1 { lib, pkgs, config, ... }:
3 adminer = pkgs.callPackage ./adminer.nix {
4 inherit (pkgs.webapps) adminer;
6 ympd = pkgs.callPackage ./ympd.nix {
7 env = config.myEnv.tools.ympd;
9 ttrss = pkgs.callPackage ./ttrss.nix {
10 inherit (pkgs.webapps) ttrss ttrss-plugins;
11 env = config.myEnv.tools.ttrss;
13 kanboard = pkgs.callPackage ./kanboard.nix {
14 env = config.myEnv.tools.kanboard;
16 wallabag = pkgs.callPackage ./wallabag.nix {
17 inherit (pkgs.webapps) wallabag;
18 env = config.myEnv.tools.wallabag;
20 yourls = pkgs.callPackage ./yourls.nix {
21 inherit (pkgs.webapps) yourls yourls-plugins;
22 env = config.myEnv.tools.yourls;
24 rompr = pkgs.callPackage ./rompr.nix {
25 inherit (pkgs.webapps) rompr;
26 env = config.myEnv.tools.rompr;
28 shaarli = pkgs.callPackage ./shaarli.nix {
29 env = config.myEnv.tools.shaarli;
31 dokuwiki = pkgs.callPackage ./dokuwiki.nix {
32 inherit (pkgs.webapps) dokuwiki dokuwiki-plugins;
34 ldap = pkgs.callPackage ./ldap.nix {
35 inherit (pkgs.webapps) phpldapadmin;
36 env = config.myEnv.tools.phpldapadmin;
39 cfg = config.myServices.websites.tools.tools;
41 options.myServices.websites.tools.tools = {
42 enable = lib.mkEnableOption "enable tools website";
45 config = lib.mkIf cfg.enable {
54 services.duplyBackup.profiles = {
55 dokuwiki = dokuwiki.backups;
56 kanboard = kanboard.backups;
57 rompr = rompr.backups;
58 shaarli = shaarli.backups;
59 ttrss = ttrss.backups;
60 wallabag = wallabag.backups;
63 services.websites.env.tools.modules =
65 ++ adminer.apache.modules
66 ++ ympd.apache.modules
67 ++ ttrss.apache.modules
68 ++ wallabag.apache.modules
69 ++ yourls.apache.modules
70 ++ rompr.apache.modules
71 ++ shaarli.apache.modules
72 ++ dokuwiki.apache.modules
73 ++ ldap.apache.modules
74 ++ kanboard.apache.modules;
76 services.websites.env.integration.vhostConfs.devtools = {
79 hosts = ["devtools.immae.eu" ];
80 root = "/var/lib/ftp/devtools.immae.eu";
85 <Directory "/var/lib/ftp/devtools.immae.eu">
86 DirectoryIndex index.php index.htm index.html
90 SetHandler "proxy:unix:/var/run/phpfpm/devtools.sock|fcgi://localhost"
97 services.websites.env.tools.vhostConfs.tools = {
100 hosts = ["tools.immae.eu" ];
101 root = "/var/lib/ftp/tools.immae.eu";
104 RedirectMatch 301 ^/roundcube(.*)$ https://mail.immae.eu/roundcube$1
105 RedirectMatch 301 ^/jappix(.*)$ https://im.immae.fr/converse
107 <Directory "/var/lib/ftp/tools.immae.eu">
108 DirectoryIndex index.php index.htm index.html
111 <FilesMatch "\.php$">
112 SetHandler "proxy:unix:/var/run/phpfpm/tools.sock|fcgi://localhost"
116 adminer.apache.vhostConf
117 ympd.apache.vhostConf
118 ttrss.apache.vhostConf
119 wallabag.apache.vhostConf
120 yourls.apache.vhostConf
121 rompr.apache.vhostConf
122 shaarli.apache.vhostConf
123 dokuwiki.apache.vhostConf
124 ldap.apache.vhostConf
125 kanboard.apache.vhostConf
129 services.websites.env.tools.vhostConfs.outils = {
130 certName = "eldiron";
132 hosts = [ "outils.immae.eu" "outils.immae.fr" ];
136 RedirectMatch 301 ^/mediagoblin(.*)$ https://mgoblin.immae.eu$1
138 RedirectMatch 301 ^/ether(.*)$ https://ether.immae.eu$1
140 RedirectMatch 301 ^/nextcloud(.*)$ https://cloud.immae.eu$1
141 RedirectMatch 301 ^/owncloud(.*)$ https://cloud.immae.eu$1
143 RedirectMatch 301 ^/carddavmate(.*)$ https://dav.immae.eu/infcloud$1
144 RedirectMatch 301 ^/caldavzap(.*)$ https://dav.immae.eu/infcloud$1
145 RedirectMatch 301 ^/caldav.php(.*)$ https://dav.immae.eu/caldav.php$1
146 RedirectMatch 301 ^/davical(.*)$ https://dav.immae.eu/davical$1
148 RedirectMatch 301 ^/taskweb(.*)$ https://task.immae.eu/taskweb$1
150 RedirectMatch 301 ^/roundcube(.*)$ https://mail.immae.eu/roundcube$1
152 RedirectMatch 301 ^/jappix(.*)$ https://im.immae.fr/converse
154 RedirectMatch 301 ^/(.*)$ https://tools.immae.eu/$1
