.sh
cache:
image: redis:7.0.12-alpine
image: redis:7.2.4-alpine
networks:
- internal
volumes:

15
nginx.conf.tmpl
View File

@ -11,6 +11,9 @@ events {
http {
include /etc/nginx/mime.types;
types {
application/javascript js mjs;
}
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
@ -59,12 +62,12 @@ http {
#pagespeed off;
# HTTP response headers borrowed from Nextcloud `.htaccess`
add_header Referrer-Policy "no-referrer" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Download-Options "noopen" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "none" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "no-referrer" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Download-Options "noopen" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "noindex, nofollow" always;
add_header X-XSS-Protection "1; mode=block" always;
{{ if eq (env "X_FRAME_OPTIONS_ENABLED") "1" }}
add_header Content-Security-Policy "frame-ancestors {{ env "X_FRAME_OPTIONS_ALLOW_FROM" }} {{ env "DOMAIN" }}";