nextcloud: direct pre-signed download link

Author: Dr Serge

nixos/modules/services/web-apps/nextcloud.nix

@@ -214,6 +214,7 @@ let
               'use_ssl' => ${lib.boolToString s3.useSsl},
               ${lib.optionalString (s3.region != null) "'region' => '${s3.region}',"}
               'use_path_style' => ${lib.boolToString s3.usePathStyle},
+              'use_presigned_url' => ${lib.boolToString s3.usePresignedUrl},
               ${lib.optionalString (s3.sseCKeyFile != null) "'sse_c_key' => nix_read_secret('s3_sse_c_key'),"}
             ],
           ]
@@ -765,6 +766,15 @@ in
               `http://hostname.domain/bucket` instead.
             '';
           };
+          usePresignedUrl = lib.mkOption {
+            type = lib.types.bool;
+            default = false;
+            description = ''
+              Allow bypassing nextcloud instance and serve files
+              directly from the S3 server. Such a download is protected
+              with a presigned download link.
+            '';
+          };
           sseCKeyFile = lib.mkOption {
             type = lib.types.nullOr lib.types.path;
             default = null;