nixops/modules/websites/tools/cloud/nextcloud.nix

   1 { stdenv, fetchurl, env, writeText, lib, phpPackages, php }:
   2 let
   3   nextcloud = let
   4     buildApp = { appName, version, url, sha256, installPhase ? "mkdir -p $out && cp -R . $out/" }:
   5       stdenv.mkDerivation rec {
   6         name = "nextcloud-app-${appName}-${version}";
   7         inherit version;
   8         phases = "unpackPhase installPhase";
   9         inherit installPhase;
  10         src = fetchurl { inherit url sha256; };
  11       };
  12     apps = {
  13       audioplayer = buildApp rec {
  14         appName = "audioplayer";
  15         version = "2.6.0";
  16         url = "https://github.com/Rello/${appName}/releases/download/${version}/${appName}-${version}.tar.gz";
  17         sha256 = "08apm7dhnljagcvq8b1dsqcck4nqwmz60bf3mx44xvbhiaq6nim4";
  18       };
  19       bookmarks = buildApp rec {
  20         appName = "bookmarks";
  21         version = "0.16.2";
  22         url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}-${version}.tar.gz";
  23         sha256 = "0ghk71iyk5xlqsfahg0d0lpp9lparpdnv2qx11a7j64pc9gzcfl4";
  24       };
  25       calendar = buildApp rec {
  26         appName = "calendar";
  27         version = "1.6.4";
  28         url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
  29         sha256 = "00dijvcvy7snsjslfbyzvpp9anhms22zp1f0zkj89ln33jmana63";
  30       };
  31       contacts = buildApp rec {
  32         appName = "contacts";
  33         version = "3.0.3";
  34         url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
  35         sha256 = "026hfigfzqb1cvq6a7mg9656nkm21c19a6ipqzgv00ycf38qyk95";
  36       };
  37       deck = buildApp rec {
  38         appName = "deck";
  39         version = "0.5.2";
  40         url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
  41         sha256 = "1kygzixxdkp3dbma009p3pw0fj8wgcqcv39n7pay78lh6zi3nic7";
  42       };
  43       files_markdown = buildApp rec {
  44         appName = "files_markdown";
  45         version = "2.0.5";
  46         url = "https://github.com/icewind1991/${appName}/releases/download/v${version}/${appName}.tar.gz";
  47         sha256 = "1dzvy4c6vff2qmkwqw13dx92xdkafaxgnipswjw44mh0ncc2n9ym";
  48       };
  49       gpxedit = buildApp rec {
  50         appName = "gpxedit";
  51         version = "0.0.10";
  52         url = "https://gitlab.com/eneiluj/gpxedit-oc/wikis/uploads/33d187268c5f6f6a55350d656305701c/${appName}-${version}.tar.gz";
  53         sha256 = "0ynpaxm0xhvcj8xax6rm1w0p6j57wbqidhi7bhn268n483gwl2sw";
  54       };
  55       gpxpod = buildApp rec {
  56         appName = "gpxpod";
  57         version = "3.0.1";
  58         url = "https://gitlab.com/eneiluj/gpxpod-oc/wikis/uploads/3f5fbc895de15f11f90582c4872839dc/${appName}-${version}.tar.gz";
  59         sha256 = "1g3602phrdpybamr4bnk5niv1znmwp19lqyw6d8yxmc84lg99dny";
  60       };
  61       keeweb = buildApp rec {
  62         appName = "keeweb";
  63         version = "0.4.0";
  64         url = "https://github.com/jhass/nextcloud-keeweb/releases/download/v${version}/${appName}-${version}.tar.gz";
  65         sha256 = "0453kkb0a8vfivmibpwpx4bvhyn64jhns6cdfjacmnvbm6d75nj1";
  66         installPhase = ''
  67           mkdir -p $out
  68           cp -R . $out/
  69           sed -i -e 's/max-version="12"/max-version="16"/' $out/appinfo/info.xml
  70         '';
  71       };
  72       music = buildApp rec {
  73         appName = "music";
  74         version = "0.9.3";
  75         url = "https://github.com/owncloud/${appName}/archive/v${version}.tar.gz";
  76         sha256 = "1x4c2v8hnm9yi3fzjglfwd2brzn99v8zavgfczc5jfj30v3n555z";
  77       };
  78       notes = buildApp rec {
  79         appName = "notes";
  80         version = "2.5.1";
  81         url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
  82         sha256 = "1albzqqsdirzyw8vhvs7r0qm2wqp8vm9vmxm4crhncd85bk01hmh";
  83       };
  84       ocsms = buildApp rec {
  85         appName = "ocsms";
  86         version = "2.1.1";
  87         url = "https://github.com/nextcloud/${appName}/releases/download/${version}/${appName}-${version}.tar.gz";
  88         sha256 = "0sgfbmy1c8rgzjvf9snc7rzgp8aqsc65zfwgi6qcsf2g6gam5n7a";
  89         installPhase = ''
  90           sed -i -e "/addScript.*devel/d" -e "s@//\(.*addScript.*app.min\)@\1@" templates/main.php
  91           mkdir -p $out
  92           cp -R . $out/
  93           '';
  94       };
  95       passman = buildApp rec {
  96         appName = "passman";
  97         version = "2.2.1";
  98         url = "https://releases.passman.cc/${appName}_${version}.tar.gz";
  99         sha256 = "064pq9d0pl3y1vcywpi19fg47zy7j4h0jaxy6jklwzwcrmzagbka";
 100       };
 101       spreed = buildApp rec {
 102         appName = "spreed";
 103         version = "5.0.2";
 104         url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}-${version}.tar.gz";
 105         sha256 = "0z9zhpkq485lhwirc2f04427rd47hzv0r8frz72dkrszb037qjvv";
 106       };
 107       tasks = buildApp rec {
 108         appName = "tasks";
 109         version = "0.9.8";
 110         url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
 111         sha256 = "089m124lfsfk09fqj50x9n7zndq97jp5afgb8s001rpmzym4g6ny";
 112       };
 113     };
 114   in rec {
 115     varDir = "/var/lib/nextcloud";
 116     config_php = writeText "config.php" ''
 117       <?php
 118       $CONFIG = array (
 119         // FIXME: change this value when nextcloud starts getting slow
 120         'instanceid' => '${env.instance_id}1',
 121         'datadirectory' => '/var/lib/nextcloud/',
 122         'passwordsalt' => '${env.password_salt}',
 123         'debug' => false,
 124         'dbtype' => 'pgsql',
 125         'version' => '15.0.0.10',
 126         'dbname' => '${env.postgresql.database}',
 127         'dbhost' => '${env.postgresql.socket}',
 128         'dbtableprefix' => 'oc_',
 129         'dbuser' => '${env.postgresql.user}',
 130         'dbpassword' => '${env.postgresql.password}',
 131         'installed' => true,
 132         'maxZipInputSize' => 0,
 133         'allowZipDownload' => true,
 134         'forcessl' => true,
 135         'theme' => ${"''"},
 136         'maintenance' => false,
 137         'trusted_domains' =>
 138         array (
 139           0 => 'cloud.immae.eu',
 140         ),
 141         'secret' => '${env.secret}',
 142         'appstoreenabled' => false,
 143         'appstore.experimental.enabled' => true,
 144         'loglevel' => 2,
 145         'trashbin_retention_obligation' => 'auto',
 146         'htaccess.RewriteBase' => '/',
 147         'mail_smtpmode' => 'sendmail',
 148         'mail_smtphost' => '127.0.0.1',
 149         'mail_smtpname' => ''',
 150         'mail_smtppassword' => ''',
 151         'mail_from_address' => 'owncloud',
 152         'mail_smtpauth' => false,
 153         'mail_domain' => 'immae.eu',
 154         'memcache.local' => '\\OC\\Memcache\\APCu',
 155         'memcache.locking' => '\\OC\\Memcache\\Redis',
 156         'filelocking.enabled' => true,
 157         'redis' =>
 158         array (
 159           'host' => '${env.redis.socket}',
 160           'port' => 0,
 161           'dbindex' => ${env.redis.db_index},
 162         ),
 163         'overwrite.cli.url' => 'https://cloud.immae.eu',
 164         'ldapIgnoreNamingRules' => false,
 165         'ldapProviderFactory' => '\\OCA\\User_LDAP\\LDAPProviderFactory',
 166       );
 167       '';
 168     config = stdenv.mkDerivation rec {
 169       name = "nextcloud-config";
 170       src = ./nextcloud-config;
 171       phases = "installPhase";
 172       installPhase = ''
 173         mkdir -p $out
 174         cp -r $src/* $out
 175         cp ${config_php} $out/config.php
 176       '';
 177     };
 178     webRoot = stdenv.mkDerivation rec {
 179       name = "nextcloud-${version}";
 180       version = "15.0.4";
