{
  pkgs,
  config,
  ...
}: let
  nextcloudPort = 8081;
in {
  environment.etc."nextcloud-admin-pass".text = "PWD";
  services.nextcloud = {
    enable = true;
    hostName = "cloud.distrust.network";
    settings.trusted_domains = ["znfdxs4e3rqvzxtkksiidomupgm2x44wtrzyxtpomczto3xg5qxpcbqd.onion"];
    config = {
      adminpassFile = "/etc/nextcloud-admin-pass";
      dbtype = "pgsql";
    };
    package = pkgs.nextcloud32;
    https = true;
    configureRedis = true;
    caching.redis = true;
    database.createLocally = true;
  };

  services.nginx.virtualHosts."${config.services.nextcloud.hostName}".listen = [
    {
      addr = "127.0.0.1";
      port = nextcloudPort;
    }
  ];

  services.caddy.virtualHosts."https://cloud.distrust.network".extraConfig = ''
    reverse_proxy localhost:${toString nextcloudPort}
  '';
}