feat: hetzner storagebbox for nextcloud

configs/cloud.nix

@@ -48,7 +48,7 @@ in {
       kieran = {
         user = "kieran";
         passwordFile = config.age.secrets.nextcloud-password-kieran.path;
-        endpoint = "https://cloud.xn--kiern-0qa.de";
+        endpoint = "https://cloud.kmein.de";
         target = "${config.users.users.me.home}/notes";
       };
     in ''

configs/khal.nix

@@ -6,7 +6,7 @@
 }: let
   davHome = "~/.local/share/dav";
   kmeinCloud = {
-    davEndpoint = "https://cloud.xn--kiern-0qa.de/remote.php/dav";
+    davEndpoint = "https://cloud.kmein.de/remote.php/dav";
     username = "kieran";
     passwordFile = config.age.secrets.nextcloud-password-kieran.path;
   };

flake.lock

@@ -11,11 +11,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1684153753,
-        "narHash": "sha256-PVbWt3qrjYAK+T5KplFcO+h7aZWfEj1UtyoKlvcDxh0=",
+        "lastModified": 1689334118,
+        "narHash": "sha256-djk5AZv1yU84xlKFaVHqFWvH73U7kIRstXwUAnDJPsk=",
         "owner": "ryantm",
         "repo": "agenix",
-        "rev": "db5637d10f797bb251b94ef9040b237f4702cde3",
+        "rev": "0d8c5325fc81daf00532e3e26c6752f7bcde1143",
         "type": "github"
       },
       "original": {
@@ -67,11 +67,11 @@
         "systems": "systems"
       },
       "locked": {
-        "lastModified": 1687709756,
-        "narHash": "sha256-Y5wKlQSkgEK2weWdOu4J3riRd+kV/VCgHsqLNTTWQ/0=",
+        "lastModified": 1689068808,
+        "narHash": "sha256-6ixXo3wt24N/melDWjq70UuHQLxGV8jZvooRanIHXw0=",
         "owner": "numtide",
         "repo": "flake-utils",
-        "rev": "dbabf0ca0c0c4bce6ea5eaf65af5cb694d2082c7",
+        "rev": "919d646de7be200f3bf08cb76ae1f09402b6f9b4",
         "type": "github"
       },
       "original": {
@@ -190,11 +190,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1688764204,
-        "narHash": "sha256-FsvK+tIvelCI0tWwlMDKfiyb7P/KfxpGbXMrdCKiT8s=",
+        "lastModified": 1689326639,
+        "narHash": "sha256-79zi0t83Dcc2dE0NuYZ+2hqtKXZN1yWVq5mtx8D2d7Y=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "d8bb6c681cf86265fdcf3cc3119f757bbb085835",
+        "rev": "9fdfaeb7b96f05e869f838c73cde8d98c640c649",
         "type": "github"
       },
       "original": {
@@ -222,11 +222,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1688862802,
-        "narHash": "sha256-TnmgzHyr9G6x8swT7r/a9edX9ahNkN2RJJhJkt+XxaI=",
+        "lastModified": 1689455797,
+        "narHash": "sha256-CidyodHzHiu2QRVBLzZdln3xh0AhrBrHEARLRbXKaok=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "651beb2a23fb0ae7939c5e0d3c645f487fdaa448",
+        "rev": "6d6d83a475985a72e30a45c893c96b05ede11176",
         "type": "github"
       },
       "original": {
@@ -254,11 +254,11 @@
     },
     "nur": {
       "locked": {
-        "lastModified": 1688863826,
-        "narHash": "sha256-6LJMOQdugKK0cR02bfyiL+ulzxx4sVRMI6hmCqd+z9U=",
+        "lastModified": 1689454092,
+        "narHash": "sha256-qahG8Tb0LRyAnTqvcdC4axo+U1oM7X4I8KXWExjAV08=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "7a85833f758ac5ad9f6e3620cf1445f7907073e3",
+        "rev": "df1c50504631272f5bd703d756d9a36643b4fa56",
         "type": "github"
       },
       "original": {
@@ -293,11 +293,11 @@
     },
     "retiolum": {
       "locked": {
-        "lastModified": 1688824809,
-        "narHash": "sha256-Qe1ooPYuM10EI2rE4CORV9rXoh8yrdbR5mhgJiuzXJ0=",
+        "lastModified": 1688896810,
+        "narHash": "sha256-GUw+eaHIiVfADRRI/ngGZ/XSm/pOIjfrQ2tmjfvlc1o=",
         "ref": "refs/heads/master",
-        "rev": "4e2f9841ea09012261fca1c7e734f449ca39d55a",
-        "revCount": 311,
+        "rev": "966f656268a2d823ee5faf26954640e4b0b29aa7",
+        "revCount": 312,
         "type": "git",
         "url": "https://git.thalheim.io/Mic92/retiolum"
       },
@@ -338,11 +338,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1688783586,
-        "narHash": "sha256-HHaM2hk2azslv1kH8zmQxXo2e7i5cKgzNIuK4yftzB0=",
+        "lastModified": 1689388484,
+        "narHash": "sha256-cR8W4LZTk1SFGhDUGG4RF7qPZP7d9qFmltk7nFi7WMo=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "7a29283cc242c2486fc67f60b431ef708046d176",
+        "rev": "15027511818ee595ca2ae6ec4b5f8f0e96c0fe47",
         "type": "github"
       },
       "original": {
@@ -364,11 +364,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1687373960,
-        "narHash": "sha256-dbRUzjHwFmZrS5i7WQedRx2YCRUry0z6RYHkb4ORNHM=",
+        "lastModified": 1689276466,
+        "narHash": "sha256-T+1f2GsTDzfiEasSPntbaSsJvpJxZ78a5g6CL4NyAK0=",
         "owner": "kmein",
         "repo": "scripts",
-        "rev": "c0d9fa3efff0765af4219732292c3a7593de6856",
+        "rev": "55dff522684f342f4e970116ab374ba999539288",
         "type": "github"
       },
       "original": {
@@ -463,11 +463,11 @@
     "voidrice": {
       "flake": false,
       "locked": {
-        "lastModified": 1685152014,
-        "narHash": "sha256-wEC7dj2vNAn5WJdQc2gGumOhpdPnQLdc4zypdfWmfoI=",
+        "lastModified": 1689440232,
+        "narHash": "sha256-KSynhdyt+UoQEnJja2fWl8cU5dDDcdNmraZkJspn+XI=",
         "owner": "Lukesmithxyz",
         "repo": "voidrice",
-        "rev": "07de33840d9ce0f554c0e5555ac27250be0895c2",
+        "rev": "9a85d328ccf29f4cebb104e4eeeba1b20a896f6b",
         "type": "github"
       },
       "original": {

