diff --git a/.codacy.yml b/.codacy.yml
index 300fbf2472..4393d5f7d2 100644
--- a/.codacy.yml
+++ b/.codacy.yml
@@ -13,5 +13,6 @@ exclude_paths:
   - 'accounts/rollup.config.js'
   - 'ocis/docker/eos-ocis/Dockerfile'
   - 'ocis/docker/eos-ocis-dev/Dockerfile'
+  - 'deployments/**'
 
 ...
diff --git a/deployments/examples/ocis_external_konnectd/idpnode/docker-compose.yml b/deployments/examples/ocis_external_konnectd/idpnode/docker-compose.yml
index 5e4f8c0437..56b7762577 100644
--- a/deployments/examples/ocis_external_konnectd/idpnode/docker-compose.yml
+++ b/deployments/examples/ocis_external_konnectd/idpnode/docker-compose.yml
@@ -8,15 +8,16 @@ services:
     networks:
       - idpnet
     command:
-      - "--api.insecure=true"
       - "--providers.docker=true"
       - "--providers.docker.exposedbydefault=false"
+      - "--entrypoints.web.address=:80"
       - "--entrypoints.websecure.address=:443"
       - "--certificatesresolvers.idp.acme.tlschallenge=true"
       - "--certificatesresolvers.idp.acme.caserver=https://acme-v02.api.letsencrypt.org/directory"
       - "--certificatesresolvers.idp.acme.email=postmaster@${IDP_DOMAIN}"
       - "--certificatesresolvers.idp.acme.storage=/letsencrypt/acme.json"
     ports:
+      - "80:80"
       - "443:443"
       - "8080:8080"
     volumes:
@@ -51,9 +52,16 @@ services:
       LDAP_FILTER: (objectClass=posixaccount)
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.idp.rule=Host(`${IDP_DOMAIN}`)"
-      - "traefik.http.routers.idp.entrypoints=websecure"
-      - "traefik.http.routers.idp.tls.certresolver=idp"
+      - "traefik.http.services.idp.loadbalancer.server.port=9200"
       - "traefik.docker.network=idpnet"
       - "traefik.port=9130"
       - "traefik.protocol=https"
+      # ssl config
+      - "traefik.http.routers.idp.rule=Host(`${IDP_DOMAIN}`)"
+      - "traefik.http.routers.idp.entrypoints=websecure"
+      - "traefik.http.routers.idp.tls.certresolver=idp"
+      # http -> https forwarding
+      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
+      - "traefik.http.routers.idp-redirs.rule=Host(`${IDP_DOMAIN}`)"
+      - "traefik.http.routers.idp-redirs.entrypoints=web"
+      - "traefik.http.routers.idp-redirs.middlewares=redirect-to-https"
diff --git a/deployments/examples/ocis_external_konnectd/ocisnode/docker-compose.yml b/deployments/examples/ocis_external_konnectd/ocisnode/docker-compose.yml
index 7655dfc544..2fe66957a3 100644
--- a/deployments/examples/ocis_external_konnectd/ocisnode/docker-compose.yml
+++ b/deployments/examples/ocis_external_konnectd/ocisnode/docker-compose.yml
@@ -11,12 +11,14 @@ services:
       - "--api.insecure=true"
       - "--providers.docker=true"
       - "--providers.docker.exposedbydefault=false"
+      - "--entrypoints.web.address=:80"
       - "--entrypoints.websecure.address=:443"
       - "--certificatesresolvers.ocis.acme.tlschallenge=true"
       - "--certificatesresolvers.ocis.acme.caserver=https://acme-v02.api.letsencrypt.org/directory"
       - "--certificatesresolvers.ocis.acme.email=postmaster@${OCIS_DOMAIN}"
       - "--certificatesresolvers.ocis.acme.storage=/letsencrypt/acme.json"
     ports:
+      - "80:80"
       - "443:443"
       - "8080:8080"
     volumes:
@@ -52,10 +54,15 @@ services:
       REVA_DATAGATEWAY_URL: https://${OCIS_DOMAIN}/data
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN}`)"
-      - "traefik.http.routers.ocis.entrypoints=websecure"
-      - "traefik.http.routers.ocis.tls.certresolver=ocis"
       - "traefik.http.services.ocis.loadbalancer.server.port=9200"
       - "traefik.docker.network=ocisnet"
-      - "traefik.port=9200"
       - "traefik.protocol=https"
+      # ssl config
+      - "traefik.http.routers.idp.rule=Host(`${OCIS_DOMAIN}`)"
+      - "traefik.http.routers.ocis.entrypoints=websecure"
+      - "traefik.http.routers.ocis.tls.certresolver=idp"
+      # http -> https forwarding
+      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
+      - "traefik.http.routers.ocis-redirs.rule=Host(`${OCIS_DOMAIN}`)"
+      - "traefik.http.routers.ocis-redirs.entrypoints=web"
+      - "traefik.http.routers.ocis-redirs.middlewares=redirect-to-https"
diff --git a/deployments/examples/ocis_oc10_backend/docker-compose.yml b/deployments/examples/ocis_oc10_backend/docker-compose.yml
