From a97bd63a40ee49fd62d806cbae7bffb8cdda655a Mon Sep 17 00:00:00 2001
From: Florian Zirker <florian.zirker@kapsweyer.de>
Date: Wed, 29 Mar 2023 13:53:45 +0200
Subject: [PATCH] =?UTF-8?q?Client=20Push=20f=C3=BCr=20Nextcloud?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nextcloud/docker-compose.yaml | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/nextcloud/docker-compose.yaml b/nextcloud/docker-compose.yaml
index d890e32..f69c5dd 100644
--- a/nextcloud/docker-compose.yaml
+++ b/nextcloud/docker-compose.yaml
@@ -22,6 +22,7 @@ services:
       - "traefik.http.middlewares.nextcloudHeader.headers.stsIncludeSubdomains=true"
       - "traefik.http.middlewares.nextcloudHeader.headers.stsPreload=true"
       - "traefik.http.middlewares.nextcloudHeader.headers.forceSTSHeader=true"
+      - "traefik.http.middlewares.nextcloudHeader.headers.customResponseHeaders.X-Robots-Tag=noindex,nofollow"
       - "traefik.http.routers.nextcloud.middlewares=nextcloudHeader"
       - "docker.group=netxtcloud"
 
@@ -79,6 +80,33 @@ services:
       - "docker.group=netxtcloud"
 
 
+# notify_push aka Client Push aka High Performance Back-end for Nextcloud File
+# https://nextcloud.com/blog/nextcloud-faster-than-ever-introducing-files-high-performance-back-end/
+  push:
+    image: nextcloud:${NC_MAIN_VERSION}-fpm
+    restart: unless-stopped
+    networks:
+      - web
+      - nextcloud
+    volumes:
+      - ${VOLUMES_PATH}/nextcloud_html:/var/www/html:ro
+      - ${VOLUMES_PATH}/nextcloud_data:/var/www/html/data:ro
+    environment:
+      - PORT=7867
+      - NEXTCLOUD_URL=http://web
+    entrypoint: /var/www/html/custom_apps/notify_push/bin/x86_64/notify_push /var/www/html/config/config.php
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.ncpush.rule=Host(`cloud.${DOMAIN}`) && PathPrefix(`/push`)"
+      - "traefik.http.routers.ncpush.entrypoints=websecure"
+      - "traefik.http.routers.ncpush.tls.certresolver=netcup"
+      - "traefik.http.routers.ncpush.tls.options=intermediate@file"
+      - "traefik.http.services.ncpush.loadbalancer.server.port=7867"
+      - "traefik.http.routers.ncpush.middlewares=ncpushstrip"
+      - "traefik.http.middlewares.ncpushstrip.stripprefix.prefixes=/push"
+      - "docker.group=proxy"
+
+
   db:
     image: mariadb:10
     command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW --skip-innodb-read-only-compressed
@@ -210,6 +238,9 @@ networks:
   web:
     external: true
   nextcloud:
+    ipam:
+      config:
+        - subnet: 172.153.0.0/16 # necessary for the notify_push <-> nextcloud traffic
   mariadb:
   monitoring:
     external: true