symlink php84 to php

push to 31.0.2
push to 30.0.2
2025-03-31 14:04:44 +02:00 · 2025-03-31 13:27:34 +02:00 · 2024-11-25 15:59:52 +01:00 · 2024-11-01 11:36:37 +01:00 · 2024-08-24 14:47:26 +02:00 · 2024-08-04 14:10:06 +02:00
7 changed files with 216 additions and 195 deletions
--- a/.gitea/workflows/container.yaml
+++ b/.gitea/workflows/container.yaml
@ -0,0 +1,12 @@
+name: Build Multiarch Container Image
+on: [push]
+jobs:
+  call-reusable-workflow:
+    uses: container/multiarch-build-workflow/.gitea/workflows/build.yaml@main
+    with:
+      repository: ${{ gitea.repository }}
+      ref_name: ${{ gitea.ref_name }}
+      sha: ${{ gitea.sha }}
+      registry_url: ${{ secrets.REGISTRY_URL }}
+      registry_user: ${{ secrets.REGISTRY_USER }}
+      registry_pw: ${{ secrets.REGISTRY_PW }}
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@ -1,11 +0,0 @@
-pipeline:
-  publish-docker-image:
-    image: plugins/kaniko
-    settings:
-      repo: docker.io/thallian/nextcloud
-      tags: latest,${CI_COMMIT_SHA:0:8},${CI_COMMIT_TAG=pre}
-      dockerfile: Dockerfile
-      username:
-        from_secret: DOCKER_USER
-      password:
-        from_secret: DOCKER_PW
--- a/110
+++ b/110
@ -0,0 +1,110 @@
+FROM docker.io/alpine:3.21 AS builder
+
+ENV NC_VERSION=31.0.2
+ENV NC_SHA256_SUM=00b572111b7c2b98842d95c046de79ef463ccfadc8a04b54006c786e1f94c310
+RUN wget https://download.nextcloud.com/server/releases/nextcloud-$NC_VERSION.tar.bz2
+RUN echo "$NC_SHA256_SUM  nextcloud-$NC_VERSION.tar.bz2" | sha256sum -c - || exit 1
+RUN mkdir -p /var/lib/nextcloud
+RUN tar xjf nextcloud-$NC_VERSION.tar.bz2 -C /var/lib/nextcloud --strip 1
+
+ENV POLLS_VERSION=8.0.0-alpha14
+ENV POLLS_SHA256_SUM=4c7f6853a62a034a1a8c3ff03e7774f3de0d082c056dcd4fb19f6a14df451eb2
+RUN wget https://github.com/nextcloud/polls/releases/download/v$POLLS_VERSION/polls-$POLLS_VERSION.tar.gz
+RUN echo "$POLLS_SHA256_SUM  polls-$POLLS_VERSION.tar.gz" | sha256sum -c - || exit 1
+RUN mkdir /var/lib/nextcloud/apps/polls
+RUN tar xzf polls-$POLLS_VERSION.tar.gz -C /var/lib/nextcloud/apps/polls --strip 1
+
+ENV CONTACTS_VERSION=v7.0.4
+ENV CONTACTS_SHA256_SUM=681adbcd72966f74337812d63d1ff8ad678ce3485a06211007d80550d4f7abf0
+RUN wget https://github.com/nextcloud-releases/contacts/releases/download/$CONTACTS_VERSION/contacts-$CONTACTS_VERSION.tar.gz
+RUN echo "$CONTACTS_SHA256_SUM  contacts-$CONTACTS_VERSION.tar.gz" | sha256sum -c - || exit 1
+RUN mkdir /var/lib/nextcloud/apps/contacts
+RUN tar xzf contacts-$CONTACTS_VERSION.tar.gz -C /var/lib/nextcloud/apps/contacts --strip 1
+
+ENV CALENDAR_VERSION=v5.2.0
+ENV CALENDAR_SHA256_SUM=9801ff039a223f0221e8ae9b6fdc1de790a6a8ca0401a290555afccc535b5c4f
+RUN wget https://github.com/nextcloud-releases/calendar/releases/download/$CALENDAR_VERSION/calendar-$CALENDAR_VERSION.tar.gz
