nixops/modules/websites/commons/adminer.nix

   1 { stdenv, fetchurl, nginx }:
   2 let
   3   adminer = rec {
   4     webRoot = stdenv.mkDerivation rec {
   5       version = "4.7.0";
   6       name = "adminer-${version}";
   7       src = fetchurl {
   8         url = "https://www.adminer.org/static/download/${version}/${name}.php";
   9         sha256 = "1qq2g7rbfh2vrqfm3g0bz0qs057b049n0mhabnsbd1sgnpvnc5z7";
  10       };
  11       phases = "installPhase";
  12       installPhase = ''
  13         mkdir -p $out
  14         cp $src $out/index.php
  15       '';
  16     };
  17     phpFpm = rec {
  18       socket = "/var/run/phpfpm/adminer.sock";
  19       pool = ''
  20         listen = ${socket}
  21         user = ${apache.user}
  22         group = ${apache.group}
  23         listen.owner = ${apache.user}
  24         listen.group = ${apache.group}
  25         pm = ondemand
  26         pm.max_children = 5
  27         pm.process_idle_timeout = 60
  28         ;php_admin_flag[log_errors] = on
  29         ; Needed to avoid clashes in browser cookies (same domain)
  30         php_value[session.name] = AdminerPHPSESSID
  31         php_admin_value[open_basedir] = "${webRoot}:/tmp:/var/lib/php/sessions/adminer:/var/lib/php/tmp/adminer"
  32         php_admin_value[session.save_path] = "/var/lib/php/sessions/adminer"
  33         php_admin_value[upload_tmp_dir] = "/var/lib/php/tmp/adminer"
  34         '';
  35     };
  36     apache = rec {
  37       user = "wwwrun";
  38       group = "wwwrun";
  39       modules = [ "proxy_fcgi" ];
  40       webappName = "_adminer";
  41       root = "/run/current-system/webapps/${webappName}";
  42       vhostConf = ''
  43         Alias /adminer ${root}
  44         <Directory ${root}>
  45           DirectoryIndex index.php
  46           Require all granted
  47           <FilesMatch "\.php$">
  48             SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
  49           </FilesMatch>
  50         </Directory>
  51         '';
  52     };
  53     nginxConf = {
  54       alias = webRoot;
  55       index = "index.php";
  56       extraConfig = ''
  57         include ${nginx}/conf/fastcgi.conf;
  58         fastcgi_split_path_info ^(.+?\.php)(/.*)$;
  59         fastcgi_param HTTP_PROXY "";
  60         fastcgi_param SCRIPT_FILENAME ${webRoot}/index.php;
  61         fastcgi_pass unix:${phpFpm.socket};
  62         fastcgi_index index.php;
  63         fastcgi_intercept_errors on;
  64         '';
  65     };
  66   };
  67 in
  68   adminer