Configure nextcloud for montalin

host/montalin/applications/cloud.nix

@@ -1,4 +1,6 @@
-{ config, pkgs, ... }: {
+{ config, pkgs, ... }: let
+  host = "chur.fh2.ch";
+in {
 
   imports = [
 
@@ -6,7 +8,13 @@
   ];
 
   services.nextcloud = {
-    hostName = "cloud.qo.is";
+    #hostName = "cloud.qo.is";
+    hostName = host;
     package = pkgs.nextcloud19;
   };
+  services.nginx.virtualHosts."${host}" = {
+    forceSSL = true;
+    enableACME = true;
+  };
+  
 }

host/montalin/database.nix

@@ -2,10 +2,15 @@
 
 {
 
+  imports = [
+    ../../role/database
+  ];
   services.postgresql = {
-    #enable = true; # Required? Better in role?
-    package = pkgs.postgresql_12;
+    ensureDatabases = [ "nextcloud" ];
+    ensureUsers = [
+     { name = "nextcloud";
+       ensurePermissions."DATABASE nextcloud" = "ALL PRIVILEGES";
+     }
+    ];
   };
-
-  services.postgresqlBackup.enable = true; # TODO: Role?
 }

host/montalin/networking.nix

@@ -18,4 +18,6 @@
   # Configure network proxy if necessary
   # networking.proxy.default = "http://user:password@proxy:port/";
   # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
 }