1 { stdenv, fetchurl, env, writeText, lib, phpPackages, php }:
4 buildApp = { appName, version, url, sha256, installPhase ? "mkdir -p $out && cp -R . $out/" }:
5 stdenv.mkDerivation rec {
6 name = "nextcloud-app-${appName}-${version}";
8 phases = "unpackPhase installPhase";
10 src = fetchurl { inherit url sha256; };
13 audioplayer = buildApp rec {
14 appName = "audioplayer";
16 url = "https://github.com/Rello/${appName}/releases/download/${version}/${appName}-${version}.tar.gz";
17 sha256 = "1pg4y51cv3agy28n4gfc8i7x1ya1yijxrmhpblm1n846vhmwdcm8";
19 bookmarks = buildApp rec {
20 appName = "bookmarks";
22 url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}-${version}.tar.gz";
23 sha256 = "0s7lkcl70izlkihnml1par0cac0wvckllyyga3jkb7k9vdg7d40c";
25 calendar = buildApp rec {
28 url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
29 sha256 = "00dijvcvy7snsjslfbyzvpp9anhms22zp1f0zkj89ln33jmana63";
31 contacts = buildApp rec {
34 url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
35 sha256 = "0fafy5kgzr5ldr3hxxxgmnw4y3qpjnv5ha1f1dlmqbc65s8frw7s";
40 url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
41 sha256 = "1kygzixxdkp3dbma009p3pw0fj8wgcqcv39n7pay78lh6zi3nic7";
43 files_markdown = buildApp rec {
44 appName = "files_markdown";
46 url = "https://github.com/icewind1991/${appName}/releases/download/v${version}/${appName}.tar.gz";
47 sha256 = "1dzvy4c6vff2qmkwqw13dx92xdkafaxgnipswjw44mh0ncc2n9ym";
49 gpxedit = buildApp rec {
52 url = "https://gitlab.com/eneiluj/gpxedit-oc/wikis/uploads/33d187268c5f6f6a55350d656305701c/${appName}-${version}.tar.gz";
53 sha256 = "0ynpaxm0xhvcj8xax6rm1w0p6j57wbqidhi7bhn268n483gwl2sw";
55 gpxpod = buildApp rec {
58 url = "https://gitlab.com/eneiluj/gpxpod-oc/-/archive/v${version}/${appName}-oc-v${version}.tar.gz";
59 sha256 = "0smpi4r3z7zfl1612fb30cwm1xmpiq95c81zzqiwzjf288iys74k";
61 keeweb = buildApp rec {
64 url = "https://github.com/jhass/nextcloud-keeweb/releases/download/v${version}/${appName}-${version}.tar.gz";
65 sha256 = "0453kkb0a8vfivmibpwpx4bvhyn64jhns6cdfjacmnvbm6d75nj1";
67 notes = buildApp rec {
70 url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
71 sha256 = "1albzqqsdirzyw8vhvs7r0qm2wqp8vm9vmxm4crhncd85bk01hmh";
73 ocsms = buildApp rec {
76 url = "https://github.com/nextcloud/${appName}/releases/download/${version}/${appName}-${version}.tar.gz";
77 sha256 = "19xgs82js4sdf6j9478vg9li7za7csvcaa1hbq9nmrq441sbxk9c";
79 sed -i -e "/addScript.*devel/d" -e "s@//\(.*addScript.*app.min\)@\1@" templates/main.php
84 spreed = buildApp rec {
87 url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}-${version}.tar.gz";
88 sha256 = "1d48mak1fnf1b28r2687yqamm4pxfg3qyxcj9ny31a6xg2cm0xa7";
90 tasks = buildApp rec {
93 url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
94 sha256 = "089m124lfsfk09fqj50x9n7zndq97jp5afgb8s001rpmzym4g6ny";
98 varDir = "/var/lib/nextcloud";
99 config_php = writeText "config.php" ''
102 'instanceid' => '${env.instance_id}',
103 'datadirectory' => '/var/lib/nextcloud/',
104 'passwordsalt' => '${env.password_salt}',
107 'version' => '15.0.0.10',
108 'dbname' => 'webapps',
109 'dbhost' => '/run/postgresql',
110 'dbtableprefix' => 'oc_',
111 'dbuser' => '${env.postgresql.user}',
112 'dbpassword' => '${env.postgresql.password}',
114 'maxZipInputSize' => 0,
115 'allowZipDownload' => true,
118 'maintenance' => false,
