SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 18:41:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Convert the nextcloud module into a container

Browse source
This commit is contained in:
SebastianStork 2024-08-29 21:39:43 +02:00
parent 35f77628cc
commit f0295cd9e1
8 changed files with 170 additions and 134 deletions
Download patch file Download diff file Expand all files Collapse all files

71
modules/system/nextcloud/default.nix
View file

@ -1,71 +0,0 @@
{
config,
pkgs,
lib,
...
}:
{
options.myConfig.nextcloud.enable = lib.mkEnableOption "";
config = lib.mkIf config.myConfig.nextcloud.enable {
sops.secrets."nextcloud/admin-pass" = {
owner = config.services.nextcloud.config.dbname;
group = config.services.nextcloud.config.dbuser;
};
services = {
nextcloud = {
enable = true;
package = pkgs.nextcloud29;
home = "/data/nextcloud";
hostName = config.networking.fqdn;
configureRedis = true;
maxUploadSize = "4G";
database.createLocally = true;
config = {
dbtype = "pgsql";
adminuser = "admin";
adminpassFile = config.sops.secrets."nextcloud/admin-pass".path;
};
https = true;
settings = {
overwriteProtocol = "https";
trusted_proxies = [ "127.0.0.1" ];
log_type = "file";
default_phone_region = "DE";
maintenance_window_start = "2"; # UTC
};
phpOptions."opcache.interned_strings_buffer" = "16";
autoUpdateApps = {
enable = true;
startAt = "04:00:00";
};
extraApps = {
inherit (config.services.nextcloud.package.packages.apps) contacts calendar;
};
};
nginx = {
enable = true;
virtualHosts.${config.services.nextcloud.hostName}.listen = [
{
addr = "0.0.0.0";
port = 8080;
}
];
};
tailscale.permitCertUid = "caddy";
caddy = {
enable = true;
virtualHosts.${config.services.nextcloud.hostName}.extraConfig = ''
reverse_proxy localhost:8080
'';
};
};
};
}