index f5194dc4d3..d23f20f608 100644
--- a/deployments/examples/ocis_oc10_backend/docker-compose.yml
+++ b/deployments/examples/ocis_oc10_backend/docker-compose.yml
@@ -17,10 +17,11 @@ services:
     image: "traefik:v2.2"
     container_name: "traefik"
     command:
-      - "--api.insecure=true"
       - "--providers.docker=true"
       - "--providers.docker.exposedbydefault=false"
+      - "--entrypoints.web.address=:80"
       - "--entrypoints.websecure.address=:443"
+      - "--serverstransport.insecureskipverify=true"
       # Ocis certificate resolver
       - "--certificatesresolvers.ocis.acme.tlschallenge=true"
       - "--certificatesresolvers.ocis.acme.caserver=https://acme-v02.api.letsencrypt.org/directory"
@@ -71,12 +72,18 @@ services:
       - tmp:/tmp/shared
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.oc10.rule=Host(`${OC10_DOMAIN}`)"
-      - "traefik.http.routers.oc10.entrypoints=websecure"
-      - "traefik.http.routers.oc10.tls.certresolver=oc10"
       - "traefik.http.services.oc10.loadbalancer.server.port=8080"
       - "traefik.docker.network=ocisnet"
       - "traefik.protocol=https"
+      # ssl config
+      - "traefik.http.routers.oc10.rule=Host(`${OC10_DOMAIN}`)"
+      - "traefik.http.routers.oc10.entrypoints=websecure"
+      - "traefik.http.routers.oc10.tls.certresolver=oc10"
+      # http -> https forwarding
+      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
+      - "traefik.http.routers.oc10-redirs.rule=Host(`${OC10_DOMAIN}`)"
+      - "traefik.http.routers.oc10-redirs.entrypoints=web"
+      - "traefik.http.routers.oc10-redirs.middlewares=redirect-to-https"
 
   ocis:
     image: owncloud/ocis:latest
@@ -84,7 +91,7 @@ services:
       - 9200:9200
     environment:
       OCIS_DOMAIN: ${OCIS_DOMAIN}
-      PROXY_CONFIG_FILE: "/etc/ocis/proxy.json"
+      PROXY_CONFIG_FILE: "/config/proxy-config.json"
       PROXY_TLS: "false"
       PROXY_OIDC_ISSUER: https://${OCIS_DOMAIN}
       PROXY_OIDC_INSECURE: "true"
@@ -97,18 +104,15 @@ services:
       PHOENIX_OIDC_AUTHORITY: https://${OCIS_DOMAIN}
       PHOENIX_OIDC_METADATA_URL: https://${OCIS_DOMAIN}/.well-known/openid-configuration
       PHOENIX_WEB_CONFIG_SERVER: https://${OCIS_DOMAIN}
+      PHOENIX_WEB_CONFIG: "/config/web/config.json"
       STORAGE_OIDC_ISSUER: https://${OCIS_DOMAIN}
       STORAGE_TRANSFER_EXPIRES: 86400
       STORAGE_FRONTEND_URL: https://${OCIS_DOMAIN}
       STORAGE_DATAGATEWAY_URL: https://${OCIS_DOMAIN}/data
       STORAGE_LDAP_IDP: https://${OCIS_DOMAIN}
-      STORAGE_STORAGE_METADATA_PROVIDER_DRIVER: owncloud # Storage fails start up if backend owncloud is selected and this env vars isn't set
-      STORAGE_STORAGE_METADATA_DATA_PROVIDER_DRIVER: owncloud # Storage fails start up if backend owncloud is selected and this env vars isn't set
       GLAUTH_BACKEND_DATASTORE: owncloud
       GLAUTH_BACKEND_SERVERS: https://${OC10_DOMAIN}/apps/graphapi/v1.0
       GLAUTH_BACKEND_BASEDN: dc=example,dc=org
-      ACCOUNTS_STORAGE_DISK_PATH: /var/tmp/ocis-accounts # Accounts fails to start when cs3 backend is used atm
-      # Konnectd ldap setup
       LDAP_URI: ldap://localhost:9125
       LDAP_BINDDN: "cn=admin,dc=example,dc=org"
       LDAP_BINDPW: "admin"
@@ -125,12 +129,18 @@ services:
       - ./ocis/proxy-config.json:/etc/ocis/proxy.json
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN}`)"
-      - "traefik.http.routers.ocis.entrypoints=websecure"
-      - "traefik.http.routers.ocis.tls.certresolver=ocis"
       - "traefik.http.services.ocis.loadbalancer.server.port=9200"
       - "traefik.docker.network=ocisnet"
       - "traefik.protocol=https"
+      # ssl config
+      - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN}`)"
+      - "traefik.http.routers.ocis.entrypoints=websecure"
+      - "traefik.http.routers.ocis.tls.certresolver=ocis"
+      # http -> https forwarding
+      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
+      - "traefik.http.routers.ocis-redirs.rule=Host(`${OCIS_DOMAIN}`)"
+      - "traefik.http.routers.ocis-redirs.entrypoints=web"
+      - "traefik.http.routers.ocis-redirs.middlewares=redirect-to-https"
 
   db:
     image: webhippie/mariadb:latest
