mirror of
https://github.com/phfroidmont/self-hosting.git
synced 2025-12-25 05:36:59 +01:00
79 lines
2.2 KiB
Nix
79 lines
2.2 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
let
|
|
uidFile = pkgs.writeText "uidfile" ''
|
|
nextcloud:993
|
|
'';
|
|
gidFile = pkgs.writeText "gidfile" ''
|
|
nextcloud:991
|
|
'';
|
|
in
|
|
{
|
|
sops.secrets = {
|
|
sshfsKey = {
|
|
key = "sshfs_keys/private";
|
|
};
|
|
nextcloudDbPassword = {
|
|
owner = config.users.users.nextcloud.name;
|
|
key = "nextcloud/db_password";
|
|
restartUnits = [ "nextcloud-setup.service" ];
|
|
};
|
|
nextcloudAdminPassword = {
|
|
owner = config.users.users.nextcloud.name;
|
|
key = "nextcloud/admin_password";
|
|
restartUnits = [ "nextcloud-setup.service" ];
|
|
};
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
sshfs
|
|
];
|
|
|
|
systemd.services.nextcloud-data-sshfs = {
|
|
wantedBy = [ "multi-user.target" "nextcloud-setup.service" ];
|
|
before = [ "phpfpm-nextcloud.service" ];
|
|
restartIfChanged = false;
|
|
serviceConfig = {
|
|
ExecStartPre = "${pkgs.coreutils}/bin/mkdir -p /var/lib/nextcloud/data";
|
|
ExecStart =
|
|
let
|
|
options = builtins.concatStringsSep "," [
|
|
"identityfile=${config.sops.secrets.sshfsKey.path}"
|
|
"ServerAliveInterval=15"
|
|
"idmap=file"
|
|
"uidfile=${uidFile}"
|
|
"gidfile=${gidFile}"
|
|
"allow_other"
|
|
"default_permissions"
|
|
"nomap=ignore"
|
|
];
|
|
in
|
|
"${pkgs.sshfs}/bin/mount.fuse.sshfs www-data@10.0.2.3:/nix/var/data/nextcloud/data "
|
|
+ "/var/lib/nextcloud/data -o ${options}";
|
|
ExecStopPost = "-${pkgs.fuse}/bin/fusermount -u /var/lib/nextcloud/data";
|
|
KillMode = "process";
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts."${config.services.nextcloud.hostName}" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
};
|
|
|
|
|
|
services.nextcloud = {
|
|
enable = true;
|
|
package = pkgs.nextcloud22;
|
|
hostName = "cloud.${config.networking.domain}";
|
|
config = {
|
|
dbtype = "pgsql";
|
|
dbuser = "nextcloud";
|
|
dbhost = "10.0.1.11";
|
|
dbname = "nextcloud";
|
|
dbpassFile = "${config.sops.secrets.nextcloudDbPassword.path}";
|
|
adminpassFile = "${config.sops.secrets.nextcloudAdminPassword.path}";
|
|
adminuser = "root";
|
|
overwriteProtocol = "https";
|
|
defaultPhoneRegion = "BE";
|
|
};
|
|
};
|
|
}
|