nextcloud.nix

{
  services.postgresql = {
    enable = true;
    ensureDatabases = [ "nextcloud" ];
    ensureUsers = [
      { name = "nextcloud";
        ensurePermissions."DATABASE nextcloud" = "ALL PRIVILEGES";
      }
    ];
  };
  
  services.nextcloud = {
    enable = true;
    package = pkgs.nextcloud18;
    
    config = {
      adminpassFile = "/var/lib/nextcloud/admin.txt";
      adminuser = "admin";
      
      extraTrustedDomains = [ "example.org" ];
      trustedProxies = [ "192.168.101.10" ];
      overwriteProtocol = "https";

      dbtype = "pgsql";
      dbuser = "nextcloud";
      dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
      dbname = "nextcloud";
    };
    
    hostName = "example.org";
    https = false; # HTTPS is added in the reverse proxy
    maxUploadSize = "5G";
    nginx.enable = true;
    
  };
  
  systemd.services."nextcloud-setup" = {
    requires = ["postgresql.service"];
    after = ["postgresql.service"];
  };
}