diff --git a/deployments/examples/ocis_oc10_backend/oc10/Dockerfile b/deployments/examples/ocis_oc10_backend/oc10/Dockerfile
index a39b1fbd8f..a5a7163596 100644
--- a/deployments/examples/ocis_oc10_backend/oc10/Dockerfile
+++ b/deployments/examples/ocis_oc10_backend/oc10/Dockerfile
@@ -1,3 +1,3 @@
-FROM owncloud/server:10
+FROM owncloud/server:10.6.0-beta1
 ADD apps/graphapi-0.1.0.tar.gz /var/www/owncloud/apps/
 COPY overlay /
diff --git a/deployments/examples/ocis_oc10_backend/oc10/overlay/etc/templates/config.php b/deployments/examples/ocis_oc10_backend/oc10/overlay/etc/templates/config.php
new file mode 100644
index 0000000000..3c1baf991a
--- /dev/null
+++ b/deployments/examples/ocis_oc10_backend/oc10/overlay/etc/templates/config.php
@@ -0,0 +1,555 @@
+<?php
+
+function getConfigFromEnv() {
+  if (isset($_SERVER['HTTP_X_FORWARDED_HOST'])) {
+    $domain = trim(
+      explode(
+        ",",
+        $_SERVER['HTTP_X_FORWARDED_HOST']
+      )[0]
+    );
+  } else if (isset($_SERVER['SERVER_NAME'])) {
+    $domain = $_SERVER['SERVER_NAME'];
+  } else {
+    $domain = 'localhost';
+  }
+
+  $config = [
+    'apps_paths' => [
+      0 => [
+        "path" => OC::$SERVERROOT . "/apps",
+        "url" => "/apps",
+        "writable" => false
+      ],
+      1 => [
+        "path" => OC::$SERVERROOT . "/custom",
+        "url" => "/custom",
+        "writable" => true
+      ]
+    ],
+
+    'trusted_domains' => [
+      0 => $domain
+    ],
+    'openid-connect' => [
+        'provider-url' => 'https://${OCIS_DOMAIN}',
+        'client-id' => 'oc10',
+        'client-secret' => 'super',
+        'loginButtonName' => 'OpenId Connect',
+        'search-attribute' => 'preferred_username',
+        'mode' => 'userid',
+      ],
+    'datadirectory' => getenv('OWNCLOUD_VOLUME_FILES'),
+    'dbtype' => getenv('OWNCLOUD_DB_TYPE'),
+    'dbhost' => getenv('OWNCLOUD_DB_HOST'),
+    'dbname' => getenv('OWNCLOUD_DB_NAME'),
+    'dbuser' => getenv('OWNCLOUD_DB_USERNAME'),
+    'dbpassword' => getenv('OWNCLOUD_DB_PASSWORD'),
+    'dbtableprefix' => getenv('OWNCLOUD_DB_PREFIX'),
+
+    'phoenix.baseUrl' => 'https://${OCIS_DOMAIN}',
+    'cors.allowed-domains' => ['https://${OCIS_DOMAIN}'],
+
+    'log_type' => 'owncloud',
+
+    'supportedDatabases' => [
+      'sqlite',
+      'mysql',
+      'pgsql',
+    ],
+
+    'upgrade.disable-web' => true,
+  ];
+
+  if (getenv('OWNCLOUD_CORS_ALLOWED_DOMAINS') != '') {
+    $config['cors.allowed-domains'] = explode(',', getenv('OWNCLOUD_CORS_ALLOWED_DOMAINS'));
+  }
+
+  if (getenv('OWNCLOUD_VERSION_HIDE') != '') {
+    $config['version.hide'] = getenv('OWNCLOUD_VERSION_HIDE') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_SHOW_SERVER_HOSTNAME') != '') {
+    $config['show_server_hostname'] = getenv('OWNCLOUD_SHOW_SERVER_HOSTNAME') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_DEFAULT_LANGUAGE') != '') {
+    $config['default_language'] = getenv('OWNCLOUD_DEFAULT_LANGUAGE');
+  }
+
+  if (getenv('OWNCLOUD_DEFAULT_APP') != '') {
+    $config['defaultapp'] = getenv('OWNCLOUD_DEFAULT_APP');
+  }
+
+  if (getenv('OWNCLOUD_KNOWLEDGEBASE_ENABLED') != '') {
+    $config['knowledgebaseenabled'] = getenv('OWNCLOUD_KNOWLEDGEBASE_ENABLED') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_ENABLE_AVATARS') != '') {
+    $config['enable_avatars'] = getenv('OWNCLOUD_ENABLE_AVATARS') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_ALLOW_USER_TO_CHANGE_DISPLAY_NAME') != '') {
+    $config['allow_user_to_change_display_name'] = getenv('OWNCLOUD_ALLOW_USER_TO_CHANGE_DISPLAY_NAME') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_REMEMBER_LOGIN_COOKIE_LIFETIME') != '') {
+    $config['remember_login_cookie_lifetime'] = (int) getenv('OWNCLOUD_REMEMBER_LOGIN_COOKIE_LIFETIME');
+  }
+
+  if (getenv('OWNCLOUD_SESSION_LIFETIME') != '') {
+    $config['session_lifetime'] = (int) getenv('OWNCLOUD_SESSION_LIFETIME');
+  }
+
+  if (getenv('OWNCLOUD_SESSION_KEEPALIVE') != '') {
+    $config['session_keepalive'] = getenv('OWNCLOUD_SESSION_KEEPALIVE') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_TOKEN_AUTH_ENFORCED') != '') {
+    $config['token_auth_enforced'] = getenv('OWNCLOUD_TOKEN_AUTH_ENFORCED') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_CSRF_DISABLED') != '') {
