diff --git a/apps/nextcloud/collabora.tf b/apps/nextcloud/collabora.tf
index 4ef7a7b..0aac51d 100644
--- a/apps/nextcloud/collabora.tf
+++ b/apps/nextcloud/collabora.tf
@@ -81,6 +81,11 @@ resource "kubectl_manifest" "collabora_deploy" {
               httpGet:
                 path: /
                 port: http
+            securitycontext:
+              allowPrivilegeEscalation: true
+              capabilities:
+                add:
+                - MKNOD
   EOF
 }
 
diff --git a/apps/nextcloud/index.yaml b/apps/nextcloud/index.yaml
index adfdbb1..4af813b 100644
--- a/apps/nextcloud/index.yaml
+++ b/apps/nextcloud/index.yaml
@@ -11,16 +11,54 @@ options:
     examples:
     - your_company.com
     type: string
-  domain:
-    default: your-company
+  redis:
+    default:
+      exporter:
+        enabled: true
+        image: quay.io/opstree/redis-exporter:v1.44.0
+      image: quay.io/opstree/redis:v7.0.5
+      storage: 2Gi
     examples:
-    - your-company
+    - exporter:
+        enabled: true
+        image: quay.io/opstree/redis-exporter:v1.44.0
+      image: quay.io/opstree/redis:v7.0.5
+      storage: 2Gi
+    properties:
+      exporter:
+        default:
+          enabled: true
+          image: quay.io/opstree/redis-exporter:v1.44.0
+        properties:
+          enabled:
+            default: true
+            type: boolean
+          image:
+            default: quay.io/opstree/redis-exporter:v1.44.0
+            type: string
+        type: object
+      image:
+        default: quay.io/opstree/redis:v7.0.5
+        type: string
+      storage:
+        default: 2Gi
+        type: string
+    type: object
+  ingress-class:
+    default: traefik
+    examples:
+    - traefik
     type: string
   sub-domain:
     default: files
     examples:
     - files
     type: string
+  issuer:
+    default: letsencrypt-prod
+    examples:
+    - letsencrypt-prod
+    type: string
   images:
     default:
       collabora:
@@ -184,62 +222,29 @@ options:
             type: string
         type: object
     type: object
-  hpa:
-    default:
-      avg-cpu: 50
-      max-replicas: 5
-      min-replicas: 1
+  domain:
+    default: your-company
     examples:
-    - avg-cpu: 50
-      max-replicas: 5
-      min-replicas: 1
+    - your-company
+    type: string
+  postgres:
+    default:
+      replicas: 1
+      storage: 5Gi
+      version: '14'
+    examples:
+    - replicas: 1
+      storage: 5Gi
+      version: '14'
     properties:
-      avg-cpu:
-        default: 50
-        type: integer
-      max-replicas:
-        default: 5
-        type: integer
-      min-replicas:
+      replicas:
         default: 1
         type: integer
-    type: object
-  openid-name:
-    default: vynil
-    examples:
-    - vynil
-    type: string
-  redis:
-    default:
-      exporter:
-        enabled: true
-        image: quay.io/opstree/redis-exporter:v1.44.0
-      image: quay.io/opstree/redis:v7.0.5
-      storage: 2Gi
-    examples:
-    - exporter:
-        enabled: true
-        image: quay.io/opstree/redis-exporter:v1.44.0
-      image: quay.io/opstree/redis:v7.0.5
-      storage: 2Gi
-    properties:
-      exporter:
-        default:
-          enabled: true
-          image: quay.io/opstree/redis-exporter:v1.44.0
-        properties:
-          enabled:
-            default: true
-            type: boolean
-          image:
-            default: quay.io/opstree/redis-exporter:v1.44.0
-            type: string
-        type: object
-      image:
-        default: quay.io/opstree/redis:v7.0.5
-        type: string
       storage:
-        default: 2Gi
+        default: 5Gi
+        type: string
+      version:
+        default: '14'
         type: string
     type: object
   storage:
@@ -261,6 +266,26 @@ options:
         default: 10Gi
         type: string
     type: object
+  hpa:
+    default:
+      avg-cpu: 50
+      max-replicas: 5
+      min-replicas: 1
+    examples:
+    - avg-cpu: 50
+      max-replicas: 5
+      min-replicas: 1
+    properties:
+      avg-cpu:
+        default: 50
+        type: integer
+      max-replicas:
+        default: 5
+        type: integer
+      min-replicas:
+        default: 1
+        type: integer
+    type: object
   admin:
     default:
       name: nextcloud_admin
@@ -271,6 +296,11 @@ options:
         default: nextcloud_admin
         type: string
     type: object
+  openid-name:
+    default: vynil
+    examples:
+    - vynil
+    type: string
   apps:
     default:
       calendar: false
@@ -321,36 +351,6 @@ options:
         default: false
         type: boolean
     type: object
-  postgres:
-    default:
-      replicas: 1
-      storage: 5Gi
-      version: '14'
-    examples:
-    - replicas: 1
-      storage: 5Gi
-      version: '14'
-    properties:
-      replicas:
-        default: 1
-        type: integer
-      storage:
-        default: 5Gi
-        type: string
-      version:
-        default: '14'
-        type: string
-    type: object
-  ingress-class:
-    default: traefik
-    examples:
-    - traefik
-    type: string
-  issuer:
-    default: letsencrypt-prod
-    examples:
-    - letsencrypt-prod
-    type: string
 dependencies: []
 providers:
   kubernetes: true