add nextcloud

dafoe/configuration.nix

@@ -63,8 +63,8 @@
     EDITOR = "vim";
 
     # bitwarden key
-    YUBICO_CLIENT_ID = "${../nix-secrets/willem/vaultwarden/yubico-id}";
-    YUBICO_SECRET_KEY = "${../nix-secrets/willem/vaultwarden/yubico-secret}";
+    YUBICO_CLIENT_ID = "${../nix-secrets/dafoe/vaultwarden/yubico-id}";
+    YUBICO_SECRET_KEY = "${../nix-secrets/dafoe/vaultwarden/yubico-secret}";
   };
   environment.shells = [ pkgs.zsh ];
 

dafoe/hardware-configuration.nix

@@ -18,6 +18,13 @@
       fsType = "ext4";
     };
 
+  fileSystems."/nix" = 
+  { device = "/dev/disk/by-label/nix";
+    fsType = "ext4";
+    neededForBoot = true;
+    options = [ "noatime" ];
+  };
+
   swapDevices =
     [ { device = "/dev/disk/by-uuid/d8d1edd9-e549-4d92-94d5-8ac5af126a5b"; }
     ];

dafoe/services/default.nix

@@ -9,5 +9,6 @@
         ./restic.nix
         ./ssh.nix
         ./vaultwarden.nix
+        ./nextcloud.nix
     ];
 }

dafoe/services/nextcloud.nix

@@ -1,11 +1,15 @@
+{ pkgs, ... }:
 {
   services.nextcloud = {
     enable = true;
-    package = pkgs.nextcloud29
+    package = pkgs.nextcloud29;
     hostName = "cloud.vatthauer.xyz";
     https = true;
+    config.adminuser = "admin";
     config.adminpassFile = "${../../nix-secrets/dafoe/nextcloud/adminpass}";
     configureRedis = true;
     maxUploadSize = "1G";
+    #nginx.enable = true;
+    settings.overwriteProtocol = "https";
   };
 }

dafoe/services/nginx.nix

@@ -48,6 +48,7 @@
   services.nginx.virtualHosts."cloud.vatthauer.xyz" = {
     forceSSL = true;
     enableACME = true;
+    #locations."/".proxyPass = "http://localhost:8080";
     # nextcloud does location setup itself
   };
 }