1 { stdenv, fetchurl, writeText, env, composerEnv, phpPackages, php, which }:
4 varDir = "/var/lib/wallabag";
5 keys.tools-wallabag = {
6 destDir = "/run/keys/webapps";
11 # This file is auto-generated during the composer install
13 database_driver: pdo_pgsql
14 database_driver_class: Wallabag\CoreBundle\Doctrine\DBAL\Driver\CustomPostgreSQLDriver
15 database_host: ${env.postgresql.socket}
16 database_port: ${env.postgresql.port}
17 database_name: ${env.postgresql.database}
18 database_user: ${env.postgresql.user}
19 database_password: ${env.postgresql.password}
21 database_table_prefix: wallabag_
23 database_charset: utf8
24 domain_name: https://tools.immae.eu/wallabag
25 mailer_transport: sendmail
26 mailer_host: 127.0.0.1
32 twofactor_sender: wallabag@tools.immae.eu
33 fosuser_registration: false
34 fosuser_confirmation: true
35 from_email: wallabag@tools.immae.eu
37 rabbitmq_host: localhost
40 rabbitmq_password: guest
41 rabbitmq_prefetch_count: 10
45 redis_path: ${env.redis.socket}
47 sites_credentials: { }
49 ldap_host: ldap.immae.eu
53 ldap_bind_requires_dn: true
54 ldap_base: 'dc=immae,dc=eu'
55 ldap_manager_dn: 'cn=wallabag,ou=services,dc=immae,dc=eu'
56 ldap_manager_pw: ${env.ldap.password}
57 ldap_filter: '(&(memberOf=cn=users,cn=wallabag,ou=services,dc=immae,dc=eu))'
58 ldap_admin_filter: '(&(memberOf=cn=admins,cn=wallabag,ou=services,dc=immae,dc=eu)(uid=%s))'
59 ldap_username_attribute: uid
60 ldap_email_attribute: mail
61 ldap_name_attribute: cn
62 ldap_enabled_attribute: null
64 swiftmailer.mailer.default.transport:
65 class: Swift_SendmailTransport
66 arguments: ['/run/wrappers/bin/sendmail -bs']
69 webappDir = composerEnv.buildPackage rec {
71 "fr3d/ldap-bundle" = {
73 src = composerEnv.buildZipPackage {
74 name = "fr3d-ldap-bundle-5a8927c11af45fa06331b97221c6da1a4a237475";
76 url = https://api.github.com/repos/Maks3w/FR3DLdapBundle/zipball/5a8927c11af45fa06331b97221c6da1a4a237475;
77 sha256 = "168zkd82j200wd6h0a3lq81g5s2pifg889rv27q2g429nppsbfxc";
81 "zendframework/zend-ldap" = {
83 src = composerEnv.buildZipPackage {
84 name = "zendframework-zend-ldap-b63c7884a08d3a6bda60ebcf7d6238cf8ad89f49";
86 url = https://api.github.com/repos/zendframework/zend-ldap/zipball/b63c7884a08d3a6bda60ebcf7d6238cf8ad89f49;
87 sha256 = "0mn4yqnb5prqhrbbybmw1i2rx7xf4s4wagbdq9qi55fa0vk3jgw9";
93 doRemoveVendor = false;
94 # Beware when upgrading, I probably messed up with the migrations table
95 # (due to a psql bug in wallabag)
97 name = "wallabag-${version}";
99 url = "https://static.wallabag.org/releases/wallabag-release-${version}.tar.gz";
100 sha256 = "0m0dy3r94ks5pfxyb9vbgrsm0vrwdl3jd5wqwg4f5vd107lq90q1";
104 sourceRoot=${version}
107 patches = [ ./wallabag_ldap.patch ];
109 export SYMFONY_ENV="prod"
112 rm -rf web/assets var/{cache,logs,sessions} app/config/parameters.yml data
113 ln -sf /run/keys/webapps/tools-wallabag app/config/parameters.yml
114 ln -sf ${varDir}/var/{cache,logs,sessions} var
115 ln -sf ${varDir}/data data
116 ln -sf ${varDir}/assets web/assets
119 activationScript = ''
120 install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir} \
121 ${varDir}/var ${varDir}/data/db ${varDir}/assets/images
122 if [ ! -f "${varDir}/currentWebappDir" -o \
123 "${webappDir}" != "$(cat ${varDir}/currentWebappDir 2>/dev/null)" ]; then
124 pushd ${webappDir} > /dev/null
125 $wrapperDir/sudo -u wwwrun ./bin/console --env=prod cache:clear
126 rm -rf /var/lib/wallabag/var/cache/pro_
127 $wrapperDir/sudo -u wwwrun ./bin/console --env=prod doctrine:migrations:migrate --no-interaction
129 echo -n "${webappDir}" > ${varDir}/currentWebappDir
132 webRoot = "${webappDir}/web";
133 # Domain migration: Table wallabag_entry contains whole
134 # https://tools.immae.eu/wallabag domain name in preview_picture
138 modules = [ "proxy_fcgi" ];
139 webappName = "tools_wallabag";
140 root = "/run/current-system/webapps/${webappName}";
142 Alias /wallabag "${root}"
143 <Directory "${root}">
149 <FilesMatch "\.php$">
150 SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
153 <IfModule mod_rewrite.c>
156 RewriteCond %{REQUEST_FILENAME} !-f
157 RewriteRule ^(.*)$ app.php [QSA,L]
160 <Directory "${root}/bundles">
161 <IfModule mod_rewrite.c>
165 <Directory "${varDir}/assets">
172 serviceDeps = [ "postgresql.service" "openldap.service" "tools-wallabag-key.service" ];
173 basedir = builtins.concatStringsSep ":" [ webappDir "/run/keys/webapps/tools-wallabag" varDir ];
174 socket = "/var/run/phpfpm/wallabag.sock";
177 user = ${apache.user}
178 group = ${apache.group}
179 listen.owner = ${apache.user}
180 listen.group = ${apache.group}
184 pm.min_spare_servers = 1
185 pm.max_spare_servers = 10
187 ; Needed to avoid clashes in browser cookies (same domain)
188 php_value[session.name] = WallabagPHPSESSID
189 php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:${basedir}:/tmp"
190 php_value[max_execution_time] = 300