add nextcloud with htts via tailscale/acme-LetsEncrypt

modules/nextcloud.nix

@@ -0,0 +1,38 @@
+{ pkgs, ... }:
+{
+  services.nextcloud = {
+    package = pkgs.nextcloud29;
+    enable = true;
+    hostName = "bfds.taila388c.ts.net";
+    config.extraTrustedDomains = [ "bfds" "bfds.local" ];
+
+    database.createLocally = true;
+    config = {
+       dbtype = "pgsql"; 
+       adminpassFile = "/var/lib/nextcloud-pass-files/nc-admin-password";
+    };
+    extraApps = {
+      inherit (pkgs.nextcloud29Packages.apps) 
+	cookbook
+	notes
+	;
+    };
+    extraAppsEnable = true;
+    https = true;
+  }; 
+
+  services.nginx.virtualHosts."bfds.taila388c.ts.net" = {
+    addSSL = true; 
+#    forceSSL = true;
+    enableACME = true;
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "rw@boogiedev.net";   
+    certs = { 
+      "bfds.taila388c.ts.net".email = "rw@boogiedev.net"; 
+    }; 
+  };
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+}