Fix everything.

system/services/server/fileserver/nextcloud/collabora/default.nix

@@ -0,0 +1,4 @@
+{ config, lib, ... }:
+{
+  services.collabora-online.enable = config.services.nextcloud.enable;
+}

system/services/server/fileserver/nextcloud/default.nix

@@ -0,0 +1,34 @@
+{ config, lib, pkgs, ... }:
+{
+  imports = [
+    ./collabora
+    ./nginx
+  ];
+
+  config = lib.mkIf config.system.fileserver.enable {
+    services.nextcloud = {
+      enable = true;
+      package = pkgs.nextcloud30;
+      hostName = "cloud.nixfox.ca";
+      https = true;
+      config = {
+        adminuser = config.sysusers.main;
+        adminpassFile = "${pkgs.writeText "initial" config.secrets.initialPass}";
+      };
+      settings = {
+        trusted_proxies = [ "127.0.0.1" ];
+        trusted_domains = [ "cloud.nixfox.ca" ];
+        overwriteprotocol = "https";
+        mail_smtphost = "mx.nixfox.ca";
+        mail_domain = "nixfox.ca";
+        mail_from_address = "noreply";
+        mail_smtpauth = "true";
+        mail_smtpname = "noreply@nixfox.ca";
+        mail_smtppassword = config.secrets.noreplyPassword;
+        mail_smtpmode = "smtp";
+        mail_smtpport = 587;
+      };
+    };
+    environment.persistence."/persist".directories = [ "/var/lib/nextcloud" ];
+  };
+}

system/services/server/fileserver/nextcloud/nginx/default.nix

@@ -0,0 +1,18 @@
+{ config, lib, ... }:
+{
+  services.nginx.virtualHosts."cloud.nixfox.ca" = lib.mkIf config.services.nextcloud.enable {
+    enableACME = true;
+    addSSL = true;
+    locations."/" = {
+      proxyWebsockets = true;
+      extraConfig = ''
+        location /.well-known/carddav {
+          return 301 $scheme://$host/remote.php/dav;
+        }
+        location /.well-known/caldav {
+          return 301 $scheme://$host/remote.php/dav;
+        }
+     '';
+    };
+  };
+}