init

services/nextcloud.nix

@@ -0,0 +1,34 @@
+{
+  pkgs,
+  config,
+  ...
+}: let
+  nextcloudPort = 8081;
+in {
+  environment.etc."nextcloud-admin-pass".text = "PWD";
+  services.nextcloud = {
+    enable = true;
+    hostName = "cloud.distrust.network";
+    settings.trusted_domains = ["znfdxs4e3rqvzxtkksiidomupgm2x44wtrzyxtpomczto3xg5qxpcbqd.onion"];
+    config = {
+      adminpassFile = "/etc/nextcloud-admin-pass";
+      dbtype = "pgsql";
+    };
+    package = pkgs.nextcloud32;
+    https = true;
+    configureRedis = true;
+    caching.redis = true;
+    database.createLocally = true;
+  };
+
+  services.nginx.virtualHosts."${config.services.nextcloud.hostName}".listen = [
+    {
+      addr = "127.0.0.1";
+      port = nextcloudPort;
+    }
+  ];
+
+  services.caddy.virtualHosts."https://cloud.distrust.network".extraConfig = ''
+    reverse_proxy localhost:${toString nextcloudPort}
+  '';
+}