78 lines
2.4 KiB
Nix
78 lines
2.4 KiB
Nix
{ config, pkgs, lib, inputs, ... }:
|
|
{
|
|
|
|
age.secrets.nextcloud-cert = {
|
|
file = ../secrets/nextcloud-cert.age;
|
|
owner = "nginx";
|
|
group = "nginx";
|
|
};
|
|
age.secrets.nextcloud-key = {
|
|
file = ../secrets/nextcloud-key.age;
|
|
owner = "nginx";
|
|
group = "nginx";
|
|
};
|
|
# Enable Nginx
|
|
services.nginx = {
|
|
enable = true;
|
|
|
|
# Use recommended settings
|
|
recommendedGzipSettings = true;
|
|
recommendedOptimisation = true;
|
|
recommendedProxySettings = true;
|
|
recommendedTlsSettings = true;
|
|
|
|
# Only allow PFS-enabled ciphers with AES256
|
|
sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
|
|
|
|
# Setup Nextcloud virtual host to listen on ports
|
|
virtualHosts = {
|
|
"nextcloud.local" = {
|
|
serverAliases = [ "192.168.2.1" ];
|
|
## Force HTTP redirect to HTTPS
|
|
forceSSL = true;
|
|
#sslTrustedCertificate = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
|
|
sslCertificate = config.age.secrets.nextcloud-cert.path ;
|
|
sslCertificateKey = config.age.secrets.nextcloud-key.path ;
|
|
## LetsEncrypt
|
|
#enableACME = true;
|
|
};
|
|
};
|
|
};
|
|
|
|
age.secrets.nextcloud-admin = {
|
|
file = ../secrets/nextcloud-admin.age;
|
|
owner = "nextcloud";
|
|
group = "nextcloud";
|
|
};
|
|
services.nextcloud = {
|
|
enable = true;
|
|
package = pkgs.nextcloud27;
|
|
https = true;
|
|
hostName = "nextcloud.local";
|
|
config.adminpassFile = config.age.secrets.nextcloud-admin.path;
|
|
config.extraTrustedDomains = [ "192.168.2.1" ];
|
|
home = "/mnt/250ssd/nextcloud";
|
|
|
|
extraApps = {
|
|
spreed = pkgs.fetchNextcloudApp rec {
|
|
url = "https://github.com/nextcloud-releases/spreed/releases/download/v17.1.1/spreed-v17.1.1.tar.gz";
|
|
sha256 = "sha256-LaUG0maatc2YtWQjff7J54vadQ2RE4X6FcW8vFefBh8=";
|
|
};
|
|
};
|
|
extraAppsEnable = true;
|
|
extraOptions.enabledPreviewProviders = [
|
|
"OC\\Preview\\BMP"
|
|
"OC\\Preview\\GIF"
|
|
"OC\\Preview\\JPEG"
|
|
"OC\\Preview\\Krita"
|
|
"OC\\Preview\\MarkDown"
|
|
"OC\\Preview\\MP3"
|
|
"OC\\Preview\\OpenDocument"
|
|
"OC\\Preview\\PNG"
|
|
"OC\\Preview\\TXT"
|
|
"OC\\Preview\\XBitmap"
|
|
"OC\\Preview\\HEIC"
|
|
];
|
|
};
|
|
}
|