l ubik.r: enable nextcloud

This commit is contained in:
lassulus 2023-07-02 22:46:37 +02:00
parent 0ac8623840
commit b5a295da8f

View File

@ -14,13 +14,25 @@ with import <stockholm/lib>;
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPBFGMjH0+Dco6DVFZbByENMci8CFTLXCL7j53yctPnM"; pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPBFGMjH0+Dco6DVFZbByENMci8CFTLXCL7j53yctPnM";
}; };
networking.firewall.allowedTCPPorts = [ 80 ]; security.acme = {
acceptTerms = true;
defaults.email = "acme@lassul.us";
};
networking.firewall.allowedTCPPorts = [ 80 443 ];
# nextcloud
services.nginx.virtualHosts."c.apanowicz.de" = {
enableACME = true;
forceSSL = true;
};
services.nextcloud = { services.nextcloud = {
enable = true; enable = true;
enableBrokenCiphersForSSE = false;
hostName = "c.apanowicz.de"; hostName = "c.apanowicz.de";
package = pkgs.nextcloud25; package = pkgs.nextcloud25;
config.adminpassFile = "/run/nextcloud.pw"; config.adminpassFile = "/run/nextcloud.pw";
https = true; https = true;
maxUploadSize = "9001M";
}; };
systemd.services.nextcloud-setup.serviceConfig.ExecStartPre = [ systemd.services.nextcloud-setup.serviceConfig.ExecStartPre = [
"+${pkgs.writeDash "copy-pw" '' "+${pkgs.writeDash "copy-pw" ''