37 lines
946 B
Nix
37 lines
946 B
Nix
{ pkgs, config, ... }:
|
|
{
|
|
sops.secrets.nextcloud-adminpass = {
|
|
owner = "nextcloud";
|
|
sopsFile = ./secrets.yaml;
|
|
};
|
|
|
|
services.nextcloud = {
|
|
enable = true;
|
|
hostName = "nextcloud.cloonar.com";
|
|
https = true;
|
|
package = pkgs.nextcloud27;
|
|
# Instead of using pkgs.nextcloud27Packages.apps,
|
|
# we'll reference the package version specified above
|
|
extraApps = with config.services.nextcloud.package.packages.apps; {
|
|
inherit contacts calendar tasks;
|
|
};
|
|
extraAppsEnable = true;
|
|
|
|
database.createLocally = true;
|
|
enableBrokenCiphersForSSE = false;
|
|
|
|
config = {
|
|
adminpassFile = config.sops.secrets.nextcloud-adminpass.path;
|
|
dbtype = "mysql";
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts.${config.services.nextcloud.hostName} = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
acmeRoot = null;
|
|
};
|
|
|
|
services.mysqlBackup.databases = [ "nextcloud" ];
|
|
}
|