Add grocy

[perso/Immae/Config/Nix.git] / modules / private / websites / tools / tools / grocy.nix

diff --git a/modules/private/websites/tools/tools/grocy.nix b/modules/private/websites/tools/tools/grocy.nix
new file mode 100644 (file)
index 0000000..c165030
--- /dev/null
+++ b/modules/private/websites/tools/tools/grocy.nix
@@ -0,0 +1,56 @@
+{ lib, stdenv, grocy }:
+rec {
+  backups = {
+    rootDir = varDir;
+  };
+  varDir = "/var/lib/grocy";
+  activationScript = {
+    deps = [ "wrappers" ];
+    text = ''
+      install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir}/data
+      install -m 0750 -o ${apache.user} -g ${apache.group} -d ${varDir}/phpSessions
+    '';
+  };
+  webRoot = grocy.webRoot;
+  apache = rec {
+    user = "wwwrun";
+    group = "wwwrun";
+    modules = [ "proxy_fcgi" ];
+    webappName = "tools_grocy";
+    root = "/run/current-system/webapps/${webappName}";
+    vhostConf = ''
+      Alias /grocy "${root}"
+      <Directory "${root}">
+        DirectoryIndex index.php
+        <FilesMatch "\.php$">
+          SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
+        </FilesMatch>
+
+        AllowOverride All
+        Options +FollowSymlinks
+        Require all granted
+      </Directory>
+      '';
+  };
+  phpFpm = rec {
+    basedir = builtins.concatStringsSep ":" (
+      [ grocy grocy.yarnModules varDir ]);
+    socket = "/var/run/phpfpm/grocy.sock";
+    pool = ''
+      listen = ${socket}
+      user = ${apache.user}
+      group = ${apache.group}
+      listen.owner = ${apache.user}
+      listen.group = ${apache.group}
+      pm = ondemand
+      pm.max_children = 60
+      pm.process_idle_timeout = 60
+
+      ; Needed to avoid clashes in browser cookies (same domain)
+      php_value[session.name] = grocyPHPSESSID
+      php_admin_value[open_basedir] = "${basedir}:/tmp"
+      php_admin_value[session.save_path] = "${varDir}/phpSessions"
+      '';
+  };
+}
+