[nextcloud] use default deck app

With thanks to https://github.com/nextcloud/deck/pull/7765
[Nextcloud] upgrade to 34
2026-10-22 21:14:34 +02:00 · 2026-10-22 21:14:34 +02:00 · 2026-10-22 21:14:34 +02:00 · 2026-10-22 12:07:32 +02:00 · 2026-10-22 10:42:04 +02:00 · 2026-10-21 17:32:43 +02:00
6 changed files with 31 additions and 29 deletions
@@ -264,11 +264,11 @@
    },
    "nixpkgs_3": {
      "locked": {
-        "lastModified": 1788187754,
-        "narHash": "sha256-bu1QxmXKmPuvBLN7bHP355OV9Qo13x9WCiRDH62CqRM=",
+        "lastModified": 1792615934,
+        "narHash": "sha256-MlvRfa1O5Cqc2/a+gG+l9TSuowEoCKCmrJ1d9oAVm0I=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "5dfba6236110080a54247d6460bc2ff5dda939cc",
+        "rev": "da6dc0e7b26060f2f71ce3ef7088fb56ee44fa36",
        "type": "github"
      },
      "original": {
@@ -568,11 +568,11 @@
        "utils": "utils_4"
      },
      "locked": {
-        "lastModified": 1789131197,
-        "narHash": "sha256-gpjhy2mIBt89oCVzoSXy8AgfAKjJ9Fi3u01CX09UTF4=",
+        "lastModified": 1792488750,
+        "narHash": "sha256-VLBpNctawQ+Yd03hkfhNPUqQVXNCc7bc6Qhu7mwJvKM=",
        "ref": "refs/heads/master",
-        "rev": "38bcceb0e8b84d6dcd50d05683c71eea8d410479",
-        "revCount": 161,
+        "rev": "7a8b9d4f3522c68cd15b21a1ec093c8c441775bf",
+        "revCount": 162,
        "type": "git",
        "url": "https://git.dynamicdiscord.de/kalipso/zineshop"
      },
@@ -263,7 +263,7 @@ in
          client_body_in_file_only clean;
          client_body_buffer_size 32K;
          
-          client_max_body_size 50M;
+          client_max_body_size 500M;
          
          sendfile on;
          send_timeout 300s;
@@ -39,7 +39,7 @@ in

  services.nextcloud = {
    enable = true;
-    package = pkgs.nextcloud33;
+    package = pkgs.nextcloud34;
    hostName = "cloud.malobeo.org";
    config.adminpassFile = config.sops.secrets.nextcloudAdminPass.path;
    maxUploadSize = "10G";
@@ -49,16 +49,10 @@ in
    configureRedis = true;
    caching = {
      redis = true;
-      apcu = true;
    };
    extraAppsEnable = true;
    extraApps = {
-      inherit (config.services.nextcloud.package.packages.apps) contacts calendar polls registration collectives forms;
-      deck = pkgs.fetchNextcloudApp {
-        sha256 = "sha256-Oc/J0Ey7f9aHhLBWoAXaDMe2t0eeEQKvpwY510qNpiI=";
-        url = "https://s3.g.megas4.com/ya5mczgkbk6bw7tcy2yr4bl2vdryfe76ok2dj/malo/deck33.tar.gz";
-        license = "agpl3Plus";
-      };
+      inherit (config.services.nextcloud.package.packages.apps) contacts calendar polls registration collectives forms deck;
    };
    settings = {
      trusted_domains = [ "cloud.malobeo.org" "cloud.hq.malobeo.org" ];
@@ -68,7 +62,6 @@ in
      "default_phone_region" = "DE";
    };
    phpOptions = {
-      "realpath_cache_size" = "0";
      "opcache.interned_strings_buffer" = "32";
    };
  };
@@ -1,12 +1,7 @@
-nextcloudAdminPass: ENC[AES256_GCM,data:es9hhtCcqBqPbV2L,iv:Kyq5kqao0uaMPs0GeRkJT9OWYSZfImBXngg51k0uQ0M=,tag:zN/u90/j4rmdo0HtY+cF9w==,type:str]
+nextcloudAdminPass: ENC[AES256_GCM,data:RsP8Q1FqS9qgYTNe+H/nDHwQwr0fvlQawCOJWZVoF2U=,iv:AqJ79m3GAUd6sczDByJlb+K3XxxEt3HS4fURd7kn0bY=,tag:n/GyRKrIwOcksDtewnnXZw==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
    age:
-        - recipient: age1ljpdczmg5ctqyeezn739hv589fwhssjjnuqf7276fqun6kc62v3qmhkd0c
-          enc: |
+        - enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPT3ZxNEpRVktDWG9BR0Rv
            ZUZQTkJwQ0pSblNvTkFOT3BBdjVaSzJhVzBvCnVWc2xRUjBnRFFXSDgxczRMSFMy
@@ -14,8 +9,8 @@ sops:
            aDd0UlpMR3RNd3BDMmhqNmxhTFRoUlkK6Pni+cswKIU94WkP/fg5fzSmx/fhXjjl
            mRG2o4ALCqcOxAxHBrKJppUCLjUgKG53wPF/jlIzkvbwHwnqVMfYsQ==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1g084sl230x94mkd2wq92s03mw0e8mnpjdjfx9uzaxw6psm8neyzqqwpnqe
-          enc: |
+          recipient: age1ljpdczmg5ctqyeezn739hv589fwhssjjnuqf7276fqun6kc62v3qmhkd0c
+        - enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRK2o2K2tPTFcvbXRkZ0lq
            bS9ZOUc3dG1JeERZYVNsc3k3RjcxQ0RsdkRJCkx1VFhBQXRDOElqakJ0eTd3NEJX
@@ -23,8 +18,9 @@ sops:
            VjBFeldXS1p0Zk1uSk02aHpJd3BPOHcKvCmnK/KttB4RgnID/fj2KOdjvNnV3EWU
            B9mW4yxbEqhoxtu+GFD3eR/8SvMPEsHl9xorT/ZygMG7hAzedSukWw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-26T20:00:50Z"
-    mac: ENC[AES256_GCM,data:qoY9SfpoU+8HfvD5v/1S6BOkbnZUmHIbtwr0tTSuPETjnFNgr1VVw9mnRatJKPYYFb9/rMZQWIqTY+iUIEkcTVyVXhd6ki5CHW+uxCeBIyMzq33rtEa/btkEUoii4iPieamBCIY21W0znE+edxfR04yRJtLxMICEbuW4Hjf6bwk=,iv:nG42fRgjpuIjPMYnn/6egEdzYolcUBsspaZ8zMv4888=,tag:C6apGoAvVLsWdLWSCwrx6w==,type:str]
+          recipient: age1g084sl230x94mkd2wq92s03mw0e8mnpjdjfx9uzaxw6psm8neyzqqwpnqe
+    lastmodified: "2026-10-22T19:07:13Z"
+    mac: ENC[AES256_GCM,data:HD1uqrxxfLrHGQfu7HFpuunpj/npPe35AvvFrhGFRUTtXLGRPDn5xeOiuHyT+qSs51lukE+hYhv/+u4xolb0SInOJtPTZ6suRcZ4maJ+9P0mgjs7OmI4e68CpGo0xuOg378WvlF15VQH2KCcVskEkO9UBTfOUmyNku1g4F6PeWw=,iv:cJaz6dYkspBlBY9aCaK2/zBDiVg7J7nCE+fnwNHz1Tw=,tag:5sKITZ8uD7JnRtwhaOPoGw==,type:str]
    pgp:
        - created_at: "2025-03-05T08:24:30Z"
          enc: |-
@@ -65,4 +61,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: aef8d6c7e4761fc297cda833df13aebb1011b5d4
    unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.13.3
@@ -264,6 +264,12 @@ in
          targets = [ "${hosts.malobeo.hosts.albert.network.address}:9002" ];
        }];
      }
+      {
+        job_name = "wordpress";
+        static_configs = [{
+          targets = [ "${hosts.malobeo.hosts.wordpress.network.address}:9002" ];
+        }];
+      }
      # add vpn - check how to reach it first. most probably 10.100.0.1
    ];
  };
@@ -23,10 +23,17 @@ in {
  };

