From 55d83976a011f843aaf9e0988ebb45c57d02b23d Mon Sep 17 00:00:00 2001
From: Philip Haupt <“der.mad.mob@gmail.com”>
Date: Sat, 7 Mar 2026 14:50:44 +0100
Subject: [PATCH] nextcloud-hpb added

---
 nextcloud-hpb/cm.yaml            | 11 +++++
 nextcloud-hpb/deploy.yaml        | 75 ++++++++++++++++++++++++++++++++
 nextcloud-hpb/kustomization.yaml |  7 +++
 nextcloud-hpb/svc.yaml           | 25 +++++++++++
 4 files changed, 118 insertions(+)
 create mode 100644 nextcloud-hpb/cm.yaml
 create mode 100644 nextcloud-hpb/deploy.yaml
 create mode 100644 nextcloud-hpb/kustomization.yaml
 create mode 100644 nextcloud-hpb/svc.yaml

diff --git a/nextcloud-hpb/cm.yaml b/nextcloud-hpb/cm.yaml
new file mode 100644
index 0000000..4260d17
--- /dev/null
+++ b/nextcloud-hpb/cm.yaml
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: nextcloud-hpb-config
+  namespace: nextcloud-hpb
+data:
+  NC_DOMAIN: cloud.borninpain.de
+  TALK_HOST: signal.borninpain.de
+  TALK_PORT: "3478"
+  TZ: "Europe/Berlin"
diff --git a/nextcloud-hpb/deploy.yaml b/nextcloud-hpb/deploy.yaml
new file mode 100644
index 0000000..c27bca8
--- /dev/null
+++ b/nextcloud-hpb/deploy.yaml
@@ -0,0 +1,75 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nextcloud-hpb
+  namespace: nextcloud-hpb
+  labels:
+    app: nextcloud-hpb
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: nextcloud-hpb
+  template:
+    metadata:
+      labels:
+        app: nextcloud-hpb
+    spec:
+      containers:
+        - name: nextcloud-hpb
+          image: ghcr.io/nextcloud-releases/aio-talk:latest
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: turn-tcp
+              containerPort: 3478
+              protocol: TCP
+            - name: turn-udp
+              containerPort: 3478
+              protocol: UDP
+            - name: signaling
+              containerPort: 8081
+              protocol: TCP
+
+          # Domain/Host aus ConfigMap, Secrets separat
+          envFrom:
+            - configMapRef:
+                name: nextcloud-hpb-config
+          env:
+            - name: TURN_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: nextcloud-hpb-secrets
+                  key: TURN_SECRET
+            - name: SIGNALING_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: nextcloud-hpb-secrets
+                  key: SIGNALING_SECRET
+            - name: INTERNAL_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: nextcloud-hpb-secrets
+                  key: INTERNAL_SECRET
+
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: "1"
+              memory: 1Gi
+
+          # Probes (TCP auf Signaling-Port 8081)
+          livenessProbe:
+            tcpSocket:
+              port: signaling
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 1
+            failureThreshold: 3
+
+          readinessProbe:
+            tcpSocket:
+              port: signaling
+            failureThreshold: 3
diff --git a/nextcloud-hpb/kustomization.yaml b/nextcloud-hpb/kustomization.yaml
new file mode 100644
index 0000000..716271e
--- /dev/null
+++ b/nextcloud-hpb/kustomization.yaml
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - cm.yaml
+  - deploy.yaml
+  - svc.yaml
diff --git a/nextcloud-hpb/svc.yaml b/nextcloud-hpb/svc.yaml
new file mode 100644
index 0000000..dc0cb84
--- /dev/null
+++ b/nextcloud-hpb/svc.yaml
@@ -0,0 +1,25 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: nextcloud-hpb
+  namespace: nextcloud-hpb
+  labels:
+    app: nextcloud-hpb
+spec:
+  selector:
+    app: nextcloud-hpb
+  type: ClusterIP
+  ports:
+    - name: signaling
+      port: 8081
+      targetPort: signaling
+      protocol: TCP
+    - name: turn-tcp
+      port: 3478
+      targetPort: turn-tcp
+      protocol: TCP
+    - name: turn-udp
+      port: 3478
+      targetPort: turn-udp
+      protocol: UDP