From 8fbb18a9a2ad134c9aeb812db5c1f05d5b0d50df Mon Sep 17 00:00:00 2001
From: ibizaman <ibizapeanut@gmail.com>
Date: Fri, 11 Aug 2023 23:30:04 -0700
Subject: [PATCH] add notes for nextcloud

---
 modules/nextcloud-server.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/modules/nextcloud-server.nix b/modules/nextcloud-server.nix
index 408bd9d..3e0c07f 100644
--- a/modules/nextcloud-server.nix
+++ b/modules/nextcloud-server.nix
@@ -46,6 +46,15 @@ in
     # LDAP is manually configured through
     # https://github.com/lldap/lldap/blob/main/example_configs/nextcloud.md, see also
     # https://docs.nextcloud.com/server/latest/admin_manual/configuration_user/user_auth_ldap.html
+    #
+    # Verify setup with:
+    #  - On admin page
+    #  - https://scan.nextcloud.com/
+    #  - https://www.ssllabs.com/ssltest/
+    # As of writing this, we got no warning on admin page and A+ on both tests.
+    #
+    # Content-Security-Policy is hard. I spent so much trying to fix lingering issues with .js files
+    # not loading to realize those scripts are inserted by extensions. Doh.
     services.nextcloud = {
       enable = true;
       package = pkgs.nextcloud26;