{ config, extraInfo, pkgs, ... }:
{
  services.nginx.virtualHosts.${extraInfo.nextcloudURI} = {
    enableACME = true;
    forceSSL = true;
  };

  services.nextcloud = {
    enable = true;
    package = pkgs.nextcloud28;
    datadir = "/srv/nextcloud";
    https = true;
    hostName = extraInfo.nextcloudURI;

    extraAppsEnable = true;
    appstoreEnable = false;
    extraApps = {
      inherit (config.services.nextcloud.package.packages.apps)
        calendar
        cospend
        twofactor_webauthn
        deck
        ;
    };

    database.createLocally = true;
    configureRedis = true;

    config = {
      dbtype = "pgsql";

      defaultPhoneRegion = "FR";

      adminuser = "dala";
      adminpassFile = config.sops.secrets.nextcloud_admin_pw.path;
    };

    caching = {
      redis = true;
      memcached = true;
      apcu = true;
    };
  };
}