From ef90199eac8545403ff8c5b0b5fea6a405c5e946 Mon Sep 17 00:00:00 2001
From: WrenIX <133280015+wrenix@users.noreply.github.com>
Date: Fri, 20 Feb 2026 18:28:28 +0100
Subject: [PATCH 1/3] feat(nextcloud)!: Update nextcloud to next major v33

Signed-off-by: WrenIX <133280015+wrenix@users.noreply.github.com>
---
 charts/nextcloud/Chart.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/charts/nextcloud/Chart.yaml b/charts/nextcloud/Chart.yaml
index 87e06c01..2645b174 100644
--- a/charts/nextcloud/Chart.yaml
+++ b/charts/nextcloud/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v2
 name: nextcloud
-version: 8.9.1
+version: 9.0.0
 # renovate: image=docker.io/library/nextcloud
-appVersion: 32.0.6
+appVersion: 33.0.0
 description: A file sharing server that puts the control and security of your own data back into your hands.
 keywords:
   - nextcloud

From 3036f7ac49603d11c473a8e89729c289d6ac8239 Mon Sep 17 00:00:00 2001
From: WrenIX <dev.github@wrenix.eu>
Date: Mon, 10 Jun 2024 00:23:43 +0200
Subject: [PATCH 2/3] feat(nextcloud): enable nextcloud openmetrics to be
 monitored by servicemonitor

Signed-off-by: WrenIX <dev.github@wrenix.eu>
---
 charts/nextcloud/CHANGELOG.md                 |  5 +++
 .../files/defaultConfigs/helm-metrics.php.tpl |  6 +++
 charts/nextcloud/templates/_helpers.tpl       |  4 ++
 .../nextcloud/templates/metrics/service.yaml  | 23 +++++++-----
 .../templates/metrics/servicemonitor.yaml     | 34 -----------------
 .../{metrics => }/prometheus-rules.yaml       |  8 ++--
 charts/nextcloud/templates/service.yaml       |  9 ++---
 .../nextcloud/templates/servicemonitor.yaml   | 37 +++++++++++++++++++
 charts/nextcloud/values.yaml                  | 10 ++++-
 9 files changed, 82 insertions(+), 54 deletions(-)
 create mode 100644 charts/nextcloud/files/defaultConfigs/helm-metrics.php.tpl
 delete mode 100644 charts/nextcloud/templates/metrics/servicemonitor.yaml
 rename charts/nextcloud/templates/{metrics => }/prometheus-rules.yaml (91%)
 create mode 100644 charts/nextcloud/templates/servicemonitor.yaml

diff --git a/charts/nextcloud/CHANGELOG.md b/charts/nextcloud/CHANGELOG.md
index c5daabca..1b64c0a1 100644
--- a/charts/nextcloud/CHANGELOG.md
+++ b/charts/nextcloud/CHANGELOG.md
@@ -4,6 +4,11 @@ This Helm-Chart increase there major version on every breaking change (or major
 
 Here we list all major versions and their breaking changes for migration.
 
+## v9
+- upgrade to v33 major version
+- move `metrics.serviceMonitor` to `prometheus.serviceMonitor`: It us used for nextcloud-exporter and notify-push
+- move `metrics.rules` to `prometheus.rules`: It us used for nextcloud-exporter and notify-push
+
 ## v8
 - `cronjob.command` was renamed to `cronjob.sidecar.command` to avoid confusion with the cronjob command. Please update your `values.yaml` accordingly.
 
