Cian-H/My_NixOS_Config
1
0
Fork 0
mirror of https://github.com/Cian-H/My_NixOS_Config.git synced 2025-12-22 15:01:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added collabora to nextcloud

Browse Source
This commit is contained in:
Cian Hughes
2025-02-21 02:56:45 +00:00
parent 3ef06b38a0
commit 0db65d7728
4 changed files with 43 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
home-manager/homeserver.nix
View File

@@ -33,6 +33,7 @@
nextcloud_signaling_secret = {}; nextcloud_signaling_secret = {};
nextcloud_turn_secret = {}; nextcloud_turn_secret = {};
nextcloud_whiteboard_secret = {}; nextcloud_whiteboard_secret = {};
nextcloud-collabora_password = {};
}; };
}; };
} }

18
home-manager/homeserver/containers/nextcloud.nix
View File

@@ -55,6 +55,24 @@
"/home/cianh/nextcloud_db:/var/lib/mysql" "/home/cianh/nextcloud_db:/var/lib/mysql"
]; ];
}; };
nextcloud-collabora = {
image = "docker.io/collabora/code:latest";
autoUpdate = "registry";
network = [
"nextcloud-net"
"proxy-net"
];
ports = [
"9980:9980"
];
environment = {
username = "admin";
password = config.sops.secrets.nextcloud-collabora_password.path;
aliasgroup1 = "https://nextcloud.bulba.space";
aliasgroup2 = "https://collabora.bulba.space";
server_name = "collabora.bulba.space";
};
};
}; };
}; };
} }

