fern/flock
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enable nextcloud

Browse source
This commit is contained in:
Fern Garden 2025-08-20 08:13:09 +08:00
parent dbdd5ba47d
commit 7ffe1dad52
1 changed files with 50 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

93
hosts/nextcloud/default.nix
View file

@ -4,47 +4,54 @@
secrets,
...
}: {
# # Import secrets.
# sops = {
# age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
# defaultSopsFile = "${secrets}/sops.yaml";
# secrets."nextcloud/admin_pass" = {};
# };
#
# # Enable Nextcloud.
# services.nextcloud = {
# enable = true;
# package = pkgs.nextcloud31;
# hostName = "localhost";
# database.createLocally = true;
# appstoreEnable = false;
# autoUpdateApps.enable = true;
#
# extraApps = with config.services.nextcloud.package.packages.apps; {
# inherit bookmarks calendar contacts dav_push gpoddersync user_oidc;
# };
#
# settings = {
# trusted_domains = ["cloud.ferngarden.net"];
# trusted_proxies = ["10.0.1.102"];
# log_type = "file";
# default_phone_region = "AU";
# };
#
# config = {
# dbtype = "pgsql";
# adminuser = "fern";
# adminpassFile = config.sops.secrets."nextcloud/admin_pass".path;
# };
#
# notify_push = {
# enable = true;
# };
# };
#
# # Open required ports for Nextcloud.
# networking.firewall.allowedTCPPorts = [
# 80
# 443
# ];
# Import secrets.
sops = {
age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
defaultSopsFile = "${secrets}/sops.yaml";
secrets."nextcloud/admin_pass" = {};
};
# Enable Nextcloud.
services.nextcloud = {
enable = true;
package = pkgs.nextcloud31;
hostName = "localhost";
database.createLocally = true;
appstoreEnable = false;
autoUpdateApps.enable = true;
extraApps = with config.services.nextcloud.package.packages.apps; {
inherit calendar contacts dav_push gpoddersync notify_push user_oidc;
};
settings = {
trusted_domains = ["cloud.ferngarden.net" "10.0.1.107"];
trusted_proxies = [
"::1"
"127.0.0.1"
"10.0.1.102" # reverse proxy
];
log_type = "file";
default_phone_region = "AU";
maintenance_window_start = 1;
};
config = {
dbtype = "pgsql";
adminuser = "fern";
adminpassFile = config.sops.secrets."nextcloud/admin_pass".path;
};
phpOptions."opcache.interned_strings_buffer" = "64";
notify_push = {
enable = true;
};
};
# Open required ports for Nextcloud.
networking.firewall.allowedTCPPorts = [
80
443
];
}