nixops/modules/websites/tools/tools/default.nix

   1 { lib, pkgs, config, myconfig, mylibs, ... }:
   2 let
   3     adminer = pkgs.callPackage ../../commons/adminer.nix {};
   4     ympd = pkgs.callPackage ./ympd.nix {
   5       env = myconfig.env.tools.ympd;
   6     };
   7     ttrss = pkgs.callPackage ./ttrss.nix {
   8       inherit (mylibs) fetchedGithub fetchedGit;
   9       env = myconfig.env.tools.ttrss;
  10     };
  11     roundcubemail = pkgs.callPackage ./roundcubemail.nix {
  12       inherit (mylibs) fetchedGithub;
  13       env = myconfig.env.tools.roundcubemail;
  14     };
  15     rainloop = pkgs.callPackage ./rainloop.nix  {};
  16     kanboard = pkgs.callPackage ./kanboard.nix  {
  17       inherit (mylibs) fetchedGithub;
  18       env = myconfig.env.tools.kanboard;
  19     };
  20     wallabag = pkgs.callPackage ./wallabag.nix { env = myconfig.env.tools.wallabag; };
  21     yourls = pkgs.callPackage ./yourls.nix {
  22       inherit (mylibs) fetchedGithub;
  23       env = myconfig.env.tools.yourls;
  24     };
  25     rompr = pkgs.callPackage ./rompr.nix {
  26       inherit (mylibs) fetchedGithub;
  27       env = myconfig.env.tools.rompr;
  28     };
  29     shaarli = pkgs.callPackage ./shaarli.nix {
  30       env = myconfig.env.tools.shaarli;
  31     };
  32     dokuwiki = pkgs.callPackage ./dokuwiki.nix {
  33       inherit (mylibs) fetchedGithub;
  34     };
  35     ldap = pkgs.callPackage ./ldap.nix {
  36       env = myconfig.env.tools.phpldapadmin;
  37     };
  38
  39     cfg = config.services.myWebsites.tools.tools;
  40 in {
  41   options.services.myWebsites.tools.tools = {
  42     enable = lib.mkEnableOption "enable tools website";
  43   };
  44
  45   config = lib.mkIf cfg.enable {
  46     security.acme.certs."eldiron".extraDomains."tools.immae.eu" = null;
  47     security.acme.certs."eldiron".extraDomains."devtools.immae.eu" = null;
  48
  49     deployment.keys =
  50       kanboard.keys
  51       // ldap.keys
  52       // roundcubemail.keys
  53       // shaarli.keys
  54       // ttrss.keys
  55       // wallabag.keys
  56       // yourls.keys;
  57
  58     services.myWebsites.integration.modules =
  59       rainloop.apache.modules;
  60
  61     services.myWebsites.tools.modules =
  62       [ "proxy_fcgi" ]
  63       ++ adminer.apache.modules
  64       ++ ympd.apache.modules
  65       ++ ttrss.apache.modules
  66       ++ roundcubemail.apache.modules
  67       ++ wallabag.apache.modules
  68       ++ yourls.apache.modules
  69       ++ rompr.apache.modules
  70       ++ shaarli.apache.modules
  71       ++ dokuwiki.apache.modules
  72       ++ ldap.apache.modules
  73       ++ kanboard.apache.modules;
  74
  75     services.ympd = ympd.config // { enable = true; };
  76
  77     services.myWebsites.integration.vhostConfs.devtools = {
  78       certName    = "eldiron";
  79       hosts       = ["devtools.immae.eu" ];
  80       root        = "/var/lib/ftp/devtools.immae.eu";
  81       extraConfig = [
  82         ''
  83           <Directory "/var/lib/ftp/devtools.immae.eu">
  84             DirectoryIndex index.php index.htm index.html
  85             AllowOverride all
  86             Require all granted
  87             <FilesMatch "\.php$">
  88               SetHandler "proxy:unix:/var/run/phpfpm/devtools.sock|fcgi://localhost"
  89             </FilesMatch>
  90           </Directory>
  91           ''