121 0 => 'cloud.immae.eu',
123 'secret' => '${env.secret}',
124 'appstoreenabled' => false,
125 'appstore.experimental.enabled' => true,
127 'trashbin_retention_obligation' => 'auto',
128 'htaccess.RewriteBase' => '/',
129 'mail_smtpmode' => 'smtp',
130 'mail_smtphost' => 'mail.immae.eu',
131 'mail_smtpname' => ${"''"},
132 'mail_smtppassword' => ${"''"},
133 'mail_from_address' => 'owncloud',
134 'mail_smtpauth' => false,
135 'mail_domain' => 'immae.eu',
136 'memcache.local' => '\\OC\\Memcache\\APCu',
137 'memcache.locking' => '\\OC\\Memcache\\Redis',
138 'filelocking.enabled' => true,
141 'host' => 'localhost',
143 'dbindex' => ${env.redis.db_index},
145 'overwrite.cli.url' => 'https://cloud.immae.eu',
146 'ldapIgnoreNamingRules' => false,
147 'ldapProviderFactory' => '\\OCA\\User_LDAP\\LDAPProviderFactory',
148 'config_is_read_only' => true,
151 config = stdenv.mkDerivation rec {
152 name = "nextcloud-config";
153 src = ./nextcloud-config;
154 phases = "installPhase";
158 cp ${config_php} $out/config.php
161 webRoot = stdenv.mkDerivation rec {
162 name = "nextcloud-${version}";
166 url = "https://download.nextcloud.com/server/releases/${name}.tar.bz2";
167 sha256 = "0y7bk1588n5rmmranmmrkajh50074460hr4v052ahg9mf60wbc2v";
174 ln -sf ${config} $out/config
175 ${builtins.concatStringsSep "\n" (
176 lib.attrsets.mapAttrsToList (name: value: "ln -sf ${value} $out/apps/${name}") apps
181 description = "Sharing solution for files, calendars, contacts and more";
182 homepage = https://nextcloud.com;
183 maintainers = with lib.maintainers; [ schneefux bachp globin fpletz ];
184 license = lib.licenses.agpl3Plus;
185 platforms = with lib.platforms; unix;
191 install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir}
192 install -m 0750 -o ${apache.user} -g ${apache.group} -d ${varDir}/phpSessions
198 modules = [ "proxy_fcgi" ];
200 SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
201 <Directory ${webRoot}>
203 DirectoryIndex index.php
204 Options FollowSymlinks
208 <IfModule mod_headers.c>
209 Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains; preload"
211 <FilesMatch "\.php$">
213 SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
221 basedir = builtins.concatStringsSep ":" (
222 [ webRoot varDir config ]
223 ++ lib.attrsets.mapAttrsToList (name: value: value) apps);
224 socket = "/var/run/phpfpm/nextcloud.sock";
226 extension=${phpPackages.redis}/lib/php/extensions/redis.so
227 extension=${phpPackages.apcu}/lib/php/extensions/apcu.so
228 zend_extension=${php}/lib/php/extensions/opcache.so
232 user = ${apache.user}
233 group = ${apache.group}
234 listen.owner = ${apache.user}
235 listen.group = ${apache.group}
238 pm.process_idle_timeout = 60
240 php_admin_value[output_buffering] = 0
241 php_admin_value[max_execution_time] = 1800
242 php_admin_value[zend_extension] = "opcache"
243 php_value[opcache.enable] = 1
244 php_value[opcache.enable_cli] = 1
245 php_value[opcache.interned_strings_buffer] = 8
246 php_value[opcache.max_accelerated_files] = 10000
247 php_value[opcache.memory_consumption] = 128
248 php_value[opcache.save_comments] = 1
249 php_value[opcache.revalidate_freq] = 1
250 php_admin_value[memory_limit] = 512M
252 php_admin_value[open_basedir] = "${basedir}:/proc/meminfo:/dev/urandom:/proc/self/fd:/tmp"
253 php_admin_value[session.save_path] = "${varDir}/phpSessions"