{ config, pkgs, lib, ... }: let cfg = config.services.nextcloud; in { config = lib.mkIf cfg.enable { services.nextcloud = { https = true; package = pkgs.nextcloud25; hostName = "neet.cloud"; config.dbtype = "sqlite"; config.adminuser = "jeremy"; config.adminpassFile = "/run/agenix/nextcloud-pw"; autoUpdateApps.enable = true; enableBrokenCiphersForSSE = false; }; age.secrets.nextcloud-pw = { file = ../../secrets/nextcloud-pw.age; owner = "nextcloud"; }; # backups backup.group."nextcloud".paths = [ config.services.nextcloud.home ]; services.nginx.virtualHosts.${config.services.nextcloud.hostName} = { enableACME = true; forceSSL = true; }; }; }