Reapply "richdocuments and collabora"

This reverts commit 7eca2e4.

docs/homelab.md

@@ -7,6 +7,16 @@ All of this configuration should be part of the backups, so it's only required t
 
 ### NextCloud
 
+#### General
+
 1. Configured users
-2. Configured the bookmarks app for internet access so it can fetch previews.
+
+#### Bookmarks app
+
+1. Configured the bookmarks app for internet access so it can fetch previews.
+
+#### Richdocuments app
+
+1. Configure URL of Collabora Online Server to point to the server
+2. Configure Allow list to only allow 172.17.0.2 (IP of the collabora docker container)
 

modules/nixos/adguard/default.nix

@@ -121,6 +121,10 @@ in {
               domain = "adguard.ritter.family";
               answer = config.my.homelab.directions.ip;
             }
+            {
+              domain = "collabora.ritter.family";
+              answer = config.my.homelab.directions.ip;
+            }
             {
               domain = "fritz-box.ritter.family";
               answer = config.my.homelab.directions.ip;

modules/nixos/nextcloud/default.nix

@@ -8,6 +8,7 @@
 in {
   imports = [
     ./memories.nix
+    ./richdocuments.nix
   ];
 
   options.my.modules.nextcloud = {

modules/nixos/nextcloud/richdocuments.nix

@@ -0,0 +1,44 @@
+{
+  config,
+  lib,
+  ...
+}: {
+  config = lib.mkIf config.services.nextcloud.enable {
+    # See https://collabora-online-for-nextcloud.readthedocs.io/en/latest/install/
+    services.nextcloud = {
+      extraApps = {
+        inherit (config.services.nextcloud.package.packages.apps) richdocuments;
+      };
+    };
+
+    virtualisation.oci-containers = lib.mkIf config.services.nextcloud.enable {
+      backend = "docker";
+      containers = {
+        collabora-code = {
+          image = "collabora/code:24.04.7.2.1";
+          ports = ["9980:9980"];
+          environment = {
+            extra_params = "--o:ssl.enable=false --o:ssl.termination=true";
+          };
+          extraOptions = ["--cap-add=MKNOD"];
+        };
+      };
+    };
+
+    systemd.services.nginx = {
+      after = ["docker-collabora-code.service"];
+      requires = ["docker-collabora-code.service"];
+    };
+
+    my.modules.https-proxy = {
+      enable = true;
+      configurations = [
+        {
+          fqdn = "collabora.${config.my.host.name}.ritter.family";
+          target = "http://localhost:9980";
+          proxyWebsockets = true;
+        }
+      ];
+    };
+  };
+}

systems/aarch64-linux/directions/configuration.nix

@@ -19,6 +19,11 @@
       https-proxy = {
         enable = true;
         configurations = [
+          {
+            fqdn = "collabora.ritter.family";
+            target = "https://collabora.srv-prod-2.ritter.family";
+            proxyWebsockets = true;
+          }
           {
             fqdn = "fritz-box.ritter.family";
             target = "https://${config.my.homelab.fritz-box.ip}";