Nextcloud LXC

.sops.yaml

@@ -1,13 +1,11 @@
 keys:
-  - &admin_fern age1n9q3cspp4a6qvjv9xaf00e5d5za3d8upz4akj2fh6zt5ly3ahans3vpx5x
-  - &admin_ornithologist age1t4cmsp8ge42cftxne6vjxt255tsfe6aga4r35gev647f3yuvwvkqyetenv
-  - &server_firefox-syncserver age1hrvts2jkdclk3f9atjry7chuakt5n9qmlwfwsdlcnmc88ld3ysuqz6ejge
-  - &server_nextcloud age1fn3y3km7wuftvrc2ds78ceu2wfrya0l5up0gshhnyhrq7gyglu0s2j8mpm
+  - &muskduck age1f99k8ujf9gt9zhzyqquhuv38znwjtv2cf42s0sf3h0waa5gwxsvscd2rvw
+  - &firefox-syncserver age1hrvts2jkdclk3f9atjry7chuakt5n9qmlwfwsdlcnmc88ld3ysuqz6ejge
+  - &nextcloud age1vkup37w26905wzmjnjxryfzga7f72dzhuay45uuhqvntj3gajydsnukxv7
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:
     - age:
-      - *admin_fern
-      - *admin_ornithologist
-      - *server_firefox-syncserver
-      - *server_nextcloud
+      - *muskduck
+      - *firefox-syncserver
+      - *nextcloud

flake.nix

@@ -98,5 +98,10 @@
       (mkHost "firefox-syncserver" {
         suite = "server/lxc";
       })
+
+      # Container running Nextcloud.
+      (mkHost "nextcloud" {
+        suite = "server/lxc";
+      })
     ];
 }

hosts/nextcloud/default.nix

@@ -0,0 +1,50 @@
+{
+  config,
+  pkgs,
+  secrets,
+  ...
+}: {
+  # # Import secrets.
+  # sops = {
+  #   age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
+  #   defaultSopsFile = "${secrets}/sops.yaml";
+  #   secrets."nextcloud/admin_pass" = {};
+  # };
+  #
+  # # Enable Nextcloud.
+  # services.nextcloud = {
+  #   enable = true;
+  #   package = pkgs.nextcloud31;
+  #   hostName = "localhost";
+  #   database.createLocally = true;
+  #   appstoreEnable = false;
+  #   autoUpdateApps.enable = true;
+  #
+  #   extraApps = with config.services.nextcloud.package.packages.apps; {
+  #     inherit bookmarks calendar contacts dav_push gpoddersync user_oidc;
+  #   };
+  #
+  #   settings = {
+  #     trusted_domains = ["cloud.ferngarden.net"];
+  #     trusted_proxies = ["10.0.1.102"];
+  #     log_type = "file";
+  #     default_phone_region = "AU";
+  #   };
+  #
+  #   config = {
+  #     dbtype = "pgsql";
+  #     adminuser = "fern";
+  #     adminpassFile = config.sops.secrets."nextcloud/admin_pass".path;
+  #   };
+  #
+  #   notify_push = {
+  #     enable = true;
+  #   };
+  # };
+  #
+  # # Open required ports for Nextcloud.
+  # networking.firewall.allowedTCPPorts = [
+  #   80
+  #   443
+  # ];
+}

suites/desktop/default.nix

@@ -265,6 +265,7 @@ with lib; {
     gnomeExtensions.color-picker
     gnomeExtensions.rounded-window-corners-reborn
     gnomeExtensions.smile-complementary-extension
+    inkscape
     jellyfin-media-player
     libreoffice
     minipro