some clean

2026-06-11 04:30:41 +03:00 · 2025-10-10 20:08:23 +03:00
parent 4c57551ff8
commit fced475e86
101 changed files with 19 additions and 286 deletions
@@ -0,0 +1,170 @@
+{
+  config,
+  lib,
+  pkgs,
+  inputs,
+  xlib,
+  ...
+}:
+let
+  work = import inputs.nixpkgs-stable {
+    system = "x86_64-linux";
+    config.allowUnfree = true;
+    config.allowUnfreePredicate = true;
+  };
+in
+{
+  services = {
+    nextcloud-whiteboard-server = {
+      enable = true;
+      settings = {
+        NEXTCLOUD_URL = "http://nextcloud.local";
+      };
+      secrets = [ "${inputs.zeroq-credentials}/services/nextcloud/jwt-secret.txt" ];
+    };
+    nextcloud = {
+      enable = true;
+      package = pkgs.nextcloud31;
+      hostName = "nextcloud.local";
+      database.createLocally = true;
+      home = "${xlib.dirs.services-mnt-folder}/nextcloud";
+      configureRedis = true;
+      caching = {
+        redis = true;
+        memcached = true;
+      };
+      maxUploadSize = "5G";
+      config = {
+        dbtype = "pgsql";
+        dbuser = "nextcloud";
+        #dbhost = "/run/postgresql";
+        dbname = "nextcloud";
+        adminuser = "oqyude";
+        adminpassFile = "${inputs.zeroq-credentials}/services/nextcloud/admin-pass.txt";
+      };
+      settings = {
+        log_type = "file";
+        trusted_domains = [
+          "nextcloud.zeroq.ru"
+          "100.64.0.0"
+          "192.168.1.20"
+          "localhost"
+        ];
+        trusted_proxies = [
+          "100.64.1.0"
+        ];
+        overwriteprotocol = "https";
+      };
+      extraAppsEnable = true;
+      appstoreEnable = false;
+      extraApps = {
+        inherit (pkgs.nextcloud31Packages.apps) # (config.services.nextcloud.package.packages.apps)
+          deck
+          end_to_end_encryption
+          groupfolders
+          impersonate
+          # onlyoffice
+          bookmarks
+          calendar
+          contacts
+          cookbook
+          cospend
+          forms
+          gpoddersync
+          integration_paperless
+          mail
+          maps
+          memories
+          music
+          notes
+          notify_push
+          polls
+          previewgenerator
+          richdocuments
+          spreed
+          tasks
+          user_oidc
+          user_saml
+          whiteboard
+          ;
+      };
+    };
+    collabora-online = {
+      enable = true;
+      port = 9980;
+      settings = {
+        server_name = "office.zeroq.ru";
+        ssl = {
+          enable = false;
+          termination = true;
+          ssl_verification = false;
+        };
+        net = {
+          listen = "0.0.0.0";
+          post_allow.host = [
+            "0.0.0.0"
+          ];
+        };
+        storage.wopi = {
+          "@allow" = true;
+          host = [
+            "0.0.0.0/0"
+          ];
+        };
+      };
+    };
+    onlyoffice = {
+      enable = false;
+      hostname = "0.0.0.0";
+      jwtSecretFile = "${inputs.zeroq-credentials}/services/onlyoffice/jwt.txt";
+    };
+  };
+
+  # fonts.packages = [ work.corefonts ];
+
+  # networking.hosts = {
+  # };
+
+  systemd.services.nextcloud-config-collabora =
+    let
+      inherit (config.services.nextcloud) occ;
+      wopi_url = "http://localhost:${toString config.services.collabora-online.port}";
+      public_wopi_url = "https://office.zeroq.ru";
+      wopi_allowlist = lib.concatStringsSep "," [
+        "0.0.0.0/0"
+      ];
+    in
+    {
+      wantedBy = [ "multi-user.target" ];
+      after = [
+        "nextcloud-setup.service"
+        "coolwsd.service"
+      ];
+      requires = [ "coolwsd.service" ];
+      script = ''
+        ${occ}/bin/nextcloud-occ config:app:set richdocuments wopi_url --value ${lib.escapeShellArg wopi_url}
+        ${occ}/bin/nextcloud-occ config:app:set richdocuments public_wopi_url --value ${lib.escapeShellArg public_wopi_url}
+        ${occ}/bin/nextcloud-occ config:app:set richdocuments wopi_allowlist --value ${lib.escapeShellArg wopi_allowlist}
+        ${occ}/bin/nextcloud-occ richdocuments:setup
+      '';
+      serviceConfig = {
+        Type = "oneshot";
+      };
+    };
+
+  fileSystems."${config.services.nextcloud.home}" = {
+    device = "${xlib.dirs.services-folder}/nextcloud";
+    options = [
+      "bind"
+      "nofail"
+    ];
+  };
+
+  systemd.tmpfiles.rules = [
+    "z ${config.services.nextcloud.home} 0750 nextcloud nextcloud -"
+  ];
+
+  environment.systemPackages = [
+    pkgs.nc4nix # Packaging helper for Nextcloud apps
+  ];
+}