From cc1fa52b31b583eacc65d2baeb25acdb7dffe4bd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kier=C3=A1n=20Meinhardt?= <kmein@posteo.de>
Date: Sun, 16 Jul 2023 08:53:56 +0200
Subject: [PATCH] feat: hetzner storagebbox for nextcloud

---
 secrets                       |  2 +-
 systems/makanek/nextcloud.nix | 23 +++++++++++++++++++++++
 2 files changed, 24 insertions(+), 1 deletion(-)

diff --git a/secrets b/secrets
index 23285bc..d0b68f8 160000
--- a/secrets
+++ b/secrets
@@ -1 +1 @@
-Subproject commit 23285bc123dbce9030d8209d7040777da5ecc5e5
+Subproject commit d0b68f81a538892ef97321d6caea0a3c69565603
diff --git a/systems/makanek/nextcloud.nix b/systems/makanek/nextcloud.nix
index a2afbd1..181c13c 100644
--- a/systems/makanek/nextcloud.nix
+++ b/systems/makanek/nextcloud.nix
@@ -5,8 +5,29 @@
   ...
 }: let
   inherit (import ../../lib) localAddresses;
+  storageBoxMountPoint = "/mnt/storagebox";
 in {
+  # https://docs.hetzner.com/de/robot/storage-box/access/access-samba-cifs/
+  fileSystems.${storageBoxMountPoint} = {
+    device = "//u359050.your-storagebox.de/backup";
+    fsType = "cifs";
+    options = [
+      "iocharset=utf8"
+      "rw"
+      "credentials=${config.age.secrets.hetzner-storagebox-credentials.path}"
+      "uid=nextcloud"
+      "gid=nextcloud"
+      "file_mode=0660"
+      "dir_mode=0770"
+      "seal"
+      "mfsymlinks" # nextcloud-setup wants to create symlinks on cifs
+    ];
+  };
+
   age.secrets = {
+    hetzner-storagebox-credentials = {
+      file = ../../secrets/hetzner-storagebox-credentials.age;
+    };
     nextcloud-password-database = {
       file = ../../secrets/nextcloud-password-database.age;
       owner = "nextcloud";
@@ -35,6 +56,8 @@ in {
 
     hostName = "cloud.kmein.de";
 
+    datadir = "${storageBoxMountPoint}/nextcloud";
+
     phpOptions."opcache.interned_strings_buffer" = "32"; # buffer size in MB
 
     config = {