{ ... }:
{
  imports = [ ./traefik.nix ./fail2ban.nix ];
  services.nextcloud = {
    enable = true;
    hostName = "cloud.xenia.me.uk";
    logType = "systemd";
  };
  services.traefik.dynamicConfigOptions.http = {
    routers.nextcloud = {
      rule = "Host(`cloud.xenia.me.uk`)";
      service = "nextcloud-webinterface";
      tls = { certResolver = "default"; };
    };
    services.nextcloud-webinterface.loadBalancer.servers = [{ url = "http://localhost:3000"; }];
  };
}