adapt for traefik labels

apache/nextcloud.conf

@@ -1,5 +1,6 @@
 # Configuration pour reverse proxy Traefik
 # Récupération de l'IP réelle du client via X-Forwarded-For
+ServerName cloud.agence66.fr
 RemoteIPHeader X-Forwarded-For
 RemoteIPTrustedProxy 172.16.0.0/12
 RemoteIPTrustedProxy 10.0.0.0/8

docker-compose.yml

@@ -55,7 +55,28 @@ services:
     networks:
       - nextcloud-net
       - traefik-net
-
+    labels:
+      - "traefik.enable=true"
+      # Router configuration
+      - "traefik.http.routers.cloud.rule=Host(`${NEXTCLOUD_DOMAIN}`)"
+      - "traefik.http.routers.cloud.entrypoints=websecure"
+      - "traefik.http.routers.cloud.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.cloud.middlewares=nextcloud-headers,nextcloud-buffering,nextcloud-redirect"
+      # Service configuration
+      - "traefik.http.services.cloud.loadbalancer.server.port=80"
+      # Middleware: Headers
+      - "traefik.http.middlewares.nextcloud-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
+      - "traefik.http.middlewares.nextcloud-headers.headers.customresponseheaders.Strict-Transport-Security=max-age=15552000"
+      # Middleware: Buffering pour gros fichiers
+      - "traefik.http.middlewares.nextcloud-buffering.buffering.maxRequestBodyBytes=2147483648"
+      - "traefik.http.middlewares.nextcloud-buffering.buffering.memRequestBodyBytes=104857600"
+      - "traefik.http.middlewares.nextcloud-buffering.buffering.maxResponseBodyBytes=2147483648"
+      - "traefik.http.middlewares.nextcloud-buffering.buffering.memResponseBodyBytes=104857600"
+      - "traefik.http.middlewares.nextcloud-buffering.buffering.retryExpression=IsNetworkError() && Attempts() < 3"
+      # Middleware: Redirect pour CalDAV/CardDAV
+      - "traefik.http.middlewares.nextcloud-redirect.redirectregex.regex=https://(.*)/.well-known/(card|cal)dav"
+      - "traefik.http.middlewares.nextcloud-redirect.redirectregex.replacement=https://$$1/remote.php/dav/"
+      - "traefik.http.middlewares.nextcloud-redirect.redirectregex.permanent=true"
   redis:
     image: redis:alpine
     restart: unless-stopped