+RUN echo "$CALENDAR_SHA256_SUM  calendar-$CALENDAR_VERSION.tar.gz" | sha256sum -c - || exit 1
+RUN mkdir /var/lib/nextcloud/apps/calendar
+RUN tar xzf calendar-$CALENDAR_VERSION.tar.gz -C /var/lib/nextcloud/apps/calendar --strip 1
+
+ENV TASKS_VERSION=v0.16.1
+ENV TASKS_SHA256_SUM=5296b7765f9bf7b515dca5cb95cc5e4ba3b31414c85be7b753f4fd4094fa3e6c
+RUN wget https://github.com/nextcloud/tasks/releases/download/$TASKS_VERSION/tasks.tar.gz
+RUN echo "$TASKS_SHA256_SUM  tasks.tar.gz" | sha256sum -c - || exit 1
+RUN mkdir /var/lib/nextcloud/apps/tasks
+RUN tar xzf tasks.tar.gz -C /var/lib/nextcloud/apps/tasks --strip 1
+
+ENV NOTES_VERSION=v4.11.0
+ENV NOTES_SHA256_SUM=7693027a18e13d0a0e03e31574b786737ef4866a96ce6b0c733815d3c9bf70ee
+RUN wget https://github.com/nextcloud-releases/notes/releases/download/$NOTES_VERSION/notes-$NOTES_VERSION.tar.gz
+RUN echo "$NOTES_SHA256_SUM  notes-$NOTES_VERSION.tar.gz" | sha256sum -c - || exit 1
+RUN mkdir /var/lib/nextcloud/apps/notes
+RUN tar xzf notes-$NOTES_VERSION.tar.gz -C /var/lib/nextcloud/apps/notes --strip 1
+
+ENV NEWS_VERSION=25.3.1
+ENV NEWS_SHA256_SUM=b6b5e70d2485cabe47297692d52dd7ae5480522893fbc07e90fd2583e7b12dcb
+RUN wget https://github.com/nextcloud/news/releases/download/$NEWS_VERSION/news.tar.gz
+RUN echo "$NEWS_SHA256_SUM  news.tar.gz" | sha256sum -c - || exit 1
+RUN mkdir /var/lib/nextcloud/apps/news
+RUN tar xzf news.tar.gz -C /var/lib/nextcloud/apps/news --strip 1
+
+ENV SOCIAL_LOGIN_VERSION=v5.9.2
+ENV SOCIAL_LOGIN_SHA256_SUM=336b084e989e5af97658f8f1587b72c9944d40f6a060b6a155a25c0e8893b21f
+RUN wget https://github.com/zorn-v/nextcloud-social-login/releases/download/$SOCIAL_LOGIN_VERSION/release.tar.gz
+RUN echo "$SOCIAL_LOGIN_SHA256_SUM  release.tar.gz" | sha256sum -c - || exit 1
+RUN mkdir /var/lib/nextcloud/apps/sociallogin
+RUN tar xzf release.tar.gz -C /var/lib/nextcloud/apps/sociallogin --strip 1
+
+
+FROM docker.io/thallian/php8-fpm:3.21-8.4
+
+ENV FPMUSER=nginx
+ENV FPMGROUP=nginx
+ENV PHP_MEMORY_LIMIT=512M
+
+RUN apk add --no-cache \
+  nginx \
+  ffmpeg \
+  php84-cli \
+  php84-pecl-apcu \
+  php84-opcache \
+  php84-pcntl \
+  php84-ctype \
+  php84-curl \
+  php84-dom \
+  php84-gd \
+  php84-iconv \
+  php84-xml \
+  php84-json \
+  php84-mbstring \
+  php84-openssl \
+  php84-posix \
+  php84-session \
+  php84-simplexml \
+  php84-xmlreader \
+  php84-xmlwriter \
+  php84-zip \
+  php84-zlib \
+  php84-pdo_pgsql \
+  php84-bz2 \
+  php84-fileinfo \
+  php84-intl \
+  php84-exif \
+  php84-bcmath \
+  php84-gmp \
+  php84-imap \
+  php84-pdo \
+  dcron	
+
+RUN ln -s /usr/bin/php84 /bin/php
+
+COPY --from=builder --chown=nginx:nginx /var/lib/nextcloud /var/lib/nextcloud
+
+RUN rm /etc/nginx/http.d/default.conf
+
+ENV S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0
+
+ADD /rootfs /
+
+VOLUME [ "/var/lib/nextcloud/data", "/var/lib/nextcloud/config" ]
