feat(etna): add nextcloud

secrets/etna/nextcloudAdminPass.age

@@ -0,0 +1,11 @@
+-----BEGIN AGE ENCRYPTED FILE-----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-----END AGE ENCRYPTED FILE-----

secrets/secrets.nix

@@ -21,4 +21,5 @@ in {
   "etna/minecraftEnv.age".publicKeys = main ++ [etna];
   "etna/atticEnv.age".publicKeys = main ++ [etna];
   "etna/dendriteKey.age".publicKeys = main ++ [etna];
+  "etna/nextcloudAdminPass.age".publicKeys = main ++ [etna];
 }

systems/etna/default.nix

@@ -11,6 +11,7 @@ in {
     ./minecraft.nix
     ./attic.nix
     ./matrix.nix
+    ./nextcloud.nix
   ];
 
   age.secrets = let
@@ -27,6 +28,12 @@ in {
       mode = "444";
     };
 
+    nextcloudAdminPass = {
+      file = "${path}/nextcloudAdminPass.age";
+      owner = config.users.users.nextcloud.name;
+      group = config.users.users.nextcloud.name;
+    };
+
     apiRsEnv.file = "${path}/apiRsEnv.age";
     ukubotRsEnv.file = "${path}/ukubotRsEnv.age";
     ngrokEnv.file = "${path}/ngrokEnv.age";

systems/etna/nextcloud.nix

@@ -0,0 +1,18 @@
+{config, pkgs, ...}: {
+  cfTunnels."cloud.uku3lig.net" = "http://localhost:80";
+
+  services.nextcloud = {
+    enable = true;
+    package = pkgs.nextcloud28;
+
+    https = true;
+    hostName = "cloud.uku3lig.net";
+    datadir = "/data/nextcloud";
+
+    configureRedis = true;
+
+    config = {
+      adminpassFile = config.age.secrets.nextcloudAdminPass.path;
+    };
+  };
+}