nixos-selfhost/nextcloud.nix

{ self, config, lib, pkgs, ... }: 
let 
domain = "cloud.sondell.org";
nextcloud = pkgs.nextcloud28;
in
{

  environment.systemPackages = [
    nextcloud
  ];
  services = {
    nginx.virtualHosts = {
      ${domain} = {
        forceSSL = true;
        enableACME = true;
        # Use DNS Challenege.
        # acmeRoot = null;
      };
    };
    postgresql.enable = true;
    # 
    nextcloud = {
      enable = true;
      hostName = domain;
      # Need to manually increment with every major upgrade.
      package = nextcloud;
      # Let NixOS install and configure the database automatically.
      database.createLocally = true;
      # Increase the maximum file upload size.
      maxUploadSize = "16G";
      https = true;
      autoUpdateApps.enable = true;
      extraAppsEnable = true;
      # Let NixOS install and configure Redis caching automatically.
      configureRedis = true;
      settings = {
        maintenance_window_start = 1;
      };
      extraOptions = {
       #  redis = {
       #     # host = "/run/redis/redis.sock";
       #     port = 0;
       #     dbindex = 0;
       #     password = "secret";
       #     timeout = 1.5;
       # };
      };
      extraApps = with config.services.nextcloud.package.packages.apps; {
        # List of apps we want to install and are already packaged in
        # https://github.com/NixOS/nixpkgs/blob/master/pkgs/servers/nextcloud/packages/nextcloud-apps.json
        inherit mail calendar contacts notes onlyoffice tasks cookbook;
      };
      config = {
        overwriteProtocol = "https";
        defaultPhoneRegion = "SE";
        dbtype = "pgsql";
        adminuser = "admin";
        adminpassFile = "/etc/nixos/.secrets/nextadminpw";
      };
      # Suggested by Nextcloud's health check.
      phpOptions."opcache.interned_strings_buffer" = "16";
    };
    # Nightly database backups.
    # postgresqlBackup = {
    #   enable = true;
    #   startAt = "*-*-* 01:15:00";
    # };
  };
  # services.onlyoffice = {
  #   enable = true;
  #   port = 8123;
  # };
  # services.nginx.virtualHosts."office.sondell.org" = {
  #   forceSSL = true;
  #   enableACME = true;
  #   locations."/".proxyPass = "http://localhost:8123";
    
  # };
}