feat(nixos-server): Add NextCloud

mrjones2014 · Jan 6, 2025 · cfe36d2 · cfe36d2
1 parent ce1a2b2
commit cfe36d2
Show file tree

Hide file tree

Showing 5 changed files with 44 additions and 2 deletions.
diff --git a/hosts/server/default.nix b/hosts/server/default.nix
@@ -28,6 +28,7 @@
     ./containers.nix
     ./wireguard.nix
     ./gotify.nix
+    ./nextcloud.nix
     ../../nixos-modules/sshd.nix
   ];
 

diff --git a/hosts/server/hardware-configuration.nix b/hosts/server/hardware-configuration.nix
@@ -32,8 +32,8 @@
       device = "/dev/disk/by-label/media";
       fsType = "ext4";
     };
-    "/mnt/extra-storage" = {
-      device = "/dev/disk/by-label/jellyfin";
+    "/mnt/nextcloud" = {
+      device = "/dev/disk/by-label/nextcloud";
       fsType = "ext4";
     };
   };

diff --git a/hosts/server/nextcloud.nix b/hosts/server/nextcloud.nix
@@ -0,0 +1,32 @@
+{ pkgs, config, ... }:
+let port = 8888;
+in {
+  age.secrets.nextcloud_admin_pass = {
+    file = ../../secrets/nextcloud_admin_pass.age;
+    owner = "nextcloud";
+    group = "nextcloud";
+  };
+  services.nextcloud = {
+    enable = true;
+    package = pkgs.nextcloud30;
+    extraApps = {
+      inherit (config.services.nextcloud.package.packages.apps)
+        calendar cospend tasks groupfolders memories notes previewgenerator;
+    };
+    extraAppsEnable = true;
+    configureRedis = true;
+    maxUploadSize = "1G";
+    hostName = "192.168.189.2";
+    home = "/mnt/nextcloud";
+    config.adminpassFile = config.age.secrets.nextcloud_admin_pass.path;
+  };
+  # see https://nixos.wiki/wiki/Nextcloud#Change_default_listening_port
+  services.nginx.virtualHosts."192.168.189.2".listen = [{
+    addr = "0.0.0.0";
+    inherit port;
+  }];
+  networking.firewall = {
+    allowedTCPPorts = [ port ];
+    allowedUDPPorts = [ port ];
+  };
+}
diff --git a/secrets.nix b/secrets.nix
@@ -15,4 +15,5 @@ in {
   "secrets/homepage.age".publicKeys = users ++ systems;
   "secrets/wireguard_server.age".publicKeys = users ++ systems;
   "secrets/cleanuperr_env.age".publicKeys = users ++ systems;
+  "secrets/nextcloud_admin_pass.age".publicKeys = users ++ systems;
 }
diff --git a/secrets/nextcloud_admin_pass.age b/secrets/nextcloud_admin_pass.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 FeK1Dw K5avukv+UCRu5pYuIcFHP2x1A9VLo6ssRTxysr0OjDM
+Xvtt+CTUrdCw5WsPdVzXV4HijzFq1/qhXqgNciyJubs
+-> ssh-ed25519 kfVkkw 01VWMCkWaLlq6mTyaW/Msh8scwy/LntBuya23TBCBQk
+aKXy4hrz532fiG7Xq3RSjCuAlniNV/kDJ25107vQ5KM
+--- DBAiXJ0cV7kC95h+C0mcYODESpWHXWLFLaKsRz+yCd0
+r�w����!y���
+#��lLB�q�H�eLB[fb�8g���&�ճۉ��Fovs��2�I����+�����<����#�������