1 { lib, pkgs, config, myconfig, mylibs, ... }:
3 adminer = pkgs.callPackage ../../commons/adminer.nix {};
4 ympd = pkgs.callPackage ./ympd.nix {
5 env = myconfig.env.tools.ympd;
7 ttrss = pkgs.callPackage ./ttrss.nix {
8 inherit (mylibs) fetchedGithub fetchedGit;
9 env = myconfig.env.tools.ttrss;
11 roundcubemail = pkgs.callPackage ./roundcubemail.nix {
12 inherit (mylibs) fetchedGithub;
13 env = myconfig.env.tools.roundcubemail;
15 rainloop = pkgs.callPackage ./rainloop.nix {};
16 kanboard = pkgs.callPackage ./kanboard.nix {
17 inherit (mylibs) fetchedGithub;
18 env = myconfig.env.tools.kanboard;
20 wallabag = pkgs.callPackage ./wallabag.nix { env = myconfig.env.tools.wallabag; };
21 yourls = pkgs.callPackage ./yourls.nix {
22 inherit (mylibs) fetchedGithub;
23 env = myconfig.env.tools.yourls;
25 rompr = pkgs.callPackage ./rompr.nix {
26 inherit (mylibs) fetchedGithub;
27 env = myconfig.env.tools.rompr;
29 shaarli = pkgs.callPackage ./shaarli.nix {
30 env = myconfig.env.tools.shaarli;
32 dokuwiki = pkgs.callPackage ./dokuwiki.nix {
33 inherit (mylibs) fetchedGithub;
35 ldap = pkgs.callPackage ./ldap.nix {
36 env = myconfig.env.tools.phpldapadmin;
39 cfg = config.services.myWebsites.tools.tools;
41 options.services.myWebsites.tools.tools = {
42 enable = lib.mkEnableOption "enable tools website";
45 config = lib.mkIf cfg.enable {
46 security.acme.certs."eldiron".extraDomains."tools.immae.eu" = null;
47 security.acme.certs."eldiron".extraDomains."devtools.immae.eu" = null;
58 services.myWebsites.integration.modules =
59 rainloop.apache.modules;
61 services.myWebsites.tools.modules =
63 ++ adminer.apache.modules
64 ++ ympd.apache.modules
65 ++ ttrss.apache.modules
66 ++ roundcubemail.apache.modules
67 ++ wallabag.apache.modules
68 ++ yourls.apache.modules
69 ++ rompr.apache.modules
70 ++ shaarli.apache.modules
71 ++ dokuwiki.apache.modules
72 ++ ldap.apache.modules
73 ++ kanboard.apache.modules;
75 systemd.services.ympd = {
76 description = "Standalone MPD Web GUI written in C";
77 wantedBy = [ "multi-user.target" ];
79 export MPD_PASSWORD=$(cat /var/secrets/mpd)
80 ${pkgs.ympd}/bin/ympd --host ${ympd.config.host} --port ${toString ympd.config.port} --webport ${ympd.config.webPort} --user nobody
84 services.myWebsites.integration.vhostConfs.devtools = {
86 hosts = ["devtools.immae.eu" ];
87 root = "/var/lib/ftp/devtools.immae.eu";
90 <Directory "/var/lib/ftp/devtools.immae.eu">
91 DirectoryIndex index.php index.htm index.html
95 SetHandler "proxy:unix:/var/run/phpfpm/devtools.sock|fcgi://localhost"
99 rainloop.apache.vhostConf
103 services.myWebsites.tools.vhostConfs.tools = {
104 certName = "eldiron";
105 hosts = ["tools.immae.eu" ];
106 root = "/var/lib/ftp/tools.immae.eu";
109 <Directory "/var/lib/ftp/tools.immae.eu">
110 DirectoryIndex index.php index.htm index.html
113 <FilesMatch "\.php$">
114 SetHandler "proxy:unix:/var/run/phpfpm/tools.sock|fcgi://localhost"
118 adminer.apache.vhostConf
119 ympd.apache.vhostConf
120 ttrss.apache.vhostConf
121 roundcubemail.apache.vhostConf
122 wallabag.apache.vhostConf
123 yourls.apache.vhostConf
124 rompr.apache.vhostConf
125 shaarli.apache.vhostConf
126 dokuwiki.apache.vhostConf
127 ldap.apache.vhostConf
128 kanboard.apache.vhostConf
132 security.acme.certs."eldiron".extraDomains."outils.immae.eu" = null;
133 services.myWebsites.tools.vhostConfs.outils = {
134 certName = "eldiron";
135 hosts = [ "outils.immae.eu" ];
139 RedirectMatch 301 ^/mediagoblin(.*)$ https://mgoblin.immae.eu$1
141 RedirectMatch 301 ^/ether(.*)$ https://ether.immae.eu$1
143 RedirectMatch 301 ^/nextcloud(.*)$ https://cloud.immae.eu$1
144 RedirectMatch 301 ^/owncloud(.*)$ https://cloud.immae.eu$1
146 RedirectMatch 301 ^/carddavmate(.*)$ https://dav.immae.eu/infcloud$1
