diff --git a/.sops.yaml b/.sops.yaml index 7157add..fc8028b 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -1,13 +1,11 @@ keys: - - &admin_fern age1n9q3cspp4a6qvjv9xaf00e5d5za3d8upz4akj2fh6zt5ly3ahans3vpx5x - - &admin_ornithologist age1t4cmsp8ge42cftxne6vjxt255tsfe6aga4r35gev647f3yuvwvkqyetenv - - &server_firefox-syncserver age1hrvts2jkdclk3f9atjry7chuakt5n9qmlwfwsdlcnmc88ld3ysuqz6ejge - - &server_nextcloud age1fn3y3km7wuftvrc2ds78ceu2wfrya0l5up0gshhnyhrq7gyglu0s2j8mpm + - &muskduck age1f99k8ujf9gt9zhzyqquhuv38znwjtv2cf42s0sf3h0waa5gwxsvscd2rvw + - &firefox-syncserver age1hrvts2jkdclk3f9atjry7chuakt5n9qmlwfwsdlcnmc88ld3ysuqz6ejge + - &nextcloud age1vkup37w26905wzmjnjxryfzga7f72dzhuay45uuhqvntj3gajydsnukxv7 creation_rules: - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$ key_groups: - age: - - *admin_fern - - *admin_ornithologist - - *server_firefox-syncserver - - *server_nextcloud + - *muskduck + - *firefox-syncserver + - *nextcloud diff --git a/flake.nix b/flake.nix index dbaf5c4..3a17913 100755 --- a/flake.nix +++ b/flake.nix @@ -98,5 +98,10 @@ (mkHost "firefox-syncserver" { suite = "server/lxc"; }) + + # Container running Nextcloud. + (mkHost "nextcloud" { + suite = "server/lxc"; + }) ]; } diff --git a/hosts/nextcloud/default.nix b/hosts/nextcloud/default.nix new file mode 100644 index 0000000..f89abb3 --- /dev/null +++ b/hosts/nextcloud/default.nix @@ -0,0 +1,50 @@ +{ + config, + pkgs, + secrets, + ... +}: { + # # Import secrets. + # sops = { + # age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"]; + # defaultSopsFile = "${secrets}/sops.yaml"; + # secrets."nextcloud/admin_pass" = {}; + # }; + # + # # Enable Nextcloud. + # services.nextcloud = { + # enable = true; + # package = pkgs.nextcloud31; + # hostName = "localhost"; + # database.createLocally = true; + # appstoreEnable = false; + # autoUpdateApps.enable = true; + # + # extraApps = with config.services.nextcloud.package.packages.apps; { + # inherit bookmarks calendar contacts dav_push gpoddersync user_oidc; + # }; + # + # settings = { + # trusted_domains = ["cloud.ferngarden.net"]; + # trusted_proxies = ["10.0.1.102"]; + # log_type = "file"; + # default_phone_region = "AU"; + # }; + # + # config = { + # dbtype = "pgsql"; + # adminuser = "fern"; + # adminpassFile = config.sops.secrets."nextcloud/admin_pass".path; + # }; + # + # notify_push = { + # enable = true; + # }; + # }; + # + # # Open required ports for Nextcloud. + # networking.firewall.allowedTCPPorts = [ + # 80 + # 443 + # ]; +} diff --git a/suites/desktop/default.nix b/suites/desktop/default.nix index 11f8fd1..9a80881 100755 --- a/suites/desktop/default.nix +++ b/suites/desktop/default.nix @@ -265,6 +265,7 @@ with lib; { gnomeExtensions.color-picker gnomeExtensions.rounded-window-corners-reborn gnomeExtensions.smile-complementary-extension + inkscape jellyfin-media-player libreoffice minipro