docker-compose/nextcloud/docker-compose.yml

services:
  nextcloud_db:
    container_name: nextcloud_db
    image: docker.io/library/postgres:17.5
    restart: unless-stopped
    environment:
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_DB=${POSTGRES_DB}
    volumes:
      - ${APPDATA_PATH}/nextcloud/db:/var/lib/postgresql/data
    ports:
      - ${DB_PORT}:5432
    networks:
      - backend
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s

  nextcloud_valkey:
    container_name: nextcloud_valkey
    image: docker.io/valkey/valkey:8.1.3
    restart: unless-stopped
    command: valkey-server --save 60 1 --requirepass ${VALKEY_PASSWORD}
    volumes:
      - ${APPDATA_PATH}/nextcloud/valkey:/data
    ports:
      - ${VALKEY_PORT}:6379
    networks:
      - backend
    healthcheck:
      test: ["CMD-SHELL", "echo 'auth ${VALKEY_PASSWORD}\nping' | valkey-cli | grep PONG"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s

  nextcloud_app:
    image: docker.io/library/nextcloud:31.0.7
    container_name: nextcloud_app
    restart: unless-stopped
    depends_on:
      nextcloud_db:
        condition: service_healthy
      nextcloud_valkey:
        condition: service_healthy
    labels:
      - traefik.enable=true
      - traefik.http.routers.nextcloud.rule=Host(`${TRAEFIK_DOMAIN}`)
      - traefik.http.routers.nextcloud.entrypoints=websecure
      - traefik.http.services.nextcloud.loadbalancer.server.port=80
      - traefik.http.services.nextcloud.loadbalancer.passhostheader=true
      - traefik.http.routers.nextcloud.middlewares=nextcloud-redirectregex1,nextcloud-redirectregex2,compresstraefik,nextcloud-securityheaders
      - traefik.http.middlewares.compresstraefik.compress=true
      - traefik.http.middlewares.nextcloud-redirectregex1.redirectregex.permanent=true
      - traefik.http.middlewares.nextcloud-redirectregex1.redirectregex.regex=https?://([^/]*)/.well-known/(card|cal)dav
      - traefik.http.middlewares.nextcloud-redirectregex1.redirectregex.replacement=https://$${1}/remote.php/dav/
      - traefik.http.middlewares.nextcloud-redirectregex2.redirectregex.permanent=true
      - traefik.http.middlewares.nextcloud-redirectregex2.redirectregex.regex=https?://([^/]*)(/.well-known[^#]*)
      - traefik.http.middlewares.nextcloud-redirectregex2.redirectregex.replacement=https://$${1}/index.php$${2}
      - traefik.http.middlewares.nextcloud-securityheaders.headers.stsSeconds=15552000
      - traefik.http.middlewares.nextcloud-securityheaders.headers.stsIncludeSubdomains=true
      - traefik.http.middlewares.nextcloud-securityheaders.headers.stsPreload=true
      - traefik.docker.network=frontend
    environment:
      - POSTGRES_HOST=nextcloud_db:5432
      - POSTGRES_DB=${POSTGRES_DB}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - REDIS_HOST=nextcloud_valkey
      - REDIS_HOST_PORT=6379
      - REDIS_HOST_PASSWORD=${VALKEY_PASSWORD}
      - PHP_MEMORY_LIMIT=${PHP_MEMORY_LIMIT}
      - PHP_UPLOAD_LIMIT=${PHP_UPLOAD_LIMIT}
      - APACHE_DISABLE_REWRITE_IP=${APACHE_DISABLE_REWRITE_IP}
    volumes:
      - ${APPDATA_PATH}/nextcloud/app:/var/www/html
    ports:
      - ${APP_PORT}:80
    networks:
      - frontend
      - backend

  nextcloud_cron:
    image: docker.io/library/nextcloud:31.0.7
    container_name: nextcloud_cron
    restart: unless-stopped
    depends_on:
      - nextcloud_app
    entrypoint: /cron.sh
    environment:
      - POSTGRES_HOST=nextcloud_db:5432
      - POSTGRES_DB=${POSTGRES_DB}
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - REDIS_HOST=nextcloud_valkey
      - REDIS_HOST_PORT=6379
      - REDIS_HOST_PASSWORD=${VALKEY_PASSWORD}
      - PHP_MEMORY_LIMIT=${PHP_MEMORY_LIMIT}
      - PHP_UPLOAD_LIMIT=${PHP_UPLOAD_LIMIT}
      - APACHE_DISABLE_REWRITE_IP=${APACHE_DISABLE_REWRITE_IP}
    volumes:
      - ${APPDATA_PATH}/nextcloud/app:/var/www/html
    networks:
      - frontend
      - backend

networks:
  frontend:
    external: true
  backend:
    external: true