]>
Commit | Line | Data |
---|---|---|
1 | { stdenv, fetchurl, writeText, env, phpPackages, php, which }: | |
2 | let | |
3 | wallabag = rec { | |
4 | varDir = "/var/lib/wallabag"; | |
5 | parameters = writeText "parameters.yml" '' | |
6 | # This file is auto-generated during the composer install | |
7 | parameters: | |
8 | database_driver: pdo_pgsql | |
9 | database_driver_class: Wallabag\CoreBundle\Doctrine\DBAL\Driver\CustomPostgreSQLDriver | |
10 | database_host: db-1.immae.eu | |
11 | database_port: null | |
12 | database_name: webapps | |
13 | database_user: wallabag | |
14 | database_password: ${env.postgresql.password} | |
15 | database_path: null | |
16 | database_table_prefix: wallabag_ | |
17 | database_socket: null | |
18 | database_charset: utf8 | |
19 | domain_name: https://tools.immae.eu/wallabag | |
20 | mailer_transport: smtp | |
21 | mailer_host: mail.immae.eu | |
22 | mailer_user: null | |
23 | mailer_password: null | |
24 | locale: fr | |
25 | secret: ${env.secret} | |
26 | twofactor_auth: true | |
27 | twofactor_sender: wallabag@immae.eu | |
28 | fosuser_registration: false | |
29 | fosuser_confirmation: true | |
30 | from_email: wallabag@immae.eu | |
31 | rss_limit: 50 | |
32 | rabbitmq_host: localhost | |
33 | rabbitmq_port: 5672 | |
34 | rabbitmq_user: guest | |
35 | rabbitmq_password: guest | |
36 | rabbitmq_prefetch_count: 10 | |
37 | redis_scheme: tcp | |
38 | redis_host: localhost | |
39 | redis_port: 6379 | |
40 | redis_path: null | |
41 | redis_password: null | |
42 | sites_credentials: { } | |
43 | ldap_enabled: true | |
44 | ldap_host: ldap.immae.eu | |
45 | ldap_port: 636 | |
46 | ldap_tls: false | |
47 | ldap_ssl: true | |
48 | ldap_bind_requires_dn: true | |
49 | ldap_base: 'dc=immae,dc=eu' | |
50 | ldap_manager_dn: 'cn=wallabag,ou=services,dc=immae,dc=eu' | |
51 | ldap_manager_pw: ${env.ldap.password} | |
52 | ldap_filter: '(&(memberOf=cn=users,cn=wallabag,ou=services,dc=immae,dc=eu))' | |
53 | ldap_admin_filter: '(&(memberOf=cn=admins,cn=wallabag,ou=services,dc=immae,dc=eu)(uid=%s))' | |
54 | ldap_username_attribute: uid | |
55 | ldap_email_attribute: mail | |
56 | ldap_name_attribute: cn | |
57 | ldap_enabled_attribute: null | |
58 | ''; | |
59 | webappDir = stdenv.mkDerivation rec { | |
60 | __noChroot = true; | |
61 | # Beware when upgrading, I probably messed up with the migrations table | |
62 | # (due to a psql bug in wallabag) | |
63 | version = "2.3.6"; | |
64 | name = "wallabag-${version}"; | |
65 | src = fetchurl { | |
66 | url = "https://static.wallabag.org/releases/wallabag-release-${version}.tar.gz"; | |
67 | sha256 = "0m0dy3r94ks5pfxyb9vbgrsm0vrwdl3jd5wqwg4f5vd107lq90q1"; | |
68 | }; | |
69 | patches = [ ./wallabag_ldap.patch ]; | |
70 | dontBuild = "true"; | |
71 | installPhase = '' | |
72 | cp -a . $out | |
73 | cd $out | |
74 | export SYMFONY_ENV=prod | |
75 | php -d memory_limit=-1 ${phpPackages.composer}/libexec/composer/composer.phar require --update-no-dev -o --prefer-dist fr3d/ldap-bundle | |
76 | rm -rf web/assets var/cache app/config/parameters.yml data | |
77 | mv var var_old | |
78 | ln -sf ${parameters} app/config/parameters.yml | |
79 | ln -sf ../../../../../${varDir}/var var | |
80 | ln -sf ../../../../../${varDir}/data data | |
81 | ln -sf ../../../../../../${varDir}/assets web/assets | |
82 | ''; | |
83 | buildInputs = [ php phpPackages.composer ]; | |
84 | }; | |
85 | activationScript = '' | |
86 | install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir} \ | |
87 | ${varDir}/var ${varDir}/data/db ${varDir}/assets/images | |
88 | if [ ! -f "${varDir}/currentWebappDir" -o \ | |
89 | "${webappDir}" != "$(cat ${varDir}/currentWebappDir 2>/dev/null)" ]; then | |
90 | pushd ${webappDir} > /dev/null | |
91 | $wrapperDir/sudo -u wwwrun ./bin/console --env=prod cache:clear | |
92 | $wrapperDir/sudo -u wwwrun ./bin/console --env=prod doctrine:migrations:migrate --no-interaction | |
93 | popd > /dev/null | |
94 | echo -n "${webappDir}" > ${varDir}/currentWebappDir | |
95 | fi | |
96 | ''; | |
97 | webRoot = "${webappDir}/web"; | |
98 | apache = { | |
99 | user = "wwwrun"; | |
100 | group = "wwwrun"; | |
101 | modules = [ "proxy_fcgi" ]; | |
102 | vhostConf = '' | |
103 | Alias /assets "${varDir}/assets" | |
104 | Alias /wallabag "${webRoot}" | |
105 | <Directory "${webRoot}"> | |
106 | AllowOverride None | |
107 | Require all granted | |
108 | # For OAuth (apps) | |
109 | CGIPassAuth On | |
110 | ||
111 | <FilesMatch "\.php$"> | |
112 | SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost" | |
113 | </FilesMatch> | |
114 | ||
115 | <IfModule mod_rewrite.c> | |
116 | Options -MultiViews | |
117 | RewriteEngine On | |
118 | RewriteCond %{REQUEST_FILENAME} !-f | |
119 | RewriteRule ^(.*)$ app.php [QSA,L] | |
120 | </IfModule> | |
121 | </Directory> | |
122 | <Directory "${webRoot}/bundles"> | |
123 | <IfModule mod_rewrite.c> | |
124 | RewriteEngine Off | |
125 | </IfModule> | |
126 | </Directory> | |
127 | <Directory "${varDir}/assets"> | |
128 | AllowOverride None | |
129 | Require all granted | |
130 | </Directory> | |
131 | ''; | |
132 | }; | |
133 | phpFpm = rec { | |
134 | basedir = builtins.concatStringsSep ":" [ webappDir parameters varDir ]; | |
135 | socket = "/var/run/phpfpm/wallabag.sock"; | |
136 | pool = '' | |
137 | listen = ${socket} | |
138 | user = ${apache.user} | |
139 | group = ${apache.group} | |
140 | listen.owner = ${apache.user} | |
141 | listen.group = ${apache.group} | |
142 | pm = dynamic | |
143 | pm.max_children = 60 | |
144 | pm.start_servers = 2 | |
145 | pm.min_spare_servers = 1 | |
146 | pm.max_spare_servers = 10 | |
147 | ||
148 | ; Needed to avoid clashes in browser cookies (same domain) | |
149 | php_value[session.name] = WallabagPHPSESSID | |
150 | php_admin_value[open_basedir] = "${basedir}:/tmp" | |
151 | php_value[max_execution_time] = 300 | |
152 | ''; | |
153 | }; | |
154 | }; | |
155 | in | |
156 | wallabag |