bertof/nix-dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Nextcloud: enable deployment

Browse source
This commit is contained in:
Filippo Berto 2023-07-10 12:09:49 +01:00
parent db063ba40a
commit 4fbdfd9761
No known key found for this signature in database
GPG key ID: FE98AE5EC52B1056
3 changed files with 16 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

13
baldur/configuration.nix
View file

@ -83,7 +83,8 @@
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
}; };
loki = "172.23.254.55"; loki_ipv4 = "172.23.254.55";
freya_ipv4 = "172.23.18.147";
in in
{ {
"unimi.bertof.net" = ssl // { "unimi.bertof.net" = ssl // {
@ -92,7 +93,7 @@
}; };
"home-assistant.bertof.net" = ssl // { "home-assistant.bertof.net" = ssl // {
locations."/" = { locations."/" = {
proxyPass = "http://${loki}:8123/"; proxyPass = "http://${loki_ipv4}:8123/";
proxyWebsockets = true; proxyWebsockets = true;
}; };
extraConfig = '' extraConfig = ''
@ -102,25 +103,25 @@
}; };
"radarr.bertof.net" = ssl // { "radarr.bertof.net" = ssl // {
locations."/" = { locations."/" = {
proxyPass = "http://${loki}:7878/"; proxyPass = "http://${loki_ipv4}:7878/";
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };
"sonarr.bertof.net" = ssl // { "sonarr.bertof.net" = ssl // {
locations."/" = { locations."/" = {
proxyPass = "http://${loki}:8989/"; proxyPass = "http://${loki_ipv4}:8989/";
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };
"jellyfin.bertof.net" = ssl // { "jellyfin.bertof.net" = ssl // {
locations."/" = { locations."/" = {
proxyPass = "http://${loki}:8096/"; proxyPass = "http://${loki_ipv4}:8096/";
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };
"my-nextcloud.bertof.net" = ssl // { "my-nextcloud.bertof.net" = ssl // {
locations."/" = { locations."/" = {
proxyPass = "http://freya.local:80/"; proxyPass = "http://${freya_ipv4}:80/";
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };

2
flake.nix
View file

@ -209,7 +209,7 @@
./freya/configuration.nix ./freya/configuration.nix
./nixos_modules/garage.nix ./nixos_modules/garage.nix
# ./nixos_modules/nextcloud.nix ./nixos_modules/nextcloud.nix
] ++ homeManagerModules ++ [ ] ++ homeManagerModules ++ [
{ home-manager.users.bertof = import ./freya/hm.nix; } { home-manager.users.bertof = import ./freya/hm.nix; }
]; ];

13
nixos_modules/nextcloud.nix
View file

@ -1,4 +1,4 @@
{ config, ... }: { { pkgs, config, ... }: {
age.secrets = { age.secrets = {
nextcloud_admin_secret = { file = ../secrets/nextcloud_admin_secret.age; owner = "nextcloud"; }; nextcloud_admin_secret = { file = ../secrets/nextcloud_admin_secret.age; owner = "nextcloud"; };
@ -12,16 +12,17 @@
services.nextcloud = { services.nextcloud = {
enable = true; enable = true;
# package = pkgs.unstable_pkgs.nextcloud26; package = pkgs.nextcloud26;
hostName = "my-nextcloud.bertof.net"; hostName = "my-nextcloud.bertof.net";
maxUploadSize = "32G"; maxUploadSize = "24G";
config.trustedProxies = [ "172.23.4.159" ]; config.trustedProxies = [ "172.23.4.159" "fd80:56c2:e21c:f9c7:5399:93be:21a9:9fa0" "fe80::3079:d8ff:feb5:7d62" ];
config.extraTrustedDomains = [ config.services.nextcloud.hostName "freya.local" ]; config.extraTrustedDomains = [ config.services.nextcloud.hostName "freya.local" ];
config.adminpassFile = config.age.secrets.nextcloud_admin_secret.path; config.adminpassFile = config.age.secrets.nextcloud_admin_secret.path;
config.overwriteProtocol = "https";
config.objectstore.s3 = { config.objectstore.s3 = {
enable = true; enable = true;
bucket = "nextcloud"; bucket = "nextcloud-storage";
autocreate = false; autocreate = false;
key = "GK622e38479552cbbbba48fd04"; key = "GK622e38479552cbbbba48fd04";
secretFile = config.age.secrets.nextcloud_bucket_secret.path; secretFile = config.age.secrets.nextcloud_bucket_secret.path;
@ -32,4 +33,6 @@
usePathStyle = true; usePathStyle = true;
}; };
}; };
networking.firewall.allowedTCPPorts = [ 80 ];
} }