1 { lib, pkgs, config, ... }:
3 adminer = pkgs.callPackage ./adminer.nix {
4 inherit (pkgs.webapps) adminer;
6 ympd = pkgs.callPackage ./ympd.nix {
7 env = config.myEnv.tools.ympd;
9 ttrss = pkgs.callPackage ./ttrss.nix {
10 inherit (pkgs.webapps) ttrss ttrss-plugins;
11 env = config.myEnv.tools.ttrss;
13 kanboard = pkgs.callPackage ./kanboard.nix {
14 env = config.myEnv.tools.kanboard;
16 wallabag = pkgs.callPackage ./wallabag.nix {
17 inherit (pkgs.webapps) wallabag;
18 env = config.myEnv.tools.wallabag;
20 yourls = pkgs.callPackage ./yourls.nix {
21 inherit (pkgs.webapps) yourls yourls-plugins;
22 env = config.myEnv.tools.yourls;
24 rompr = pkgs.callPackage ./rompr.nix {
25 inherit (pkgs.webapps) rompr;
26 env = config.myEnv.tools.rompr;
28 shaarli = pkgs.callPackage ./shaarli.nix {
29 env = config.myEnv.tools.shaarli;
31 dokuwiki = pkgs.callPackage ./dokuwiki.nix {
32 inherit (pkgs.webapps) dokuwiki dokuwiki-plugins;
34 ldap = pkgs.callPackage ./ldap.nix {
35 inherit (pkgs.webapps) phpldapadmin;
36 env = config.myEnv.tools.phpldapadmin;
39 cfg = config.myServices.websites.tools.tools;
41 options.myServices.websites.tools.tools = {
42 enable = lib.mkEnableOption "enable tools website";
45 config = lib.mkIf cfg.enable {
54 services.duplyBackup.profiles = {
55 dokuwiki = dokuwiki.backups;
56 kanboard = kanboard.backups;
57 rompr = rompr.backups;
58 shaarli = shaarli.backups;
59 ttrss = ttrss.backups;
60 wallabag = wallabag.backups;
63 services.websites.env.tools.modules =
65 ++ adminer.apache.modules
66 ++ ympd.apache.modules
67 ++ ttrss.apache.modules
68 ++ wallabag.apache.modules
69 ++ yourls.apache.modules
70 ++ rompr.apache.modules
71 ++ shaarli.apache.modules
72 ++ dokuwiki.apache.modules
73 ++ ldap.apache.modules
74 ++ kanboard.apache.modules;
76 services.websites.env.integration.vhostConfs.devtools = {
77 certName = "integration";
78 certMainHost = "devtools.immae.eu";
80 hosts = [ "devtools.immae.eu" ];
81 root = "/var/lib/ftp/devtools.immae.eu";
86 <Directory "/var/lib/ftp/devtools.immae.eu">
87 DirectoryIndex index.php index.htm index.html
91 SetHandler "proxy:unix:/var/run/phpfpm/devtools.sock|fcgi://localhost"
98 services.websites.env.tools.vhostConfs.tools = {
101 hosts = ["tools.immae.eu" ];
102 root = "/var/lib/ftp/tools.immae.eu";
105 RedirectMatch 301 ^/roundcube(.*)$ https://mail.immae.eu/roundcube$1
106 RedirectMatch 301 ^/jappix(.*)$ https://im.immae.fr/converse
108 <Directory "/var/lib/ftp/tools.immae.eu">
109 DirectoryIndex index.php index.htm index.html
112 <FilesMatch "\.php$">
113 SetHandler "proxy:unix:/var/run/phpfpm/tools.sock|fcgi://localhost"
117 adminer.apache.vhostConf
118 ympd.apache.vhostConf
119 ttrss.apache.vhostConf
120 wallabag.apache.vhostConf
121 yourls.apache.vhostConf
122 rompr.apache.vhostConf
123 shaarli.apache.vhostConf
124 dokuwiki.apache.vhostConf
125 ldap.apache.vhostConf
126 kanboard.apache.vhostConf
130 services.websites.env.tools.vhostConfs.outils = {
131 certName = "eldiron";
133 hosts = [ "outils.immae.eu" ];
137 RedirectMatch 301 ^/mediagoblin(.*)$ https://mgoblin.immae.eu$1
139 RedirectMatch 301 ^/ether(.*)$ https://ether.immae.eu$1
141 RedirectMatch 301 ^/nextcloud(.*)$ https://cloud.immae.eu$1
142 RedirectMatch 301 ^/owncloud(.*)$ https://cloud.immae.eu$1
144 RedirectMatch 301 ^/carddavmate(.*)$ https://dav.immae.eu/infcloud$1
145 RedirectMatch 301 ^/caldavzap(.*)$ https://dav.immae.eu/infcloud$1
146 RedirectMatch 301 ^/caldav.php(.*)$ https://dav.immae.eu/caldav.php$1
147 RedirectMatch 301 ^/davical(.*)$ https://dav.immae.eu/davical$1
149 RedirectMatch 301 ^/taskweb(.*)$ https://task.immae.eu/taskweb$1
151 RedirectMatch 301 ^/roundcube(.*)$ https://mail.immae.eu/roundcube$1
153 RedirectMatch 301 ^/jappix(.*)$ https://im.immae.fr/converse
