Compare commits

...

2 commits

Author SHA1 Message Date
7ffe1dad52 Enable nextcloud 2025-08-20 08:13:09 +08:00
dbdd5ba47d Update secrets 2025-08-20 08:13:06 +08:00
2 changed files with 54 additions and 47 deletions

8
flake.lock generated
View file

@ -412,11 +412,11 @@
"secrets": { "secrets": {
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1753192971, "lastModified": 1755613196,
"narHash": "sha256-+Gg9j2Un6wEtut8uXtfiya+QeL+EMWzR+/xWXDR8fVg=", "narHash": "sha256-nHR8//I5cMjWbDvlBk4HNE3wb0l+M4y5Xx8cwehJlE0=",
"ref": "main", "ref": "main",
"rev": "3caaec2bd7cd7d1feb244e00ca4664dabb8a0495", "rev": "026300d70aff95c9b3514e9922979ae0340b6d6a",
"revCount": 4, "revCount": 5,
"type": "git", "type": "git",
"url": "ssh://git@docker.local:222/fern/secrets" "url": "ssh://git@docker.local:222/fern/secrets"
}, },

View file

@ -4,47 +4,54 @@
secrets, secrets,
... ...
}: { }: {
# # Import secrets. # Import secrets.
# sops = { sops = {
# age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"]; age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
# defaultSopsFile = "${secrets}/sops.yaml"; defaultSopsFile = "${secrets}/sops.yaml";
# secrets."nextcloud/admin_pass" = {}; secrets."nextcloud/admin_pass" = {};
# }; };
#
# # Enable Nextcloud. # Enable Nextcloud.
# services.nextcloud = { services.nextcloud = {
# enable = true; enable = true;
# package = pkgs.nextcloud31; package = pkgs.nextcloud31;
# hostName = "localhost"; hostName = "localhost";
# database.createLocally = true; database.createLocally = true;
# appstoreEnable = false; appstoreEnable = false;
# autoUpdateApps.enable = true; autoUpdateApps.enable = true;
#
# extraApps = with config.services.nextcloud.package.packages.apps; { extraApps = with config.services.nextcloud.package.packages.apps; {
# inherit bookmarks calendar contacts dav_push gpoddersync user_oidc; inherit calendar contacts dav_push gpoddersync notify_push user_oidc;
# }; };
#
# settings = { settings = {
# trusted_domains = ["cloud.ferngarden.net"]; trusted_domains = ["cloud.ferngarden.net" "10.0.1.107"];
# trusted_proxies = ["10.0.1.102"]; trusted_proxies = [
# log_type = "file"; "::1"
# default_phone_region = "AU"; "127.0.0.1"
# }; "10.0.1.102" # reverse proxy
# ];
# config = { log_type = "file";
# dbtype = "pgsql"; default_phone_region = "AU";
# adminuser = "fern"; maintenance_window_start = 1;
# adminpassFile = config.sops.secrets."nextcloud/admin_pass".path; };
# };
# config = {
# notify_push = { dbtype = "pgsql";
# enable = true; adminuser = "fern";
# }; adminpassFile = config.sops.secrets."nextcloud/admin_pass".path;
# }; };
#
# # Open required ports for Nextcloud. phpOptions."opcache.interned_strings_buffer" = "64";
# networking.firewall.allowedTCPPorts = [
# 80 notify_push = {
# 443 enable = true;
# ]; };
};
# Open required ports for Nextcloud.
networking.firewall.allowedTCPPorts = [
80
443
];
} }