Add Nextcloud deployment and configuration

- Introduced Nextcloud module with Kubernetes resources including deployment, service, ingress, and cron job.
- Configured Apache settings for Nextcloud with SSL support and compression.
- Created secrets for mail and admin credentials.
- Added necessary environment variables for Nextcloud configuration.
- Removed unused Scaleway access and secret keys from secrets and variables.
- Updated CoreDNS module to support custom host overrides.
- Implemented backup bucket policies and lifecycle rules for Scaleway object storage.
- Enhanced IAM policies and applications for backup and email services.
- Added outputs for backup bucket and API keys.

terraform/modules/apps/nginx-reverse-proxy/main.tf

@@ -136,12 +136,14 @@ resource "kubernetes_ingress_v1" "reverse-proxy_ingress" {
       "kubernetes.io/ingress.class"    = "public"
       "cert-manager.io/cluster-issuer" = "letsencrypt-prod"
       },
+      each.value.custom_ingress_annotations,
       each.value.tls ? {
         "nginx.org/ssl-services"                       = format("reverse-proxy-%s", replace(each.key, ".", "-"))
         "nginx.org/ssl-redirect"                       = "true"
         "nginx.org/redirect-to-https"                  = "true"
         "nginx.ingress.kubernetes.io/backend-protocol" = "HTTPS"
-    } : {})
+      } : {}
+    )
   }
   spec {
     tls {

terraform/modules/apps/nginx-reverse-proxy/variables.tf

@@ -29,13 +29,15 @@ variable "issuer_name" {
 variable "services" {
   description = "A list of services to be deployed"
   type = map(object({
-    fqdn            = list(string)
-    upstream        = optional(string, "")
-    resolver        = optional(string, "")
-    default_headers = optional(map(string), {}),
-    http_port       = optional(number, 80)
-    https_port      = optional(number, 443)
-    tls             = optional(bool, false)
+    fqdn                       = list(string)
+    custom_ingress_annotations = optional(map(string), {})
+    annotations                = optional(map(string), {})
+    upstream                   = optional(string, "")
+    resolver                   = optional(string, "")
+    default_headers            = optional(map(string), {}),
+    http_port                  = optional(number, 80)
+    https_port                 = optional(number, 443)
+    tls                        = optional(bool, false)
     locations = optional(list(object({
       path     = string,
       headers  = optional(map(string), {}),