diff --git a/charts/nextcloud/files/defaultConfigs/helm-metrics.php.tpl b/charts/nextcloud/files/defaultConfigs/helm-metrics.php.tpl
new file mode 100644
index 00000000..919ad3dc
--- /dev/null
+++ b/charts/nextcloud/files/defaultConfigs/helm-metrics.php.tpl
@@ -0,0 +1,6 @@
+<?php
+
+$openmetricsAllowedClients = getenv('OPENMETRICS_ALLOWED_CLIENTS');
+if ($openmetricsAllowedClients) {
+  $CONFIG['openmetrics_allowed_clients'] = array_filter(array_map('trim', explode(',', $openmetricsAllowedClients)));
+}
diff --git a/charts/nextcloud/templates/_helpers.tpl b/charts/nextcloud/templates/_helpers.tpl
index 934226e4..f165974b 100644
--- a/charts/nextcloud/templates/_helpers.tpl
+++ b/charts/nextcloud/templates/_helpers.tpl
@@ -183,6 +183,10 @@ Create environment variables used to configure the nextcloud container as well a
   {{- else }}
   value: {{ .Values.nextcloud.host }}{{ if .Values.metrics.enabled }} {{ template "nextcloud.fullname" . }}.{{ .Release.Namespace }}.svc.cluster.local{{ end }}
   {{- end }}
+{{- with .Values.nextcloud.openmetrics.allowedClients }}
+- name: OPENMETRICS_ALLOWED_CLIENTS
+  value: {{ join "," . | quote }}
+{{- end }}
 {{- if ne (int .Values.nextcloud.update) 0 }}
 - name: NEXTCLOUD_UPDATE
   value: {{ .Values.nextcloud.update | quote }}
diff --git a/charts/nextcloud/templates/metrics/service.yaml b/charts/nextcloud/templates/metrics/service.yaml
index 759d081a..5db2ce01 100644
--- a/charts/nextcloud/templates/metrics/service.yaml
+++ b/charts/nextcloud/templates/metrics/service.yaml
@@ -1,29 +1,32 @@
 {{- if .Values.metrics.enabled }}
+{{- with .Values.metrics.service }}
 ---
 apiVersion: v1
 kind: Service
 metadata:
-  name: {{ template "nextcloud.fullname" . }}-metrics
+  name: {{ template "nextcloud.fullname" $ }}-metrics
   labels:
     {{- include "nextcloud.labels"  ( dict "component" "metrics"  "rootContext" $ ) | nindent 4 }}
-    {{- with .Values.metrics.service.labels }}
+    app.kubernetes.io/monitor: enabled
+    {{- with .labels }}
     {{- toYaml . | nindent 4 }}
     {{- end }}
-  {{- with .Values.metrics.service.annotations }}
+  {{- with .annotations }}
   annotations:
     {{- toYaml . | nindent 4 }}
   {{- end }}
 spec:
-  type: {{ .Values.metrics.service.type }}
-  {{- if eq .Values.metrics.service.type "LoadBalancer" }}
-  {{- with .Values.metrics.service.loadBalancerIP }}
+  type: {{ .type }}
+  {{- if eq .type "LoadBalancer" }}
+  {{- with .loadBalancerIP }}
   loadBalancerIP: {{ . }}
   {{- end }}
   {{- end }}
-  ports:
-    - name: metrics
-      port: 9205
-      targetPort: metrics
   selector:
     {{- include "nextcloud.selectorLabels"  ( dict "component" "metrics"  "rootContext" $ ) | nindent 4 }}
+  ports:
+    - name: http
+      port: 9100
+      targetPort: metrics
+{{- end }}
 {{- end }}
diff --git a/charts/nextcloud/templates/metrics/servicemonitor.yaml b/charts/nextcloud/templates/metrics/servicemonitor.yaml
deleted file mode 100644
index 53bcc44c..00000000
--- a/charts/nextcloud/templates/metrics/servicemonitor.yaml
+++ /dev/null
@@ -1,34 +0,0 @@
-{{- if and .Values.metrics.enabled .Values.metrics.serviceMonitor.enabled }}
----
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: {{ template "nextcloud.fullname" . }}
-  namespace: {{ .Values.metrics.serviceMonitor.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "nextcloud.labels"  ( dict "component" "metrics"  "rootContext" $ ) | nindent 4 }}
-    {{- with .Values.metrics.serviceMonitor.labels }}
-    {{- toYaml . | nindent 4 }}
-    {{- end }}
-spec:
-  jobLabel: {{ .Values.metrics.serviceMonitor.jobLabel | quote }}
-  selector:
-    matchLabels:
-      {{- include "nextcloud.selectorLabels"  ( dict "component" "metrics"  "rootContext" $ ) | nindent 6 }}
-  namespaceSelector:
-    {{- with .Values.metrics.serviceMonitor.namespaceSelector }}
-    {{- toYaml . | nindent 4 }}
-    {{- else }}
-    matchNames:
-      - {{ .Release.Namespace | quote }}
-    {{- end }}
-  endpoints:
-    - port: metrics
-      path: "/"
-      {{- with .Values.metrics.serviceMonitor.interval }}
-      interval: {{ . }}
-      {{- end }}
-      {{- with .Values.metrics.serviceMonitor.scrapeTimeout }}
-      scrapeTimeout: {{ . }}
-      {{- end }}
-{{- end }}