43
home-manager/secrets.yaml
View File

@@ -1,17 +1,18 @@
vikunja_jwtsecret: ENC[AES256_GCM,data:L9yrVnCPO2Kk6bLIUBlKPxw98SZWVUh1Hu44mHtPS/BktpQsgeHzmdEAz5t4gDTeCYwjGxrXK+DUHRcvwojYCA==,iv:kwu4bYdgniRfObkT6ydJT8fonMxfbCZEJ4s5Tgl2sWo=,tag:6PkSB6EitoeGrORQRE+m9Q==,type:str] vikunja_jwtsecret: ENC[AES256_GCM,data:bR7O5/ewjfuhSkGYw6EiE8J4sQtaA7PbL15COD+dG8cnil3h5falptSPhnKdkHsChGbO7/OZ3RbddnYDbQLqUQ==,iv:7/D0RPiXH9TGd3r6b73U5UXVWH3mCN8x+8+RltU2znk=,tag:ldjImQIaWiUgnSnF+6B/zA==,type:str]
vikunja-db_password: ENC[AES256_GCM,data:BcRSGBKINGdnNs7EPqh2SMuEvnyD1BiTkMWzQyF5PVQ=,iv:xABf2PAEs8xckRZrb+sHeOboGKEO+saKgMXFRuBSqL4=,tag:Mpyq2BDi3/h65iwfcaT4ew==,type:str] vikunja-db_password: ENC[AES256_GCM,data:2n3mKNHgwlkh6nPelE70todgUG0FNIwvGNwvUMGKTB0=,iv:bb2bCB8SkQzxnMmfE2vcnaM6UZ26NzKjdz8zDlY4QmY=,tag:0sYUDCUHMJ0Gt44X0ML3uQ==,type:str]
vikunja-db_rootpassword: ENC[AES256_GCM,data:ljSu88SgK6ypdxLh2G8l+p2aJpwpp8Iu6BadhlW8rsJt9x21k1JB9JQBUro=,iv:CCXela+9hkAWCIt/y2Py+GUYidAo3JXACzGbJ/k3nR8=,tag:YlQIlpzN7w1VzrgCYfsEsw==,type:str] vikunja-db_rootpassword: ENC[AES256_GCM,data:Jah9ZtVDsBe+4k9Vqaz9bsaneDdiwUxbErADXA5oCEfIk9oiYfs3lbh3wNU=,iv:1VXGV/F4nC/qFJXwVXNSwVjSoWbEALzYa1CpFxB+Ui0=,tag:PM8QwkMSiKl7PKlMzU9fng==,type:str]
nextcloud_admin_password: ENC[AES256_GCM,data:Sojx61WeiTuQxPcMhxFvtFyWfWM+gAJolnbfPWf62nWQvKJRlqIIWzx11XBg8elR,iv:+20/mMPm8XU6YlrwDyE7lNcFaLXaxjMB0w1A3t/tlZM=,tag:xjYJ84Q59NeUuIxs1+JL+w==,type:str] nextcloud_admin_password: ENC[AES256_GCM,data:HL6cR9jAUx1qj5WbBXHfeRcjR/ubT9Z8DYntajjOMxBLHS6E63nVUBKQqP7lbj26,iv:gijEta32CzazYrDFiMdgtz3sXFlE+oTdtrz//BRvzkA=,tag:DkgZLn5pV38g0hVx6eqS4g==,type:str]
nextcloud-db_password: ENC[AES256_GCM,data:mYd/PExwggBDjhQaUW9RyMzxTZnHi029bYmQx0RQnDeIHZ+vbBZaw1LbKJm7plM6,iv:5ccsvmAyxUG2KQqKSCIGGXSWPnOh/Pw5tewFjdfv1gI=,tag:ef6xXLyglt3tqtukJz1FsA==,type:str] nextcloud-db_password: ENC[AES256_GCM,data:jLfg/Bj9IK2H38QA703nJUWwdSy1T2BFWCLsFbI176c5TXtxoMa6lgfhyogTAtbR,iv:RM8ZzNRHxD6/FSgPg0ySQN+wjY5+8OFue54fvNk7+HU=,tag:t/rAI85YzzPvW5SKi6Hg5A==,type:str]
nextcloud-db_rootpassword: ENC[AES256_GCM,data:oXXEOv+s0wstVU7tyIhqPL/oyAwYUd9Gnw4nAt6ru8kYob9UDPAckR62/OSjML6s,iv:MiU3eBhxUTJg32y00nuqUBQFP3yaGNbK8AoCK//YW+U=,tag:DQdfPEtyyD+PqqBGxkos/Q==,type:str] nextcloud-db_rootpassword: ENC[AES256_GCM,data:KUcMXLI3YLmj96/19Tz4FhHc/5lkGBxg3BoU7W1yR4lORvc1bxWvDpBmAB0tLpYc,iv:lmpnZ89+S2+BdTj214Uf+g5ab/Cg6cdgnXoT/gUef+4=,tag:9UDTjOq8Zga9QLPDMfPIlg==,type:str]
nextcloud_fulltextsearch_password: ENC[AES256_GCM,data:SZ2BhqxZv2v0pCTHdlxdYPN7nt/Y/oEZkJd3lrp4C+D2rm5EvExEAVpU09F/9CIz,iv:oYY5LV0R+fBFn8R1Opm/y/p6PEUVP1XM6jwNTW1IqJA=,tag:7/c3exYzYif764uOspeJyQ==,type:str] nextcloud_fulltextsearch_password: ENC[AES256_GCM,data:oiNPa8TDAnkUGrNkeo0KKHfJksfr+JxYhjcbSTw2UAhbsIjU5KDtcxTyuXIhDdYU,iv:OADAD4nFleZgCtx8nh3VtkD+Z0pD0bxSvNQ5kVMEJek=,tag:YJiPgu4RZrIPluqC7vp4OQ==,type:str]