--- a/122
+++ b/122
@ -1,122 +0,0 @@
-FROM docker.io/alpine:3.17 AS builder
-
-ENV NC_VERSION=25.0.2
-ENV NC_SHA256_SUM=d6ab40faa108937bda42395f570ff111f4c97343b55be1420024da3177e37d59
-RUN wget https://download.nextcloud.com/server/releases/nextcloud-$NC_VERSION.tar.bz2
-RUN echo "$NC_SHA256_SUM  nextcloud-$NC_VERSION.tar.bz2" | sha256sum -c - || exit 1
-RUN mkdir -p /var/lib/nextcloud
-RUN tar xjf nextcloud-$NC_VERSION.tar.bz2 -C /var/lib/nextcloud --strip 1
-
-ENV TFA_VERSION=v6.4.1
-ENV TFA_SHA256_SUM=59ad8feada69ef92310ac4c6e01e4343cfa24f347bca32818b864305cbfe00e2
-RUN wget https://github.com/nextcloud-releases/twofactor_totp/releases/download/$TFA_VERSION/twofactor_totp-$TFA_VERSION.tar.gz
-RUN echo "$TFA_SHA256_SUM  twofactor_totp-$TFA_VERSION.tar.gz" | sha256sum -c - || exit 1
-RUN rm -r /var/lib/nextcloud/apps/twofactor_totp
-RUN mkdir /var/lib/nextcloud/apps/twofactor_totp
-RUN tar xzf twofactor_totp-$TFA_VERSION.tar.gz -C /var/lib/nextcloud/apps/twofactor_totp --strip 1
-
-ENV POLLS_VERSION=4.0.0
-ENV POLLS_SHA256_SUM=0459e3643bed174d4537909501124eac993cc385f92f2a72a1c1f1c7df0782bb
-RUN wget https://github.com/nextcloud/polls/releases/download/v$POLLS_VERSION/polls-$POLLS_VERSION.tar.gz
-RUN echo "$POLLS_SHA256_SUM  polls-$POLLS_VERSION.tar.gz" | sha256sum -c - || exit 1
-RUN mkdir /var/lib/nextcloud/apps/polls
-RUN tar xzf polls-$POLLS_VERSION.tar.gz -C /var/lib/nextcloud/apps/polls --strip 1
-
-ENV CONTACTS_VERSION=v5.0.2
-ENV CONTACTS_SHA256_SUM=291204c4fd951e49bbfd5255edbbfc02d09621caa95e8e40d5d70fcaec938a57
-RUN wget https://github.com/nextcloud-releases/contacts/releases/download/$CONTACTS_VERSION/contacts-$CONTACTS_VERSION.tar.gz
-RUN echo "$CONTACTS_SHA256_SUM  contacts-$CONTACTS_VERSION.tar.gz" | sha256sum -c - || exit 1
-RUN mkdir /var/lib/nextcloud/apps/contacts
-RUN tar xzf contacts-$CONTACTS_VERSION.tar.gz -C /var/lib/nextcloud/apps/contacts --strip 1
-
-ENV CALENDAR_VERSION=v4.1.1
-ENV CALENDAR_SHA256_SUM=c28d5e0fbbce21c61488532df7da4031cbeb1b7958bb4ce6ac6c84e6b89cf777
-RUN wget https://github.com/nextcloud-releases/calendar/releases/download/$CALENDAR_VERSION/calendar-$CALENDAR_VERSION.tar.gz
-RUN echo "$CALENDAR_SHA256_SUM  calendar-$CALENDAR_VERSION.tar.gz" | sha256sum -c - || exit 1
-RUN mkdir /var/lib/nextcloud/apps/calendar
-RUN tar xzf calendar-$CALENDAR_VERSION.tar.gz -C /var/lib/nextcloud/apps/calendar --strip 1
-
-ENV TASKS_VERSION=v0.14.5
-ENV TASKS_SHA256_SUM=fdfa3168ac80eaef3e2de5009eee02a369acc8d35dfd8283d1f25423bdf3c532
-RUN wget https://github.com/nextcloud/tasks/releases/download/$TASKS_VERSION/tasks.tar.gz
-RUN echo "$TASKS_SHA256_SUM  tasks.tar.gz" | sha256sum -c - || exit 1
-RUN mkdir /var/lib/nextcloud/apps/tasks
-RUN tar xzf tasks.tar.gz -C /var/lib/nextcloud/apps/tasks --strip 1
-
-ENV NOTES_VERSION=v4.6.0
