1 { stdenv, fetchurl, writeText, env, composerEnv, phpPackages, php, which }:
4 varDir = "/var/lib/wallabag";
6 dest = "webapps/tools-wallabag";
11 # This file is auto-generated during the composer install
13 database_driver: pdo_pgsql
14 database_driver_class: Wallabag\CoreBundle\Doctrine\DBAL\Driver\CustomPostgreSQLDriver
15 database_host: ${env.postgresql.socket}
16 database_port: ${env.postgresql.port}
17 database_name: ${env.postgresql.database}
18 database_user: ${env.postgresql.user}
19 database_password: ${env.postgresql.password}
21 database_table_prefix: wallabag_
23 database_charset: utf8
24 domain_name: https://tools.immae.eu/wallabag
25 mailer_transport: sendmail
26 mailer_host: 127.0.0.1
32 twofactor_sender: wallabag@tools.immae.eu
33 fosuser_registration: false
34 fosuser_confirmation: true
35 from_email: wallabag@tools.immae.eu
37 rabbitmq_host: localhost
40 rabbitmq_password: guest
41 rabbitmq_prefetch_count: 10
45 redis_path: ${env.redis.socket}
47 sites_credentials: { }
49 ldap_host: ldap.immae.eu
53 ldap_bind_requires_dn: true
54 ldap_base: 'dc=immae,dc=eu'
55 ldap_manager_dn: 'cn=wallabag,ou=services,dc=immae,dc=eu'
56 ldap_manager_pw: ${env.ldap.password}
57 ldap_filter: '(&(memberOf=cn=users,cn=wallabag,ou=services,dc=immae,dc=eu))'
58 ldap_admin_filter: '(&(memberOf=cn=admins,cn=wallabag,ou=services,dc=immae,dc=eu)(uid=%s))'
59 ldap_username_attribute: uid
60 ldap_email_attribute: mail
61 ldap_name_attribute: cn
62 ldap_enabled_attribute: null
64 swiftmailer.mailer.default.transport:
65 class: Swift_SendmailTransport
66 arguments: ['/run/wrappers/bin/sendmail -bs']
69 webappDir = composerEnv.buildPackage rec {
71 "fr3d/ldap-bundle" = {
73 src = composerEnv.buildZipPackage {
74 name = "fr3d-ldap-bundle-5a8927c11af45fa06331b97221c6da1a4a237475";
76 url = https://api.github.com/repos/Maks3w/FR3DLdapBundle/zipball/5a8927c11af45fa06331b97221c6da1a4a237475;
77 sha256 = "168zkd82j200wd6h0a3lq81g5s2pifg889rv27q2g429nppsbfxc";
81 "zendframework/zend-ldap" = {
83 src = composerEnv.buildZipPackage {
84 name = "zendframework-zend-ldap-b63c7884a08d3a6bda60ebcf7d6238cf8ad89f49";
86 url = https://api.github.com/repos/zendframework/zend-ldap/zipball/b63c7884a08d3a6bda60ebcf7d6238cf8ad89f49;
87 sha256 = "0mn4yqnb5prqhrbbybmw1i2rx7xf4s4wagbdq9qi55fa0vk3jgw9";
93 doRemoveVendor = false;
94 # Beware when upgrading, I probably messed up with the migrations table
95 # (due to a psql bug in wallabag)
97 name = "wallabag-${version}";
99 url = "https://static.wallabag.org/releases/wallabag-release-${version}.tar.gz";
100 sha256 = "0m0dy3r94ks5pfxyb9vbgrsm0vrwdl3jd5wqwg4f5vd107lq90q1";
104 sourceRoot=${version}
107 patches = [ ./wallabag_ldap.patch ];
109 export SYMFONY_ENV="prod"
112 rm -rf web/assets var/{cache,logs,sessions} app/config/parameters.yml data
113 ln -sf /var/secrets/webapps/tools-wallabag app/config/parameters.yml
114 ln -sf ${varDir}/var/{cache,logs,sessions} var
115 ln -sf ${varDir}/data data
116 ln -sf ${varDir}/assets web/assets
119 activationScript = ''
120 install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir} \
121 ${varDir}/var ${varDir}/data/db ${varDir}/assets/images
123 webRoot = "${webappDir}/web";
124 # Domain migration: Table wallabag_entry contains whole
125 # https://tools.immae.eu/wallabag domain name in preview_picture
129 modules = [ "proxy_fcgi" ];
130 webappName = "tools_wallabag";
131 root = "/run/current-system/webapps/${webappName}";
133 Alias /wallabag "${root}"
134 <Directory "${root}">
140 <FilesMatch "\.php$">
141 SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
144 <IfModule mod_rewrite.c>
147 RewriteCond %{REQUEST_FILENAME} !-f
148 RewriteRule ^(.*)$ app.php [QSA,L]
151 <Directory "${root}/bundles">
152 <IfModule mod_rewrite.c>
156 <Directory "${varDir}/assets">
164 if [ ! -f "${varDir}/currentWebappDir" -o \
165 ! -f "${varDir}/currentKey" -o \
166 "${webappDir}" != "$(cat ${varDir}/currentWebappDir 2>/dev/null)" ] \
167 || ! sha512sum -c --status ${varDir}/currentKey; then
168 pushd ${webappDir} > /dev/null
169 /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=prod cache:clear
170 rm -rf /var/lib/wallabag/var/cache/pro_
171 /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=prod doctrine:migrations:migrate --no-interaction
173 echo -n "${webappDir}" > ${varDir}/currentWebappDir
174 sha512sum /var/secrets/webapps/tools-wallabag > ${varDir}/currentKey
177 serviceDeps = [ "postgresql.service" "openldap.service" ];
178 basedir = builtins.concatStringsSep ":" [ webappDir "/var/secrets/webapps/tools-wallabag" varDir ];
179 socket = "/var/run/phpfpm/wallabag.sock";
182 user = ${apache.user}
183 group = ${apache.group}
184 listen.owner = ${apache.user}
185 listen.group = ${apache.group}
189 pm.min_spare_servers = 1
190 pm.max_spare_servers = 10
192 ; Needed to avoid clashes in browser cookies (same domain)
193 php_value[session.name] = WallabagPHPSESSID
194 php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:${basedir}:/tmp"
195 php_value[max_execution_time] = 300