different nextcloud aio solution

This commit is contained in:
Ebbe Baß
2026-07-30 09:05:37 +02:00
parent da5ee4a161
commit 6795e1979d
3 changed files with 42 additions and 180 deletions
@@ -8,7 +8,7 @@ The optimal setup uses one server per role:
- Nextcloud (Apache + PHP + MariaDB)
- Collabora CODE (document editing backend)
- Nextcloud Talk HPB (NATS + Janus Gateway + signaling server, via Docker)
- Nextcloud Talk HPB (Nextcloud AIO Talk: bundled TURN/STUN + signaling server, via Docker)
The current playbook stack is made for a theoretical infinite amount of Nextcloud instance setups
(not load balanced or anything in that direction) and a single server each for Collabora CODE and
@@ -58,7 +58,7 @@ co-locate roles on one server.
After that is done, copy vars/shared_vars.yml.example to vars/shared_vars.yml and go change all
the variables in it according to your needs. Every secret in that file (database password, admin
password, Collabora admin password, Talk HPB signaling/TURN/hash/block secrets) ships with a
password, Collabora admin password, Talk HPB TURN/signaling/internal secrets) ships with a
"ChangeMe..." placeholder - replace all of them before deploying.
/nextcloud_full_deployment
@@ -78,13 +78,13 @@ this order, since each one depends on the previous:
3. Connect Collabora CODE to your Nextcloud instance(s):
ansible-playbook connect_nextcloud_collabora.yml -i inventory/hosts.ini --ask-become-pass
4. Nextcloud Talk High-Performance Backend (NATS + Janus + signaling server, via Docker):
4. Nextcloud Talk High-Performance Backend (Nextcloud AIO Talk, via Docker):
ansible-playbook deploy_nc_talk_hpb.yml -i inventory/hosts.ini --ask-become-pass
This playbook only sets up the backend itself. Nextcloud does not pick it up automatically -
finish the connection by hand on each Nextcloud instance under
Administration -> Talk -> High-performance backend:
Signaling server URL: https://<nc_talk_hpb_domain>/standalone-signaling
Signaling server URL: https://<nc_talk_hpb_domain>
Shared secret: nc_talk_hpb_signaling_secret (from shared_vars.yml)
TURN server: <nc_talk_hpb_domain>:3478, protocols UDP and TCP
TURN secret: nc_talk_hpb_turn_secret (from shared_vars.yml)