From 568bfa04347536cc097eed65a48a38a18b8a4529 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Isma=C3=ABl=20Bouya?= <ismael.bouya@normalesup.org>
Date: Tue, 28 Jun 2022 23:03:58 +0200
Subject: [PATCH] Add dolibarr for immae

---
 modules/private/default.nix                 |  1 +
 modules/private/websites/default.nix        |  1 +
 modules/private/websites/immae/dolibarr.nix | 62 +++++++++++++++++++++
 3 files changed, 64 insertions(+)
 create mode 100644 modules/private/websites/immae/dolibarr.nix

diff --git a/modules/private/default.nix b/modules/private/default.nix
index a0d795e..4c55655 100644
--- a/modules/private/default.nix
+++ b/modules/private/default.nix
@@ -56,6 +56,7 @@ set = {
   immaeProd = ./websites/immae/production.nix;
   immaeRelease = ./websites/immae/release.nix;
   immaeTemp = ./websites/immae/temp.nix;
+  immaeDolibarr = ./websites/immae/dolibarr.nix;
 
   isabelleAtenInte = ./websites/isabelle/aten_integration.nix;
   isabelleAtenProd = ./websites/isabelle/aten_production.nix;
diff --git a/modules/private/websites/default.nix b/modules/private/websites/default.nix
index b007a6e..d636678 100644
--- a/modules/private/websites/default.nix
+++ b/modules/private/websites/default.nix
@@ -264,6 +264,7 @@ in
         production.enable = true;
         release.enable = true;
         temp.enable = true;
+        dolibarr.enable = true;
       };
 
       isabelle = {
diff --git a/modules/private/websites/immae/dolibarr.nix b/modules/private/websites/immae/dolibarr.nix
new file mode 100644
index 0000000..e9b5144
--- /dev/null
+++ b/modules/private/websites/immae/dolibarr.nix
@@ -0,0 +1,62 @@
+{ lib, config, pkgs, ... }:
+let
+  cfg = config.myServices.websites.immae.dolibarr;
+  varDir = "/var/lib/ftp/immae/dolibarr";
+  apacheUser = config.services.httpd.Tools.user;
+  apacheGroup = config.services.httpd.Tools.group;
+in {
+  options.myServices.websites.immae.dolibarr.enable = lib.mkEnableOption "enable Dolibarr website";
+
+  config = lib.mkIf cfg.enable {
+    system.activationScripts.dolibarr = {
+      deps = [ "httpd" "users" ];
+      text = ''
+        install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/immae
+      '';
+    };
+    services.phpfpm.pools.immae_dolibarr = {
+      user = apacheUser;
+      group = apacheGroup;
+      settings = {
+        "listen.owner" = apacheUser;
+        "listen.group" = apacheGroup;
+
+        "pm" = "ondemand";
+        "pm.max_children" = "5";
+        "pm.process_idle_timeout" = "60";
+
+        "php_admin_value[upload_max_filesize]" = "100M";
+        "php_admin_value[post_max_size]" = "100M";
+        "php_admin_value[open_basedir]" = "/var/lib/php/sessions/immae:${varDir}:/tmp";
+        "php_admin_value[session.save_path]" = "/var/lib/php/sessions/immae";
+      };
+      phpOptions = config.services.phpfpm.phpOptions + ''
+        disable_functions = "mail"
+      '';
+      phpPackage = pkgs.php74;
+    };
+    services.websites.env.tools.modules = [ "proxy_fcgi" ];
+    services.websites.env.tools.vhostConfs.immae_dolibarr = {
+      certName     = "immae";
+      addToCerts   = true;
+      hosts        = ["dolibarr.immae.eu"];
+      root         = "${varDir}/dolibarr/htdocs";
+      extraConfig  = [
+        ''
+        <FilesMatch "\.php$">
+          SetHandler "proxy:unix:${config.services.phpfpm.pools.immae_dolibarr.socket}|fcgi://localhost"
+        </FilesMatch>
+
+        <Directory ${varDir}/dolibarr/htdocs>
+          DirectoryIndex index.php index.htm index.html
+          Options Indexes FollowSymLinks MultiViews Includes
+          AllowOverride All
+          Require all granted
+        </Directory>
+          ''
+      ];
+    };
+  };
+}
+
+
-- 
2.41.0