 181
 182       src = fetchurl {
 183         url = "https://download.nextcloud.com/server/releases/${name}.tar.bz2";
 184         sha256 = "0xwg7p31y1pkjk1pzygh9shpqxnfkafrab52j7in7xblq53v0zgq";
 185       };
 186
 187       installPhase = ''
 188         mkdir -p $out/
 189         cp -R . $out/
 190         rm -r $out/config
 191         ln -sf ../../../../../${varDir}/config $out/config
 192         ${builtins.concatStringsSep "\n" (
 193           lib.attrsets.mapAttrsToList (name: value: "ln -sf ${value} $out/apps/${name}") apps
 194         )}
 195       '';
 196
 197       meta = {
 198         description = "Sharing solution for files, calendars, contacts and more";
 199         homepage = https://nextcloud.com;
 200         maintainers = with lib.maintainers; [ schneefux bachp globin fpletz ];
 201         license = lib.licenses.agpl3Plus;
 202         platforms = with lib.platforms; unix;
 203       };
 204     };
 205     activationScript = {
 206       deps = [ ];
 207       text = ''
 208         install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir}
 209         install -m 0750 -o ${apache.user} -g ${apache.group} -d ${varDir}/phpSessions
 210         if [ ! -e ${varDir}/config ]; then
 211           cp -a ${config} ${varDir}/config
 212           chown -R ${apache.user}:${apache.group} ${varDir}/config
 213           chmod -R u+w ${varDir}/config
 214         fi
 215       '';
 216     };
 217     apache = {
 218       user = "wwwrun";
 219       group = "wwwrun";
 220       modules = [ "proxy_fcgi" ];
 221       vhostConf = ''
 222         SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
 223         <Directory ${webRoot}>
 224           AcceptPathInfo On
 225           DirectoryIndex index.php
 226           Options FollowSymlinks
 227           Require all granted
 228           AllowOverride all
 229
 230           <IfModule mod_headers.c>
 231             Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains; preload"
 232           </IfModule>
 233           <FilesMatch "\.php$">
 234             CGIPassAuth on
 235             SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
 236           </FilesMatch>
 237
 238         </Directory>
 239
 240         '';
 241     };
 242     phpFpm = rec {
 243       basedir = builtins.concatStringsSep ":" (
 244         [ webRoot varDir config ]
 245         ++ lib.attrsets.mapAttrsToList (name: value: value) apps);
 246       socket = "/var/run/phpfpm/nextcloud.sock";
 247       phpConfig = ''
 248         extension=${phpPackages.redis}/lib/php/extensions/redis.so
 249         extension=${phpPackages.apcu}/lib/php/extensions/apcu.so
 250         zend_extension=${php}/lib/php/extensions/opcache.so
 251         '';
 252       pool = ''
 253         listen = ${socket}
 254         user = ${apache.user}
 255         group = ${apache.group}
 256         listen.owner = ${apache.user}
 257         listen.group = ${apache.group}
 258         pm = ondemand
 259         pm.max_children = 60
 260         pm.process_idle_timeout = 60
 261
 262         php_admin_value[output_buffering] = 0
 263         php_admin_value[max_execution_time] = 1800
 264         php_admin_value[zend_extension] = "opcache"
 265         ;already enabled by default?
 266         ;php_value[opcache.enable] = 1
 267         php_value[opcache.enable_cli] = 1
 268         php_value[opcache.interned_strings_buffer] = 8
 269         php_value[opcache.max_accelerated_files] = 10000
 270         php_value[opcache.memory_consumption] = 128
 271         php_value[opcache.save_comments] = 1
 272         php_value[opcache.revalidate_freq] = 1
 273         php_admin_value[memory_limit] = 512M
 274
 275         php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:${basedir}:/proc/meminfo:/dev/urandom:/proc/self/fd:/tmp"
 276         php_admin_value[session.save_path] = "${varDir}/phpSessions"
 277         '';
 278     };
 279   };
 280 in
 281   nextcloud