{ config, pkgs, ... }:
{

  age.secrets.passwords-nextcloud-admin = {
    file = ../../../secrets/passwords/nextcloud/admin.age;
    owner = config.users.users.nextcloud.name;
    group = config.users.groups.nextcloud.name;
  };

  users.groups.media.members = [ "nextcloud" ];

  services.nextcloud = {
    enable = true;
    package = pkgs.nextcloud30;
    https = true;
    hostName = "nextcloud.dryb.org";
    database.createLocally = true;
    config = {
      adminuser = "admin";
      adminpassFile = config.age.secrets.passwords-nextcloud-admin.path;
      dbtype = "pgsql";
    };
    autoUpdateApps = {
      enable = true;
    };
  };

}