nextcloud: switch to forceSSL

configuration.nix

@@ -12,15 +12,20 @@
       ./hardware-configuration.nix
 
       # meine module
-      ./modules/cron.nix
-      ./modules/users.nix
-      ./modules/storage.nix
-      ./modules/root-programs.nix
-      ./modules/smb.nix
-      ./modules/tailscale.nix
-      ./modules/tmux.nix
-#      ./modules/minetest-server.nix
-#      ./modules/wifi.nix ## noch kein device gefunden das geht. das kleine dwa-171 geht nicht
+      modules/tmux.nix
+      modules/cron.nix
+      modules/users.nix
+      modules/storage.nix
+      modules/root-programs.nix
+      modules/smb.nix
+      modules/tailscale.nix
+
+      #Server
+      modules/nextcloud.nix
+#      modules/minetest-server.nix
+
+     #Hardware
+#      modules/wifi.nix ## noch kein device gefunden das geht. das kleine dwa-171 geht nicht
      ];
 
   # Use the GRUB 2 boot loader.
@@ -32,8 +37,6 @@
   # boot.loader.grub.device = "/dev/disk/by-label/nixos";   #"/dev/sda";   # or "nodev" for efi only
   boot.loader.grub.device = "/dev/disk/by-id/ata-TOSHIBA_MK5061GSY_3273P0RAT";
 
-
-
   networking.hostName = "bfds"; # Define your hostname.
   # Pick only one of the below networking options.
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.

modules/nextcloud.nix

@@ -0,0 +1,44 @@
+{ pkgs, ... }:
+{
+  services.nextcloud = {
+    package = pkgs.nextcloud29;
+    enable = true;
+    hostName = "bfds.taila388c.ts.net";
+    settings.trusted_domains = [ "bfds" "bfds.local" ];
+    settings.log_Type = "file";
+
+    database.createLocally = true;
+    config = {
+       dbtype = "pgsql"; 
+       adminpassFile = "/var/lib/nextcloud-pass-files/nc-admin-password";
+    };
+    extraApps = {
+      inherit (pkgs.nextcloud29Packages.apps) 
+	cookbook notes deck;
+
+        money = pkgs.fetchNextcloudApp {
+            #get the hash via: $ nix-prefetch-url --unpack <app zip url>
+            sha256 = "13lwpq75ihz9lfq383bi86lqvzcir8aqqhf56zs7fsayqh32l2r4";
+            url = "https://github.com/powerpaul17/nc_money/releases/download/v0.26.6/money.tar.gz";
+            license = "gpl3";
+        };
+    };
+    extraAppsEnable = true;
+    https = true;
+  }; 
+
+  services.nginx.virtualHosts."bfds.taila388c.ts.net" = {
+#    addSSL = true; 
+    forceSSL = true;
+    enableACME = true;
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "rw@boogiedev.net";   
+    certs = { 
+      "bfds.taila388c.ts.net".email = "rw@boogiedev.net"; 
+    }; 
+  };
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+}

modules/root-programs.nix

@@ -7,14 +7,23 @@
     usbutils  
     wget
     nano
-    git 
+    git
+    tig 
     mc
     ncdu
     parted
     gpart
     tmux
     hdparm
+    unzip
 
-    python3    
+    #coding
+    python3
+
+   #network
+   dig
+
+   #lets encrypt
+   lego
    ];
 }