Separate nextcloud

modules/default.nix

@@ -35,6 +35,7 @@ device:
     ./power.nix
     ./network.nix
   ] ++ lib.optionals (device == "AMD-Workstation") [
+    ./nextcloud.nix
     ./mailserver.nix
     ./matrix-synapse.nix
     ./workspace/kanshi.nix

modules/nextcloud.nix

@@ -0,0 +1,18 @@
+{ config, pkgs, lib, ... }:
+{
+  services.nextcloud = {
+    enable = true;
+    nginx.enable = true;
+    hostName = "nextcloud.balsoft.ru";
+    config.adminpassFile = "/home/balsoft/nextcloud-admin";
+    package = pkgs.nextcloud19;
+    https = true;
+  };
+  services.nginx.virtualHosts."nextcloud.balsoft.ru" = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/".proxyWebsockets = true;
+    locations."~ ^\\/(?:build|tests|config|lib|3rdparty|templates|data)\\/".proxyWebsockets = true;
+    locations."~ ^\\/(?:index|remote|public|cron|core/ajax\\/update|status|ocs\\/v[12]|updater\\/.+|ocs-provider\\/.+|ocm-provider\\/.+)\\.php(?:$|\\/)".proxyWebsockets = true;
+  };
+}

modules/services.nix

@@ -51,7 +51,7 @@
   networking.firewall.trustedInterfaces = [ "eth0" ];
 
   services.nextcloud = {
-    enable = true;
+    enable = config.device == "AMD-Workstation";
     nginx.enable = true;
     hostName = "nextcloud.balsoft.ru";
     config.adminpassFile = "/home/balsoft/nextcloud-admin";
@@ -59,6 +59,8 @@
     https = true;
   };
 
+  services.nginx.enable = config.device == "AMD-Workstation";
+
   services.nginx.virtualHosts."nextcloud.balsoft.ru" = {
     enableACME = true;
     forceSSL = true;