+    $config['csrf.disabled'] = getenv('OWNCLOUD_CSRF_DISABLED') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_SKELETON_DIRECTORY') != '') {
+    $config['skeletondirectory'] = getenv('OWNCLOUD_SKELETON_DIRECTORY');
+  }
+
+  if (getenv('OWNCLOUD_LOST_PASSWORD_LINK') != '') {
+    $config['lost_password_link'] = getenv('OWNCLOUD_LOST_PASSWORD_LINK');
+  }
+
+  if (getenv('OWNCLOUD_ACCOUNTS_ENABLE_MEDIAL_SEARCH') != '') {
+    $config['accounts.enable_medial_search'] = getenv('OWNCLOUD_ACCOUNTS_ENABLE_MEDIAL_SEARCH') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_USER_SEARCH_MIN_LENGTH') != '') {
+    $config['user.search_min_length'] = (int) getenv('OWNCLOUD_USER_SEARCH_MIN_LENGTH');
+  }
+
+  if (getenv('OWNCLOUD_MAIL_DOMAIN') != '') {
+    $config['mail_domain'] = getenv('OWNCLOUD_MAIL_DOMAIN');
+  }
+
+  if (getenv('OWNCLOUD_MAIL_FROM_ADDRESS') != '') {
+    $config['mail_from_address'] = getenv('OWNCLOUD_MAIL_FROM_ADDRESS');
+  }
+
+  if (getenv('OWNCLOUD_MAIL_SMTP_DEBUG') != '') {
+    $config['mail_smtpdebug'] = getenv('OWNCLOUD_MAIL_SMTP_DEBUG') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_MAIL_SMTP_MODE') != '') {
+    $config['mail_smtpmode'] = getenv('OWNCLOUD_MAIL_SMTP_MODE');
+  }
+
+  if (getenv('OWNCLOUD_MAIL_SMTP_HOST') != '') {
+    $config['mail_smtphost'] = getenv('OWNCLOUD_MAIL_SMTP_HOST');
+  }
+
+  if (getenv('OWNCLOUD_MAIL_SMTP_PORT') != '') {
+    $config['mail_smtpport'] = (int) getenv('OWNCLOUD_MAIL_SMTP_PORT');
+  }
+
+  if (getenv('OWNCLOUD_MAIL_SMTP_TIMEOUT') != '') {
+    $config['mail_smtptimeout'] = (int) getenv('OWNCLOUD_MAIL_SMTP_TIMEOUT');
+  }
+
+  if (getenv('OWNCLOUD_MAIL_SMTP_SECURE') != '') {
+    $config['mail_smtpsecure'] = getenv('OWNCLOUD_MAIL_SMTP_SECURE');
+  }
+
+  if (getenv('OWNCLOUD_MAIL_SMTP_AUTH') != '') {
+    $config['mail_smtpauth'] = getenv('OWNCLOUD_MAIL_SMTP_AUTH') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_MAIL_SMTP_AUTH_TYPE') != '') {
+    $config['mail_smtpauthtype'] = getenv('OWNCLOUD_MAIL_SMTP_AUTH_TYPE');
+  }
+
+  if (getenv('OWNCLOUD_MAIL_SMTP_NAME') != '') {
+    $config['mail_smtpname'] = getenv('OWNCLOUD_MAIL_SMTP_NAME');
+  }
+
+  if (getenv('OWNCLOUD_MAIL_SMTP_PASSWORD') != '') {
+    $config['mail_smtppassword'] = getenv('OWNCLOUD_MAIL_SMTP_PASSWORD');
+  }
+
+  if (getenv('OWNCLOUD_OVERWRITE_HOST') != '') {
+    $config['overwritehost'] = getenv('OWNCLOUD_OVERWRITE_HOST');
+  }
+
+  if (getenv('OWNCLOUD_OVERWRITE_PROTOCOL') != '') {
+    $config['overwriteprotocol'] = getenv('OWNCLOUD_OVERWRITE_PROTOCOL');
+  }
+
+  if (getenv('OWNCLOUD_OVERWRITE_WEBROOT') != '') {
+    $config['overwritewebroot'] = getenv('OWNCLOUD_OVERWRITE_WEBROOT');
+  }
+
+  if (getenv('OWNCLOUD_OVERWRITE_COND_ADDR') != '') {
+    $config['overwritecondaddr'] = getenv('OWNCLOUD_OVERWRITE_COND_ADDR');
+  }
+
+  if (getenv('OWNCLOUD_OVERWRITE_CLI_URL') != '') {
+    $config['overwrite.cli.url'] = getenv('OWNCLOUD_OVERWRITE_CLI_URL');
+  }
+
+  if (getenv('OWNCLOUD_HTACCESS_REWRITE_BASE') != '') {
+    $config['htaccess.RewriteBase'] = getenv('OWNCLOUD_HTACCESS_REWRITE_BASE');
+  }
+
+  if (getenv('OWNCLOUD_PROXY') != '') {
+    $config['proxy'] = getenv('OWNCLOUD_PROXY');
+  }
+
+  if (getenv('OWNCLOUD_PROXY_USERPWD') != '') {
+    $config['proxyuserpwd'] = getenv('OWNCLOUD_PROXY_USERPWD');
+  }
+
+  if (getenv('OWNCLOUD_TRASHBIN_RETENTION_OBLIGATION') != '') {
+    $config['trashbin_retention_obligation'] = getenv('OWNCLOUD_TRASHBIN_RETENTION_OBLIGATION');
+  }
+
+  if (getenv('OWNCLOUD_TRASHBIN_PURGE_LIMIT') != '') {
+    $config['trashbin_purge_limit'] = (int) getenv('OWNCLOUD_TRASHBIN_PURGE_LIMIT');
+  }
+
+  if (getenv('OWNCLOUD_VERSIONS_RETENTION_OBLIGATION') != '') {
+    $config['versions_retention_obligation'] = getenv('OWNCLOUD_VERSIONS_RETENTION_OBLIGATION');
+  }
+
+  if (getenv('OWNCLOUD_UPDATE_CHECKER') != '') {
+    $config['updatechecker'] = getenv('OWNCLOUD_UPDATE_CHECKER') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_UPDATER_SERVER_URL') != '') {
+    $config['updater.server.url'] = getenv('OWNCLOUD_UPDATER_SERVER_URL');
+  }
+
+  if (getenv('OWNCLOUD_HAS_INTERNET_CONNECTION') != '') {
+    $config['has_internet_connection'] = getenv('OWNCLOUD_HAS_INTERNET_CONNECTION') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_CHECK_FOR_WORKING_WELLKNOWN_SETUP') != '') {
