.

nextcloud/nextcloud.yaml

@@ -1,5 +1,14 @@
 apiVersion: v1
 kind: ConfigMap
+metadata:
+  name: nextcloud-ldap-client-config
+  namespace: nextcloud
+data:
+  ldap.conf: |
+    TLS_REQCERT ALLOW
+---
+apiVersion: v1
+kind: ConfigMap
 metadata:
   name: nextcloud-ldap-bootstrap
   namespace: nextcloud
@@ -10,12 +19,6 @@ data:
 
     cd /var/www/html
 
-    echo "[ldap-bootstrap] preparing ldap client config"
-    mkdir -p /etc/ldap
-    cat >/etc/ldap/ldap.conf <<'EOF'
-    TLS_REQCERT ALLOW
-    EOF
-
     echo "[ldap-bootstrap] waiting for Nextcloud to be installed..."
     i=0
     until php occ status >/tmp/occ-status.txt 2>/dev/null; do
@@ -253,6 +256,10 @@ spec:
               mountPath: /data/data
             - name: tvshows
               mountPath: /data/tvshows
+            - name: ldap-client-config
+              mountPath: /etc/ldap/ldap.conf
+              subPath: ldap.conf
+              readOnly: true
 
       volumes:
         - name: nextcloud
@@ -282,6 +289,12 @@ spec:
         - name: data
           persistentVolumeClaim:
             claimName: data
+        - name: ldap-client-config
+          configMap:
+            name: nextcloud-ldap-client-config
+            items:
+              - key: ldap.conf
+                path: ldap.conf
 ---
 apiVersion: v1
 kind: Service