feat(etna): add nextcloud

systems/etna/default.nix

@@ -11,6 +11,7 @@ in {
     ./minecraft.nix
     ./attic.nix
     ./matrix.nix
+    ./nextcloud.nix
   ];
 
   age.secrets = let
@@ -27,6 +28,12 @@ in {
       mode = "444";
     };
 
+    nextcloudAdminPass = {
+      file = "${path}/nextcloudAdminPass.age";
+      owner = config.users.users.nextcloud.name;
+      group = config.users.users.nextcloud.name;
+    };
+
     apiRsEnv.file = "${path}/apiRsEnv.age";
     ukubotRsEnv.file = "${path}/ukubotRsEnv.age";
     ngrokEnv.file = "${path}/ngrokEnv.age";

systems/etna/nextcloud.nix

@@ -0,0 +1,18 @@
+{config, pkgs, ...}: {
+  cfTunnels."cloud.uku3lig.net" = "http://localhost:80";
+
+  services.nextcloud = {
+    enable = true;
+    package = pkgs.nextcloud28;
+
+    https = true;
+    hostName = "cloud.uku3lig.net";
+    datadir = "/data/nextcloud";
+
+    configureRedis = true;
+
+    config = {
+      adminpassFile = config.age.secrets.nextcloudAdminPass.path;
+    };
+  };
+}