+    $config['check_for_working_wellknown_setup'] = getenv('OWNCLOUD_CHECK_FOR_WORKING_WELLKNOWN_SETUP') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_OPERATION_MODE') != '') {
+    $config['operation.mode'] = getenv('OWNCLOUD_OPERATION_MODE');
+  }
+
+  if (getenv('OWNCLOUD_LOG_FILE') != '') {
+    $config['logfile'] = getenv('OWNCLOUD_LOG_FILE');
+  }
+
+  if (getenv('OWNCLOUD_LOG_LEVEL') != '') {
+    $config['loglevel'] = (int) getenv('OWNCLOUD_LOG_LEVEL');
+  }
+
+  if (getenv('OWNCLOUD_LOG_DATE_FORMAT') != '') {
+    $config['logdateformat'] = getenv('OWNCLOUD_LOG_DATE_FORMAT');
+  }
+
+  if (getenv('OWNCLOUD_LOG_TIMEZONE') != '') {
+    $config['logtimezone'] = getenv('OWNCLOUD_LOG_TIMEZONE');
+  }
+
+  if (getenv('OWNCLOUD_CRON_LOG') != '') {
+    $config['cron_log'] = getenv('OWNCLOUD_CRON_LOG') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_LOG_ROTATE_SIZE') != '') {
+    $config['log_rotate_size'] = (int) getenv('OWNCLOUD_LOG_ROTATE_SIZE');
+  }
+
+  if (getenv('OWNCLOUD_ENABLE_PREVIEWS') != '') {
+    $config['enable_previews'] = getenv('OWNCLOUD_ENABLE_PREVIEWS') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_PREVIEW_MAX_X') != '') {
+    $config['preview_max_x'] = (int) getenv('OWNCLOUD_PREVIEW_MAX_X');
+  }
+
+  if (getenv('OWNCLOUD_PREVIEW_MAX_Y') != '') {
+    $config['preview_max_y'] = (int) getenv('OWNCLOUD_PREVIEW_MAX_Y');
+  }
+
+  if (getenv('OWNCLOUD_PREVIEW_MAX_SCALE_FACTOR') != '') {
+    $config['preview_max_scale_factor'] = (int) getenv('OWNCLOUD_PREVIEW_MAX_SCALE_FACTOR');
+  }
+
+  if (getenv('OWNCLOUD_PREVIEW_MAX_FILESIZE_IMAGE') != '') {
+    $config['preview_max_filesize_image'] = getenv('OWNCLOUD_PREVIEW_MAX_FILESIZE_IMAGE');
+  }
+
+  if (getenv('OWNCLOUD_PREVIEW_LIBREOFFICE_PATH') != '') {
+    $config['preview_libreoffice_path'] = getenv('OWNCLOUD_PREVIEW_LIBREOFFICE_PATH');
+  }
+
+  if (getenv('OWNCLOUD_PREVIEW_OFFICE_CL_PARAMETERS') != '') {
+    $config['preview_office_cl_parameters'] = getenv('OWNCLOUD_PREVIEW_OFFICE_CL_PARAMETERS');
+  }
+
+  if (getenv('OWNCLOUD_ENABLED_PREVIEW_PROVIDERS') != '') {
+    $config['enabledPreviewProviders'] = explode(',', getenv('OWNCLOUD_ENABLED_PREVIEW_PROVIDERS'));
+  }
+
+  if (getenv('OWNCLOUD_COMMENTS_MANAGER_FACTORY') != '') {
+    $config['comments.managerFactory'] = getenv('OWNCLOUD_COMMENTS_MANAGER_FACTORY');
+  }
+
+  if (getenv('OWNCLOUD_SYSTEMTAGS_MANAGER_FACTORY') != '') {
+    $config['systemtags.managerFactory'] = getenv('OWNCLOUD_SYSTEMTAGS_MANAGER_FACTORY');
+  }
+
+  if (getenv('OWNCLOUD_MAINTENANCE') != '') {
+    $config['maintenance'] = getenv('OWNCLOUD_MAINTENANCE') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_SINGLEUSER') != '') {
+    $config['singleuser'] = getenv('OWNCLOUD_SINGLEUSER');
+  }
+
+  if (getenv('OWNCLOUD_ENABLE_CERTIFICATE_MANAGEMENT') != '') {
+    $config['enable_certificate_management'] = getenv('OWNCLOUD_ENABLE_CERTIFICATE_MANAGEMENT');
+  }
+
+  if (getenv('OWNCLOUD_MEMCACHE_LOCAL') != '') {
+    $config['memcache.local'] = getenv('OWNCLOUD_MEMCACHE_LOCAL');
+  }
+
+  if (getenv('OWNCLOUD_CACHE_PATH') != '') {
+    $config['cache_path'] = getenv('OWNCLOUD_CACHE_PATH');
+  }
+
+  if (getenv('OWNCLOUD_CACHE_CHUNK_GC_TTL') != '') {
+    $config['cache_chunk_gc_ttl'] = (int) getenv('OWNCLOUD_CACHE_CHUNK_GC_TTL');
+  }
+
+  if (getenv('OWNCLOUD_DAV_CHUNK_BASE_DIR') != '') {
+    $config['dav.chunk_base_dir'] = getenv('OWNCLOUD_DAV_CHUNK_BASE_DIR');
+  }
+
+  if (getenv('OWNCLOUD_SHARING_MANAGER_FACTORY') != '') {
+    $config['sharing.managerFactory'] = getenv('OWNCLOUD_SHARING_MANAGER_FACTORY');
+  }
+
+  if (getenv('OWNCLOUD_SHARING_FEDERATION_ALLOW_HTTP_FALLBACK') != '') {
+    $config['sharing.federation.allowHttpFallback'] = getenv('OWNCLOUD_SHARING_FEDERATION_ALLOW_HTTP_FALLBACK') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_SQLITE_JOURNAL_MODE') != '') {
+    $config['sqlite.journal_mode'] = getenv('OWNCLOUD_SQLITE_JOURNAL_MODE');
+  }
+
+  if (getenv('OWNCLOUD_MYSQL_UTF8MB4') != '') {
+    $config['mysql.utf8mb4'] = getenv('OWNCLOUD_MYSQL_UTF8MB4') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_TEMP_DIRECTORY') != '') {
+    $config['tempdirectory'] = getenv('OWNCLOUD_TEMP_DIRECTORY');
+  }
+
+  if (getenv('OWNCLOUD_HASHING_COST') != '') {
