]>
Commit | Line | Data |
---|---|---|
4360f70d | 1 | { env, wallabag, mylibs }: |
fd2d83bd | 2 | rec { |
6a8252b1 IB |
3 | backups = { |
4 | rootDir = varDir; | |
5 | }; | |
fd2d83bd IB |
6 | varDir = "/var/lib/wallabag"; |
7 | keys = [{ | |
8 | dest = "webapps/tools-wallabag"; | |
9 | user = apache.user; | |
10 | group = apache.group; | |
11 | permissions = "0400"; | |
12 | text = '' | |
13 | # This file is auto-generated during the composer install | |
14 | parameters: | |
15 | database_driver: pdo_pgsql | |
16 | database_driver_class: Wallabag\CoreBundle\Doctrine\DBAL\Driver\CustomPostgreSQLDriver | |
17 | database_host: ${env.postgresql.socket} | |
18 | database_port: ${env.postgresql.port} | |
19 | database_name: ${env.postgresql.database} | |
20 | database_user: ${env.postgresql.user} | |
21 | database_password: ${env.postgresql.password} | |
22 | database_path: null | |
23 | database_table_prefix: wallabag_ | |
24 | database_socket: null | |
25 | database_charset: utf8 | |
26 | domain_name: https://tools.immae.eu/wallabag | |
27 | mailer_transport: sendmail | |
28 | mailer_host: 127.0.0.1 | |
29 | mailer_user: null | |
30 | mailer_password: null | |
31 | locale: fr | |
32 | secret: ${env.secret} | |
33 | twofactor_auth: true | |
34 | twofactor_sender: wallabag@tools.immae.eu | |
35 | fosuser_registration: false | |
36 | fosuser_confirmation: true | |
37 | from_email: wallabag@tools.immae.eu | |
38 | rss_limit: 50 | |
39 | rabbitmq_host: localhost | |
40 | rabbitmq_port: 5672 | |
41 | rabbitmq_user: guest | |
42 | rabbitmq_password: guest | |
43 | rabbitmq_prefetch_count: 10 | |
44 | redis_scheme: unix | |
45 | redis_host: null | |
46 | redis_port: null | |
47 | redis_path: ${env.redis.socket} | |
48 | redis_password: null | |
49 | sites_credentials: { } | |
50 | ldap_enabled: true | |
ab8f306d | 51 | ldap_host: ${env.ldap.host} |
fd2d83bd IB |
52 | ldap_port: 636 |
53 | ldap_tls: false | |
54 | ldap_ssl: true | |
55 | ldap_bind_requires_dn: true | |
ab8f306d IB |
56 | ldap_base: '${env.ldap.base}' |
57 | ldap_manager_dn: '${env.ldap.dn}' | |
fd2d83bd | 58 | ldap_manager_pw: ${env.ldap.password} |
ab8f306d IB |
59 | ldap_filter: '${env.ldap.filter}' |
60 | ldap_admin_filter: '${env.ldap.admin_filter}' | |
fd2d83bd IB |
61 | ldap_username_attribute: uid |
62 | ldap_email_attribute: mail | |
63 | ldap_name_attribute: cn | |
64 | ldap_enabled_attribute: null | |
65 | services: | |
66 | swiftmailer.mailer.default.transport: | |
67 | class: Swift_SendmailTransport | |
68 | arguments: ['/run/wrappers/bin/sendmail -bs'] | |
a3d281ea | 69 | ''; |
fd2d83bd IB |
70 | }]; |
71 | webappDir = wallabag.override { ldap = true; wallabag_config = "/var/secrets/webapps/tools-wallabag"; }; | |
72 | activationScript = '' | |
73 | install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir} \ | |
74 | ${varDir}/var ${varDir}/data/db ${varDir}/assets/images | |
75 | ''; | |
76 | webRoot = "${webappDir}/web"; | |
77 | # Domain migration: Table wallabag_entry contains whole | |
78 | # https://tools.immae.eu/wallabag domain name in preview_picture | |
79 | apache = rec { | |
80 | user = "wwwrun"; | |
81 | group = "wwwrun"; | |
82 | modules = [ "proxy_fcgi" ]; | |
83 | webappName = "tools_wallabag"; | |
84 | root = "/run/current-system/webapps/${webappName}"; | |
85 | vhostConf = '' | |
86 | Alias /wallabag "${root}" | |
87 | <Directory "${root}"> | |
88 | AllowOverride None | |
89 | Require all granted | |
90 | # For OAuth (apps) | |
91 | CGIPassAuth On | |
aebd817b | 92 | |
fd2d83bd IB |
93 | <FilesMatch "\.php$"> |
94 | SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost" | |
95 | </FilesMatch> | |
aebd817b | 96 | |
fd2d83bd IB |
97 | <IfModule mod_rewrite.c> |
98 | Options -MultiViews | |
99 | RewriteEngine On | |
100 | RewriteCond %{REQUEST_FILENAME} !-f | |
101 | RewriteRule ^(.*)$ app.php [QSA,L] | |
102 | </IfModule> | |
103 | </Directory> | |
104 | <Directory "${root}/bundles"> | |
105 | <IfModule mod_rewrite.c> | |
106 | RewriteEngine Off | |
107 | </IfModule> | |
108 | </Directory> | |
109 | <Directory "${varDir}/assets"> | |
110 | AllowOverride None | |
111 | Require all granted | |
112 | </Directory> | |
113 | ''; | |
114 | }; | |
115 | phpFpm = rec { | |
9247b444 IB |
116 | preStart = '' |
117 | if [ ! -f "${varDir}/currentWebappDir" -o \ | |
118 | ! -f "${varDir}/currentKey" -o \ | |
119 | "${webappDir}" != "$(cat ${varDir}/currentWebappDir 2>/dev/null)" ] \ | |
120 | || ! sha512sum -c --status ${varDir}/currentKey; then | |
121 | pushd ${webappDir} > /dev/null | |
122 | /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=prod cache:clear | |
123 | rm -rf /var/lib/wallabag/var/cache/pro_ | |
124 | /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=prod doctrine:migrations:migrate --no-interaction | |
125 | popd > /dev/null | |
126 | echo -n "${webappDir}" > ${varDir}/currentWebappDir | |
127 | sha512sum /var/secrets/webapps/tools-wallabag > ${varDir}/currentKey | |
128 | fi | |
129 | ''; | |
fd2d83bd IB |
130 | serviceDeps = [ "postgresql.service" "openldap.service" ]; |
131 | basedir = builtins.concatStringsSep ":" [ webappDir "/var/secrets/webapps/tools-wallabag" varDir ]; | |
132 | socket = "/var/run/phpfpm/wallabag.sock"; | |
133 | pool = '' | |
134 | listen = ${socket} | |
135 | user = ${apache.user} | |
136 | group = ${apache.group} | |
137 | listen.owner = ${apache.user} | |
138 | listen.group = ${apache.group} | |
139 | pm = dynamic | |
140 | pm.max_children = 60 | |
141 | pm.start_servers = 2 | |
142 | pm.min_spare_servers = 1 | |
143 | pm.max_spare_servers = 10 | |
aebd817b | 144 | |
fd2d83bd IB |
145 | ; Needed to avoid clashes in browser cookies (same domain) |
146 | php_value[session.name] = WallabagPHPSESSID | |
147 | php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:${basedir}:/tmp" | |
148 | php_value[max_execution_time] = 300 | |
149 | ''; | |
aebd817b | 150 | }; |
fd2d83bd | 151 | } |