diff --git a/modules/services/nextcloud.nix b/modules/services/nextcloud.nix new file mode 100644 index 0000000..7d22da6 --- /dev/null +++ b/modules/services/nextcloud.nix @@ -0,0 +1,31 @@ +{ pkgs, ...}: +{ + services.nginx.enable = false ; + services.phpfpm.pools.nextcloud.settings."listen.owner" = "nextcloud"; + services.phpfpm.pools.nextcloud.settings."listen.group" = "caddy"; + services.phpfpm.pools.nextcloud.settings."listen.mode" = "0660"; + services.caddy.virtualHosts."koum.porzh.me".extraConfig = '' + root * ${pkgs.nextcloud31}/ + php_fastcgi unix//run/phpfpm/nextcloud.sock + file_server + + header { + Strict-Transport-Security "max-age=31536000; includeSubDomains" + X-Content-Type-Options" "nosniff" + X-Frame-Options "SAMEORIGIN" + X-XSS-Protection "1; mode=block" + Referrer-Policy "same-origin" +# Permission-Policy "camera=(), moicrophone=(), geolocation=()" + } + ''; + services.nextcloud = { + enable = true ; + package = pkgs.nextcloud31; + hostName = "koum.porzh.me"; + database.createLocally = true ; + config = { + dbtype = "sqlite"; + adminpassFile="/home/lomig/.config/nextcloud.pass"; + }; + }; +} diff --git a/modules/sites/porzh.me/index.html b/modules/sites/porzh.me/index.html index e66360f..5d45f26 100644 --- a/modules/sites/porzh.me/index.html +++ b/modules/sites/porzh.me/index.html @@ -2,7 +2,7 @@
-