161 after = lib.mkAfter dokuwiki.phpFpm.serviceDeps;
162 wants = dokuwiki.phpFpm.serviceDeps;
165 after = lib.mkAfter kanboard.phpFpm.serviceDeps;
166 wants = kanboard.phpFpm.serviceDeps;
169 after = lib.mkAfter ldap.phpFpm.serviceDeps;
170 wants = ldap.phpFpm.serviceDeps;
173 after = lib.mkAfter shaarli.phpFpm.serviceDeps;
174 wants = shaarli.phpFpm.serviceDeps;
177 after = lib.mkAfter ttrss.phpFpm.serviceDeps;
178 wants = ttrss.phpFpm.serviceDeps;
181 after = lib.mkAfter wallabag.phpFpm.serviceDeps;
182 wants = wallabag.phpFpm.serviceDeps;
183 preStart = lib.mkAfter wallabag.phpFpm.preStart;
186 after = lib.mkAfter yourls.phpFpm.serviceDeps;
187 wants = yourls.phpFpm.serviceDeps;
190 description = "Standalone MPD Web GUI written in C";
191 wantedBy = [ "multi-user.target" ];
193 export MPD_PASSWORD=$(cat /var/secrets/mpd)
194 ${pkgs.ympd}/bin/ympd --host ${ympd.config.host} --port ${toString ympd.config.port} --webport ${ympd.config.webPort} --user nobody
198 description = "Tiny Tiny RSS feeds update daemon";
201 ExecStart = "${pkgs.php}/bin/php ${ttrss.webRoot}/update.php --daemon";
202 StandardOutput = "syslog";
203 StandardError = "syslog";
204 PermissionsStartOnly = true;
207 wantedBy = [ "multi-user.target" ];
208 requires = ["postgresql.service"];
209 after = ["network.target" "postgresql.service"];
213 services.filesWatcher.ympd = {
215 paths = [ "/var/secrets/mpd" ];
218 services.phpfpm.pools.devtools = {
219 listen = "/var/run/phpfpm/devtools.sock";
223 listen.owner = wwwrun
224 listen.group = wwwrun
228 pm.min_spare_servers = 1
229 pm.max_spare_servers = 10
231 php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/lib/ftp/devtools.immae.eu:/tmp"
233 phpOptions = config.services.phpfpm.phpOptions + ''
234 extension=${pkgs.php}/lib/php/extensions/mysqli.so
235 extension=${pkgs.phpPackages.redis}/lib/php/extensions/redis.so
236 extension=${pkgs.phpPackages.apcu}/lib/php/extensions/apcu.so
237 zend_extension=${pkgs.php}/lib/php/extensions/opcache.so
241 services.phpfpm.poolConfigs = {
242 adminer = adminer.phpFpm.pool;
243 ttrss = ttrss.phpFpm.pool;
244 wallabag = wallabag.phpFpm.pool;
245 yourls = yourls.phpFpm.pool;
246 rompr = rompr.phpFpm.pool;
247 shaarli = shaarli.phpFpm.pool;
248 dokuwiki = dokuwiki.phpFpm.pool;
249 ldap = ldap.phpFpm.pool;
250 kanboard = kanboard.phpFpm.pool;
252 listen = /var/run/phpfpm/tools.sock
255 listen.owner = wwwrun
256 listen.group = wwwrun
260 pm.min_spare_servers = 1
261 pm.max_spare_servers = 10
263 ; Needed to avoid clashes in browser cookies (same domain)
264 php_value[session.name] = ToolsPHPSESSID
265 php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/lib/ftp/tools.immae.eu:/tmp"
269 system.activationScripts = {
270 adminer = adminer.activationScript;
271 ttrss = ttrss.activationScript;
272 wallabag = wallabag.activationScript;
273 yourls = yourls.activationScript;
274 rompr = rompr.activationScript;
275 shaarli = shaarli.activationScript;
276 dokuwiki = dokuwiki.activationScript;
277 kanboard = kanboard.activationScript;
278 ldap = ldap.activationScript;
281 myServices.websites.webappDirs = {
282 _adminer = adminer.webRoot;
283 "${dokuwiki.apache.webappName}" = dokuwiki.webRoot;
284 "${ldap.apache.webappName}" = "${ldap.webRoot}/htdocs";
285 "${rompr.apache.webappName}" = rompr.webRoot;
286 "${shaarli.apache.webappName}" = shaarli.webRoot;
287 "${ttrss.apache.webappName}" = ttrss.webRoot;
288 "${wallabag.apache.webappName}" = wallabag.webRoot;
289 "${yourls.apache.webappName}" = yourls.webRoot;
290 "${kanboard.apache.webappName}" = kanboard.webRoot;
293 services.websites.env.tools.watchPaths = [
294 "/var/secrets/webapps/tools-shaarli"
296 services.filesWatcher.phpfpm-wallabag = {
298 paths = [ "/var/secrets/webapps/tools-wallabag" ];