From a58a80b2295d9dbadac1b1bc2aca454b7c2b31c7 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Isma=C3=ABl=20Bouya?= <ismael.bouya@normalesup.org>
Date: Tue, 28 Jun 2022 23:03:25 +0200
Subject: [PATCH 1/1] Add dolibarr for Attilax

---
 modules/private/default.nix                   |  2 +
 modules/private/websites/attilax/dolibarr.nix | 63 +++++++++++++++++++
 modules/private/websites/default.nix          |  2 +
 3 files changed, 67 insertions(+)
 create mode 100644 modules/private/websites/attilax/dolibarr.nix

diff --git a/modules/private/default.nix b/modules/private/default.nix
index 2742ce1..a0d795e 100644
--- a/modules/private/default.nix
+++ b/modules/private/default.nix
@@ -21,6 +21,8 @@ set = {
 
 
   # Personal websites
+  attilaxDolibarr = ./websites/attilax/dolibarr.nix;
+
   bakeerCloud = ./websites/bakeer/cloud.nix;
 
   capitainesLandingPages = ./websites/capitaines/landing_pages.nix;
diff --git a/modules/private/websites/attilax/dolibarr.nix b/modules/private/websites/attilax/dolibarr.nix
new file mode 100644
index 0000000..3230193
--- /dev/null
+++ b/modules/private/websites/attilax/dolibarr.nix
@@ -0,0 +1,63 @@
+{ lib, config, pkgs, ... }:
+let
+  cfg = config.myServices.websites.attilax.dolibarr;
+  varDir = "/var/lib/ftp/attilax/dolibarr";
+  apacheUser = config.services.httpd.Prod.user;
+  apacheGroup = config.services.httpd.Prod.group;
+in {
+  options.myServices.websites.attilax.dolibarr.enable = lib.mkEnableOption "enable Dolibarr website";
+
+  config = lib.mkIf cfg.enable {
+    system.activationScripts.dolibarr = {
+      deps = [ "httpd" "users" ];
+      text = ''
+        install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/attilax
+      '';
+    };
+    services.phpfpm.pools.attilax_dolibarr = {
+      user = apacheUser;
+      group = apacheGroup;
+      settings = {
+        "listen.owner" = apacheUser;
+        "listen.group" = apacheGroup;
+
+        "pm" = "ondemand";
+        "pm.max_children" = "5";
+        "pm.process_idle_timeout" = "60";
+
+        "php_admin_value[upload_max_filesize]" = "100M";
+        "php_admin_value[post_max_size]" = "100M";
+        "php_admin_value[open_basedir]" = "/var/lib/php/sessions/attilax:${varDir}:/tmp";
+        "php_admin_value[session.save_path]" = "/var/lib/php/sessions/attilax";
+      };
+      phpOptions = config.services.phpfpm.phpOptions + ''
+        disable_functions = "mail"
+      '';
+      phpPackage = pkgs.php74;
+    };
+    services.websites.env.production.modules = [ "proxy_fcgi" ];
+    services.websites.env.production.vhostConfs.attilax_dolibarr = {
+      certName     = "attilax";
+      addToCerts   = true;
+      certMainHost = "doli.attilax.fr";
+      hosts        = ["doli.attilax.fr"];
+      root         = "${varDir}/dolibarr/htdocs";
+      extraConfig  = [
+        ''
+        <FilesMatch "\.php$">
+          SetHandler "proxy:unix:${config.services.phpfpm.pools.attilax_dolibarr.socket}|fcgi://localhost"
+        </FilesMatch>
+
+        <Directory ${varDir}/dolibarr/htdocs>
+          DirectoryIndex index.php index.htm index.html
+          Options Indexes FollowSymLinks MultiViews Includes
+          AllowOverride All
+          Require all granted
+        </Directory>
+          ''
+      ];
+    };
+  };
+}
+
+
diff --git a/modules/private/websites/default.nix b/modules/private/websites/default.nix
index 37e7333..b007a6e 100644
--- a/modules/private/websites/default.nix
+++ b/modules/private/websites/default.nix
@@ -215,6 +215,8 @@ in
     myServices.tools.kanboard.farm.instances.tonnelle = {};
     myServices.tools.kanboard.farm.instances.gebull = {};
     myServices.websites = {
+      attilax.dolibarr.enable = true;
+
       bakeer.cloud.enable = true;
       capitaines.landing_pages.enable = true;
 
-- 
2.41.0