From 077d0895b42dc3e62b2246c3a99e16b93cd5f5e5 Mon Sep 17 00:00:00 2001
From: William <baduhai@proton.me>
Date: Thu, 13 Jul 2023 14:51:04 -0300
Subject: [PATCH] add nextcloud to alexandria

---
 hosts/servers/alexandria/default.nix   |  1 +
 hosts/servers/alexandria/nextcloud.nix | 27 ++++++++++++++++++++++++++
 hosts/servers/alexandria/variables.nix |  1 -
 secrets/nextcloud.json.age             | 16 +++++++++++++++
 4 files changed, 44 insertions(+), 1 deletion(-)
 create mode 100644 hosts/servers/alexandria/nextcloud.nix
 create mode 100644 secrets/nextcloud.json.age

diff --git a/hosts/servers/alexandria/default.nix b/hosts/servers/alexandria/default.nix
index 8c76297..9e8b823 100644
--- a/hosts/servers/alexandria/default.nix
+++ b/hosts/servers/alexandria/default.nix
@@ -10,6 +10,7 @@
     ./jellyfin.nix
     ./librespeed.nix
     ./minecraft.nix
+    ./nextcloud.nix
     ./nginx.nix
     ./paperless.nix
     ./searx.nix
diff --git a/hosts/servers/alexandria/nextcloud.nix b/hosts/servers/alexandria/nextcloud.nix
new file mode 100644
index 0000000..5642f3d
--- /dev/null
+++ b/hosts/servers/alexandria/nextcloud.nix
@@ -0,0 +1,27 @@
+{ inputs, config, pkgs, lib, ... }:
+
+{
+  services = {
+    nextcloud = {
+      enable = true;
+      package = pkgs.nextcloud27;
+      hostname = "nextcloud.baduhai.me";
+      configureRedis = true;
+      caching.apcu = false;
+      https = true;
+      sercreFile = config.age.secrets.nextcloud.path;
+    };
+
+    nginx.virtualHosts.${config.services.nextcloud.hostName} = {
+      useACMEHost = "baduhai.me";
+      forceSSL = true;
+      kTLS = true;
+    };
+  };
+
+  age.secrets.nextcloud = {
+    file = ../../../secrets/nextcloud.json.age;
+    owner = "nextcloud";
+    group = "hosted";
+  };
+}
diff --git a/hosts/servers/alexandria/variables.nix b/hosts/servers/alexandria/variables.nix
index 1c1add6..0841a3e 100644
--- a/hosts/servers/alexandria/variables.nix
+++ b/hosts/servers/alexandria/variables.nix
@@ -23,7 +23,6 @@ in {
     qbittorrent = mkStringOption "8008";
     actual = mkStringOption "8009";
     pairdrop = mkStringOption "8010";
-    miniflux = mkStringOption "8011";
     jellyfin = mkStringOption "8096";
     sonarr = mkStringOption "8989";
     jackett = mkStringOption "9117";
diff --git a/secrets/nextcloud.json.age b/secrets/nextcloud.json.age
new file mode 100644
index 0000000..3be76e6
--- /dev/null
+++ b/secrets/nextcloud.json.age
@@ -0,0 +1,16 @@
+age-encryption.org/v1
+-> ssh-ed25519 hi+lKA SsSZXZTn+ZaefdeVvvnS1k/f8EjYU8Cn4W+yQFhdpSU
+M8RVb+CWBmQWK17OlB5glDzieubtg90SGRQh/hnmH1Y
+-> ssh-ed25519 SP9f6A BvAhyE9erg0VvlvXojVgv7e3zv2lU3JVrfgN1+ddzSk
+Hw0UJltUg0ewDGxR/kjLA3KPvRyPp4qmmuikRqm6Lyk
+-> ssh-ed25519 8YSAiw dY56LRpTmiZ/f4oWBAZzlOr8VkHUR38o6NBk67XmHks
+iNw3xxSAmzYm84eWAPwy+Kg70aqT3FegJuQgW8bgD8E
+-> ssh-ed25519 3Chb7w fCUcQbI3FuzLo980/w/qvlzuVcnhFEyk+JvyY3eEM3o
+3sPYmv/hoysRtIA6Fb19QI1cSbYZ9vIDWVmmzSZbwog
+-> ssh-ed25519 J6tVTA pqZWQ2IQL31HFQgBApSDDh9jqlvNO0OsCl704QHN3mw
++ANtWy94qtpy/IrUX8sbuxqY/jupQ2Ij+porE9H1ZSg
+-> JX#25-grease ik7U7n
+weuEU/AqgBSZQSb4vHzDIMTRcbNcNnESQF6OcJ8N68yA5EGvQ75tPLkCKSOkprkw
+z1FMPifPDkcviKoAAxywtrGnOqKkro2tZrXXNI4YJ0oKcBKSZkfbRho
+--- jQNm3S+I4jMRrMABBNb9UXTPRQjE3JwHns+fGOA8+ps
+_~Q3tän™:ö°E~r1÷Õ¡¶6ß¡/–h•ÓÖÍĽN܃‡lñ-Eso\‰`ô°Ñ™N×?;Iу€ÛP,ÞGãXPì§6{»joÝ^mÌäñ€_	BêG’Geáø«ßδ6ö¯.矛†~eN¸z«‘˦¾”7"vÎõ
˜
\ No newline at end of file