  imports = [
+    inputs.malobeo.nixosModules.malobeo.metrics
    inputs.self.nixosModules.malobeo.users
    ../modules/sshd.nix
  ];

+  malobeo.metrics = {
+    enable = true;
+    enablePromtail = true;
+    logNginx = true;
+  };
+
  malobeo.users = {
    malobeo = false;
    admin = true;
Author	SHA1	Message	Date
ahtlon	cbcf5a0c5b	[nextcloud] use default deck app Hydra callback / on_pr (pull_request) Successful in 6m15s Details Hydra callback / on_push (pull_request) Skipped Details Check flake syntax / flake-check (push) Successful in 20m51s Details With thanks to https://github.com/nextcloud/deck/pull/7765	2026-10-22 21:14:34 +02:00
ahtlon	52b43a9b2b	[Nextcloud] upgrade to 34	2026-10-22 21:14:34 +02:00
ahtlon	5c373880fd	[Nextcloud] Update admin pass	2026-10-22 21:14:34 +02:00
kalipso	f7533dff9d	Merge pull request 'Fix PHP critical RCE' (#204 ) from php_fix into master Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details Check flake syntax / flake-check (push) Successful in 26m29s Details	2026-10-22 12:07:32 +02:00
kalipso	88f7da1700	[nixpkgs] update Check flake syntax / flake-check (push) Successful in 5m9s Details Hydra callback / on_push (pull_request) Skipped Details Hydra callback / on_pr (pull_request) Successful in 1h16m46s Details	2026-10-22 10:42:04 +02:00
kalipso	70f0812a8e	Merge pull request 'wordpress: enable metrics' (#203 ) from wordpress_metrics into master Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details Check flake syntax / flake-check (push) Successful in 5m29s Details	2026-10-21 17:32:43 +02:00
kalipso	277caf6375	[wordpress] enable metrics Hydra callback / on_push (pull_request) Skipped Details Hydra callback / on_pr (pull_request) Successful in 2m28s Details Check flake syntax / flake-check (push) Successful in 22m19s Details	2026-10-21 12:29:50 +02:00
kalipso	e059576114	[zineshop] update Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details Check flake syntax / flake-check (push) Successful in 10m29s Details	2026-10-20 11:32:51 +02:00
kalipso	b6d7030967	[zineshop] increase local upload limit to 500mb Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details Check flake syntax / flake-check (push) Successful in 13m21s Details	2026-10-20 11:27:52 +02:00