From a96c1e8d920d23e20b449dd7157a34882a7f22c3 Mon Sep 17 00:00:00 2001
From: Superredstone <patrickcanal3@gmail.com>
Date: Fri, 13 Mar 2026 18:05:31 +0100
Subject: [PATCH] feat(service): add nextcloud

---
 machines/bomba/services/default.nix   |  2 ++
 machines/bomba/services/nextcloud.nix | 34 +++++++++++++++++++++++++++
 2 files changed, 36 insertions(+)
 create mode 100644 machines/bomba/services/nextcloud.nix

diff --git a/machines/bomba/services/default.nix b/machines/bomba/services/default.nix
index 6d36843..f8e11c6 100644
--- a/machines/bomba/services/default.nix
+++ b/machines/bomba/services/default.nix
@@ -2,6 +2,8 @@
 {
   imports = [
     ./gitea.nix
+    ./nextcloud.nix
+    # ./nginx.nix
     ./octoprint.nix
     ./vaultwarden.nix
   ];
diff --git a/machines/bomba/services/nextcloud.nix b/machines/bomba/services/nextcloud.nix
new file mode 100644
index 0000000..404f7ae
--- /dev/null
+++ b/machines/bomba/services/nextcloud.nix
@@ -0,0 +1,34 @@
+{
+  pkgs,
+  config,
+  currentSystemUser,
+  ...
+}:
+{
+  services = {
+    nextcloud = {
+      enable = true;
+      package = pkgs.nextcloud33;
+      hostName = "nextcloud.patrickcanal.it";
+      https = false;
+      config = {
+        adminpassFile = config.sops.secrets.nextcloud_password.path;
+        dbtype = "sqlite";
+        adminuser = currentSystemUser;
+      };
+      settings = {
+        default_phone_region = "IT";
+        overwriteprotocol = "https";
+        trusted_domains = [
+          "nextcloud.patrickcanal.it"
+        ];
+      };
+    };
+    nginx.virtualHosts."${config.services.nextcloud.hostName}".listen = [
+      {
+        addr = "172.18.0.1";
+        port = 8004;
+      }
+    ];
+  };
+}