Add paperless-ngx container

hosts/stratus/containers/nextcloud/default.nix

@@ -7,26 +7,21 @@
   };
 
   systemd.tmpfiles.rules = [
-    "d /var/lib/tailscale-nextcloud - - -"
     "d /data/nextcloud - - -"
+    "d /var/lib/tailscale-nextcloud - - -"
   ];
 
-  networking.useNetworkd = true;
-  systemd.network = {
-    enable = true;
-    networks."40-eno1" = {
-      matchConfig.Name = "eno1";
-      networkConfig.DHCP = "yes";
-    };
-  };
-
   containers.nextcloud = {
     autoStart = true;
     ephemeral = true;
     macvlans = [ "eno1" ];
+
     bindMounts = {
+      # Secrets
       "/run/secrets/nextcloud".isReadOnly = false;
       "/run/secrets/tailscale-auth-key" = { };
+
+      # State
       "/data/nextcloud".isReadOnly = false;
       "/var/lib/tailscale" = {
         hostPath = "/var/lib/tailscale-nextcloud";
@@ -41,7 +36,7 @@
       { domain, ... }:
       {
         system.stateVersion = "24.05";
-        
+
         networking = {
           inherit domain;
           useNetworkd = true;

hosts/stratus/containers/nextcloud/tailscale.nix

@@ -9,6 +9,7 @@
     enable = true;
     authKeyFile = "/run/secrets/tailscale-auth-key";
     useRoutingFeatures = "server";
+    openFirewall = true;
     interfaceName = "userspace-networking";
     extraUpFlags = [ "--ssh" ];
   };