1 { env, kanboard, config }:
3 varDir = "/var/lib/kanboard";
7 install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir}/data
8 install -TDm644 ${webRoot}/dataold/.htaccess ${varDir}/data/.htaccess
9 install -TDm644 ${webRoot}/dataold/web.config ${varDir}/data/web.config
12 keys."webapps/tools-kanboard" = {
17 SetEnv MAIL_FROM "kanboard@tools.immae.eu"
19 SetEnv DB_DRIVER "postgres"
20 SetEnv DB_USERNAME "${env.postgresql.user}"
21 SetEnv DB_PASSWORD "${env.postgresql.password}"
22 SetEnv DB_HOSTNAME "${env.postgresql.socket}"
23 SetEnv DB_NAME "${env.postgresql.database}"
25 SetEnv DATA_DIR "${varDir}"
26 SetEnv LDAP_AUTH "true"
27 SetEnv LDAP_SERVER "${env.ldap.host}"
28 SetEnv LDAP_START_TLS "true"
30 SetEnv LDAP_BIND_TYPE "proxy"
31 SetEnv LDAP_USERNAME "${env.ldap.dn}"
32 SetEnv LDAP_PASSWORD "${env.ldap.password}"
33 SetEnv LDAP_USER_BASE_DN "${env.ldap.base}"
34 SetEnv LDAP_USER_FILTER "${env.ldap.filter}"
35 SetEnv LDAP_GROUP_ADMIN_DN "${env.ldap.admin_dn}"
42 modules = [ "proxy_fcgi" ];
44 vhostConf = socket: ''
45 Alias /kanboard "${root}"
47 Include ${config.secrets.fullPaths."webapps/tools-kanboard"}
50 DirectoryIndex index.php
52 Options FollowSymlinks
56 SetHandler "proxy:unix:${socket}|fcgi://localhost"
59 <DirectoryMatch "${root}/data">
65 serviceDeps = [ "postgresql.service" "openldap.service" ];
66 basedir = builtins.concatStringsSep ":" [ webRoot varDir ];
68 "listen.owner" = apache.user;
69 "listen.group" = apache.group;
71 "pm.max_children" = "60";
72 "pm.process_idle_timeout" = "60";
74 # Needed to avoid clashes in browser cookies (same domain)
75 "php_value[session.name]" = "KanboardPHPSESSID";
76 "php_admin_value[open_basedir]" = "${basedir}:/tmp";
77 "php_admin_value[session.save_handler]" = "redis";
78 "php_admin_value[session.save_path]" = "'unix:///run/redis-php-sessions/redis.sock?persistent=1&prefix=Tools:Kanboard:'";