emelie/nix-deploy
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Wiki Activity

Nextcloud: Disable at rest encryption for better SSL

Browse source
This commit is contained in:
Amanda Graven 2023-01-22 19:29:10 +01:00
parent 708014dbdc
commit 03650c11c0
Signed by: amanda
GPG key ID: F747582C5608F4CB
1 changed files with 21 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

40
config/hosts/rudiger/services/nextcloud.nix
View file

@ -1,22 +1,24 @@
{ config, pkgs, ... }:
{
services.nextcloud = {
enable = true;
hostName = "cloud.graven.dev";
https = true;
package = pkgs.nextcloud25;
autoUpdateApps.enable = true;
maxUploadSize = "10G";
webfinger = true;
caching.redis = true;
config = {
dbtype = "pgsql";
dbuser = "nextcloud";
dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
dbname = "nextcloud";
defaultPhoneRegion = "DK";
adminpassFile = builtins.toString config.secrets.files.nc_admin_pass.file;
adminuser = "root";
};
};
services.nextcloud = {
enable = true;
# Disables server-side file encryption for stronger SSL
enableBrokenCiphersForSSE = false;
hostName = "cloud.graven.dev";
https = true;
package = pkgs.nextcloud25;
autoUpdateApps.enable = true;
maxUploadSize = "10G";
webfinger = true;
caching.redis = true;
config = {
dbtype = "pgsql";
dbuser = "nextcloud";
dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
dbname = "nextcloud";
defaultPhoneRegion = "DK";
adminpassFile = builtins.toString config.secrets.files.nc_admin_pass.file;
adminuser = "root";
};
};
}