From 09509130e32e4a11fc900c406b0ce3483a693ab4 Mon Sep 17 00:00:00 2001
From: szaimen <42591237+szaimen@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:35:23 +0000
Subject: [PATCH] Yaml updates

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 manual-install/latest.yml  | 39 ++++++++++++++++++++++++++++++++++++++
 manual-install/sample.conf |  2 ++
 2 files changed, 41 insertions(+)

diff --git a/manual-install/latest.yml b/manual-install/latest.yml
index 0d1411d7..12b59ace 100644
--- a/manual-install/latest.yml
+++ b/manual-install/latest.yml
@@ -19,6 +19,9 @@ services:
       nextcloud-aio-whiteboard:
         condition: service_started
         required: false
+      nextcloud-aio-harp:
+        condition: service_started
+        required: false
       nextcloud-aio-nextcloud:
         condition: service_started
         required: false
@@ -50,6 +53,7 @@ services:
       - APACHE_MAX_TIME=${NEXTCLOUD_MAX_TIME}
       - NOTIFY_PUSH_HOST=nextcloud-aio-notify-push
       - WHITEBOARD_HOST=nextcloud-aio-whiteboard
+      - HARP_HOST=nextcloud-aio-harp
     volumes:
       - nextcloud_aio_nextcloud:/var/www/html:ro
       - nextcloud_aio_apache:/mnt/data:rw
@@ -193,6 +197,7 @@ services:
       - IMAGINARY_SECRET
       - WHITEBOARD_SECRET
       - WHITEBOARD_ENABLED
+      - HARP_ENABLED
     stop_grace_period: 600s
     restart: unless-stopped
     shm_size: 134217728
@@ -434,6 +439,7 @@ services:
       - JWT_SECRET=${EUROOFFICE_SECRET}
     volumes:
       - nextcloud_aio_eurooffice:/var/lib/euro-office:rw
+      - nextcloud_aio_eurooffice_data:/var/www/euro-office/Data:rw
     restart: unless-stopped
     profiles:
       - eurooffice
@@ -504,6 +510,35 @@ services:
     cap_drop:
       - NET_RAW
 
+  nextcloud-aio-harp:
+    image: ghcr.io/nextcloud-releases/aio-harp:latest
+    init: true
+    expose:
+      - "8780"
+    healthcheck:
+      start_period: 0s
+      test: /healthcheck.sh
+      interval: 10s
+      timeout: 10s
+      start_interval: 5s
+      retries: 9
+    environment:
+      - NC_INSTANCE_URL=https://${NC_DOMAIN}
+      - HP_FRP_DISABLE_TLS=true
+      - TZ=${TIMEZONE}
+    volumes:
+      - ${WATCHTOWER_DOCKER_SOCKET_PATH}:/var/run/docker.sock:ro
+      - nextcloud_aio_harp:/certs:rw
+    restart: unless-stopped
+    read_only: true
+    tmpfs:
+      - /tmp
+      - /run/harp
+    cap_drop:
+      - NET_RAW
+    profiles:
+      - harp
+
   nextcloud-aio-whiteboard:
     image: ghcr.io/nextcloud-releases/aio-whiteboard:latest
     user: "65534"
@@ -549,6 +584,10 @@ volumes:
     name: nextcloud_aio_elasticsearch
   nextcloud_aio_eurooffice:
     name: nextcloud_aio_eurooffice
+  nextcloud_aio_eurooffice_data:
+    name: nextcloud_aio_eurooffice_data
+  nextcloud_aio_harp:
+    name: nextcloud_aio_harp
   nextcloud_aio_nextcloud:
     name: nextcloud_aio_nextcloud
   nextcloud_aio_onlyoffice:
diff --git a/manual-install/sample.conf b/manual-install/sample.conf
index d4da3604..5efd84fa 100644
--- a/manual-install/sample.conf
+++ b/manual-install/sample.conf
@@ -17,6 +17,7 @@ CLAMAV_ENABLED="no"          # Setting this to "yes" (with quotes) enables the o
 COLLABORA_ENABLED="no"          # Setting this to "yes" (with quotes) enables the option in Nextcloud automatically.
 EUROOFFICE_ENABLED="no"          # Setting this to "yes" (with quotes) enables the option in Nextcloud automatically.
 FULLTEXTSEARCH_ENABLED="no"          # Setting this to "yes" (with quotes) enables the option in Nextcloud automatically.
+HARP_ENABLED="no"          # Setting this to "yes" (with quotes) enables the option in Nextcloud automatically.
 IMAGINARY_ENABLED="no"          # Setting this to "yes" (with quotes) enables the option in Nextcloud automatically.
 ONLYOFFICE_ENABLED="no"          # Setting this to "yes" (with quotes) enables the option in Nextcloud automatically.
 TALK_ENABLED="no"          # Setting this to "yes" (with quotes) enables the option in Nextcloud automatically.
@@ -43,3 +44,4 @@ NEXTCLOUD_UPLOAD_LIMIT=16G          # This allows to change the upload limit of
 REMOVE_DISABLED_APPS=yes        # Setting this to no keep Nextcloud apps that are disabled via their switch and not uninstall them if they should be installed in Nextcloud.
 TALK_PORT=3478          # This allows to adjust the port that the talk container is using. It should be set to something higher than 1024! Otherwise it might not work!
 UPDATE_NEXTCLOUD_APPS="no"          # When setting to "yes" (with quotes), it will automatically update all installed Nextcloud apps upon container startup on saturdays.
+WATCHTOWER_DOCKER_SOCKET_PATH=/var/run/docker.sock          # This can be changed depending on where the docker socket is located on your host