diff --git a/charts/nextcloud/templates/metrics/prometheus-rules.yaml b/charts/nextcloud/templates/prometheus-rules.yaml
similarity index 91%
rename from charts/nextcloud/templates/metrics/prometheus-rules.yaml
rename to charts/nextcloud/templates/prometheus-rules.yaml
index 3eaa8946..5df650f7 100644
--- a/charts/nextcloud/templates/metrics/prometheus-rules.yaml
+++ b/charts/nextcloud/templates/prometheus-rules.yaml
@@ -1,4 +1,4 @@
-{{- if .Values.metrics.rules.enabled }}
+{{- if .Values.prometheus.rules.enabled }}
 {{- $fullname := include "nextcloud.fullname" . }}
 apiVersion: monitoring.coreos.com/v1
 kind: PrometheusRule
@@ -6,12 +6,12 @@ metadata:
   name: {{ $fullname }}
   labels:
     {{- include "nextcloud.labels"  ( dict "rootContext" $ ) | nindent 4 }}
-    {{- with .Values.metrics.rules.labels }}
+    {{- with .Values.prometheus.rules.labels }}
     {{- toYaml . | nindent 4 }}
     {{- end }}
 spec:
   groups:
-    {{- with .Values.metrics.rules.defaults }}
+    {{- with .Values.prometheus.rules.defaults }}
     {{- if .enabled }}
     {{- $filter := .filter | default (printf `namespace="%s",job=~"^%s.*"` $.Release.Namespace $fullname) }}
     - name: {{ $fullname }}-Defaults
@@ -52,7 +52,7 @@ spec:
             `}}
     {{- end }}
     {{- end }}{{/* end-with prometheus.rules.default */}}
-    {{- with .Values.metrics.rules.additionalRules }}
+    {{- with .Values.prometheus.rules.additionalRules }}
     - name: {{ $fullname }}-Additional
       rules:
         {{- toYaml . | nindent 8 }}
diff --git a/charts/nextcloud/templates/service.yaml b/charts/nextcloud/templates/service.yaml
index 78ac3b99..003ac35b 100644
--- a/charts/nextcloud/templates/service.yaml
+++ b/charts/nextcloud/templates/service.yaml
@@ -9,6 +9,7 @@ metadata:
   {{- end }}
   labels:
     {{- include "nextcloud.labels"  ( dict "component" "app"  "rootContext" $ ) | nindent 4 }}
+    app.kubernetes.io/monitor: enabled
 spec:
   type: {{ .Values.service.type }}
   {{- if (eq .Values.service.type "LoadBalancer") }}
@@ -31,14 +32,12 @@ spec:
     {{- toYaml . | nindent 4 }}
   {{- end }}
   ports:
-    - port: {{ .Values.service.port }}
+    - name: http
+      port: {{ .Values.service.port }}
       targetPort: {{ .Values.nextcloud.containerPort }}
       protocol: TCP
-      name: http
       {{- with .Values.service.nodePort }}
       nodePort: {{ . }}
       {{- end }}
   selector:
-    app.kubernetes.io/name: {{ include "nextcloud.name" . }}
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/component: app
+    {{- include "nextcloud.selectorLabels"  ( dict "component" "app"  "rootContext" $ ) | nindent 4 }}
diff --git a/charts/nextcloud/templates/servicemonitor.yaml b/charts/nextcloud/templates/servicemonitor.yaml
new file mode 100644
index 00000000..3802bf1a
--- /dev/null
+++ b/charts/nextcloud/templates/servicemonitor.yaml
@@ -0,0 +1,37 @@
+{{- with .Values.prometheus.serviceMonitor }}
+{{- if .enabled }}
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: {{ template "nextcloud.fullname" $ }}
+  namespace: {{ .namespace | default $.Release.Namespace | quote }}
+  labels:
+    {{- include "nextcloud.labels"  ( dict "rootContext" $ ) | nindent 4 }}
+    {{- with .labels }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+spec:
+  jobLabel: {{ .jobLabel | quote }}
+  selector:
+    matchLabels:
+      {{- include "nextcloud.selectorLabels"  ( dict "rootContext" $ ) | nindent 6 }}
+      app.kubernetes.io/monitor: enabled
+  namespaceSelector:
+    {{- with .namespaceSelector }}
+    {{- toYaml . | nindent 4 }}
+    {{- else }}
+    matchNames:
+      - {{ $.Release.Namespace | quote }}
+    {{- end }}
+  endpoints:
+    - port: http
+      path: "/metrics"
+      {{- with .interval }}
+      interval: {{ . }}
+      {{- end }}
+      {{- with .scrapeTimeout }}
+      scrapeTimeout: {{ . }}
+      {{- end }}
+{{- end }}
+{{- end }}
diff --git a/charts/nextcloud/values.yaml b/charts/nextcloud/values.yaml
index fa9b9125..33819fcd 100644
--- a/charts/nextcloud/values.yaml
+++ b/charts/nextcloud/values.yaml
@@ -225,6 +225,11 @@ nextcloud:
       container: ""
       # autocreate container
       autoCreate: false
+  openmetrics:
+    allowedClients:
+      - "127.0.0.1"
+      - "10.42.0.0/16"
+      - "10.43.0.0/16"
 
