{ pkgs, ... }:
{
  services.nextcloud = {
    package = pkgs.nextcloud29;
    enable = true;
    hostName = "bfds.taila388c.ts.net";
    config.extraTrustedDomains = [ "bfds" "bfds.local" ];

    database.createLocally = true;
    config = {
       dbtype = "pgsql"; 
       adminpassFile = "/var/lib/nextcloud-pass-files/nc-admin-password";
    };
    extraApps = {
      inherit (pkgs.nextcloud29Packages.apps) 
	cookbook
	notes
	;
    };
    extraAppsEnable = true;
    https = true;
  }; 

  services.nginx.virtualHosts."bfds.taila388c.ts.net" = {
    addSSL = true; 
#    forceSSL = true;
    enableACME = true;
  };

  security.acme = {
    acceptTerms = true;
    defaults.email = "rw@boogiedev.net";   
    certs = { 
      "bfds.taila388c.ts.net".email = "rw@boogiedev.net"; 
    }; 
  };
  networking.firewall.allowedTCPPorts = [ 80 443 ];
}