]>
Commit | Line | Data |
---|---|---|
d9998b44 IB |
1 | { stdenv, fetchurl, gettext, writeText, checkEnv }: |
2 | let | |
3 | awl = stdenv.mkDerivation rec { | |
4 | version = "0.59"; | |
5 | name = "awl-${version}"; | |
6 | src = fetchurl { | |
7 | url = "https://www.davical.org/downloads/awl_${version}.orig.tar.xz"; | |
8 | sha256 = "01b7km7ga3ggbpp8axkc55nizgk5c35fl2z93iydb3hwbxmsvnjp"; | |
9 | }; | |
10 | unpackCmd = '' | |
11 | tar --one-top-level -xf $curSrc | |
12 | ''; | |
13 | installPhase = '' | |
14 | mkdir -p $out | |
15 | cp -ra dba docs inc scripts tests $out | |
16 | ''; | |
17 | }; | |
d9998b44 IB |
18 | davical = rec { |
19 | config = | |
20 | assert checkEnv "NIXOPS_DAVICAL_DB_PASSWORD"; | |
21 | assert checkEnv "NIXOPS_DAVICAL_LDAP_PASSWORD"; | |
22 | writeText "davical_config.php" '' | |
23 | <?php | |
24 | $c->pg_connect[] = "dbname=davical user=davical_app host=db-1.immae.eu password=${builtins.getEnv "NIXOPS_DAVICAL_DB_PASSWORD"}"; | |
25 | ||
26 | $c->readonly_webdav_collections = false; | |
27 | ||
28 | $c->admin_email ='davical@immae.eu'; | |
29 | ||
30 | $c->restrict_setup_to_admin = true; | |
31 | ||
32 | $c->collections_always_exist = false; | |
33 | ||
34 | $c->external_refresh = 60; | |
35 | ||
36 | $c->enable_scheduling = true; | |
37 | ||
38 | $c->iMIP = (object) array("send_email" => true); | |
39 | ||
40 | $c->authenticate_hook['optional'] = false; | |
41 | $c->authenticate_hook['call'] = 'LDAP_check'; | |
42 | $c->authenticate_hook['config'] = array( | |
43 | 'host' => 'ldap.immae.eu', | |
44 | 'port' => '389', | |
45 | 'startTLS' => 'yes', | |
46 | 'bindDN'=> 'cn=davical,ou=services,dc=immae,dc=eu', | |
47 | 'passDN'=> '${builtins.getEnv "NIXOPS_DAVICAL_LDAP_PASSWORD"}', | |
48 | 'protocolVersion' => '3', | |
49 | 'baseDNUsers'=> array('ou=users,dc=immae,dc=eu', 'ou=group_users,dc=immae,dc=eu'), | |
50 | 'filterUsers' => 'memberOf=cn=users,cn=davical,ou=services,dc=immae,dc=eu', | |
51 | 'baseDNGroups' => 'ou=groups,dc=immae,dc=eu', | |
52 | 'filterGroups' => 'memberOf=cn=groups,cn=davical,ou=services,dc=immae,dc=eu', | |
53 | 'mapping_field' => array( | |
54 | "username" => "uid", | |
55 | "fullname" => "cn", | |
56 | "email" => "mail", | |
57 | "modified" => "modifyTimestamp", | |
58 | ), | |
59 | 'format_updated'=> array('Y' => array(0,4),'m' => array(4,2),'d'=> array(6,2),'H' => array(8,2),'M'=>array(10,2),'S' => array(12,2)), | |
60 | /** used to set default value for all users, will be overcharged by ldap if defined also in mapping_field **/ | |
61 | // 'default_value' => array("date_format_type" => "E","locale" => "fr_FR"), | |
62 | 'group_mapping_field' => array( | |
63 | "username" => "cn", | |
64 | "updated" => "modifyTimestamp", | |
65 | "fullname" => "givenName", | |
66 | "displayname" => "givenName", | |
67 | "members" => "memberUid", | |
68 | "email" => "mail", | |
69 | ), | |
70 | ); | |
71 | ||
72 | $c->do_not_sync_from_ldap = array('admin' => true); | |
73 | include('drivers_ldap.php'); | |
74 | ''; | |
75 | webapp = stdenv.mkDerivation rec { | |
76 | version = "1.1.7"; | |
77 | name = "davical-${version}"; | |
78 | src = fetchurl { | |
79 | url = "https://www.davical.org/downloads/davical_${version}.orig.tar.xz"; | |
80 | sha256 = "1ar5m2dxr92b204wkdi8z33ir9vz2jbh5k1p74icpv9ywifvjjp9"; | |
81 | }; | |
