Add host 'nextcloud'

.sops.yaml

@@ -1,9 +1,11 @@
 keys:
   - &admin_fern age1n9q3cspp4a6qvjv9xaf00e5d5za3d8upz4akj2fh6zt5ly3ahans3vpx5x
   - &server_firefox-syncserver age1hrvts2jkdclk3f9atjry7chuakt5n9qmlwfwsdlcnmc88ld3ysuqz6ejge
+  # - &server_nextcloud
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:
     - age:
       - *admin_fern
-      - *server_firefox-syncserver
+      - *server_firefox-syncserver
+      # - *server_nextcloud

flake.nix

@@ -94,6 +94,14 @@
         ];
       })
 
+      # Container running Nextcloud.
+      (mkHost "nextcloud" {
+        suite = "server/lxc";
+        hostModules = [
+          sops-nix.nixosModules.sops
+        ];
+      })
+
       # Container for automatic deployments.
       (mkHost "ornithologist" {
         suite = "server/lxc";

hosts/nextcloud/default.nix

@@ -0,0 +1,21 @@
+{
+  config,
+  pkgs,
+  secrets,
+  ...
+}: {
+  # # Import secrets.
+  # sops = {
+  #   age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
+  #   defaultSopsFile = "${secrets}/sops.yaml";
+  #   secrets."nextcloud/admin_pass" = {};
+  # };
+  #
+  # services.nextcloud = {
+  #   enable = true;
+  #   package = pkgs.nextcloud31;
+  #   hostName = "localhost";
+  #   config.adminpassFile = config.sops.secrets."nextcloud/admin_pass".path;
+  #   config.dbtype = "sqlite";
+  # };
+}