  92         rainloop.apache.vhostConf
  93       ];
  94     };
  95
  96     services.myWebsites.tools.vhostConfs.tools = {
  97       certName    = "eldiron";
  98       hosts       = ["tools.immae.eu" ];
  99       root        = "/var/lib/ftp/tools.immae.eu";
 100       extraConfig = [
 101         ''
 102           <Directory "/var/lib/ftp/tools.immae.eu">
 103             DirectoryIndex index.php index.htm index.html
 104             AllowOverride all
 105             Require all granted
 106             <FilesMatch "\.php$">
 107               SetHandler "proxy:unix:/var/run/phpfpm/tools.sock|fcgi://localhost"
 108             </FilesMatch>
 109           </Directory>
 110           ''
 111         adminer.apache.vhostConf
 112         ympd.apache.vhostConf
 113         ttrss.apache.vhostConf
 114         roundcubemail.apache.vhostConf
 115         wallabag.apache.vhostConf
 116         yourls.apache.vhostConf
 117         rompr.apache.vhostConf
 118         shaarli.apache.vhostConf
 119         dokuwiki.apache.vhostConf
 120         ldap.apache.vhostConf
 121         kanboard.apache.vhostConf
 122       ];
 123     };
 124
 125     security.acme.certs."eldiron".extraDomains."outils.immae.eu" = null;
 126     services.myWebsites.tools.vhostConfs.outils = {
 127       certName = "eldiron";
 128       hosts    = [ "outils.immae.eu" ];
 129       root     = null;
 130       extraConfig = [
 131         ''
 132         RedirectMatch 301 ^/mediagoblin(.*)$ https://mgoblin.immae.eu$1
 133
 134         RedirectMatch 301 ^/ether(.*)$       https://ether.immae.eu$1
 135
 136         RedirectMatch 301 ^/nextcloud(.*)$   https://cloud.immae.eu$1
 137         RedirectMatch 301 ^/owncloud(.*)$    https://cloud.immae.eu$1
 138
 139         RedirectMatch 301 ^/carddavmate(.*)$ https://dav.immae.eu/infcloud$1
 140         RedirectMatch 301 ^/caldavzap(.*)$   https://dav.immae.eu/infcloud$1
 141         RedirectMatch 301 ^/caldav.php(.*)$  https://dav.immae.eu/caldav.php$1
 142         RedirectMatch 301 ^/davical(.*)$     https://dav.immae.eu/davical$1
 143
 144         RedirectMatch 301 ^/taskweb(.*)$     https://task.immae.eu/taskweb$1
 145
 146         RedirectMatch 301 ^/(.*)$            https://tools.immae.eu/$1
 147         ''
 148       ];
 149     };
 150
 151     services.myPhpfpm.serviceDependencies = {
 152       dokuwiki = dokuwiki.phpFpm.serviceDeps;
 153       kanboard = kanboard.phpFpm.serviceDeps;
 154       ldap = ldap.phpFpm.serviceDeps;
 155       rainloop = rainloop.phpFpm.serviceDeps;
 156       roundcubemail = roundcubemail.phpFpm.serviceDeps;
 157       shaarli = shaarli.phpFpm.serviceDeps;
 158       ttrss = ttrss.phpFpm.serviceDeps;
 159       wallabag = wallabag.phpFpm.serviceDeps;
 160       yourls = yourls.phpFpm.serviceDeps;
 161     };
 162
 163     services.myPhpfpm.poolPhpConfigs = {
 164       devtools = ''
 165         extension=${pkgs.phpPackages.redis}/lib/php/extensions/redis.so
 166         extension=${pkgs.phpPackages.apcu}/lib/php/extensions/apcu.so
 167         zend_extension=${pkgs.php}/lib/php/extensions/opcache.so
 168         '';
 169       roundcubemail = roundcubemail.phpFpm.phpConfig;
 170     };
 171     services.myPhpfpm.poolConfigs = {
 172       adminer = adminer.phpFpm.pool;
 173       ttrss = ttrss.phpFpm.pool;
 174       roundcubemail = roundcubemail.phpFpm.pool;
 175       wallabag = wallabag.phpFpm.pool;
 176       yourls = yourls.phpFpm.pool;
 177       rompr = rompr.phpFpm.pool;
