{ pkgs, config, ... }:
{
  services.nextcloud = {
    enable = true;
    hostName = "nextcloud.${config.domainName}";
    package = pkgs.nextcloud32;
    config.dbtype = "pgsql";
    database.createLocally = true;
    config.adminpassFile = config.sops.secrets."nextcloud/adminpass".path;
  };
  sops.secrets."nextcloud/adminpass" = {};
  security.acme.certs."${config.domainName}".extraDomainNames = [ config.services.nextcloud.hostName ];
  services.nginx.virtualHosts.${config.services.nextcloud.hostName} = {
    useACMEHost = config.domainName;
    addSSL = true;
  };
}