From 39578315979f7e3e91b8ebca8f677990db0da4f2 Mon Sep 17 00:00:00 2001
From: Skyler Grey <sky@a.starrysky.fyi>
Date: Wed, 29 Oct 2025 09:44:19 +0000
Subject: [PATCH] feat(pm/redhead): add nextcloud-docker-dev
Change-Id: pwzlpzkxpmxzrmyvkkwqtnwrzvmxmouv

I'm using https://github.com/juliusknorr/nextcloud-docker-dev to test
some changes to a nextcloud plugin, as the plugin needs a more recent
version of Nextcloud than is in nixpkgs.

To be available, I need to set up my hosts file correctly and forward
this over nginx for my other devices.
---
 .../systems/redhead/nextcloud-docker-dev.nix  | 68 +++++++++++++++++++
 packetmix/systems/redhead/nextcloud.nix       |  6 ++
 2 files changed, 74 insertions(+)
 create mode 100644 packetmix/systems/redhead/nextcloud-docker-dev.nix

diff --git a/packetmix/systems/redhead/nextcloud-docker-dev.nix b/packetmix/systems/redhead/nextcloud-docker-dev.nix
new file mode 100644
index 00000000..d4364ad5
--- /dev/null
+++ b/packetmix/systems/redhead/nextcloud-docker-dev.nix
@@ -0,0 +1,68 @@
+# SPDX-FileCopyrightText: 2025 Collabora Productivity Limited
+#
+# SPDX-License-Identifier: MIT
+
+{
+  networking.hosts = {
+    "127.0.0.1" = [
+      "nextcloud.local"
+      "nextcloud2.local"
+      "nextcloud3.local"
+      "stable16.local"
+      "stable17.local"
+      "stable18.local"
+      "stable19.local"
+      "stable20.local"
+      "stable21.local"
+      "stable22.local"
+      "stable23.local"
+      "stable24.local"
+      "stable25.local"
+      "stable26.local"
+      "stable27.local"
+      "stable28.local"
+      "stable29.local"
+      "stable30.local"
+      "stable31.local"
+      "stable32.local"
+      "mail.local"
+      "sso.local"
+      "imap.local"
+      "collabora.local"
+      "codedev.local"
+      "onlyoffice.local"
+      "proxy.local"
+      "hpb.local"
+      "push.local"
+      "keycloak.local"
+      "portal.local"
+      "gs1.local"
+      "gs2.local"
+      "lookup.local"
+      "elasticsearch.local"
+      "elasticsearch-ui.local"
+      "pgadmin.local"
+      "phpmyadmin.local"
+      "talk-signaling.local"
+      "talk-recording.local"
+    ];
+  };
+
+  services.nginx.virtualHosts."nextcloud.docker.dev.redhead.starrysky.fyi" = {
+    addSSL = true;
+    enableACME = true;
+    acmeRoot = null;
+
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8062";
+      recommendedProxySettings = true;
+      proxyWebsockets = true;
+    };
+  };
+
+  security.acme.certs."nextcloud.docker.dev.redhead.starrysky.fyi" = {
+    dnsProvider = "cloudflare";
+    environmentFile = "/secrets/acme/environmentFile";
+    email = "skyler.grey@collabora.com";
+  };
+}
diff --git a/packetmix/systems/redhead/nextcloud.nix b/packetmix/systems/redhead/nextcloud.nix
index 6df0bf3d..60d23f93 100644
--- a/packetmix/systems/redhead/nextcloud.nix
+++ b/packetmix/systems/redhead/nextcloud.nix
@@ -68,6 +68,12 @@
     email = "skyler.grey@collabora.com";
   };
 
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+    9980
+  ];
+
   services.nginx.virtualHosts."collabora.dev.redhead.starrysky.fyi" = {
     addSSL = true;
     enableACME = true;
-- 
2.43.0