147 RedirectMatch 301 ^/caldavzap(.*)$ https://dav.immae.eu/infcloud$1
148 RedirectMatch 301 ^/caldav.php(.*)$ https://dav.immae.eu/caldav.php$1
149 RedirectMatch 301 ^/davical(.*)$ https://dav.immae.eu/davical$1
151 RedirectMatch 301 ^/taskweb(.*)$ https://task.immae.eu/taskweb$1
153 RedirectMatch 301 ^/(.*)$ https://tools.immae.eu/$1
158 services.myPhpfpm.serviceDependencies = {
159 dokuwiki = dokuwiki.phpFpm.serviceDeps;
160 kanboard = kanboard.phpFpm.serviceDeps;
161 ldap = ldap.phpFpm.serviceDeps;
162 rainloop = rainloop.phpFpm.serviceDeps;
163 roundcubemail = roundcubemail.phpFpm.serviceDeps;
164 shaarli = shaarli.phpFpm.serviceDeps;
165 ttrss = ttrss.phpFpm.serviceDeps;
166 wallabag = wallabag.phpFpm.serviceDeps;
167 yourls = yourls.phpFpm.serviceDeps;
170 services.myPhpfpm.poolPhpConfigs = {
172 extension=${pkgs.phpPackages.redis}/lib/php/extensions/redis.so
173 extension=${pkgs.phpPackages.apcu}/lib/php/extensions/apcu.so
174 zend_extension=${pkgs.php}/lib/php/extensions/opcache.so
176 roundcubemail = roundcubemail.phpFpm.phpConfig;
178 services.myPhpfpm.preStart = {
179 wallabag = wallabag.phpFpm.preStart;
181 services.myPhpfpm.poolConfigs = {
182 adminer = adminer.phpFpm.pool;
183 ttrss = ttrss.phpFpm.pool;
184 roundcubemail = roundcubemail.phpFpm.pool;
185 wallabag = wallabag.phpFpm.pool;
186 yourls = yourls.phpFpm.pool;
187 rompr = rompr.phpFpm.pool;
188 shaarli = shaarli.phpFpm.pool;
189 dokuwiki = dokuwiki.phpFpm.pool;
190 ldap = ldap.phpFpm.pool;
191 rainloop = rainloop.phpFpm.pool;
192 kanboard = kanboard.phpFpm.pool;
194 listen = /var/run/phpfpm/devtools.sock
197 listen.owner = wwwrun
198 listen.group = wwwrun
202 pm.min_spare_servers = 1
203 pm.max_spare_servers = 10
205 php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/lib/ftp/devtools.immae.eu:/tmp"
208 listen = /var/run/phpfpm/tools.sock
211 listen.owner = wwwrun
212 listen.group = wwwrun
216 pm.min_spare_servers = 1
217 pm.max_spare_servers = 10
219 ; Needed to avoid clashes in browser cookies (same domain)
220 php_value[session.name] = ToolsPHPSESSID
221 php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/lib/ftp/tools.immae.eu:/tmp"
225 system.activationScripts = {
226 ttrss = ttrss.activationScript;
227 roundcubemail = roundcubemail.activationScript;
228 wallabag = wallabag.activationScript;
229 yourls = yourls.activationScript;
230 rompr = rompr.activationScript;
231 shaarli = shaarli.activationScript;
232 dokuwiki = dokuwiki.activationScript;
233 rainloop = rainloop.activationScript;
234 kanboard = kanboard.activationScript;
237 system.extraSystemBuilderCmds = ''
238 mkdir -p $out/webapps
239 ln -s ${dokuwiki.webRoot} $out/webapps/${dokuwiki.apache.webappName}
240 ln -s ${ldap.webRoot}/htdocs $out/webapps/${ldap.apache.webappName}
241 ln -s ${rompr.webRoot} $out/webapps/${rompr.apache.webappName}
242 ln -s ${roundcubemail.webRoot} $out/webapps/${roundcubemail.apache.webappName}
243 ln -s ${shaarli.webRoot} $out/webapps/${shaarli.apache.webappName}
244 ln -s ${ttrss.webRoot} $out/webapps/${ttrss.apache.webappName}
245 ln -s ${wallabag.webRoot} $out/webapps/${wallabag.apache.webappName}
246 ln -s ${yourls.webRoot} $out/webapps/${yourls.apache.webappName}
247 ln -s ${rainloop.webRoot} $out/webapps/${rainloop.apache.webappName}
248 ln -s ${kanboard.webRoot} $out/webapps/${kanboard.apache.webappName}
251 systemd.services.tt-rss = {
252 description = "Tiny Tiny RSS feeds update daemon";
255 ExecStart = "${pkgs.php}/bin/php ${ttrss.webRoot}/update.php --daemon";
256 StandardOutput = "syslog";
257 StandardError = "syslog";
258 PermissionsStartOnly = true;
261 wantedBy = [ "multi-user.target" ];
262 requires = ["postgresql.service"];
263 after = ["network.target" "postgresql.service"];