k8s-server-projects/HelmCharts/collabora-chart/templates/collabora-deployment.yaml

apiVersion: v1
kind: Service
metadata:
  name: collabora-server
  namespace: collabora
  labels:
    app: collabora
spec:
  selector:
    app: collabora
  type: NodePort
  ports:
    - port: 9980
      nodePort: 30980
      targetPort: cool
      name: cool
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: collabora-server
  namespace: collabora
  labels:
    app: collabora
spec:
  replicas: 1
  selector:
    matchLabels:
      app: collabora
  template:
    metadata:
      labels:
        app: collabora
    spec:
      containers:
      - name: collabora
        image: collabora/code:latest
        imagePullPolicy: IfNotPresent
        securityContext:
          privileged: true # CODE necesita privilegios para el sandbox (kit jail)
        ports:
        - containerPort: 9980
          name: cool
        env:
        - name: username
          value: "admin"
        - name: password
          valueFrom:
            secretKeyRef:
              name: collabora-creds
              key: admin-pass
        - name: server_name
          value: "collabora.reymota.es"
        # Host que puede usar Collabora (tu Nextcloud). Añade más aliases si hace falta
        - name: aliasgroup1
          value: "https://nextcloud.reymota.es"
        # TLS lo gestiona el nginx externo, no Collabora
        - name: DONT_EXIT_ON_SSL_ERROR
          value: "true"
        - name: extra_params
          value: "--o:ssl.enable=false --o:ssl.termination=true --o:welcome.enable=false"
        - name: dictionaries
          value: "es_ES en_GB en_US"
        - name: TZ
          value: "Europe/Madrid"
        resources:
          requests:
            cpu: 500m
            memory: 1Gi
          limits:
            memory: 2Gi
        volumeMounts:
        - name: config
          mountPath: /opt/coolwsd
      volumes:
      - name: config
        persistentVolumeClaim:
          claimName: collabora-config-claim