+    $config['hashingCost'] = (int) getenv('OWNCLOUD_HASHING_COST');
+  }
+
+  if (getenv('OWNCLOUD_BLACKLISTED_FILES') != '') {
+    $config['blacklisted_files'] = explode(',', getenv('OWNCLOUD_BLACKLISTED_FILES'));
+  }
+
+  if (getenv('OWNCLOUD_EXCLUDED_DIRECTORIES') != '') {
+    $config['excluded_directories'] = explode(',', getenv('OWNCLOUD_EXCLUDED_DIRECTORIES'));
+  }
+
+  if (getenv('OWNCLOUD_INTEGRITY_EXCLUDED_FILES') != '') {
+    $config['integrity.excluded.files'] = explode(',', getenv('OWNCLOUD_INTEGRITY_EXCLUDED_FILES'));
+  }
+
+  if (getenv('OWNCLOUD_INTEGRITY_IGNORE_MISSING_APP_SIGNATURE') != '') {
+    $config['integrity.ignore.missing.app.signature'] = explode(',', getenv('OWNCLOUD_INTEGRITY_IGNORE_MISSING_APP_SIGNATURE'));
+  }
+
+  if (getenv('OWNCLOUD_SHARE_FOLDER') != '') {
+    $config['share_folder'] = getenv('OWNCLOUD_SHARE_FOLDER');
+  }
+
+  if (getenv('OWNCLOUD_CIPHER') != '') {
+    $config['cipher'] = getenv('OWNCLOUD_CIPHER');
+  }
+
+  if (getenv('OWNCLOUD_MINIMUM_SUPPORTED_DESKTOP_VERSION') != '') {
+    $config['minimum.supported.desktop.version'] = getenv('OWNCLOUD_MINIMUM_SUPPORTED_DESKTOP_VERSION');
+  }
+
+  if (getenv('OWNCLOUD_QUOTA_INCLUDE_EXTERNAL_STORAGE') != '') {
+    $config['quota_include_external_storage'] = getenv('OWNCLOUD_QUOTA_INCLUDE_EXTERNAL_STORAGE') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_FILESYSTEM_CHECK_CHANGES') != '') {
+    $config['filesystem_check_changes'] = (int) getenv('OWNCLOUD_FILESYSTEM_CHECK_CHANGES');
+  }
+
+  if (getenv('OWNCLOUD_PART_FILE_IN_STORAGE') != '') {
+    $config['part_file_in_storage'] = getenv('OWNCLOUD_PART_FILE_IN_STORAGE') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_MOUNT_FILE') != '') {
+    $config['mount_file'] = getenv('OWNCLOUD_MOUNT_FILE');
+  }
+
+  if (getenv('OWNCLOUD_FILESYSTEM_CACHE_READONLY') != '') {
+    $config['filesystem_cache_readonly'] = getenv('OWNCLOUD_FILESYSTEM_CACHE_READONLY') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_SECRET') != '') {
+    $config['secret'] = getenv('OWNCLOUD_SECRET');
+  }
+
+  if (getenv('OWNCLOUD_TRUSTED_PROXIES') != '') {
+    $config['trusted_proxies'] = explode(',', getenv('OWNCLOUD_TRUSTED_PROXIES'));
+  }
+
+  if (getenv('OWNCLOUD_FORWARDED_FOR_HEADERS') != '') {
+    $config['forwarded_for_headers'] = explode(',', getenv('OWNCLOUD_FORWARDED_FOR_HEADERS'));
+  }
+
+  if (getenv('OWNCLOUD_MAX_FILESIZE_ANIMATED_GIFS_PUBLIC_SHARING') != '') {
+    $config['max_filesize_animated_gifs_public_sharing'] = (int) getenv('OWNCLOUD_MAX_FILESIZE_ANIMATED_GIFS_PUBLIC_SHARING');
+  }
+
+  if (getenv('OWNCLOUD_FILELOCKING_ENABLED') != '') {
+    $config['filelocking.enabled'] = getenv('OWNCLOUD_FILELOCKING_ENABLED') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_FILELOCKING_TTL') != '') {
+    $config['filelocking.ttl'] = getenv('OWNCLOUD_FILELOCKING_TTL');
+  }
+
+  if (getenv('OWNCLOUD_MEMCACHE_LOCKING') != '') {
+    $config['memcache.locking'] = getenv('OWNCLOUD_MEMCACHE_LOCKING');
+  }
+
+  if (getenv('OWNCLOUD_UPGRADE_AUTOMATIC_APP_UPDATES') != '') {
+    $config['upgrade.automatic-app-update'] = getenv('OWNCLOUD_UPGRADE_AUTOMATIC_APP_UPDATES') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_DEBUG') != '') {
+    $config['debug'] = getenv('OWNCLOUD_DEBUG') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_FILES_EXTERNAL_ALLOW_NEW_LOCAL') != '') {
+    $config['files_external_allow_create_new_local'] = getenv('OWNCLOUD_FILES_EXTERNAL_ALLOW_NEW_LOCAL') == 'true';
+  }
+
+  if (getenv('OWNCLOUD_SMB_LOGGING_ENABLE') != '') {
+    $config['smb.logging.enable'] = getenv('OWNCLOUD_SMB_LOGGING_ENABLE');
+  }
+
+  if (getenv('OWNCLOUD_DAV_ENABLE_ASYNC') != '') {
+    $config['dav.enable.async'] = getenv('OWNCLOUD_DAV_ENABLE_ASYNC');
+  }
+
+  if (getenv('OWNCLOUD_LICENSE_KEY') != '') {
+    $config['license-key'] = getenv('OWNCLOUD_LICENSE_KEY');
+  }
+
+  if (getenv('OWNCLOUD_MARKETPLACE_KEY') != '') {
+    $config['marketplace.key'] = getenv('OWNCLOUD_MARKETPLACE_KEY');
+  }
+
+  if (getenv('OWNCLOUD_MARKETPLACE_CA') != '') {
+    $config['marketplace.ca'] = getenv('OWNCLOUD_MARKETPLACE_CA');
+  }
+
+  if (getenv('OWNCLOUD_APPSTORE_URL') != '') {
+    $config['appstoreurl'] = getenv('OWNCLOUD_APPSTORE_URL');
+  }
+
+  if (getenv('OWNCLOUD_LOGIN_ALTERNATIVES') != '') {
