nixos/kelder: Add Nextcloud

nixos/boxes/kelder/containers/spoder/default.nix

@@ -37,6 +37,10 @@ in
                 owner = "acme";
                 group = "acme";
               };
+              "kelder/nextcloud-root.txt" = {
+                owner = "nextcloud";
+                group = "nextcloud";
+              };
             };
           };
         };
@@ -84,6 +88,20 @@ in
 
         services = {
           resolved.extraConfig = mkForce "";
+
+          nextcloud = {
+            enable = true;
+            package = pkgs.nextcloud26;
+            datadir = "/mnt/storage/nextcloud";
+            hostName = "cloud.${lib.my.kelder.domain}";
+            https = true;
+            enableBrokenCiphersForSSE = false;
+            config = {
+              extraTrustedDomains = [ "cloud-local.${lib.my.kelder.domain}" ];
+              adminpassFile = config.age.secrets."kelder/nextcloud-root.txt".path;
+              defaultPhoneRegion = "IE";
+            };
+          };
         };
       };
     };

nixos/boxes/kelder/containers/spoder/nginx.nix

@@ -169,6 +169,10 @@ in
                 extraConfig = lib.my.nginx.proxyHeaders;
               };
             };
+
+            "cloud.${lib.my.kelder.domain}" = {
+              serverAliases = [ "cloud-local.${lib.my.kelder.domain}" ];
+            };
           };
 
           defaultsFor = mapAttrs (n: _: {

nixos/modules/tmproot.nix

@@ -392,6 +392,16 @@ in
       (mkIf config.boot.plymouth.enable {
         my.tmproot.persistence.config.files = [ "/var/lib/plymouth/boot-duration" ];
       })
+      (mkIf config.services.nextcloud.enable {
+        my.tmproot.persistence.config.directories = [
+          {
+            directory = config.services.nextcloud.home;
+            mode = "0750";
+            user = "nextcloud";
+            group = "nextcloud";
+          }
+        ];
+      })
     ]))
   ]);