155 RedirectMatch 301 ^/(.*)$ https://tools.immae.eu/$1
162 after = lib.mkAfter dokuwiki.phpFpm.serviceDeps;
163 wants = dokuwiki.phpFpm.serviceDeps;
166 after = lib.mkAfter kanboard.phpFpm.serviceDeps;
167 wants = kanboard.phpFpm.serviceDeps;
170 after = lib.mkAfter ldap.phpFpm.serviceDeps;
171 wants = ldap.phpFpm.serviceDeps;
174 after = lib.mkAfter shaarli.phpFpm.serviceDeps;
175 wants = shaarli.phpFpm.serviceDeps;
178 after = lib.mkAfter ttrss.phpFpm.serviceDeps;
179 wants = ttrss.phpFpm.serviceDeps;
182 after = lib.mkAfter wallabag.phpFpm.serviceDeps;
183 wants = wallabag.phpFpm.serviceDeps;
184 preStart = lib.mkAfter wallabag.phpFpm.preStart;
187 after = lib.mkAfter yourls.phpFpm.serviceDeps;
188 wants = yourls.phpFpm.serviceDeps;
191 description = "Standalone MPD Web GUI written in C";
192 wantedBy = [ "multi-user.target" ];
194 export MPD_PASSWORD=$(cat /var/secrets/mpd)
195 ${pkgs.ympd}/bin/ympd --host ${ympd.config.host} --port ${toString ympd.config.port} --webport ${ympd.config.webPort} --user nobody
199 description = "Tiny Tiny RSS feeds update daemon";
202 ExecStart = "${pkgs.php}/bin/php ${ttrss.webRoot}/update.php --daemon";
203 StandardOutput = "syslog";
204 StandardError = "syslog";
205 PermissionsStartOnly = true;
208 wantedBy = [ "multi-user.target" ];
209 requires = ["postgresql.service"];
210 after = ["network.target" "postgresql.service"];
214 services.filesWatcher.ympd = {
216 paths = [ "/var/secrets/mpd" ];
219 services.phpfpm.pools.devtools = {
220 listen = "/var/run/phpfpm/devtools.sock";
224 listen.owner = wwwrun
225 listen.group = wwwrun
229 pm.min_spare_servers = 1
230 pm.max_spare_servers = 10
232 php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/lib/ftp/devtools.immae.eu:/tmp"
234 phpOptions = config.services.phpfpm.phpOptions + ''
235 extension=${pkgs.php}/lib/php/extensions/mysqli.so
236 extension=${pkgs.phpPackages.redis}/lib/php/extensions/redis.so
237 extension=${pkgs.phpPackages.apcu}/lib/php/extensions/apcu.so
238 zend_extension=${pkgs.php}/lib/php/extensions/opcache.so
242 services.phpfpm.poolConfigs = {
243 adminer = adminer.phpFpm.pool;
244 ttrss = ttrss.phpFpm.pool;
245 wallabag = wallabag.phpFpm.pool;
246 yourls = yourls.phpFpm.pool;
247 rompr = rompr.phpFpm.pool;
248 shaarli = shaarli.phpFpm.pool;
249 dokuwiki = dokuwiki.phpFpm.pool;
250 ldap = ldap.phpFpm.pool;
251 kanboard = kanboard.phpFpm.pool;
253 listen = /var/run/phpfpm/tools.sock
256 listen.owner = wwwrun
257 listen.group = wwwrun
261 pm.min_spare_servers = 1
262 pm.max_spare_servers = 10
264 ; Needed to avoid clashes in browser cookies (same domain)
265 php_value[session.name] = ToolsPHPSESSID
266 php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/lib/ftp/tools.immae.eu:/tmp"
270 system.activationScripts = {
271 adminer = adminer.activationScript;
272 ttrss = ttrss.activationScript;
273 wallabag = wallabag.activationScript;
274 yourls = yourls.activationScript;
275 rompr = rompr.activationScript;
276 shaarli = shaarli.activationScript;
277 dokuwiki = dokuwiki.activationScript;
278 kanboard = kanboard.activationScript;
279 ldap = ldap.activationScript;
282 myServices.websites.webappDirs = {
283 _adminer = adminer.webRoot;
284 "${dokuwiki.apache.webappName}" = dokuwiki.webRoot;
285 "${ldap.apache.webappName}" = "${ldap.webRoot}/htdocs";
286 "${rompr.apache.webappName}" = rompr.webRoot;
287 "${shaarli.apache.webappName}" = shaarli.webRoot;
288 "${ttrss.apache.webappName}" = ttrss.webRoot;
289 "${wallabag.apache.webappName}" = wallabag.webRoot;
290 "${yourls.apache.webappName}" = yourls.webRoot;
291 "${kanboard.apache.webappName}" = kanboard.webRoot;
294 services.websites.env.tools.watchPaths = [
295 "/var/secrets/webapps/tools-shaarli"
297 services.filesWatcher.phpfpm-wallabag = {
299 paths = [ "/var/secrets/webapps/tools-wallabag" ];