{ config, lib, pkgs,  ... }:

with lib;

{
  sops.defaultSopsFile = ./secrets.yaml;
  sops.secrets = {
    nextcloudAdminPass = {};
  };

  networking = {
    hostName = mkDefault "discourse";
    useDHCP = false;
    nameservers = [ "1.1.1.1" ];
  };

  imports = [
    ../modules/malobeo_user.nix
    ../modules/sshd.nix
    ../modules/minimal_tools.nix
    ../modules/autoupdate.nix
  ];

  services.nextcloud = {
    enable = true;
    package = pkgs.nextcloud30;
    hostName = "10.0.0.11";
    config.adminpassFile = config.sops.secrets.nextcloudAdminPass.path;
  };

  networking.firewall.allowedTCPPorts = [ 80 443 ];

  system.stateVersion = "22.11"; # Did you read the comment?
}