dataset/seed/nextcloud/templates/nextcloud-config.php

<?php
$CONFIG = array (
  'log_type' => 'syslog',
  'debug' => false,
  'datadirectory' => '/srv/nextcloud/data/',
  'updatechecker' => false,
  'check_for_working_htaccess' => false,
  'asset-pipeline.enabled' => false,
  'assetdirectory' => '/var/lib/nextcloud',
  'preview_libreoffice_path' => '/usr/bin/libreoffice',
  'trusted_domains' => 
  array (
    0 => 'localhost',
    1 => '%%revprox_client_external_domainnames[0]',
  ),
  'apps_paths' => 
  array (
    0 => 
    array (
      'path' => '/usr/share/nextcloud/apps',
      'url' => '/apps',
      'writable' => false,
    ),
    1 => 
    array (
      'path' => '/usr/local/share/nextcloud/apps',
      'url' => '/apps-appstore',
      'writable' => true,
    ),
  ),
  'dbtype' => 'pgsql',
  'version' => '{{VERSION}}',
  'overwrite.cli.url' => 'http://localhost',
  'dbname' => '%%pg_client_database',
  'dbhost' => '%%pg_client_server_domainname',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'dbuser' => '%%pg_client_username',
  'dbpassword' => '%%pg_client_password',
  'dbdriveroptions' => 
  array (
    'sslmode' => 'verify-full',
    'sslcert' => '/etc/pki/tls/certs/postgresql.crt',
    'sslkey' => '/etc/pki/tls/private/postgresql.key',
    'sslrootcert' => '/etc/pki/ca-trust/source/anchors/ca_PostgreSQL.crt',
  ),
  'passwordsalt' => '{{SALT}}',
  'secret' => '{{SECRET}}',
  'instanceid' => '%%nextcloud_instance_id',
  'config_is_read_only' => true,
  'installed' => false,
  'maintenance' => false,
  'appstoreenabled' => false,
  'appcodechecker' => false,
#  'memcache.distributed' => '\\OC\\Memcache\\Redis',
#  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'trusted_proxies' => '%%revprox_client_server_ip',
  'overwritehost' => '%%revprox_client_external_domainnames[0]',
  'filelocking.enabled' => true,
  'redis' => 
  array (
    'host' => '%%redis_client_server_domainname',
    'port' => 6380,
    'user' => '%%redis_client_username',
    'password' => '%%redis_client_password',
    'dbindex' => 0,
    'ssl_context' => 
    array (
      'local_cert' => '/etc/pki/tls/certs/redis.crt',
      'local_pk' => '/etc/pki/tls/private/redis.key',
      'cafile' => '/etc/pki/ca-trust/source/anchors/ca_Redis.crt',
    ),
  ),
  'default_phone_region' => 'FR',
# OIDC login
  'allow_user_to_change_display_name' => false,
  'lost_password_link' => 'disabled',
  'oidc_login_provider_url' => 'https://%%oauth2_client_server_domainname',
  'oidc_login_client_id' => '%%oauth2_client_id',
  'oidc_login_client_secret' => '%%oauth2_client_secret',
  'oidc_login_auto_redirect' => true,
# FIXME 'oidc_login_logout_url' => 'https://openid.example.com/thankyou',
# FIXME to true
  'oidc_login_end_session_redirect' => false,
# If no quota, we cannot send file
  'oidc_login_default_quota' => '1000000000000000',
  'oidc_login_button_text' => 'Log in with OpenID',
  'oidc_login_hide_password_form' => true,
  'oidc_login_use_id_token' => false,
  'oidc_login_attributes' => 
  array (
    'id' => 'sub',
    'name' => 'name',
    'mail' => 'email',
#    'quota' => 'ownCloudQuota',
#    'home' => 'homeDirectory',
    'ldap_uid' => 'uid',
#    'groups' => 'ownCloudGroups',
#    'photoURL' => 'picture',
#    'is_admin' => 'ownCloudAdmin',
  ),
  'oidc_login_default_group' => 'oidc',
  'oidc_login_scope' => 'openid profile email',
  'oidc_login_proxy_ldap' => false,
  'oidc_login_disable_registration' => true,
  'oidc_login_redir_fallback' => false,
  'oidc_login_alt_login_page' => 'assets/login.php',
  'oidc_login_tls_verify' => true,
  'oidc_create_groups' => false,
# FIXME
  'oidc_login_webdav_enabled' => false,
  'oidc_login_password_authentication' => false,
  'oidc_login_public_key_caching_time' => 86400,
  'oidc_login_min_time_between_jwks_requests' => 10,
  'oidc_login_well_known_caching_time' => 86400,
  'oidc_login_update_avatar' => false,
# mail
  'mail_smtpmode' => 'smtp',
  'mail_smtpsecure' => 'tls',
  'mail_sendmailmode' => 'smtp',
%set %%mailfrom, %%maildomain = %%nextcloud_mail_admin.split("@")
  'mail_from_address' => '%%mailfrom',
  'mail_domain' => '%%maildomain',
  'mail_smtpauthtype' => 'PLAIN',
  'mail_smtpauth' => 1,
  'mail_smtphost' => '%%smtp_relay_address',
  'mail_smtpport' => '25',
  'mail_smtpname' => '%%smtp_relay_user@%%ip_eth0',
  'mail_smtppassword' => '%%smtp_relay_password',
  'loglevel' => 2,
);