82 | unpackCmd = '' | |
83 | tar --one-top-level -xf $curSrc | |
84 | ''; | |
85 | makeFlags = "all"; | |
86 | patches = [ ./davical_19eb79ebf9250e5f339675319902458c40ed1755.patch ]; | |
87 | installPhase = '' | |
88 | mkdir -p $out | |
89 | cp -ra config dba docs htdocs inc locale po scripts testing zonedb $out | |
90 | ln -s ${config} $out/config/config.php | |
91 | ''; | |
92 | buildInputs = [ gettext ]; | |
93 | }; | |
94 | webRoot = "${webapp}/htdocs"; | |
95 | apache = { | |
96 | user = "wwwrun"; | |
97 | group = "wwwrun"; | |
10889174 | 98 | modules = [ "proxy_fcgi" ]; |
d9998b44 IB |
99 | vhostConf = '' |
100 | Alias /davical "${webRoot}" | |
101 | Alias /caldav.php "${webRoot}/caldav.php" | |
102 | <Directory "${webRoot}"> | |
103 | DirectoryIndex index.php index.html | |
104 | AcceptPathInfo On | |
105 | AllowOverride None | |
106 | Require all granted | |
107 | ||
108 | <FilesMatch "\.php$"> | |
109 | CGIPassAuth on | |
110 | SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost" | |
111 | </FilesMatch> | |
112 | ||
113 | RewriteEngine On | |
114 | <IfModule mod_headers.c> | |
115 | Header unset Access-Control-Allow-Origin | |
116 | Header unset Access-Control-Allow-Methods | |
117 | Header unset Access-Control-Allow-Headers | |
118 | Header unset Access-Control-Allow-Credentials | |
119 | Header unset Access-Control-Expose-Headers | |
120 | ||
121 | Header always set Access-Control-Allow-Origin "*" | |
122 | Header always set Access-Control-Allow-Methods "GET,POST,OPTIONS,PROPFIND,PROPPATCH,REPORT,PUT,MOVE,DELETE,LOCK,UNLOCK" | |
123 | Header always set Access-Control-Allow-Headers "User-Agent,Authorization,Content-type,Depth,If-match,If-None-Match,Lock-Token,Timeout,Destination,Overwrite,Prefer,X-client,X-Requested-With" | |
124 | Header always set Access-Control-Allow-Credentials false | |
125 | Header always set Access-Control-Expose-Headers "Etag,Preference-Applied" | |
126 | ||
127 | RewriteCond %{HTTP:Access-Control-Request-Method} !^$ | |
128 | RewriteCond %{REQUEST_METHOD} OPTIONS | |
129 | RewriteRule ^(.*)$ $1 [R=200,L] | |
130 | </IfModule> | |
131 | </Directory> | |
132 | ''; | |
133 | }; | |
134 | phpFpm = rec { | |
135 | basedir = builtins.concatStringsSep ":" [ webapp config awl ]; | |
136 | socket = "/var/run/phpfpm/davical.sock"; | |
137 | pool = '' | |
138 | listen = ${socket} | |
139 | user = ${apache.user} | |
140 | group = ${apache.group} | |
141 | listen.owner = ${apache.user} | |
142 | listen.group = ${apache.group} | |
143 | pm = dynamic | |
144 | pm.max_children = 60 | |
145 | pm.start_servers = 2 | |
146 | pm.min_spare_servers = 1 | |
147 | pm.max_spare_servers = 10 | |
148 | ||
149 | ; Needed to avoid clashes in browser cookies (same domain) | |
150 | php_value[session.name] = DavicalPHPSESSID | |
151 | php_admin_value[open_basedir] = "${basedir}:/tmp" | |
152 | php_admin_value[include_path] = "${awl}/inc:${webapp}/inc" | |
153 | php_admin_value[session.save_path] = "/var/lib/php/sessions/davical" | |
154 | php_flag[magic_quotes_gpc] = Off | |
155 | php_flag[register_globals] = Off | |
156 | php_admin_value[error_reporting] = "E_ALL & ~E_NOTICE" | |
157 | php_admin_value[default_charset] = "utf-8" | |
158 | php_flag[magic_quotes_runtime] = Off | |
159 | ''; | |
160 | }; | |
161 | }; | |
162 | in | |
163 | davical |