{ lib, pkgs, config, ... }:
let
- nextcloud = pkgs.webapps.nextcloud.withApps (a: [
+ phpPackage = (pkgs.php74.withExtensions({ enabled, all }: enabled ++ [ all.redis all.apcu all.opcache all.imagick ])).override { extraConfig = ''
+ apc.enable_cli = 1
+ '';
+ };
+ nextcloud = pkgs.webapps.nextcloud_22.withApps (a: [
a.apporder a.audioplayer a.bookmarks a.calendar a.carnet a.contacts
- a.cookbook a.deck a.extract a.files_markdown a.files_readmemd
+ a.cookbook a.deck a.extract a.files_markdown a.files_readmemd a.files_mindmap
a.flowupload a.gpxedit a.gpxpod a.keeweb a.maps a.metadata a.music
- a.notes a.ocsms a.passman a.polls a.spreed a.tasks
+ a.notes a.passman a.polls a.spreed a.tasks
]);
env = config.myEnv.tools.nextcloud;
varDir = "/var/lib/nextcloud";
- webappName = "tools_nextcloud";
- apacheRoot = "/run/current-system/webapps/${webappName}";
cfg = config.myServices.websites.tools.cloud;
phpFpm = rec {
basedir = builtins.concatStringsSep ":" ([ nextcloud varDir ] ++ nextcloud.apps);
pool = {
"listen.owner" = "wwwrun";
"listen.group" = "wwwrun";
- "pm" = "ondemand";
+ "pm" = "dynamic";
"pm.max_children" = "60";
+ "pm.start_servers" = "2";
+ "pm.min_spare_servers" = "2";
+ "pm.max_spare_servers" = "3";
"pm.process_idle_timeout" = "60";
"php_admin_value[output_buffering]" = "0";
"php_admin_value[memory_limit]" = "512M";
"php_admin_value[open_basedir]" = "/run/wrappers/bin/sendmail:${basedir}:/proc/meminfo:/dev/urandom:/proc/self/fd:/tmp";
- "php_admin_value[session.save_path]" = "${varDir}/phpSessions";
+ "php_admin_value[session.save_handler]" = "redis";
+ "php_admin_value[session.save_path]" = "'unix:///run/redis-php-sessions/redis.sock?persistent=1&prefix=Tools:Nextcloud:'";
};
};
in {
};
config = lib.mkIf cfg.enable {
+ myServices.chatonsProperties.hostings.nextcloud = {
+ file.datetime = "2022-08-21T19:50:00";
+ hosting = {
+ name = "Nextcloud";
+ description = "The self-hosted productivity platform that keeps you in control";
+ website = "https://cloud.immae.eu/";
+ logo = "https://cloud.immae.eu/core/img/favicon.ico";
+ type = "INSTANCE";
+ status.level = "OK";
+ status.description = "OK";
+ registration.load = "OPEN";
+ install.type = "PACKAGE";
+ };
+ };
+ myServices.chatonsProperties.services.nextcloud = {
+ file.datetime = "2022-08-21T19:50:00";
+ service = {
+ name = "Nextcloud";
+ description = "The self-hosted productivity platform that keeps you in control";
+ website = "https://cloud.immae.eu/";
+ logo = "https://cloud.immae.eu/core/img/favicon.ico";
+ status.level = "OK";
+ status.description = "OK";
+ registration."" = ["MEMBER" "CLIENT"];
+ registration.load = "OPEN";
+ install.type = "PACKAGE";
+ guide.user = "https://www.immae.eu/docs/nextcloud.html";
+ };
+ software = {
+ name = "Nextcloud";
+ website = "https://nextcloud.com/";
+ license.url = "https://github.com/nextcloud/server/blob/master/COPYING";
+ license.name = "GNU Affero General Public License v3.0";
+ version = nextcloud.version;
+ source.url = "https://github.com/nextcloud/server";
+ modules = map (a: a.appName) nextcloud.apps;
+ };
+ };
services.websites.env.tools.modules = [ "proxy_fcgi" ];
services.websites.env.tools.vhostConfs.cloud = {
certName = "eldiron";
addToCerts = true;
hosts = ["cloud.immae.eu" ];
- root = apacheRoot;
+ root = nextcloud;
extraConfig = [
''
SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
- <Directory ${apacheRoot}>
+ <Directory ${nextcloud}>
AcceptPathInfo On
DirectoryIndex index.php
Options FollowSymlinks
];
};
- secrets.keys = [{
- dest = "webapps/tools-nextcloud";
+ secrets.keys."webapps/tools-nextcloud" = {
user = "wwwrun";
group = "wwwrun";
permissions = "0600";
'allowZipDownload' => true,
'forcessl' => true,
'theme' => ${"''"},
+ 'remember_login_cookie_lifetime' => 60*60*24*30,
+ 'session_keepalive' => true,
+ 'session_lifefime' => 60*60*24*30,
'maintenance' => false,
'trusted_domains' =>
array (
'has_rebuilt_cache' => true,
);
'';
- }];
+ };
users.users.root.packages = let
occ = pkgs.writeScriptBin "nextcloud-occ" ''
#! ${pkgs.stdenv.shell}
cd ${nextcloud}
NEXTCLOUD_CONFIG_DIR="${nextcloud}/config" \
exec \
- sudo -E -u wwwrun ${pkgs.php74}/bin/php \
- -c ${pkgs.php74}/etc/php.ini \
+ sudo -E -u wwwrun ${phpPackage}/bin/php \
+ -c ${phpPackage}/etc/php.ini \
occ $*
'';
in [ occ ];
in
''
install -m 0755 -o wwwrun -g wwwrun -d ${varDir}
- install -m 0750 -o wwwrun -g wwwrun -d ${varDir}/phpSessions
${builtins.concatStringsSep "\n" (lib.attrsets.mapAttrsToList (n: v:
"install -D -m 0644 -o wwwrun -g wwwrun -T ${v} ${varDir}/config/${n}.json"
) confs)}
- #install -D -m 0600 -o wwwrun -g wwwrun -T /var/secrets/webapps/tools-nextcloud ${varDir}/config/config.php
+ #install -D -m 0600 -o wwwrun -g wwwrun -T ${config.secrets.fullPaths."webapps/tools-nextcloud"} ${varDir}/config/config.php
'';
};
- # FIXME: add a warning when config.php changes
- system.extraSystemBuilderCmds = ''
- mkdir -p $out/webapps
- ln -s ${nextcloud} $out/webapps/${webappName}
- '';
services.phpfpm.pools.nextcloud = {
user = "wwwrun";
group = "wwwrun";
settings = phpFpm.pool;
- phpPackage = pkgs.php74.withExtensions({ enabled, all }: enabled ++ [ all.redis all.apcu all.opcache ]);
+ inherit phpPackage;
};
services.cron = {
#! ${pkgs.stdenv.shell}
export LOCALE_ARCHIVE=/run/current-system/sw/lib/locale/locale-archive
export PATH=/run/wrappers/bin:$PATH
- ${pkgs.php74}/bin/php -d memory_limit=512M -f ${nextcloud}/cron.php
+ ${phpPackage}/bin/php -d memory_limit=2048M -f ${nextcloud}/cron.php
'';
in [
''
projects / perso / Immae / Config / Nix.git / blobdiff