feat: add nextcloud

system/modules/ca.nix

@@ -0,0 +1,28 @@
+{
+  ...
+
+}:
+{
+  security.pki.certificates = [
+    ''
+      -----BEGIN CERTIFICATE-----
+      MIIC5TCCAc2gAwIBAgIUCxaWRHkKr2mQOW2cBzw+Ov9xJaQwDQYJKoZIhvcNAQEL
+      BQAwGzEZMBcGA1UEAwwQbmV4dGNsb3VkLm5ldC5kbjAeFw0yNTA0MjAxMDQ2MTVa
+      Fw0zNTA0MTgxMDQ2MTVaMBsxGTAXBgNVBAMMEG5leHRjbG91ZC5uZXQuZG4wggEi
+      MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9TBCJoMJ0EREbiGdjLp2odJy
+      bpKqOyET1J8T/6nBwkgMDpTuAi2Pzp9gJ5lDdzmhhIN2B7f0XWnCNPHsUaHWKfZQ
+      gEX3LtDSOQrYt4ChMIuzioasJLhGqNyV+4XooIl6R/+2ycQ88I3FoamFDJ0sDkz9
+      2YtKM+UTKyEKSqThF3+W7SbFtHiohT79L5u6pRL2TE6zcqdcOOkqPTOnwbtuRP4+
+      bDbFKowBhWTwFSZPpkf010ol6tr5RS8+MqdldmB7NTv9NmyRj2JTNDiQWv7Koq67
+      UuDiL1ja+6TFNke47BwKEP1ykz6Ity59V364FljAol477urXNWgppRhOK/1tAgMB
+      AAGjITAfMB0GA1UdDgQWBBSJtl7lnYwXpMOz6PHjIx7QR9ra6DANBgkqhkiG9w0B
+      AQsFAAOCAQEAi6M16fhOWS3zi5SDV2KHxa9fJuZcqbgt7ITSr2ex7BpdbMQ17RDT
+      PyVOQsCVQGF6zY3KqP/+fRYoZzLxnXwPmO/4OXYZoR5UQmoc0VZ9vMTaALIYooYS
+      t5I/Q8xnH/CmVkt6cIRU4Ysjy4zp9+sobZM7u+Agl0yd2LExzMREjiNpK832hCyz
+      RZmCrkyekEG3MREuRAqk0vxO7yNTzHMNOG0SzKh49t8WCWWXHyUdxbTzaqXic+R+
+      E7dWCFQY5m8ExiqPrKusIMxeerPbs7cXew1mJDEtFqJxpSSa7Jz1XBaMPS3KfcbK
+      Vhgysawxfe0gSPXwIuOcB+DF8vz6ZdhQYQ==
+      -----END CERTIFICATE-----
+    ''
+  ];
+}

system/modules/networking.nix

@@ -1,9 +1,10 @@
+{ lib, ... }:
 {
   networking = {
     networkmanager.enable = true;
-    enableIPv6 = false;
+    enableIPv6 = lib.mkDefault false;
     firewall = {
-      enable = true;
+      enable = lib.mkDefault true;
     };
   };
 }

system/modules/presets/basic.nix

@@ -25,5 +25,6 @@
     ../time.nix
     ../tmux.nix
     ../users.nix
+    ../ca.nix
   ];
 }

system/modules/presets/minimal.nix

@@ -14,5 +14,7 @@
     ../sound.nix
     ../time.nix
     ../users.nix
+    ../tmux.nix
+    ../ca.nix
   ];
 }

system/modules/services.nix

@@ -1,4 +1,4 @@
-{ settings, ... }:
+{ settings, lib, ... }:
 
 {
   networking = {
@@ -15,10 +15,10 @@
       enable = true;
       ports = [ 22 ];
       settings = {
-        PasswordAuthentication = false;
-        AllowUsers = [ settings.personal.username ];
-        UseDns = true;
-        PermitRootLogin = "no";
+        PasswordAuthentication = lib.mkDefault false;
+        AllowUsers = lib.mkDefault [ settings.personal.username ];
+        UseDns = lib.mkDefault true;
+        PermitRootLogin = lib.mkDefault "no";
       };
     };