Add nextcloud

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
This commit is contained in:
2025-06-16 00:40:24 +01:00
parent 6505f74ef3
commit f819c8c5e3
36 changed files with 572 additions and 44 deletions

View File

@@ -12,7 +12,7 @@
let
selfPkgs = inputs.self.packages.${system};
hmConfig = config.home-manager.users.${user};
inherit (hmConfig.virtualisation.quadlet) volumes networks;
inherit (hmConfig.virtualisation.quadlet) containers volumes networks;
autheliaClientId = "3U5O3TkoIFb3bz3MMqscGEDx2wkT2G48iLLJalqSKA40zCweSBfgORGNMjDEidz4qiQ93qIoW2UlgTyLfzAwbklTvwHJPcarmXaq";
in
{
@@ -45,12 +45,12 @@ in
authelia-outline.content = builtins.readFile (
(pkgs.formats.yaml { }).generate "outline.yaml" {
identity_providers.oidc = {
authorization_policies.docs = {
authorization_policies.outline = {
default_policy = "deny";
rules = [
{
policy = "one_factor";
subject = "group:docs";
subject = "group:outline";
}
];
};
@@ -61,7 +61,7 @@ in
client_name = "Outline";
client_secret = hmConfig.sops.placeholder."outline/authelia/digest";
redirect_uris = [ "https://docs.karaolidis.com/auth/oidc.callback" ];
authorization_policy = "docs";
authorization_policy = "outline";
scopes = [
"openid"
"profile"
@@ -83,6 +83,7 @@ in
volumes = {
outline-redis = { };
outline-postgresql = { };
# TODO: Move to mass storage
outline = { };
};
@@ -125,7 +126,11 @@ in
];
};
unitConfig.After = [ "sops-nix.service" ];
unitConfig.After = [
"${containers.outline-postgresql._serviceName}.service"
"${containers.outline-redis._serviceName}.service"
"sops-nix.service"
];
};
outline-postgresql = {