]> git.immae.eu Git - perso/Immae/Config/Nix.git/blob - modules/private/websites/tools/mail/rainloop.nix
2dad46e72a49f0e32775b223b07f3aeb40503118
[perso/Immae/Config/Nix.git] / modules / private / websites / tools / mail / rainloop.nix
1 { lib, pkgs, writeText, stdenv, fetchurl }:
2 rec {
3 varDir = "/var/lib/rainloop";
4 activationScript = {
5 deps = [ "wrappers" ];
6 text = ''
7 install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir}
8 install -m 0750 -o ${apache.user} -g ${apache.group} -d ${varDir}/phpSessions
9 install -m 0750 -o ${apache.user} -g ${apache.group} -d ${varDir}/data
10 '';
11 };
12 webRoot = pkgs.rainloop-community.override { dataPath = "${varDir}/data"; };
13 apache = rec {
14 user = "wwwrun";
15 group = "wwwrun";
16 modules = [ "proxy_fcgi" ];
17 webappName = "tools_rainloop";
18 root = "/run/current-system/webapps/${webappName}";
19 vhostConf = ''
20 Alias /rainloop "${root}"
21 <Directory "${root}">
22 DirectoryIndex index.php
23 AllowOverride All
24 Options -FollowSymlinks
25 Require all granted
26
27 <FilesMatch "\.php$">
28 SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
29 </FilesMatch>
30 </Directory>
31
32 <DirectoryMatch "${root}/data">
33 Require all denied
34 </DirectoryMatch>
35 '';
36 };
37 phpFpm = rec {
38 serviceDeps = [ "postgresql.service" ];
39 basedir = builtins.concatStringsSep ":" [ webRoot varDir ];
40 socket = "/var/run/phpfpm/rainloop.sock";
41 pool = ''
42 user = ${apache.user}
43 group = ${apache.group}
44 listen.owner = ${apache.user}
45 listen.group = ${apache.group}
46 pm = ondemand
47 pm.max_children = 60
48 pm.process_idle_timeout = 60
49
50 ; Needed to avoid clashes in browser cookies (same domain)
51 php_value[session.name] = RainloopPHPSESSID
52 php_admin_value[upload_max_filesize] = 200M
53 php_admin_value[post_max_size] = 200M
54 php_admin_value[open_basedir] = "${basedir}:/tmp"
55 php_admin_value[session.save_path] = "${varDir}/phpSessions"
56 '';
57 };
58 }