fixed mariadb environment

docker-compose.yml

@@ -1,51 +1,56 @@
 ---
 services:
   nextcloud:
-    image: nextcloud:${NC_VERSION}
+    image: nextcloud:${NEXTCLOUD_VERSION}
     restart: unless-stopped
     depends_on:
-      - db
+      - mariadb
     environment:
-      - MYSQL_HOST=db
-      - MYSQL_DATABASE=${NC_DATABASE_NAME}
-      - MYSQL_USER=${NC_DATABASE_USER}
-      - MYSQL_PASSWORD=${NC_DATABASE_PASS}
+      - MYSQL_HOST=mariadb
+      - MYSQL_DATABASE=${NEXTCLOUD_DATABASE_NAME}
+      - MYSQL_USER=${NEXTCLOUD_DATABASE_USER}
+      - MYSQL_PASSWORD=${NEXTCLOUD_DATABASE_PASS}
       - OVERWRITEPROTOCOL=https
+      - PHP_MEMORY_LIMIT=1024M
+      - PHP_UPLOAD_LIMIT=1024M
     labels:
       - traefik.enable=${TRAEFIK_ENABLED}
       - traefik.docker.network=${TRAEFIK_NETWORK}
-      ### Section HTTP
-      - traefik.http.routers.http-${TRAEFIK_ROUTER}.entrypoints=http
-      # redirect to HTTPS only
-      - traefik.http.routers.http-${TRAEFIK_ROUTER}.middlewares=http-to-https
-      - traefik.http.routers.http-${TRAEFIK_ROUTER}.rule=Host(`${TRAEFIK_MATCHRULE}`)
-      ### Section HTTPS
+      # specify a custom middleware for nextcloud-specific configuration
+      - traefik.http.middlewares.${TRAEFIK_ROUTER}-redirectregex.redirectRegex.permanent=true
+      - traefik.http.middlewares.${TRAEFIK_ROUTER}-redirectregex.redirectRegex.regex="https://(.*)/.well-known/(card|cal)dav"
+      - traefik.http.middlewares.${TRAEFIK_ROUTER}-redirectregex.redirectRegex.replacement="https://$${1}/remote.php/dav/"
+      # HTTPS
       - traefik.http.routers.https-${TRAEFIK_ROUTER}.entrypoints=https
       # configure the exposed service
-      - traefik.http.routers.https-${TRAEFIK_ROUTER}.rule=Host(`${TRAEFIK_MATCHRULE}`)
+      - traefik.http.routers.https-${TRAEFIK_ROUTER}.middlewares=${TRAEFIK_MIDDLEWARES}
+      - traefik.http.routers.https-${TRAEFIK_ROUTER}.rule=${TRAEFIK_MATCHRULE}
       # of course, enable TLS and it's certificate provider
       - traefik.http.routers.https-${TRAEFIK_ROUTER}.tls=${TRAEFIK_TLSENABLED}
       - traefik.http.routers.https-${TRAEFIK_ROUTER}.tls.certresolver=${TRAEFIK_CERTRESOLVER}
       # specify a service so a custom port can be used
       - traefik.http.services.${TRAEFIK_SERVICE}.loadbalancer.server.port=${TRAEFIK_SERVICE_PORT}
-      # specify a custom middleware for nextcloud-specific configuration
-      - traefik.http.middlewares.nextcloud-redirectregex.redirectRegex.permanent=true
-      - traefik.http.middlewares.nextcloud-redirectregex.redirectRegex.regex="https://(.*)/.well-known/(card|cal)dav"
-      - traefik.http.middlewares.nextcloud-redirectregex.redirectRegex.replace="https://${1}/remote.php/dav/"
     networks:
       - internal
       - traefik
     volumes:
       - ./data/nextcloud:/var/www/html
 
-  db:
-    image: mariadb:${DB_VERSION}
+  mariadb:
+    image: mariadb:${MARIADB_VERSION}
     restart: unless-stopped
     environment:
-      - MYSQL_ROOT_PASSWORD=${DB_ROOT_PASS}
-      - MYSQL_DATABASE=${NC_DATABASE_NAME}
-      - MYSQL_USER=${NC_DATABASE_USER}
-      - MYSQL_PASSWORD=${NC_DATABASE_PASS}
+      - MARIADB_AUTO_UPGRADE=true
+      - MARIADB_ROOT_PASSWORD=${MARIADB_ROOT_PASS}
+      - MARIADB_DATABASE=${NEXTCLOUD_DATABASE_NAME}
+      - MARIADB_USER=${NEXTCLOUD_DATABASE_USER}
+      - MARIADB_PASSWORD=${NEXTCLOUD_DATABASE_PASS}
+    healthcheck:
+      test: ["CMD", "/usr/local/bin/healthcheck.sh", "--innodb_initialized"]
+      start_period: 30s
+      interval: 5s
+      timeout: 3s
+      retries: 3
     networks:
       - internal
     volumes:

example.env

@@ -1,19 +1,20 @@
 # NextCloud environment
-NC_VERSION=22.2.6-apache
-NC_DATABASE_NAME=nextcloud
-NC_DATABASE_USER=nextcloud
-NC_DATABASE_PASS=changeme
+NEXTCLOUD_VERSION=latest
+NEXTCLOUD_DATABASE_NAME=nextcloud
+NEXTCLOUD_DATABASE_USER=nextcloud
+NEXTCLOUD_DATABASE_PASS=changeme
 
 # MariaDB environment
-DB_VERSION=10.7.3
-DB_ROOT_PASS=Sup3rS3cr3tPassw0rd!
+MARIADB_VERSION=latest
+MARIADB_ROOT_PASS=Sup3rS3cr3tPassw0rd!
 
 # Træfik environment
 TRAEFIK_ENABLED=true
 TRAEFIK_CERTRESOLVER=letsencrypt
-TRAEFIK_MATCHRULE=cloud.domain.com
+TRAEFIK_MATCHRULE=Host(`cloud.domain.com`)
 TRAEFIK_ROUTER=cloud_domain_com
 TRAEFIK_SERVICE=cloud_domain_com
 TRAEFIK_SERVICE_PORT=80
 TRAEFIK_TLSENABLED=true
 TRAEFIK_NETWORK=traefik
+TRAEFIK_MIDDLEWARES=hsts,cloud_domain_com-redirectregex