-ENV NOTES_SHA256_SUM=463126bbeb96f54c6a4876b680c6cff0951ddc65f3bb45d23f23044db80bae7b
-RUN wget https://github.com/nextcloud/notes/releases/download/$NOTES_VERSION/notes.tar.gz
-RUN echo "$NOTES_SHA256_SUM  notes.tar.gz" | sha256sum -c - || exit 1
-RUN mkdir /var/lib/nextcloud/apps/notes
-RUN tar xzf notes.tar.gz -C /var/lib/nextcloud/apps/notes --strip 1
-
-ENV NEWS_VERSION=20.0.0
-ENV NEWS_SHA256_SUM=836d9d559cf20fb7687715b6587277c84b27cd6b7237eddf84c63d5b8cbbf7e1
-RUN wget https://github.com/nextcloud/news/releases/download/$NEWS_VERSION/news.tar.gz
-RUN echo "$NEWS_SHA256_SUM  news.tar.gz" | sha256sum -c - || exit 1
-RUN mkdir /var/lib/nextcloud/apps/news
-RUN tar xzf news.tar.gz -C /var/lib/nextcloud/apps/news --strip 1
-
-ENV MASTODON_INTEGRATION_VERSION=1.0.3
-ENV MASTODON_INTEGRATION_SHA256_SUM=ff3a498dfd230950565c3091b9610afc80dccd17b4f219aa35a2109b22d091b4
-RUN wget https://github.com/nextcloud/integration_mastodon/releases/download/v$MASTODON_INTEGRATION_VERSION/integration_mastodon-$MASTODON_INTEGRATION_VERSION.tar.gz
-RUN echo "$MASTODON_INTEGRATION_SHA256_SUM  integration_mastodon-$MASTODON_INTEGRATION_VERSION.tar.gz" | sha256sum -c - || exit 1
-RUN mkdir /var/lib/nextcloud/apps/integration_mastodon
-RUN tar xzf integration_mastodon-$MASTODON_INTEGRATION_VERSION.tar.gz -C /var/lib/nextcloud/apps/integration_mastodon --strip 1
-
-ENV SOCIAL_LOGIN_VERSION=v5.1.5
-ENV SOCIAL_LOGIN_SHA256_SUM=5b143988d41be46563b209dba5beaa30df747b9550e1777e247eb9b23bdff8f9
-RUN wget https://github.com/zorn-v/nextcloud-social-login/releases/download/$SOCIAL_LOGIN_VERSION/release.tar.gz
-RUN echo "$SOCIAL_LOGIN_SHA256_SUM  release.tar.gz" | sha256sum -c - || exit 1
-RUN mkdir /var/lib/nextcloud/apps/sociallogin
-RUN tar xzf release.tar.gz -C /var/lib/nextcloud/apps/sociallogin --strip 1
-
-
-FROM docker.io/thallian/php8-fpm:3.17
-
-ENV FPMUSER=nginx
-ENV FPMGROUP=nginx
-ENV PHP_MEMORY_LIMIT=512M
-
-RUN apk add --no-cache \
-  nginx \
-  ffmpeg \
-  php81-cli \
-  php81-pecl-apcu \
-  php81-opcache \
-  php81-pcntl \
-  php81-ctype \
-  php81-curl \
-  php81-dom \
-  php81-gd \
-  php81-iconv \
-  php81-xml \
-  php81-json \
-  php81-mbstring \
-  php81-openssl \
-  php81-posix \
-  php81-session \
-  php81-simplexml \
-  php81-xmlreader \
-  php81-xmlwriter \
-  php81-zip \
-  php81-zlib \
-  php81-pdo_pgsql \
-  php81-bz2 \
-  php81-fileinfo \
-  php81-intl \
-  php81-exif \
-  php81-bcmath \
-  php81-gmp \
-  php81-imap \
-	dcron	
-
-COPY --from=builder --chown=nginx:nginx /var/lib/nextcloud /var/lib/nextcloud
-
-RUN rm /etc/nginx/http.d/default.conf
-
-ENV S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0
-
-ADD /rootfs /
-
-VOLUME [ "/var/lib/nextcloud/data", "/var/lib/nextcloud/config" ]
--- a/rootfs/bin/nextcloud-config
+++ b/rootfs/bin/nextcloud-config
@ -5,19 +5,19 @@ cd /var/lib/nextcloud
 chmod +x ./occ

