{ config, pkgs, ... }:

{

    environment.systemPackages = with pkgs; [ nextcloud ];

    services.nginx.virtualHosts."cloud.stubbe.rocks" = {
        enableACME = true;
        forceSSL = true;
        serverName = "cloud.stubbe.rocks";
        root = "/var/www/nextcloud/";
        extraConfig = ''
          client_max_body_size 1024M;
          gzip off;
          error_page 403 /core/templates/403.php;
          error_page 404 /core/templates/404.php;
        '';

        locations = {
          "/robots.txt" = {
            extraConfig = "allow all;";
          };
          "/.well-known/carddav" = {
            extraConfig = "return 301 $scheme://$host/remote.php/dav;";
          };
          "/.well-known/caldav" = {
            extraConfig = "return 301 $scheme://$host/remote.php/dav;";
          };
          # Root
          "/" = {
            extraConfig = ''
              rewrite ^ /index.php$uri;
            '';
          };
          # PHP files
          "~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\\.php(?:$|/)" = {
            extraConfig = ''
              fastcgi_split_path_info ^(.+\\.php)(/.*)$;
              include ${pkgs.nginx}/conf/fastcgi_params;
              fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
              fastcgi_param PATH_INFO $fastcgi_path_info;
              fastcgi_pass unix:/run/phpfpm/nextcloud.sock;
            '';
          };
          # CSS and JavaScript files
          "~* ^/(?!apps-local).*\\.(?:css|js)$" = {
            tryFiles = "$uri /index.php$uri$is_args$args";
          };
          # Other static assets
          "~* ^/(?!apps-local).*\\.(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$" = {
            tryFiles = "$uri /index.php$uri$is_args$args";
          };
          # Locally installed apps:
          #
          # No need to specify location for PHP files of installed apps???
          #
          # CSS and JavaScript files for installed apps
          "~* ^/apps-local/.*\\.(?:css|js)$" = {
            root = "/var/nextcloud";
            tryFiles = "$uri =404";
          };
          # Other static assets for installed apps
          "~* ^/apps-local/.*\\.(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$" = {
            root = "/var/nextcloud";
            tryFiles = "$uri =404";
          };
          "~ ^/(?:build|tests|config|lib|3rdparty|templates|data|\\.|autotest|occ|issue|indie|db_|console)" = {
            extraConfig = "deny all;";
          };
      };
  };

    users.extraUsers.nextcloud.packages = [
      pkgs.php
      pkgs.php71Packages.apcu
      pkgs.php71Packages.memcached
      pkgs.php71Packages.redis
      pkgs.php71Packages.imagick
    ];

    # Option I: PHP-FPM pool for Nextcloud
    services.phpfpm.poolConfigs = let
      phpfpmSocketName = "/run/phpfpm/nextcloud.sock";
      phpfpmUser = "nextcloud";
      phpfpmGroup = "nextcloud";
      server = "nginx";
    in
    {
      nextcloud = ''
        listen = ${phpfpmSocketName}
        listen.owner = ${server}
        listen.group = ${server}
        user = ${phpfpmUser}
        group = ${phpfpmGroup}
        pm = ondemand
        pm.max_children = 4
        pm.process_idle_timeout = 10s
        pm.max_requests = 200
      '';
  };

  services.phpfpm.phpOptions = ''
      opcache.enable=1
      opcache.enable_cli=1
      opcache.interned_strings_buffer=8
      opcache.max_accelerated_files=10000
      opcache.memory_consumption=128
      opcache.save_comments=1
      opcache.revalidate_freq=1
'';
}