Commit files for public release

defaults/nextcloud/README.md

@@ -0,0 +1,17 @@
+# Nextcloud
+
+Running on [cloud.qo.is](https://cloud.qo.is), contact someone from the board for administrative tasks.
+
+At this time, we do not enforce any size limits or alike.
+
+We have some globally configured shared folders for our family members.
+
+For user documentation, refer to the [upstream Nextcloud docs](https://docs.nextcloud.com/server/stable/user_manual/en/). Clients can be downloaded from [nextcloud.com/install](https://nextcloud.com/install/).
+
+## Backup / Restore
+
+1. Stop all related services: nextcloud, php-fpm, redis etc.
+2. (mabe dump redis data?)
+3. Import Database Backup
+4. Restore `/var/lib/nextcloud`, which is currently a bind mount on `lindberg`'s `/mnt/data` volume
+5. Resync nextcloud files and database, see [nextcloud docs](https://docs.nextcloud.com/server/latest/admin_manual/maintenance/restore.html)

defaults/nextcloud/default.nix

@@ -0,0 +1,81 @@
+# Default configuration for hosts
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+
+  sops.secrets."nextcloud/admin" = with config.users.users.nextcloud; {
+    inherit group;
+    owner = name;
+  };
+
+  qois.postgresql.enable = true;
+  qois.backup-client.includePaths = [ config.services.nextcloud.home ];
+
+  services.nextcloud = {
+    enable = true;
+    https = true;
+    webfinger = true;
+    maxUploadSize = "10G";
+
+    database.createLocally = true;
+
+    config = {
+      adminpassFile = config.sops.secrets."nextcloud/admin".path;
+      adminuser = "root";
+      dbtype = "pgsql";
+    };
+
+    phpOptions = {
+      "opcache.interned_strings_buffer" = "23";
+    };
+
+    poolSettings = {
+      "pm" = "dynamic";
+      "pm.max_children" = "256";
+      "pm.max_requests" = "500";
+      "pm.max_spare_servers" = "16";
+      "pm.min_spare_servers" = "2";
+      "pm.start_servers" = "8";
+    };
+
+    configureRedis = true;
+    caching.redis = true;
+
+    notify_push = {
+      enable = true;
+      bendDomainToLocalhost = true;
+    };
+
+    settings = {
+      log_type = "syslog";
+      syslog_tag = "nextcloud";
+      "memories.exiftool" = "${lib.getExe pkgs.exiftool}";
+      "memories.vod.ffmpeg" = "${lib.getExe pkgs.ffmpeg-headless}";
+      "memories.vod.ffprobe" = "${pkgs.ffmpeg-headless}/bin/ffprobe";
+      preview_ffmpeg_path = "${lib.getExe pkgs.ffmpeg-headless}";
+      mail_smtpmode = "sendmail";
+      mail_domain = "qo.is";
+    };
+  };
+
+  services.phpfpm.pools.nextcloud.settings = {
+    "pm.max_children" = lib.mkForce "256";
+    "pm.max_spare_servers" = lib.mkForce "16";
+    "pm.start_servers" = lib.mkForce "8";
+  };
+
+  users.users.nextcloud.extraGroups = [ "postdrop" ];
+
+  systemd.services.nextcloud-cron = {
+    path = [ pkgs.perl ];
+  };
+
+  environment.systemPackages = with pkgs; [
+    nodejs # required for Recognize
+  ];
+}