+    $rows = explode(',', getenv('OWNCLOUD_LOGIN_ALTERNATIVES'));
+
+    foreach ($rows as $key => $value) {
+      parse_str($value, $opts);
+      $config['login.alternatives'][$key] = $opts;
+    }
+  }
+
+  switch (true) {
+    case getenv('OWNCLOUD_REDIS_ENABLED') && getenv('OWNCLOUD_REDIS_ENABLED') == 'true':
+      $config = array_merge_recursive($config, [
+        'memcache.distributed' => '\OC\Memcache\Redis',
+        'memcache.locking' => '\OC\Memcache\Redis',
+      ]);
+      switch (true) {
+        case getenv('OWNCLOUD_REDIS_SEEDS') != '':
+          $config['redis.cluster']['seeds'] = explode(',', getenv('OWNCLOUD_REDIS_SEEDS'));
+
+          if (getenv('OWNCLOUD_REDIS_TIMEOUT') != '') {
+            $config['redis.cluster']['timeout'] = (float) getenv('OWNCLOUD_REDIS_TIMEOUT');
+          }
+
+          if (getenv('OWNCLOUD_REDIS_READ_TIMEOUT') != '') {
+            $config['redis.cluster']['read_timeout'] = (float) getenv('OWNCLOUD_REDIS_READ_TIMEOUT');
+          }
+
+          if (getenv('OWNCLOUD_REDIS_FAILOVER_MODE') != '') {
+            switch (getenv('OWNCLOUD_REDIS_FAILOVER_MODE')) {
+              case 'FAILOVER_NONE':
+                $config['redis.cluster']['failover_mode'] = \RedisCluster::FAILOVER_NONE;
+              case 'FAILOVER_ERROR':
+                $config['redis.cluster']['failover_mode'] = \RedisCluster::FAILOVER_ERROR;
+              case 'FAILOVER_DISTRIBUTE':
+                $config['redis.cluster']['failover_mode'] = \RedisCluster::FAILOVER_DISTRIBUTE;
+            }
+          }
+
+        case getenv('OWNCLOUD_REDIS_HOST') != '':
+          $config['redis']['host'] = getenv('OWNCLOUD_REDIS_HOST');
+          $config['redis']['port'] = getenv('OWNCLOUD_REDIS_PORT');
+
+          if (getenv('OWNCLOUD_REDIS_DB') != '') {
+            $config['redis']['dbindex'] = getenv('OWNCLOUD_REDIS_DB');
+          }
+
+          if (getenv('OWNCLOUD_REDIS_PASSWORD') != '') {
+            $config['redis']['password'] = getenv('OWNCLOUD_REDIS_PASSWORD');
+          }
+
+          if (getenv('OWNCLOUD_REDIS_TIMEOUT') != '') {
+            $config['redis']['timeout'] = (float) getenv('OWNCLOUD_REDIS_TIMEOUT');
+          }
+      }
+
+      break;
+    case getenv('OWNCLOUD_MEMCACHED_ENABLED') && getenv('OWNCLOUD_MEMCACHED_ENABLED') == 'true':
+      $config = array_merge_recursive($config, [
+        'memcache.distributed' => '\OC\Memcache\Memcached',
+        'memcache.locking' => '\OC\Memcache\Memcached',
+
+        'memcached_servers' => [
+          [
+            getenv('OWNCLOUD_MEMCACHED_HOST'),
+            getenv('OWNCLOUD_MEMCACHED_PORT'),
+          ],
+        ],
+      ]);
+
+      if (getenv('OWNCLOUD_MEMCACHED_OPTIONS') != '') {
+        parse_str(getenv('OWNCLOUD_MEMCACHED_OPTIONS'), $opts);
+
+        foreach($opts as $key => $value) {
+          $config['memcached_options'][constant($key)] = $value;
+        }
+      }
+
+      break;
+  }
+
+  return $config;
+}
+
+$CONFIG = getConfigFromEnv();
\ No newline at end of file
diff --git a/deployments/examples/ocis_oc10_backend/ocis/proxy-config.json b/deployments/examples/ocis_oc10_backend/ocis/proxy-config.json
index ca9f627235..9343769bf1 100644
--- a/deployments/examples/ocis_oc10_backend/ocis/proxy-config.json
+++ b/deployments/examples/ocis_oc10_backend/ocis/proxy-config.json
@@ -1,6 +1,6 @@
 {
   "HTTP": {
-    "Namespace": "com.owncloud"
+    "Namespace": "works.owncloud"
   },
   "policy_selector": {
     "migration": {
@@ -19,21 +19,26 @@
         },
         {
           "endpoint": "/.well-known/",
-          "backend": "http://konnectd:9130"
+          "backend": "http://localhost:9130"
         },
         {
           "endpoint": "/konnect/",
-          "backend": "http://konnectd:9130"
+          "backend": "http://localhost:9130"
         },
         {
           "endpoint": "/signin/",
-          "backend": "http://konnectd:9130"
+          "backend": "http://localhost:9130"
         },
         {
           "endpoint": "/ocs/",
           "backend": "http://localhost:9140"
         },
         {
+          "type": "regex",
+          "endpoint": "/ocs/v[12].php/cloud/user",
+          "backend": "http://localhost:9110"
+        },
+	{
           "endpoint": "/remote.php/",
