{ pkgs, config, ... }: {

  age.secrets = {
    nextcloud_admin_secret = { file = ../secrets/nextcloud_admin_secret.age; owner = "nextcloud"; };
    nextcloud_bucket_secret = { file = ../secrets/nextcloud_bucket_secret.age; owner = "nextcloud"; };
  };

  # services.nginx.virtualHosts.${config.services.nextcloud.hostName} = {
  #   enableACME = true;
  #   forceSSL = true;
  # };

  services.nextcloud = {
    enable = true;
    package = pkgs.unstable_pkgs.nextcloud26;

    hostName = "freya.local";
    maxUploadSize = "32G";
    config.trustedProxies = [ "172.23.4.159" ];
    config.adminpassFile = config.age.secrets.nextcloud_admin_secret.path;
    config.objectstore.s3 = {
      enable = true;
      bucket = "nextcloud";
      autocreate = false;
      key = "GK622e38479552cbbbba48fd04";
      secretFile = config.age.secrets.nextcloud_bucket_secret.path;
      hostname = "localhost";
      port = 3900;
      useSsl = false;
      region = "garage";
      usePathStyle = true;
    };
  };
}