 if [ ! -f /var/lib/nextcloud/data/.installed ]; then
-    s6-setuidgid nginx ./occ maintenance:install \
-        --database=pgsql \
-        --database-host="$DB_HOST" \
-        --database-name="$DB_NAME" \
-        --database-user="$DB_USER" \
-        --database-pass="$DB_PASSWORD" \
-        --database-port="$DB_PORT" \
-        --admin-user="$ADMIN_USER" \
-        --admin-pass="$ADMIN_PASSWORD" \
-        --data-dir=/var/lib/nextcloud/data/ \
-        --no-interaction
+  s6-setuidgid nginx ./occ maintenance:install \
+    --database=pgsql \
+    --database-host="$DB_HOST" \
+    --database-name="$DB_NAME" \
+    --database-user="$DB_USER" \
+    --database-pass="$DB_PASSWORD" \
+    --database-port="$DB_PORT" \
+    --admin-user="$ADMIN_USER" \
+    --admin-pass="$ADMIN_PASSWORD" \
+    --data-dir=/var/lib/nextcloud/data/ \
+    --no-interaction

-    touch /var/lib/nextcloud/data/.installed
+  touch /var/lib/nextcloud/data/.installed
 fi

 s6-setuidgid nginx ./occ config:app:set --value cron core backgroundjobs_mode
@ -26,16 +26,14 @@ s6-setuidgid nginx ./occ app:enable text
 s6-setuidgid nginx ./occ app:enable files_pdfviewer
 s6-setuidgid nginx ./occ app:enable theming
 s6-setuidgid nginx ./occ app:enable photos
-s6-setuidgid nginx ./occ app:enable twofactor_totp
 s6-setuidgid nginx ./occ app:enable twofactor_backupcodes
 s6-setuidgid nginx ./occ app:enable polls
 s6-setuidgid nginx ./occ app:enable calendar
 s6-setuidgid nginx ./occ app:enable contacts
 s6-setuidgid nginx ./occ app:enable news
 s6-setuidgid nginx ./occ app:enable tasks
-s6-setuidgid nginx ./occ app:enable notes
+# s6-setuidgid nginx ./occ app:enable notes
 s6-setuidgid nginx ./occ app:enable sociallogin
-s6-setuidgid nginx ./occ app:enable integration_mastodon
 s6-setuidgid nginx ./occ app:disable activity
 s6-setuidgid nginx ./occ app:disable comments
 s6-setuidgid nginx ./occ app:disable files_trashbin
@ -56,7 +54,7 @@ s6-setuidgid nginx ./occ config:system:set --value "localhost" trusted_domains 0
 s6-setuidgid nginx ./occ config:system:set --value "$DOMAIN" trusted_domains 1
 s6-setuidgid nginx ./occ config:system:set --value "syslog" log_type
 s6-setuidgid nginx ./occ config:system:set --value "" logfile
-s6-setuidgid nginx ./occ config:system:set --value "3" loglevel
+s6-setuidgid nginx ./occ config:system:set --value "1" loglevel

 s6-setuidgid nginx ./occ config:system:set --value "smtp" mail_smtpmode
 s6-setuidgid nginx ./occ config:system:set --value "${MAIL_SMTP_AUTH_TYPE:-PLAIN}" mail_smtpauthtype
--- a/rootfs/etc/confd/templates/nextcloud.conf.tmpl
