{ config, lib, pkgs, ... }:

{
  sydnix = {
    sops.secrets = {
      nextcloud-admin = {
        owner = "nextcloud";
        group = "nextcloud";
      };
    };

    impermanence.directories = [ "/var/lib/nextcloud" ];
  };

  # Setting `services.nextcloud.hostName` automatically sets up a Nginx server
  # (on port 80) hosting the Nextcloud services.
  networking.firewall.allowedTCPPorts = [ 80 ];

  services.nextcloud = {
    enable = true;
    hostName = "cloud.internal.deertopia.net";
    package = pkgs.nextcloud30;
    config = {
      adminpassFile = "/run/secrets/nextcloud-admin";
      dbtype = "sqlite";
    };
  };
}