C

caddy

Ansible automation to deploy Nextcloud on Debian 13/Proxmox — rootless Podman + Quadlet app tier behind a rootful gVisor-sandboxed Caddy + Coraza WAF edge, mTLS between tiers

Ansible: self-hosted ownCloud Infinite Scale (oCIS) on Debian 13 - rootless Podman/Quadlet, Caddy edge, optional Collabora + ClamAV, adopts the acidnetworks base/hardening collections.

Ansible: self-hosted Seafile (Pro/CE) on Debian 13 - rootless Podman/Quadlet stack, Caddy TLS proxy, optional LDAP/AD, adopts the acidnetworks base/hardening collections.

Ansible: self-hosted Ente Photos (E2E) on Debian 13 - rootless Podman/Quadlet app tier, MinIO storage, gVisor + Coraza WAF edge, adopts the acidnetworks base/hardening collections.

Ansible: self-hosted Immich (photos) on Debian 13 - rootless Podman/Quadlet app tier, gVisor + Coraza WAF Caddy edge, adopts the acidnetworks base/hardening collections.