{ config, pkgs, ... }:
{
	services.nextcloud = {
		enable = true;
		# Disable server-side file encryption for stronger SSL
		enableBrokenCiphersForSSE = false;
		hostName = "cloud.graven.dev";
		https = true;
		package = pkgs.nextcloud26;
		autoUpdateApps.enable = true;
		maxUploadSize = "10G";
		webfinger = true;
		caching.redis = true;
		config = {
			dbtype = "pgsql";
			dbuser = "nextcloud";
			dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
			dbname = "nextcloud";
			defaultPhoneRegion = "DK";
			adminpassFile = builtins.toString config.secrets.files.nc_admin_pass.file;
			adminuser = "root";
		};
	};
}