   ## PHP Configuration files
   # Will be injected in /usr/local/etc/php/conf.d for apache image and in /usr/local/etc/php-fpm.d when nginx.enabled: true
@@ -256,6 +261,8 @@ nextcloud:
     swift.config.php: true
     # disables the web based updater as the default nextcloud docker image does not support it
     upgrade-disable-web.config.php: true
+    # -- adjust openmetrics
+    helm-metrics.php: true
     # -- imaginary support config
     imaginary.config.php: false
 
@@ -1017,8 +1024,9 @@ metrics:
   # seccompProfile:
   #   type: RuntimeDefault
 
+prometheus:
   ## Prometheus Operator ServiceMonitor configuration
-  ##
+  ## collects data from nextcloud openmetrics and nextcloud-exporter if enabled
   serviceMonitor:
     ## @param metrics.serviceMonitor.enabled Create ServiceMonitor Resource for scraping metrics using PrometheusOperator
     ##

From b16f6527cebbf8715a1df7d60aedcf599081ebfc Mon Sep 17 00:00:00 2001
From: V Aretakis <vassilis@aretakis.eu>
Date: Sun, 8 Mar 2026 07:32:06 +0200
Subject: [PATCH 3/3] Bump Nextcloud version to 9.0.1

Signed-off-by: V Aretakis <vassilis@aretakis.eu>
---
 charts/nextcloud/Chart.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/charts/nextcloud/Chart.yaml b/charts/nextcloud/Chart.yaml
index 2645b174..122626aa 100644
--- a/charts/nextcloud/Chart.yaml
+++ b/charts/nextcloud/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: nextcloud
-version: 9.0.0
+version: 9.0.1
 # renovate: image=docker.io/library/nextcloud
 appVersion: 33.0.0
 description: A file sharing server that puts the control and security of your own data back into your hands.