{
  pkgs,
  config,
  ...
}: {
  services.nextcloud = {
    enable = true;
    package = pkgs.nextcloud27;
    hostName = "cloud.xenia.me.uk";
    config = {
      adminuser = "xenia";
      adminpassFile = "/secrets/nextcloud_admin.txt";
    };
    extraOptions = {
      trusted_proxies = ["192.168.1.230"];
      overwriteprotocol = "https";
    };
    phpOptions = {
      catch_workers_output = "yes";
      display_errors = "stderr";
      error_reporting = "E_ALL & ~E_DEPRECATED & ~E_STRICT";
      expose_php = "Off";
      "opcache.enable_cli" = "1";
      "opcache.fast_shutdown" = "1";
      "opcache.interned_strings_buffer" = "8";
      "opcache.max_accelerated_files" = "10000";
      "opcache.memory_consumption" = "128";
      "opcache.revalidate_freq" = "1";
      "openssl.cafile" = "/etc/ssl/certs/ca-certificates.crt";
      short_open_tag = "Off";
      upload_max_filesize = "16G";
      post_max_size = "16G";
      max_input_time = "3600";
      max_execution_time = "3600";
    };
    extraApps = with pkgs.nextcloud26Packages.apps; {inherit calendar contacts bookmarks;};
    extraAppsEnable = true;
  };
  services.nginx.virtualHosts.${config.services.nextcloud.hostName}.listen = [
    {
      addr = "localhost";
      port = 8000;
    }
  ];
}