systems/makanek/monitoring/default.nix

@@ -306,7 +306,7 @@ in {
             "code.kmein.de"
             "radio.kmein.de"
             "tarot.kmein.de"
-            "cloud.xn--kiern-0qa.de"
+            "cloud.kmein.de"
             "grafana.kmein.r"
             # "names.kmein.r"
             "rrm.r"

systems/makanek/nextcloud.nix

@@ -5,8 +5,29 @@
   ...
 }: let
   inherit (import ../../lib) localAddresses;
+  storageBoxMountPoint = "/mnt/storagebox";
 in {
+  # https://docs.hetzner.com/de/robot/storage-box/access/access-samba-cifs/
+  fileSystems.${storageBoxMountPoint} = {
+    device = "//u359050.your-storagebox.de/backup";
+    fsType = "cifs";
+    options = [
+      "iocharset=utf8"
+      "rw"
+      "credentials=${config.age.secrets.hetzner-storagebox-credentials.path}"
+      "uid=nextcloud"
+      "gid=nextcloud"
+      "file_mode=0660"
+      "dir_mode=0770"
+      "seal"
+      "mfsymlinks" # nextcloud-setup wants to create symlinks on cifs
+    ];
+  };
+
   age.secrets = {
+    hetzner-storagebox-credentials = {
+      file = ../../secrets/hetzner-storagebox-credentials.age;
+    };
     nextcloud-password-database = {
       file = ../../secrets/nextcloud-password-database.age;
       owner = "nextcloud";
@@ -33,7 +54,9 @@ in {
       startAt = "05:00:00";
     };
 
-    hostName = "cloud.xn--kiern-0qa.de";
+    hostName = "cloud.kmein.de";
+
+    datadir = "${storageBoxMountPoint}/nextcloud";
 
     phpOptions."opcache.interned_strings_buffer" = "32"; # buffer size in MB
 
@@ -96,7 +119,7 @@ in {
     ];
   };
 
-  services.nginx.virtualHosts."cloud.xn--kiern-0qa.de" = {
+  services.nginx.virtualHosts."cloud.kmein.de" = {
     enableACME = true;
     forceSSL = true;
   };