+++ b/rootfs/etc/confd/templates/nextcloud.conf.tmpl
@ -5,6 +5,11 @@ upstream php {
    server 127.0.0.1:9000;
 }

+map $arg_v $asset_immutable {
+    "" "";
+    default ", immutable";
+}
+
 server {
    listen [::]:8080;
    listen 8080;
@ -19,24 +24,15 @@ server {
    add_header Referrer-Policy no-referrer;
    add_header X-Frame-Options "SAMEORIGIN" always;

+    include mime.types;
+    types {
+        text/javascript mjs;
+    }
+
+    index index.php index.html /index.php$request_uri;
+
    fastcgi_hide_header X-Powered-By;

-    root /var/lib/nextcloud/;
-
-    location = /robots.txt {
-        allow all;
-        log_not_found off;
-        access_log off;
-    }
-
-    location = /.well-known/carddav {
-      return 301 http{{ if eq (getenv "ASSUME_HTTPS" "on") "on" }}s{{end}}://$host/remote.php/dav;
-    }
-
-    location = /.well-known/caldav {
-      return 301 http{{ if eq (getenv "ASSUME_HTTPS" "on") "on" }}s{{end}}://$host/remote.php/dav;
-    }
-
    client_max_body_size {{getenv "MAX_UPLOAD_SIZE"}};
    fastcgi_buffers 64 4K;

@ -47,55 +43,93 @@ server {
    gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
    gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;

-    location / {
-        rewrite ^ /index.php;
+    root /var/lib/nextcloud/;
+
+    location = / {
+        if ( $http_user_agent ~ ^DavClnt ) {
+            return 302 /remote.php/webdav/$is_args$args;
+        }
    }

-    location ~ ^\/(?:build|tests|config|lib|3rdparty|templates|data)\/ {
-        deny all;
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
    }

-    location ~ ^\/(?:\.|autotest|occ|issue|indie|db_|console) {
-        deny all;
+    # Make a regex exception for `/.well-known` so that clients can still
+    # access it despite the existence of the regex rule
+    # `location ~ /(\.|autotest|...)` which would otherwise handle requests
+    # for `/.well-known`.
+    location ^~ /.well-known {
+        # The rules in this block are an adaptation of the rules
+        # in `.htaccess` that concern `/.well-known`.
+
+        location = /.well-known/carddav { return 301 /remote.php/dav/; }
+        location = /.well-known/caldav  { return 301 /remote.php/dav/; }
+
+        location /.well-known/acme-challenge    { try_files $uri $uri/ =404; }
+        location /.well-known/pki-validation    { try_files $uri $uri/ =404; }
+
+        # Let Nextcloud's API for `/.well-known` URIs handle all other
+        # requests by passing them to the front-end controller.
+        return 301 /index.php$request_uri;
    }

