added onlyoffice to nextcloud

modules/nextcloud.nix

@@ -1,6 +1,11 @@
-{ pkgs, config, ... }:
+{ pkgs, config, lib, ... }:
+let
+  oo_domain = "onlyoffice.mc-fucker.cool";
+in
 {
 
+  nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ "corefonts" ]; #allow a single package from unfree
+
   services.postgresql = {
     ensureDatabases = [ "nextcloud" ];
     ensureUsers = [
@@ -58,6 +63,23 @@
     unixSocketPerm = 770;
   };
 
+  services.onlyoffice = {
+    enable = true;
+    hostname = oo_domain;
+  };
+
+  services.nginx.virtualHosts."${oo_domain}" = {
+    forceSSL = true;
+    enableACME = true;
+  };
+
+  users.users = {
+    nginx = {
+      extraGroups = [ "onlyoffice" ];
+    };
+  };
+
+
   users.groups.redis.members = [ "nextcloud" ];
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];