holy moly we're almost there

2022-09-19 08:13:50 +10:00
commit 3693732aac
203 changed files with 17247 additions and 0 deletions
@@ -0,0 +1,60 @@
+{ pkgs, config, ... }:
+{
+  #age.secrets.nextcloud-db.file = "/etc/nixos/secrets/nextcloud-db.age";
+  #age.secrets.nextcloud-db.owner = "nextcloud";
+  #age.secrets.nextcloud-admin.file = "/etc/nixos/secrets/nextcloud-admin.age";
+  #age.secrets.nextcloud-admin.owner = "nextcloud";
+  services.nextcloud = {
+    enable = true;
+    hostName = "mossnet.lan";
+    home = "/data/nextcloud2";
+    package = pkgs.nextcloud22;
+
+    # Use HTTPS for links
+    https = false;
+
+    # Auto-update Nextcloud Apps
+    autoUpdateApps.enable = true;
+    # Set what time makes sense for you
+    autoUpdateApps.startAt = "05:00:00";
+
+    config = {
+      # Further forces Nextcloud to use HTTPS
+      # overwriteProtocol = "https";
+
+      # Nextcloud PostegreSQL database configuration, recommended over using SQLite
+      dbtype = "pgsql";
+      dbuser = "nextcloud2";
+      dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
+      dbname = "nextcloud2";
+      dbpassFile = "/var/nextcloud-db-pass";
+
+      adminpassFile = "/var/nextcloud-admin-pass";
+      adminuser = "admin";
+    };
+  };
+
+  # Enable PostgreSQL 
+  services.postgresql = {
+    enable = true;
+
+    # Ensure the database, user, and permissions always exist
+    ensureDatabases = [ "nextcloud" ];
+    ensureUsers = [
+      {
+        name = "nextcloud";
+        ensurePermissions."DATABASE nextcloud" = "ALL PRIVILEGES";
+      }
+    ];
+  };
+
+  # Ensure that postgres is running before running the setup
+  systemd.services."nextcloud-setup" = {
+    requires = [ "postgresql.service" ];
+    after = [ "postgresql.service" ];
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
+  #nixpkgs.config.permittedInsecurePackages = [ "nextcloud-19.0.6"];
+}