{ pkgs, config, ... }:
{
  sops.secrets.nextcloud-adminpass = {
    owner = "nextcloud";
    sopsFile = ./secrets.yaml;
  };

  services.nextcloud = {                
    enable = true;                   
    hostName = "nextcloud.cloonar.com";
    https = true;
    package = pkgs.nextcloud27;
    # Instead of using pkgs.nextcloud27Packages.apps,
    # we'll reference the package version specified above
    extraApps = with config.services.nextcloud.package.packages.apps; {
      inherit contacts calendar tasks;
    };
    extraAppsEnable = true;

    database.createLocally = true;
    enableBrokenCiphersForSSE = false;

    config = {
      adminpassFile = config.sops.secrets.nextcloud-adminpass.path;
      dbtype = "mysql";
    };
  };

  services.nginx.virtualHosts.${config.services.nextcloud.hostName} = {
    forceSSL = true;
    enableACME = true;
    acmeRoot = null;
  };

  services.mysqlBackup.databases = [ "nextcloud" ];
}