-    location ~ ^\/(?:index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|oc[ms]-provider\/.+)\.php(?:$|\/) {
-        fastcgi_split_path_info ^(.+\.php)(/.*)$;
+    # Rules borrowed from `.htaccess` to hide certain paths from clients
+    location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)  { return 404; }
+    location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console)                { return 404; }
+
+    location ~ \.php(?:$|/) {
+        # Required for legacy support
+        rewrite ^/(?!index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|ocs-provider\/.+|.+\/richdocumentscode(_arm64)?\/proxy) /index.php$request_uri;
+
+        fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+        set $path_info $fastcgi_path_info;
+
        try_files $fastcgi_script_name =404;
+
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_param PATH_INFO $fastcgi_path_info;
+        fastcgi_param PATH_INFO $path_info;
        fastcgi_param HTTPS {{ getenv "ASSUME_HTTPS" "on" }};

-        #Avoid sending the security headers twice
-        fastcgi_param modHeadersAvailable true;
-        fastcgi_param front_controller_active true;
+        fastcgi_param modHeadersAvailable true;         # Avoid sending the security headers twice
+        fastcgi_param front_controller_active true;     # Enable pretty urls
        fastcgi_pass php;
+
        fastcgi_intercept_errors on;
        fastcgi_request_buffering off;
+
+        fastcgi_max_temp_file_size 0;
    }

-    location ~ ^\/(?:updater|oc[ms]-provider)(?:$|\/) {
-        try_files $uri/ =404;
-        index index.php;
-    }
-
-    location ~ \.(?:css|js|woff2?|svg|gif|map)$ {
+    # Serve static files
+    location ~ \.(?:css|js|mjs|svg|gif|ico|jpg|png|webp|wasm|tflite|map|ogg|flac)$ {
        try_files $uri /index.php$request_uri;
-        add_header Cache-Control "public, max-age=15778463";
-        add_header Referrer-Policy "no-referrer" always;
-        add_header X-Content-Type-Options "nosniff" always;
-        add_header X-Download-Options "noopen" always;
-        add_header X-Frame-Options "SAMEORIGIN" always;
-        add_header X-Permitted-Cross-Domain-Policies "none" always;
-        add_header X-Robots-Tag "none" always;
-        add_header X-XSS-Protection "1; mode=block" always;
-
-        access_log off;
+        # HTTP response headers borrowed from Nextcloud `.htaccess`
+        add_header Cache-Control                     "public, max-age=15778463$asset_immutable";
+        add_header Referrer-Policy                   "no-referrer"       always;
+        add_header X-Content-Type-Options            "nosniff"           always;
+        add_header X-Frame-Options                   "SAMEORIGIN"        always;
+        add_header X-Permitted-Cross-Domain-Policies "none"              always;
+        add_header X-Robots-Tag                      "noindex, nofollow" always;
+        add_header X-XSS-Protection                  "1; mode=block"     always;
+        access_log off;     # Optional: Don't log access to assets
    }

