nixos/modules/server/nextcloud.nix

{
  config,
  pkgs,
  lib,
  ...
}:
with lib; {
  config = let
    cfg = config.elss.server.nextcloud;
  in
    mkIf cfg.enable {
      elss.server.sql.enable = mkDefault true;
      services.nextcloud = {
        enable = true;
        package = pkgs.nextcloud26;
        hostName = "cloudstore.ellmauthaler.net";
        https = true;
        enableBrokenCiphersForSSE = false;
        config = {
          dbtype = "pgsql";
          dbuser = "nextcloud";
          dbname = "nextcloud";
          adminuser = "storemin";
          adminpassFile = config.sops.secrets.storemin.path;
          dbhost = "/run/postgresql";
          defaultPhoneRegion = "DE";
        };
      };

      services.nginx.virtualHosts."cloudstore.ellmauthaler.net" = {
        enableACME = true;
        forceSSL = true;
      };

      systemd.services."nextcloud-setup" = {
        requires = ["postgresql.service"];
        after = ["postrgresql.service"];
      };
      sops.secrets = {
        storemin = {
          owner = "nextcloud";
          group = "nextcloud";
          sopsFile = ../../secrets/server.yaml;
        };
      };
    };
}