Nextcloud: Disable at rest encryption for better SSL

main
Amanda Graven 2023-01-22 19:29:10 +01:00
parent 708014dbdc
commit 03650c11c0
Signed by: amanda
GPG Key ID: F747582C5608F4CB
1 changed files with 21 additions and 19 deletions

View File

@ -1,22 +1,24 @@
{ config, pkgs, ... }:
{
services.nextcloud = {
enable = true;
hostName = "cloud.graven.dev";
https = true;
package = pkgs.nextcloud25;
autoUpdateApps.enable = true;
maxUploadSize = "10G";
webfinger = true;
caching.redis = true;
config = {
dbtype = "pgsql";
dbuser = "nextcloud";
dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
dbname = "nextcloud";
defaultPhoneRegion = "DK";
adminpassFile = builtins.toString config.secrets.files.nc_admin_pass.file;
adminuser = "root";
};
};
services.nextcloud = {
enable = true;
# Disables server-side file encryption for stronger SSL
enableBrokenCiphersForSSE = false;
hostName = "cloud.graven.dev";
https = true;
package = pkgs.nextcloud25;
autoUpdateApps.enable = true;
maxUploadSize = "10G";
webfinger = true;
caching.redis = true;
config = {
dbtype = "pgsql";
dbuser = "nextcloud";
dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
dbname = "nextcloud";
defaultPhoneRegion = "DK";
adminpassFile = builtins.toString config.secrets.files.nc_admin_pass.file;
adminuser = "root";
};
};
}