Move modules in programs/services subfolders

modules/system/services/nextcloud/backups.nix

@@ -0,0 +1,49 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+let
+  cfg = config.custom.services.nextcloud;
+
+  dataDir = config.services.nextcloud.home;
+  user = config.users.users.nextcloud.name;
+in
+{
+  options.custom.services.nextcloud.backups.enable = lib.mkEnableOption "";
+
+  config = lib.mkIf cfg.backups.enable {
+    custom.services.resticBackup.nextcloud = {
+      inherit user;
+      healthchecks.enable = true;
+
+      extraConfig = {
+        backupPrepareCommand = ''
+          ${lib.getExe' config.services.nextcloud.occ "nextcloud-occ"} maintenance:mode --on
+          ${lib.getExe' config.services.postgresql.package "pg_dump"} nextcloud --format=custom --file=${dataDir}/db.dump
+        '';
+        backupCleanupCommand = "${lib.getExe' config.services.nextcloud.occ "nextcloud-occ"} maintenance:mode --off";
+        paths = [
+          "${dataDir}/data"
+          "${dataDir}/config/config.php"
+          "${dataDir}/db.dump"
+        ];
+      };
+    };
+
+    environment.systemPackages = [
+      (pkgs.writeShellApplication {
+        name = "nextcloud-restore";
+        text = ''
+          sudo --user=${user} bash -c "
+            ${lib.getExe' config.services.nextcloud.occ "nextcloud-occ"} maintenance:mode --on
+            restic-nextcloud restore latest --target /
+            pg_restore --clean --if-exists --dbname nextcloud ${dataDir}/db.dump
+            ${lib.getExe' config.services.nextcloud.occ "nextcloud-occ"} maintenance:mode --off
+          "
+        '';
+      })
+    ];
+  };
+}

modules/system/services/nextcloud/default.nix

@@ -0,0 +1,75 @@
+{
+  config,
+  inputs,
+  pkgs,
+  lib,
+  ...
+}:
+let
+  cfg = config.custom.services.nextcloud;
+
+  user = config.users.users.nextcloud.name;
+in
+{
+  options.custom.services.nextcloud = {
+    enable = lib.mkEnableOption "";
+    subdomain = lib.mkOption {
+      type = lib.types.nonEmptyStr;
+      default = "";
+    };
+    port = lib.mkOption {
+      type = lib.types.port;
+      default = 80;
+      readOnly = true;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    sops.secrets."nextcloud/admin-password".owner = user;
+
+    services.nextcloud = {
+      enable = true;
+      package = pkgs.nextcloud31;
+      hostName = "${cfg.subdomain}.${config.networking.domain}";
+
+      database.createLocally = true;
+      config = {
+        dbtype = "pgsql";
+        adminuser = "admin";
+        adminpassFile = config.sops.secrets."nextcloud/admin-password".path;
+      };
+
+      https = true;
+      settings = {
+        overwriteProtocol = "https";
+        trusted_proxies = [ "127.0.0.1" ];
+        log_type = "file";
+        default_phone_region = "DE";
+        maintenance_window_start = "2"; # UTC
+        defaultapp = "side_menu";
+      };
+
+      configureRedis = true;
+      maxUploadSize = "16G";
+      phpOptions."opcache.interned_strings_buffer" = "16";
+
+      autoUpdateApps = {
+        enable = true;
+        startAt = "04:00:00";
+      };
+      extraApps = {
+        inherit (config.services.nextcloud.package.packages.apps)
+          calendar
+          contacts
+          ;
+
+        twofactor_totp = pkgs.fetchNextcloudApp {
+          url = inputs.nextcloud-twofactor-totp.outPath;
+          sha256 = inputs.nextcloud-twofactor-totp.narHash;
+          license = "agpl3Plus";
+          unpack = true;
+        };
+      };
+    };
+  };
+}