-    location ~ \.(?:png|html|ttf|ico|jpg|jpeg|bcmap)$ {
+    location ~ \.(otf|woff2?)$ {
        try_files $uri /index.php$request_uri;
-        access_log off;
+        expires 7d;         # Cache-Control policy borrowed from `.htaccess`
+        access_log off;     # Optional: Don't log access to assets
+    }
+
+    # Rule borrowed from `.htaccess`
+    location /remote {
+        return 301 /remote.php$request_uri;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php$request_uri;
    }
 }
--- a/rootfs/etc/php84/conf.d/enable_apcu_for_cli.ini
+++ b/rootfs/etc/php84/conf.d/enable_apcu_for_cli.ini
Author	SHA1	Message	Date
Sebastian Hugentobler	431c61f824	symlink php84 to php Some checks failed Build Multiarch Container Image / call-reusable-workflow (push) Failing after 2m29s Details	2025-03-31 14:04:44 +02:00
Sebastian Hugentobler	1666f41487	push to 31.0.2 Some checks failed Build Multiarch Container Image / call-reusable-workflow (push) Failing after 2m13s Details	2025-03-31 13:27:34 +02:00
Sebastian Hugentobler	43a67d252b	push to 30.0.2 Some checks failed Build Multiarch Container Image / call-reusable-workflow (push) Failing after 2m19s Details	2024-11-25 15:59:52 +01:00
Sebastian Hugentobler	1e04c7b2c7	push to 30.0.1 All checks were successful Build Multiarch Container Image / call-reusable-workflow (push) Successful in 6m4s Details	2024-11-01 11:36:37 +01:00
Sebastian Hugentobler	2c54b4b531	push to 29.0.5 All checks were successful Build Multiarch Container Image / call-reusable-workflow (push) Successful in 6m8s Details	2024-08-24 14:47:26 +02:00
Sebastian Hugentobler	06e728e56d	push to 29.0.4 All checks were successful Build Multiarch Container Image / call-reusable-workflow (push) Successful in 6m14s Details	2024-08-04 14:10:06 +02:00
Sebastian Hugentobler	d599940c78	push to 29.0.3 All checks were successful Build Multiarch Container Image / call-reusable-workflow (push) Successful in 7m30s Details	2024-06-27 19:42:50 +02:00
Sebastian Hugentobler	21e96329b9	push to 29.0.1 All checks were successful Build Multiarch Container Image / call-reusable-workflow (push) Successful in 6m12s Details	2024-05-27 17:27:09 +02:00
Sebastian Hugentobler	77de5c8b5a	update polls All checks were successful Build Multiarch Container Image / call-reusable-workflow (push) Successful in 6m18s Details	2024-04-13 17:25:59 +02:00
Sebastian Hugentobler	1385207673	push to 28.0.4	2024-03-28 14:43:19 +01:00
Sebastian Hugentobler	0be15a43ff	enable apcu for cli	2023-12-20 09:26:14 +01:00
Sebastian Hugentobler	5c9d8e11f3	disable notes for now as it is not yet compatible with NC28	2023-12-20 09:15:54 +01:00
Sebastian Hugentobler	a2b887641d	push to version 28.0.0	2023-12-20 08:19:46 +01:00
Sebastian Hugentobler	9c0a7d8d1d	push to 27.1.2	2023-10-24 09:57:50 +02:00
Sebastian Hugentobler	7d4c37f567	push to 27.1.1	2023-09-26 15:35:34 +02:00
Sebastian Hugentobler	02179e76c3	push to 27.0.2	2023-08-16 08:11:20 +02:00
Sebastian Hugentobler	f5773bcd6e	remove twofactor_totp, it's no longer maintained	2023-05-30 12:07:23 +02:00
Sebastian Hugentobler	0348d45eac	use php 8.2 base	2023-05-30 10:48:01 +02:00
Sebastian Hugentobler	d24c9028f2	configure apcu for php 8.2	2023-05-30 10:32:27 +02:00
Sebastian Hugentobler	5aaff4be32	link php to php82	2023-05-30 10:22:25 +02:00
Sebastian Hugentobler	9c1bae2dfd	use alpine 3.18 as base and switch to php 8.2	2023-05-30 10:16:10 +02:00
Sebastian Hugentobler	e49d5eae8a	push nextcloud to 26.0.2	2023-05-30 10:00:28 +02:00