nextcloud_imaginary_secret: ENC[AES256_GCM,data:5mnbUSIYy/oqqLQBchKVG2PKcjtbxTpnrOdOitqZ9CZCYTakaTVhx4AyCfox4np2,iv:JBhmGHEP4AbqjXEs/amvioCAbHrDi2XQOI95GaCd/0k=,tag:XcbRZyLv1wPMP9JZXCQwKw==,type:str] nextcloud_imaginary_secret: ENC[AES256_GCM,data:LI4fQNkbz5kXPXJUpE4o6cnTtaKTAcLSmgve/GL6SXpPHxWpfHBjDvekVFyvYt5k,iv:OVhHoESwSAlQPxXMSnfIYJCRU/xRlyJXPCY69KFWU88=,tag:2N6Qu6qqFb5dLP3daWzEXw==,type:str]
nextcloud_onlyoffice_secret: ENC[AES256_GCM,data:QL51EbUUx/ZfXuFuLh3oGjiZf4UYg7joyKGf0mwpZOmIot00Edk5mCN1Tg26JA87,iv:vAmRp1szR+cW57dPOhLetolwS98DumNZXmDjM7vRnbU=,tag:VP0AYlusXIq4pOny/f2xmA==,type:str] nextcloud_onlyoffice_secret: ENC[AES256_GCM,data:al8y+jBaQ24CavMVZwTAU2a/tAKvg+3CCoho8QjTnHC0XRD7KPHWcKe6NqXFkhlu,iv:eh3AYOro0r0ez8dCVMkv5sfKfjH4KbTVY9hxo+w62V0=,tag:hhgl67QsVe3cKCIpO2nMyg==,type:str]
nextcloud_recording_secret: ENC[AES256_GCM,data:ArbPzuO1f0MLPJy6lndhDeExoyA5fgyWCC7vb7GekGPhn7/IzedoW71JcVYhktaj,iv:bOT2FAOgFS026ZosMmuAZu8xjhSpq9I8JAxoROYjMs8=,tag:Ic9ghH9ZTg20OUJrLx9YBw==,type:str] nextcloud_recording_secret: ENC[AES256_GCM,data:GDnJ6riDWrhmD+9KlQWlW2caXeCF0eJaS5bKEBqKVIwPTAp4ezqoTT4OLZAqLxD3,iv:otHGZ19+cOMCRErhRA9zST3DVVPzKaCR42bq3HGuELM=,tag:4Yobdrl200sYdF+TC0+cPg==,type:str]
nextcloud_redis_host_password: ENC[AES256_GCM,data:kXNFeKcXXMR1ZtsjrPGXoZ2/OBr48C27qdn4ZKRcYSdWoSGF4JoFuH+UXAYkPRBv,iv:MNAXFkFZuGA+PNvQ2RmbkixyW+q9du8OjaWKc6ULpV4=,tag:ubWCOYlHGr+fmrK10zYZUQ==,type:str] nextcloud_redis_host_password: ENC[AES256_GCM,data:tOh9o4fp+sbnkfi/dQho0tgVAiQkcA/x6aILfUM16ywipK6N10HzvTG8N1X1PNjc,iv:+Dz8rcEkjRpQtL3741gV9rQ74F1WaR0fBDiDW4p7JYY=,tag:/knFc1nP5alKl4If13jYUQ==,type:str]
nextcloud_signaling_secret: ENC[AES256_GCM,data:kOJOb1aSR818Fl/Ho9teEsC3Uv8hoirBqXXrmCPjeJ9oXTHeU3bGwAblfQ2xi0FN,iv:ukbYDMLXQqRQBsM46pUoEoLukONfugqqzozEw3ILCU4=,tag:Yru4JeUxStl2pfvxZk6aOg==,type:str] nextcloud_signaling_secret: ENC[AES256_GCM,data:1pXrzWgGGQRaYA3XEwpbYAnZzHs8Fv8Fvahx37rtVsMlPmfe/9FZ+Ply3bjh4eur,iv:bZ9DwuQK612NA30pOJJnXOyig5TBBq36/oX3jeeY7MU=,tag:og39bknKXu8/avAm42mKjQ==,type:str]
nextcloud_turn_secret: ENC[AES256_GCM,data:3FkhyoyCOMZFBb8dtpJWhBjI0U87bCl08nR7cUtINhTjLX3JfJjdhjWxyiruHKdl,iv:kIuLd9btUv3GtcUk1nUIcv11tABqJO8vR9BPNzIxd20=,tag:7IAWqHezrXfy277dIC5qEA==,type:str] nextcloud_turn_secret: ENC[AES256_GCM,data:4z5ASHc4AM4xZT/ZDCZ9j2Vj+53QFKLKhy0meRx2YmTfvKoFoOq1uHLz88zuUFsO,iv:cwTnO8mc1hxCRPdLWqdH5jYEZpGsIrD5s5JhX0iTN5c=,tag:NLLGLoWRspj1nhGR+3atBg==,type:str]