           "backend": "http://localhost:9140"
         },
@@ -52,6 +57,26 @@
         {
           "endpoint": "/index.php/",
           "backend": "http://localhost:9140"
+        },
+        {
+          "endpoint": "/data",
+          "backend": "http://localhost:9140"
+        },
+        {
+	  "endpoint": "/api/v0/accounts",
+	  "backend":  "http://localhost:9181"
+	},
+	{
+          "endpoint": "/accounts.js",
+	  "backend":  "http://localhost:9181"
+	},
+        {
+          "endpoint": "/api/v0/settings",
+          "backend":  "http://localhost:9190"
+        },
+        {
+          "endpoint": "/settings.js",
+          "backend":  "http://localhost:9190"
         }
       ]
     },
diff --git a/deployments/examples/ocis_oc10_backend/ocis/web/config.json b/deployments/examples/ocis_oc10_backend/ocis/web/config.json
new file mode 100644
index 0000000000..0171a00658
--- /dev/null
+++ b/deployments/examples/ocis_oc10_backend/ocis/web/config.json
@@ -0,0 +1,49 @@
+{
+  "server": "https://${OCIS_DOMAIN}",
+  "theme": "owncloud",
+  "version": "0.1.0",
+  "openIdConnect": {
+      "metadata_url": "https://${OCIS_DOMAIN}/.well-known/openid-configuration",
+      "authority": "https://${OCIS_DOMAIN}",
+      "client_id": "phoenix",
+      "response_type": "code",
+      "scope": "openid profile email"
+  },
+  "applications": [
+        {
+                "title": {
+                        "en": "Classic Design",
+                        "de": "Klassisches ownCloud"
+                },
+                "icon": "switch_ui",
+                "url": "https://${OC10_DOMAIN}",
+                "target": "_self"
+        },
+        {
+              "title": {"en": "Classic Settings"},
+              "icon": "application",
+              "url": "https://${OC10_DOMAIN}/index.php/settings/personal",
+              "target": "_self",
+              "menu": "user"
+        }
+  ],
+  "apps": [
+      "files",
+      "draw-io",
+      "markdown-editor",
+      "media-viewer"
+  ],
+  "options": {
+      "hideSearchBar": false
+  },
+  "external_apps": [
+  {
+    "id": "accounts",
+    "path": "/accounts.js"
+  },
+  {
+    "id": "settings",
+    "path": "/settings.js"
+  }
+]
+}
\ No newline at end of file
diff --git a/deployments/examples/ocis_traefik/docker-compose.yml b/deployments/examples/ocis_traefik/docker-compose.yml
index bc8af49aae..1415dc5af1 100644
--- a/deployments/examples/ocis_traefik/docker-compose.yml
+++ b/deployments/examples/ocis_traefik/docker-compose.yml
@@ -8,15 +8,18 @@ services:
     networks:
       - ocisnet
     command:
-      - "--api.insecure=true"
       - "--providers.docker=true"
       - "--providers.docker.exposedbydefault=false"
+      - "--entrypoints.web.address=:80"
       - "--entrypoints.websecure.address=:443"
+      - "--serverstransport.insecureskipverify=true"
+      # Ocis certificate resolver
       - "--certificatesresolvers.ocis.acme.tlschallenge=true"
       - "--certificatesresolvers.ocis.acme.caserver=https://acme-v02.api.letsencrypt.org/directory"
       - "--certificatesresolvers.ocis.acme.email=user@${OCIS_DOMAIN}"
-      - "--certificatesresolvers.ocis.acme.storage=/letsencrypt/acme.json"
+      - "--certificatesresolvers.ocis.acme.storage=/letsencrypt/acme-ocis.json"
     ports:
+      - "80:80"
       - "443:443"
       - "8080:8080"
     volumes:
@@ -53,12 +56,18 @@ services:
       STORAGE_LDAP_IDP: https://${OCIS_DOMAIN}
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN}`)"
-      - "traefik.http.routers.ocis.entrypoints=websecure"
-      - "traefik.http.routers.ocis.tls.certresolver=ocis"
       - "traefik.http.services.ocis.loadbalancer.server.port=9200"
       - "traefik.docker.network=ocisnet"
       - "traefik.protocol=https"
+      # ssl config
+      - "traefik.http.routers.ocis.rule=Host(`${OCIS_DOMAIN}`)"
+      - "traefik.http.routers.ocis.entrypoints=websecure"
+      - "traefik.http.routers.ocis.tls.certresolver=ocis"
+      # http -> https forwarding
+      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
+      - "traefik.http.routers.ocis-redirs.rule=Host(`${OCIS_DOMAIN}`)"
+      - "traefik.http.routers.ocis-redirs.entrypoints=web"
+      - "traefik.http.routers.ocis-redirs.middlewares=redirect-to-https"
 
 networks:
   ocisnet: