nixops/modules/websites/tools/tools/default.nix

   1 { lib, pkgs, config, myconfig, mylibs, ... }:
   2 let
   3     adminer = pkgs.callPackage ../../commons/adminer.nix {};
   4     ympd = pkgs.callPackage ./ympd.nix {
   5       env = myconfig.env.tools.ympd;
   6     };
   7     ttrss = pkgs.callPackage ./ttrss.nix {
   8       inherit (mylibs) fetchedGithub fetchedGit;
   9       env = myconfig.env.tools.ttrss;
  10     };
  11     roundcubemail = pkgs.callPackage ./roundcubemail.nix {
  12       inherit (mylibs) fetchedGithub;
  13       env = myconfig.env.tools.roundcubemail;
  14     };
  15     rainloop = pkgs.callPackage ./rainloop.nix  {};
  16     kanboard = pkgs.callPackage ./kanboard.nix  {
  17       inherit (mylibs) fetchedGithub;
  18       env = myconfig.env.tools.kanboard;
  19     };
  20     wallabag = pkgs.callPackage ./wallabag.nix { env = myconfig.env.tools.wallabag; };
  21     yourls = pkgs.callPackage ./yourls.nix {
  22       inherit (mylibs) fetchedGithub;
  23       env = myconfig.env.tools.yourls;
  24     };
  25     rompr = pkgs.callPackage ./rompr.nix {
  26       inherit (mylibs) fetchedGithub;
  27       env = myconfig.env.tools.rompr;
  28     };
  29     shaarli = pkgs.callPackage ./shaarli.nix {
  30       env = myconfig.env.tools.shaarli;
  31     };
  32     dokuwiki = pkgs.callPackage ./dokuwiki.nix {
  33       inherit (mylibs) fetchedGithub;
  34     };
  35     ldap = pkgs.callPackage ./ldap.nix {
  36       env = myconfig.env.tools.phpldapadmin;
  37     };
  38
  39     cfg = config.services.myWebsites.tools.tools;
  40 in {
  41   options.services.myWebsites.tools.tools = {
  42     enable = lib.mkEnableOption "enable tools website";
  43   };
  44
  45   config = lib.mkIf cfg.enable {
  46     security.acme.certs."eldiron".extraDomains."tools.immae.eu" = null;
  47     security.acme.certs."eldiron".extraDomains."devtools.immae.eu" = null;
  48
  49     deployment.keys = kanboard.keys;
  50
  51     services.myWebsites.integration.modules =
  52       rainloop.apache.modules;
  53
  54     services.myWebsites.tools.modules =
  55       [ "proxy_fcgi" ]
  56       ++ adminer.apache.modules
  57       ++ ympd.apache.modules
  58       ++ ttrss.apache.modules
  59       ++ roundcubemail.apache.modules
  60       ++ wallabag.apache.modules
  61       ++ yourls.apache.modules
  62       ++ rompr.apache.modules
  63       ++ shaarli.apache.modules
  64       ++ dokuwiki.apache.modules
  65       ++ ldap.apache.modules
  66       ++ kanboard.apache.modules;
  67
  68     services.ympd = ympd.config // { enable = true; };
  69
  70     services.myWebsites.integration.vhostConfs.devtools = {
  71       certName    = "eldiron";
  72       hosts       = ["devtools.immae.eu" ];
  73       root        = null;
  74       extraConfig = [
  75         rainloop.apache.vhostConf
  76       ];
  77     };
  78
  79     services.myWebsites.tools.vhostConfs.tools = {
  80       certName    = "eldiron";
  81       hosts       = ["tools.immae.eu" ];
  82       root        = "/var/lib/ftp/tools.immae.eu";
  83       extraConfig = [
  84         ''
  85           <Directory "/var/lib/ftp/tools.immae.eu">
  86             DirectoryIndex index.php index.htm index.html
  87             AllowOverride all
  88             Require all granted
  89             <FilesMatch "\.php$">
  90               SetHandler "proxy:unix:/var/run/phpfpm/tools.sock|fcgi://localhost"
  91             </FilesMatch>
  92           </Directory>
  93           ''
  94         adminer.apache.vhostConf
  95         ympd.apache.vhostConf
  96         ttrss.apache.vhostConf
  97         roundcubemail.apache.vhostConf
  98         wallabag.apache.vhostConf
  99         yourls.apache.vhostConf
 100         rompr.apache.vhostConf
 101         shaarli.apache.vhostConf
 102         dokuwiki.apache.vhostConf
 103         ldap.apache.vhostConf
 104         kanboard.apache.vhostConf
 105       ];
 106     };
 107
 108     security.acme.certs."eldiron".extraDomains."outils.immae.eu" = null;
 109     services.myWebsites.tools.vhostConfs.outils = {
 110       certName = "eldiron";
 111       hosts    = [ "outils.immae.eu" ];
 112       root     = null;
 113       extraConfig = [
 114         ''
 115         RedirectMatch 301 ^/mediagoblin(.*)$ https://mgoblin.immae.eu$1
 116
 117         RedirectMatch 301 ^/ether(.*)$       https://ether.immae.eu$1
 118
 119         RedirectMatch 301 ^/nextcloud(.*)$   https://cloud.immae.eu$1
 120         RedirectMatch 301 ^/owncloud(.*)$    https://cloud.immae.eu$1
 121
 122         RedirectMatch 301 ^/carddavmate(.*)$ https://dav.immae.eu/infcloud$1
 123         RedirectMatch 301 ^/caldavzap(.*)$   https://dav.immae.eu/infcloud$1
 124         RedirectMatch 301 ^/caldav.php(.*)$  https://dav.immae.eu/caldav.php$1
 125         RedirectMatch 301 ^/davical(.*)$     https://dav.immae.eu/davical$1
 126
 127         RedirectMatch 301 ^/taskweb(.*)$     https://task.immae.eu/taskweb$1
 128
 129         RedirectMatch 301 ^/(.*)$            https://tools.immae.eu/$1
 130         ''
 131       ];
 132     };
 133
 134     services.myPhpfpm.serviceDependencies.kanboard = kanboard.phpFpm.serviceDeps;
 135     services.myPhpfpm.poolPhpConfigs.roundcubemail = roundcubemail.phpFpm.phpConfig;
 136     services.myPhpfpm.poolConfigs = {
 137       adminer = adminer.phpFpm.pool;
 138       ttrss = ttrss.phpFpm.pool;
 139       roundcubemail = roundcubemail.phpFpm.pool;
 140       wallabag = wallabag.phpFpm.pool;
 141       yourls = yourls.phpFpm.pool;
 142       rompr = rompr.phpFpm.pool;
 143       shaarli = shaarli.phpFpm.pool;
 144       dokuwiki = dokuwiki.phpFpm.pool;
 145       ldap = ldap.phpFpm.pool;
 146       rainloop = rainloop.phpFpm.pool;
 147       kanboard = kanboard.phpFpm.pool;
 148       tools = ''
 149         listen = /var/run/phpfpm/tools.sock
 150         user = wwwrun
 151         group = wwwrun
 152         listen.owner = wwwrun
 153         listen.group = wwwrun
 154         pm = dynamic
 155         pm.max_children = 60
 156         pm.start_servers = 2
 157         pm.min_spare_servers = 1
 158         pm.max_spare_servers = 10
 159
 160         ; Needed to avoid clashes in browser cookies (same domain)
 161         php_value[session.name] = ToolsPHPSESSID
 162         php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/lib/ftp/tools.immae.eu:/tmp"
 163         '';
 164     };
 165
 166     system.activationScripts = {
 167       ttrss = ttrss.activationScript;
 168       roundcubemail = roundcubemail.activationScript;
 169       wallabag = wallabag.activationScript;
 170       yourls = yourls.activationScript;
 171       rompr = rompr.activationScript;
 172       shaarli = shaarli.activationScript;
 173       dokuwiki = dokuwiki.activationScript;
 174       rainloop = rainloop.activationScript;
 175       kanboard = kanboard.activationScript;
 176     };
 177
 178     system.extraSystemBuilderCmds = ''
 179       mkdir -p $out/webapps
 180       ln -s ${dokuwiki.webRoot} $out/webapps/${dokuwiki.apache.webappName}
 181       ln -s ${ldap.webRoot}/htdocs $out/webapps/${ldap.apache.webappName}
 182       ln -s ${rompr.webRoot} $out/webapps/${rompr.apache.webappName}
 183       ln -s ${roundcubemail.webRoot} $out/webapps/${roundcubemail.apache.webappName}
 184       ln -s ${shaarli.webRoot} $out/webapps/${shaarli.apache.webappName}
 185       ln -s ${ttrss.webRoot} $out/webapps/${ttrss.apache.webappName}
 186       ln -s ${wallabag.webRoot} $out/webapps/${wallabag.apache.webappName}
 187       ln -s ${yourls.webRoot} $out/webapps/${yourls.apache.webappName}
 188       ln -s ${rainloop.webRoot} $out/webapps/${rainloop.apache.webappName}
 189       ln -s ${kanboard.webRoot} $out/webapps/${kanboard.apache.webappName}
 190       '';
 191
 192     nixpkgs.overlays = [ (self: super: rec {
 193       ympd = super.ympd.overrideAttrs(old: mylibs.fetchedGithub ./ympd.json);
 194     }) ];
 195
 196     systemd.services.tt-rss = {
 197       description = "Tiny Tiny RSS feeds update daemon";
 198       serviceConfig = {
 199         User = "wwwrun";
 200         ExecStart = "${pkgs.php}/bin/php ${ttrss.webRoot}/update.php --daemon";
 201         StandardOutput = "syslog";
 202         StandardError = "syslog";
 203         PermissionsStartOnly = true;
 204       };
 205
 206       wantedBy = [ "multi-user.target" ];
 207       requires = ["postgresql.service"];
 208       after = ["network.target" "postgresql.service"];
 209     };
 210
 211   };
 212 }
 213