schrottkatze/katzen-cafe
0
0
Fork 0
mirror of https://forge.katzen.cafe/katzen-cafe/katzen-cafe.git synced 2024-11-24 22:58:44 +01:00
Code Issues Packages Projects Releases Wiki Activity

ein formatter ist passiert

Browse source
This commit is contained in:
Schrottkatze 2023-12-09 22:06:23 +01:00
parent a09be66c28
commit f40587796a
2 changed files with 37 additions and 35 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
modules/containers/nextcloud.nix
View file

@ -1,5 +1,4 @@
{ pkgs, ... }: {pkgs, ...}: {
{
containers."nextcloud" = { containers."nextcloud" = {
autoStart = true; autoStart = true;
privateNetwork = true; privateNetwork = true;
@ -19,7 +18,11 @@
isReadOnly = true; isReadOnly = true;
}; };
}; };
config = { config, pkgs, ... }: { config = {
config,
pkgs,
...
}: {
networking.firewall.enable = false; networking.firewall.enable = false;
environment.etc."resolv.conf".text = "nameserver 9.9.9.9"; environment.etc."resolv.conf".text = "nameserver 9.9.9.9";
services.nextcloud = { services.nextcloud = {
@ -29,7 +32,7 @@
dbtype = "pgsql"; dbtype = "pgsql";
dbhost = "/run/postgresql"; dbhost = "/run/postgresql";
adminpassFile = "/var/secret/nextcloud-admin-pass"; adminpassFile = "/var/secret/nextcloud-admin-pass";
trustedProxies = [ "10.0.3.1" ]; trustedProxies = ["10.0.3.1"];
}; };
hostName = "wolke.katzen.cafe"; hostName = "wolke.katzen.cafe";
package = pkgs.nextcloud27; package = pkgs.nextcloud27;
@ -43,7 +46,7 @@
}; };
services.postgresql = { services.postgresql = {
enable = true; enable = true;
ensureDatabases = [ "nextcloud" ]; ensureDatabases = ["nextcloud"];
ensureUsers = [ ensureUsers = [
{ {
name = "nextcloud"; name = "nextcloud";
@ -56,7 +59,7 @@
}; };
deployment.keys = { deployment.keys = {
"nextcloud-admin-pass" = { "nextcloud-admin-pass" = {
keyCommand = [ "pass" "nextcloud/admin-password" ]; keyCommand = ["pass" "nextcloud/admin-password"];
destDir = "/nextcloud/secret"; destDir = "/nextcloud/secret";
permissions = "0604"; permissions = "0604";
}; };

7
modules/proxy.nix
View file

@ -1,5 +1,4 @@
{ pkgs, ... }: {pkgs, ...}: {
{
security.acme = { security.acme = {
acceptTerms = true; acceptTerms = true;
defaults = { defaults = {
@ -70,7 +69,7 @@
}; };
}; };
users.users.nginx.extraGroups = [ "acme" ]; users.users.nginx.extraGroups = ["acme"];
services.nginx = { services.nginx = {
enable = true; enable = true;
@ -91,7 +90,7 @@
}; };
"_.katzen.cafe" = { "_.katzen.cafe" = {
# Catchall vhost, will redirect users to HTTPS for all vhosts # Catchall vhost, will redirect users to HTTPS for all vhosts
serverAliases = [ "*.katzen.cafe" ]; serverAliases = ["*.katzen.cafe"];
locations."/.well-known/acme-challenge" = { locations."/.well-known/acme-challenge" = {
root = "/var/lib/acme/acme-challenge"; root = "/var/lib/acme/acme-challenge";
}; };