flake.nix

@@ -103,7 +103,13 @@
           nixosModules = {
             # Common nixos/nix-darwin configuration shared between Linux and macOS.
             common = { pkgs, ... }: {
-              virtualisation.docker.enable = true;
+              virtualisation.docker = {
+                enable = true;
+                extraOptions = ''
+                  --data-root /var/lib/docker
+                '';
+              };
+
               services.openssh.enable = true;
               services.openssh.settings.PermitRootLogin = "prohibit-password";
               services.openssh.settings.PasswordAuthentication = false;

hosts/nachtigall/apps/collabora.nix

@@ -0,0 +1,39 @@
+{
+  config,
+  lib,
+  pkgs,
+  self,
+  ...
+}: {
+  services.nginx.virtualHosts."collabora.pub.solar" = {
+    enableACME = true;
+    forceSSL = true;
+
+    locations."/".proxyPass = "http://localhost:9980";
+  };
+
+  virtualisation = {
+    oci-containers = {
+      backend = "docker";
+
+      containers."collabora" = {
+        image = "collabora/code";
+        autoStart = true;
+        ports = [
+          "9980:9980"
+        ];
+        extraOptions = [
+          "--cap-add=MKNOD"
+          "--pull=always"
+        ];
+        environment = {
+          server_name = "collabora.pub.solar";
+          aliasgroup1 = "https://cloud.pub.solar:443";
+          DONT_GEN_SSL_CERT = "1";
+          extra_params = "--o:ssl.enable=false --o:ssl.termination=true";
+          SLEEPFORDEBUGGER = "0";
+        };
+      };
+    };
+  };
+}

hosts/nachtigall/default.nix

@@ -10,6 +10,7 @@
       ./nix.nix
       ./apps/nginx.nix
 
+      ./apps/collabora.nix
       ./apps/forgejo.nix
       ./apps/keycloak.nix
       ./apps/mailman.nix