{ config, lib, pkgs,  ... }:

with lib;

{
  sops.defaultSopsFile = ./secrets.yaml;
  sops.secrets = {
    nextcloudAdminPass = {};
  };

  networking = {
    hostName = mkDefault "discourse";
    useDHCP = false;
    nameservers = [ "1.1.1.1" ];
  };

  imports = [
    ../modules/malobeo_user.nix
    ../modules/sshd.nix
    ../modules/minimal_tools.nix
    ../modules/autoupdate.nix
  ];

  environment.etc."nextcloud-admin-pass".text = "hXz5vspPsFPY";
  services.nextcloud = {
    enable = true;
    package = pkgs.nextcloud30;
    hostName = "10.0.0.11";
    #config.adminpassFile = config.sops.secrets.nextcloudAdminPass.path;
    config.adminpassFile = "/etc/nextcloud-admin-pass"; #user=root
    extraAppsEnable = true;
    extraApps = {
      inherit (config.services.nextcloud.package.packages.apps) contacts calendar;
      collectives = pkgs.fetchNextcloudApp {
        sha256 = "sha256-ErCWmQCI+ym9Pvsf84Z9yq4CyYJ1uVhyhhlS2bVSJ54=";
        url = "https://github.com/nextcloud/collectives/releases/download/v2.15.1/collectives-2.15.1.tar.gz";
        license = "agpl3Plus";
      };
    };
  };

  networking.firewall.allowedTCPPorts = [ 80 443 ];

  system.stateVersion = "22.11"; # Did you read the comment?
}