{ pkgs, config, ... }:
{
  imports = [ ./traefik.nix ./fail2ban.nix ];
  services.nextcloud = {
    enable = true;
    package = pkgs.nextcloud26;
    hostName = "cloud.xenia.me.uk";
    config = {
      adminuser = "xenia";
      adminpassFile = "/secrets/nextcloud_admin.txt";
    };
  };
  services.nginx.virtualHosts.${config.services.nextcloud.hostName}.listen = [{ addr = "localhost"; port = 8000; }];
  services.traefik.dynamicConfigOptions.http = {
    routers.nextcloud = {
      rule = "Host(`cloud.xenia.me.uk`)";
      service = "nextcloud-webinterface";
      tls = { certResolver = "default"; };
    };
    services.nextcloud-webinterface.loadBalancer.servers = [{ url = "http://localhost:8000"; }];
  };
}