From 1fd6ca81c1535bb7c82dfc4e828577e82aec3106 Mon Sep 17 00:00:00 2001
From: Emmanuel Beffara <manu@beffara.org>
Date: Wed, 26 Aug 2026 11:26:02 +0200
Subject: [PATCH] Upgrade to NixOS 26.05, Postgres 16 and Nextcloud 34

---
 configuration.nix | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/configuration.nix b/configuration.nix
index 8d419c5..fc803a5 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -87,9 +87,8 @@
     enable = true;
     hostName = "cloud.beffara.org";
     https = true;
-    package = pkgs.nextcloud27;
+    package = pkgs.nextcloud34;
     home = "/data/web/nextcloud";
-    enableBrokenCiphersForSSE = false;
 
     autoUpdateApps = {
       enable = true;
@@ -97,16 +96,19 @@
     };
 
     config = {
-      overwriteProtocol = "https";
       dbtype = "pgsql";
       dbuser = "nextcloud";
       dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
       dbname = "nextcloud";
       dbpassFile = "/data/web/nextcloud/db-pass";
-      defaultPhoneRegion = "FR";
       adminpassFile = "/data/web/nextcloud/admin-pass";
       adminuser = "admin";
     };
+
+    settings = {
+      overwriteprotocol = "https";
+      default_phone_region = "FR";
+    };
   };
 
   # Ensure that postgres is running before setting up Nextcloud
@@ -118,6 +120,7 @@
   # PostgreSQL database
   services.postgresql = {
     enable = true;
+    package = pkgs.postgresql_16;
     ensureDatabases = [
       "gitea"
       "nextcloud"
@@ -125,11 +128,11 @@
     ensureUsers = [
       {
         name = "gitea";
-        ensurePermissions."DATABASE gitea" = "ALL PRIVILEGES";
+        ensureDBOwnership = true;
       }
       {
         name = "nextcloud";
-        ensurePermissions."DATABASE nextcloud" = "ALL PRIVILEGES";
+        ensureDBOwnership = true;
       }
     ];
   };