emelie/nix-deploy
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Wiki Activity

Nextcloud: Disable at rest encryption for better SSL

Browse source
This commit is contained in:
Amanda Graven 2023-01-22 19:29:10 +01:00
parent 708014dbdc
commit 03650c11c0
Signed by: amanda
GPG key ID: F747582C5608F4CB
1 changed files with 21 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

40
config/hosts/rudiger/services/nextcloud.nix
View file

@ -1,22 +1,24 @@
{ config, pkgs, ... }: { config, pkgs, ... }:
{ {
services.nextcloud = { services.nextcloud = {
enable = true; enable = true;
hostName = "cloud.graven.dev"; # Disables server-side file encryption for stronger SSL
https = true; enableBrokenCiphersForSSE = false;
package = pkgs.nextcloud25; hostName = "cloud.graven.dev";
autoUpdateApps.enable = true; https = true;
maxUploadSize = "10G"; package = pkgs.nextcloud25;
webfinger = true; autoUpdateApps.enable = true;
caching.redis = true; maxUploadSize = "10G";
config = { webfinger = true;
dbtype = "pgsql"; caching.redis = true;
dbuser = "nextcloud"; config = {
dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself dbtype = "pgsql";
dbname = "nextcloud"; dbuser = "nextcloud";
defaultPhoneRegion = "DK"; dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
adminpassFile = builtins.toString config.secrets.files.nc_admin_pass.file; dbname = "nextcloud";
adminuser = "root"; defaultPhoneRegion = "DK";
}; adminpassFile = builtins.toString config.secrets.files.nc_admin_pass.file;
}; adminuser = "root";
};
};
} }