2 files changed, 12 insertions, 4 deletions
diff --git a/lass/2configs/websites/domsen.nix b/lass/2configs/websites/domsen.nix
index a177a0228..ac7db10f5 100644
--- a/lass/2configs/websites/domsen.nix
+++ b/lass/2configs/websites/domsen.nix
@@ -91,13 +91,12 @@ in {
   services.nextcloud = {
     enable = true;
     hostName = "o.xanf.org";
-    package = pkgs.nextcloud18;
+    package = pkgs.nextcloud19;
     config = {
       adminpassFile = toString <secrets> + "/nextcloud_pw";
       overwriteProtocol = "https";
     };
     https = true;
-    nginx.enable = true;
   };
   services.nginx.virtualHosts."o.xanf.org" = {
     enableACME = true;
@@ -175,6 +174,7 @@ in {
 
   users.users.xanf = {
     uid = genid_uint31 "xanf";
+    group = "xanf";
     home = "/home/xanf";
     useDefaultShell = true;
     createHome = true;
@@ -252,6 +252,16 @@ in {
     createHome = true;
   };
 
+  users.users.XANF_TEAM = {
+    uid = genid_uint31 "XANF_TEAM";
+    group = "xanf";
+    home = "/home/XANF_TEAM";
+    useDefaultShell = true;
+    createHome = true;
+  };
+
+  users.groups.xanf = {};
+
   krebs.on-failure.plans.restic-backups-domsen = {
     journalctl = {
       lines = 1000;
diff --git a/lass/2configs/websites/lassulus.nix b/lass/2configs/websites/lassulus.nix
index 74585a6f8..17df71310 100644
--- a/lass/2configs/websites/lassulus.nix
+++ b/lass/2configs/websites/lassulus.nix
@@ -16,7 +16,6 @@ in {
     email = "acme@lassul.us";
     acceptTerms = true;
     certs."lassul.us" = {
-      allowKeysForGroup = true;
       group = "lasscert";
     };
   };
@@ -78,7 +77,6 @@ in {
     email = "lassulus@lassul.us";
     webroot = "/var/lib/acme/acme-challenge";
     group = "nginx";
-    user = "nginx";
   };