feat: Deploy nextcloud

nixos/mirai/configuration.nix

@@ -11,6 +11,13 @@
   ];
   security.sudo.wheelNeedsPassword = false;
 
+  sops.defaultSopsFile = ../../secrets/secrets.yaml;
+  sops.defaultSopsFormat = "yaml";
+  sops.age.keyFile = "/home/fs0c131y/.config/sops/age/keys.txt";
+  sops.secrets."nextcloud/adminpass" = {
+    owner = config.users.users.nextcloud.name;
+  };
+
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;

nixos/mirai/services.nix

@@ -17,7 +17,17 @@
     enable = true;
     package = pkgs.nextcloud30;
     hostName = "cloud.darksailor.dev";
+    config.adminuser = "servius";
+    config.adminpassFile = config.sops.secrets."nextcloud/adminpass".path;
+    configureRedis = true;
   };
+  services.nginx.virtualHosts."${config.services.nextcloud.hostName}".listen = [
+    {
+      addr = "127.0.0.1";
+      port = 8080; # NOT an exposed port
+    }
+  ];
+
   services.caddy = {
     enable = true;
     virtualHosts."music.darksailor.dev".extraConfig = ''