Try new onlyoffice version

services/postgresql/default.nix

@@ -35,6 +35,10 @@ in {
         file = ./secrets/netboxDBPass.age;
         owner = "postgres";
       };
+      onlyofficeDBPass = {
+        file = ./secrets/onlyofficeDBPass.age;
+        owner = "postgres";
+      };
     };
     services = {
       crowdsec = {
@@ -65,6 +69,7 @@ in {
           host  authentik  authentik  192.168.1.125/32  md5
           host  grafana    grafana    192.168.1.27/32   md5
           host  netbox     netbox     192.168.1.90/32   md5
+          host  onlyoffice onlyoffice 192.168.1.20/32   md5
           ";
         initialScript = pkgs.writeText "init-sql-script" ''
           CREATE ROLE nextcloud WITH LOGIN CREATEDB;
@@ -86,6 +91,10 @@ in {
           CREATE ROLE netbox WITH LOGIN CREATEDB;
           CREATE DATABASE netbox;
           GRANT ALL PRIVILEGES ON DATABASE netbox TO netbox;
+
+          CREATE ROLE onlyoffice WITH LOGIN CREATEDB;
+          CREATE DATABASE onlyoffice;
+          GRANT ALL PRIVILEGES ON DATABASE onlyoffice TO onlyoffice;
         '';
       };
     };
@@ -116,6 +125,9 @@ in {
 
           password := trim(both from replace(pg_read_file('${netboxDBPass}'), E'\n', '''));
           EXECUTE format('ALTER ROLE netbox WITH PASSWORD '''%s''';', password);
+
+          password := trim(both from replace(pg_read_file('${onlyofficeDBPass}'), E'\n', '''));
+          EXECUTE format('ALTER ROLE onlyoffice WITH PASSWORD '''%s''';', password);
         END $$;
       EOF
     '';

services/postgresql/secrets/onlyofficeDBPass.age

@@ -0,0 +1,10 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyA2L0dP
+aVJWUERxTzJ5eWQrbFE0SGtZNml1NG5oQnBrbHI3N1pwcU0yVVFJCm4zWkt4dnZr
+Vnk4REp3aFBwSGE4TmUvLzBtMUgzZXRVUjFZMHM1dHNaK1EKLT4gc3NoLWVkMjU1
+MTkgc2luZ3ZRIGV6VU1WakJFU2RqYWhrN3BjbHVuYkxqNGJhRUZaZWdNajZtSmRz
+b251RUkKZVFYVXJmczJ3UndjZ2lFa0IrZmJ0MEIvR3cxaDlLaUZZMGRGY0Z0dXFQ
+SQotPiAjeTd7Ny1ncmVhc2UgPyBINmw5CjNKekxvbWk3Wk1MeFZ3Ci0tLSA2TS9Q
+VXkweEVFSXJMVGVCVG1McWVhVm13dnR4aGtLNzh4ck9KU1V6UDZZCtHldZ67VF6h
+PWB5mAiVxkjXEF71I3/xJsuz01zoUDk4mjS2Tq17fbeEJZuv/1RHbE4=
+-----END AGE ENCRYPTED FILE-----