 178       shaarli = shaarli.phpFpm.pool;
 179       dokuwiki = dokuwiki.phpFpm.pool;
 180       ldap = ldap.phpFpm.pool;
 181       rainloop = rainloop.phpFpm.pool;
 182       kanboard = kanboard.phpFpm.pool;
 183       devtools = ''
 184         listen = /var/run/phpfpm/devtools.sock
 185         user = wwwrun
 186         group = wwwrun
 187         listen.owner = wwwrun
 188         listen.group = wwwrun
 189         pm = dynamic
 190         pm.max_children = 60
 191         pm.start_servers = 2
 192         pm.min_spare_servers = 1
 193         pm.max_spare_servers = 10
 194
 195         php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/lib/ftp/devtools.immae.eu:/tmp"
 196         '';
 197       tools = ''
 198         listen = /var/run/phpfpm/tools.sock
 199         user = wwwrun
 200         group = wwwrun
 201         listen.owner = wwwrun
 202         listen.group = wwwrun
 203         pm = dynamic
 204         pm.max_children = 60
 205         pm.start_servers = 2
 206         pm.min_spare_servers = 1
 207         pm.max_spare_servers = 10
 208
 209         ; Needed to avoid clashes in browser cookies (same domain)
 210         php_value[session.name] = ToolsPHPSESSID
 211         php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/lib/ftp/tools.immae.eu:/tmp"
 212         '';
 213     };
 214
 215     system.activationScripts = {
 216       ttrss = ttrss.activationScript;
 217       roundcubemail = roundcubemail.activationScript;
 218       wallabag = wallabag.activationScript;
 219       yourls = yourls.activationScript;
 220       rompr = rompr.activationScript;
 221       shaarli = shaarli.activationScript;
 222       dokuwiki = dokuwiki.activationScript;
 223       rainloop = rainloop.activationScript;
 224       kanboard = kanboard.activationScript;
 225     };
 226
 227     system.extraSystemBuilderCmds = ''
 228       mkdir -p $out/webapps
 229       ln -s ${dokuwiki.webRoot} $out/webapps/${dokuwiki.apache.webappName}
 230       ln -s ${ldap.webRoot}/htdocs $out/webapps/${ldap.apache.webappName}
 231       ln -s ${rompr.webRoot} $out/webapps/${rompr.apache.webappName}
 232       ln -s ${roundcubemail.webRoot} $out/webapps/${roundcubemail.apache.webappName}
 233       ln -s ${shaarli.webRoot} $out/webapps/${shaarli.apache.webappName}
 234       ln -s ${ttrss.webRoot} $out/webapps/${ttrss.apache.webappName}
 235       ln -s ${wallabag.webRoot} $out/webapps/${wallabag.apache.webappName}
 236       ln -s ${yourls.webRoot} $out/webapps/${yourls.apache.webappName}
 237       ln -s ${rainloop.webRoot} $out/webapps/${rainloop.apache.webappName}
 238       ln -s ${kanboard.webRoot} $out/webapps/${kanboard.apache.webappName}
 239       '';
 240
 241     nixpkgs.overlays = [ (self: super: rec {
 242       ympd = super.ympd.overrideAttrs(old: mylibs.fetchedGithub ./ympd.json);
 243     }) ];
 244
 245     systemd.services.tt-rss = {
 246       description = "Tiny Tiny RSS feeds update daemon";
 247       serviceConfig = {
 248         User = "wwwrun";
 249         ExecStart = "${pkgs.php}/bin/php ${ttrss.webRoot}/update.php --daemon";
 250         StandardOutput = "syslog";
 251         StandardError = "syslog";
 252         PermissionsStartOnly = true;
 253       };
 254
 255       wantedBy = [ "multi-user.target" ];
 256       requires = ["postgresql.service"];
 257       after = ["network.target" "postgresql.service"];
 258     };
 259
 260   };
 261 }
 262