feat(APPA): add nextcloud

hosts/APPA/services/adguard-home.nix

@@ -42,6 +42,10 @@
             domain = config.services.gitea.settings.server.DOMAIN;
             answer = "192.168.2.40";
           }
+          {
+            domain = config.services.nextcloud.hostName;
+            answer = "192.168.2.40";
+          }
           {
             domain = "anki.dryb.org";
             answer = "192.168.2.40";

hosts/APPA/services/default.nix

@@ -6,6 +6,7 @@
     ./ddclient.nix
     ./gitea.nix
     ./homepage-dashboard.nix
+    ./nextcloud.nix
     ./nginx.nix
     ./postgresql.nix
     ./vaultwarden.nix

hosts/APPA/services/nextcloud.nix

@@ -0,0 +1,24 @@
+{ config, ... }:
+{
+
+  age.secrets.passwords-gitea-db = {
+    file = ../../../secrets/passwords/gitea/db.age;
+    owner = config.users.users.nextcloud.name;
+    group = config.users.groups.nextcloud.name;
+  };
+
+  services.nextcloud = {
+    enable = true;
+    https = true;
+    hostName = "nextcloud.dryb.org";
+    database.createLocally = true;
+    config = {
+      adminuser = "admin";
+      adminpassFile = config.age.secrets.passwords-gitea-db.path;
+    };
+    autoUpdateApps = {
+      enable = true;
+    };
+  };
+
+}

hosts/APPA/services/nginx.nix

@@ -18,6 +18,10 @@
         proxyPass = "http://127.0.0.1:8001";
       };
     };
+    virtualHosts."${config.services.nextcloud.hostName}" = {
+      useACMEHost = "dryb.org";
+      forceSSL = true;
+    };
     virtualHosts."${config.services.gitea.settings.server.DOMAIN}" = {
       useACMEHost = "dryb.org";
       forceSSL = true;