86 lines
2.1 KiB
Nix
86 lines
2.1 KiB
Nix
{ config, pkgs, ... }:
|
|
let
|
|
fqdn = "cloud.rpqt.fr";
|
|
in
|
|
{
|
|
imports = [
|
|
./acme-home.nix
|
|
];
|
|
|
|
services.nextcloud = {
|
|
enable = true;
|
|
hostName = fqdn;
|
|
https = true;
|
|
package = pkgs.nextcloud32;
|
|
config = {
|
|
dbtype = "pgsql";
|
|
dbuser = "nextcloud";
|
|
dbhost = "/run/postgresql";
|
|
dbname = "nextcloud";
|
|
# admin user is only for the initial setup
|
|
adminuser = "root";
|
|
adminpassFile = config.clan.core.vars.generators.nextcloud.files.admin-password.path;
|
|
objectstore.s3 = {
|
|
enable = true;
|
|
bucket = "nextcloud";
|
|
key = config.clan.core.vars.generators.nextcloud-s3-storage.files.access-key-id.value;
|
|
secretFile = config.clan.core.vars.generators.nextcloud-s3-storage.files.access-key-secret.path;
|
|
hostname = "[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
|
|
port = 3900;
|
|
useSsl = false;
|
|
region = "garage";
|
|
usePathStyle = true;
|
|
};
|
|
};
|
|
extraAppsEnable = true;
|
|
extraApps = {
|
|
# inherit (pkgs.nextcloud32Packages.apps) tasks;
|
|
};
|
|
};
|
|
|
|
services.postgresql = {
|
|
enable = true;
|
|
ensureDatabases = [ "nextcloud" ];
|
|
ensureUsers = [
|
|
{
|
|
name = "nextcloud";
|
|
ensureDBOwnership = true;
|
|
}
|
|
];
|
|
};
|
|
|
|
systemd.services."nextcloud-setup" = {
|
|
requires = [ "postgresql.service" ];
|
|
after = [ "postgresql.service" ];
|
|
};
|
|
|
|
services.nginx.virtualHosts.${config.services.nextcloud.hostName} = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
};
|
|
|
|
clan.core.vars.generators.nextcloud = {
|
|
prompts.admin-password = {
|
|
description = "nextcloud admin password";
|
|
type = "hidden";
|
|
persist = true;
|
|
};
|
|
files.admin-password.owner = "nextcloud";
|
|
};
|
|
|
|
clan.core.vars.generators.nextcloud-s3-storage = {
|
|
prompts.access-key-id = {
|
|
description = "s3 access key id";
|
|
type = "line";
|
|
persist = true;
|
|
};
|
|
prompts.access-key-secret = {
|
|
description = "s3 access key secret";
|
|
type = "hidden";
|
|
persist = true;
|
|
};
|
|
files.access-key-id.secret = false;
|
|
files.access-key-secret.owner = "nextcloud";
|
|
};
|
|
}
|