nextcloud_whiteboard_secret: ENC[AES256_GCM,data:1BR4cKIyoZMr3Mg/Xyfin4o12IXBmpcFhTKSwh6RFVbdFoqpdBqGsJ6BChW65rBp,iv:KXti5CwUIek9z8SECRy8ot5ndeEhhlcI5PhgcvXvj20=,tag:90coACYKyRlFKVnDDxrMpw==,type:str] nextcloud_whiteboard_secret: ENC[AES256_GCM,data:S8VP9QhG9RZ0YSyz1UgXMPuE6fsW3dLLefqQf90Xax/OqKPpmxoma6YUwqDnweZe,iv:kHejnCldP7QPY2C1NJne/qjUXDp+Kx5Q4QKzbXEWm0E=,tag:e17jLpI6/bC8KRQBLWEIDQ==,type:str]
nextcloud-collabora_password: ENC[AES256_GCM,data:jydlxjRCdanRJEHCkjmYmIZdypVDfrK3S51sjMORFhlmaEULxC84pW45MHfFrBas,iv:HJ361SNCSBqtI9rKdUhBMDYtxqVioTUl/9txJakfBCw=,tag:8vhcEDwGLxYEbP6xdv+p1g==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@@ -21,14 +22,14 @@ sops:
- recipient: age15x4h66uk6ct3436e6r4l0tkpf86e7jzl3lqd2acndq2jjvq5za3stqg2fy - recipient: age15x4h66uk6ct3436e6r4l0tkpf86e7jzl3lqd2acndq2jjvq5za3stqg2fy
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhUXZkMjRXTjNKNGdKUDdQ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWY1ppeGZ0aHRQejJDamdP
QWVadStwb1dIT1dYb0dmS3BaTWt4eGpIVTFjCkF0ZW9DcmI2TGxaSlRVeDF1TitC dFhMQkdvaGltclhnZmpPNWZ0Q1piektkd3lJCjlKNzdnSHg3MnBNeVloU0J6K25U
SHRPdmx2a0lmdytkYVpYRHpvc1JyS0EKLS0tIEVJNDYxeWZIVVFPUnVPVStkMkVF S3RDL25xMHdsTHh3VXhVcUJwS1loNWcKLS0tIEpvc2xTVUROcWFaWWM5L3RqcEtk
N2VzcjBTY3VSZE56VXBFNWtYRUJLT1EKbljrPTTiftN7jYzgZTl1xgqfwv1LWSYe bm8rZkl4cHpic2FiaWNxRHdYcGJNeFkKyS7JclkhSg8vclfp6i9/Xkhdhbm9YGjr
5lvzeoNWI9/rdMnqXWNptHhvoA3wY3TwmCKbJG4ND0kXg2PjqOVRbw== BU/NXKbyLF/Et3G7F3yTbMHZvb++4yaJByw8p1SBS0iD4eMml7G70Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-02-13T02:59:33Z" lastmodified: "2025-02-21T01:06:09Z"
mac: ENC[AES256_GCM,data:HkouEeTn0cFcfwelmSShTRy3Hyqjk+CgwRvmYnwymcRfdqemQPgQjL/tEh7XO6er2E/mFijOpH1QL1gPPlKFa1DqNT0rjmlQPh4+Zzf8NP+qtfklTHtzLgEKUBnJUAjZrv3BNhF8MTZjyOBM66h44qa5Rpp5YFk0mRZ7qfeFc7I=,iv:l+20AjsUWgrZiwpqO8uY1dbPhYJGBqV3zyCtXEbcVEQ=,tag:vSKumHQKHvoPTasD4OAr4A==,type:str] mac: ENC[AES256_GCM,data:snb+0Sw2hJnhn7UJO6klOxKCwpyP276VZXnFzhjkhq6JAfXqJ66ZM1lFJ8uvDAwtx5Syi8HvZ3P+EfO7QMrj0oYN05yqNfKqqd2eGFvofXQQ8SZVef00OZSg8blFm36Qq1dCpqNp3bjH7V+qDhfdCeouZKe7HwxCWDkein7MHk4=,iv:BfrnCVX+H1kWefalttNu4QEq9r6TXxaBZ2V3CUiHBM0=,tag:jCZ200N9VtVJJwDsKfiUxA==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.4 version: 3.9.4

3
nixos/homeserver/firewall.nix
View File

@@ -9,7 +9,6 @@
networking.firewall = { networking.firewall = {
enable = true; enable = true;
allowedTCPPorts = [ allowedTCPPorts = [
1234 # temporary
22 # SSH 22 # SSH
3000 # Grafana 3000 # Grafana
3005 # Plex 3005 # Plex
@@ -20,6 +19,7 @@
8096 # Jellyfin 8096 # Jellyfin
8324 # Plex 8324 # Plex
8443 # Caddy 8443 # Caddy
9980 # collabora
32400 # Plex 32400 # Plex
32469 # Plex 32469 # Plex
11000 # Nextcloud 11000 # Nextcloud
@@ -32,6 +32,7 @@
8080 # Caddy 8080 # Caddy
8081 # Nextcloud 8081 # Nextcloud
8443 # Caddy 8443 # Caddy
9980 # collabora
11000 # Nextcloud 11000 # Nextcloud
32410 # Plex 32410 # Plex
32412 # Plex 32412 # Plex