1 { stdenv, fetchurl, writeText, checkEnv, phpPackages, php, which }:
4 varDir = "/var/lib/wallabag";
6 assert checkEnv "NIXOPS_WALLABAG_SQL_PASSWORD";
7 assert checkEnv "NIXOPS_WALLABAG_SECRET";
8 assert checkEnv "NIXOPS_WALLABAG_LDAP_PASSWORD";
9 writeText "parameters.yml" ''
10 # This file is auto-generated during the composer install
12 database_driver: pdo_pgsql
13 database_driver_class: Wallabag\CoreBundle\Doctrine\DBAL\Driver\CustomPostgreSQLDriver
14 database_host: db-1.immae.eu
16 database_name: webapps
17 database_user: wallabag
18 database_password: ${builtins.getEnv "NIXOPS_WALLABAG_SQL_PASSWORD"}
20 database_table_prefix: wallabag_
22 database_charset: utf8
23 domain_name: https://tools.immae.eu/wallabag
24 mailer_transport: smtp
25 mailer_host: mail.immae.eu
29 secret: ${builtins.getEnv "NIXOPS_WALLABAG_SECRET"}
31 twofactor_sender: wallabag@immae.eu
32 fosuser_registration: false
33 fosuser_confirmation: true
34 from_email: wallabag@immae.eu
36 rabbitmq_host: localhost
39 rabbitmq_password: guest
40 rabbitmq_prefetch_count: 10
46 sites_credentials: { }
48 ldap_host: ldap.immae.eu
52 ldap_bind_requires_dn: true
53 ldap_base: 'dc=immae,dc=eu'
54 ldap_manager_dn: 'cn=wallabag,ou=services,dc=immae,dc=eu'
55 ldap_manager_pw: ${builtins.getEnv "NIXOPS_WALLABAG_LDAP_PASSWORD"}
56 ldap_filter: '(&(memberOf=cn=users,cn=wallabag,ou=services,dc=immae,dc=eu))'
57 ldap_admin_filter: '(&(memberOf=cn=admins,cn=wallabag,ou=services,dc=immae,dc=eu)(uid=%s))'
58 ldap_username_attribute: uid
59 ldap_email_attribute: mail
60 ldap_name_attribute: cn
61 ldap_enabled_attribute: null
63 webappDir = stdenv.mkDerivation rec {
64 # Beware when upgrading, I probably messed up with the migrations table
65 # (due to a psql bug in wallabag)
67 name = "wallabag-${version}";
69 url = "https://static.wallabag.org/releases/wallabag-release-${version}.tar.gz";
70 sha256 = "17yczdvgl43j6wa7hksxi2b51afvyd56vdya6hbbv68iiba4jyh4";
72 patches = [ ./wallabag_ldap.patch ];
77 export SYMFONY_ENV=prod
78 php -d memory_limit=-1 ${phpPackages.composer}/libexec/composer/composer.phar require --update-no-dev -o --prefer-dist fr3d/ldap-bundle
79 rm -rf web/assets var/cache app/config/parameters.yml data
81 ln -sf ${parameters} app/config/parameters.yml
82 ln -sf ../../../../../${varDir}/var var
83 ln -sf ../../../../../${varDir}/data data
84 ln -sf ../../../../../../${varDir}/assets web/assets
86 buildInputs = [ php phpPackages.composer ];
89 install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir} \
90 ${varDir}/var ${varDir}/data/db ${varDir}/assets/images
91 if [ ! -f "${varDir}/currentWebappDir" -o \
92 "${webappDir}" != "$(cat ${varDir}/currentWebappDir 2>/dev/null)" ]; then
93 pushd ${webappDir} > /dev/null
94 $wrapperDir/sudo -u wwwrun ./bin/console --env=prod doctrine:migrations:migrate --no-interaction
95 $wrapperDir/sudo -u wwwrun ./bin/console --env=prod cache:clear
97 echo -n "${webappDir}" > ${varDir}/currentWebappDir
100 webRoot = "${webappDir}/web";
104 modules = [ "proxy_fcgi" ];
106 Alias /assets "${varDir}/assets"
107 Alias /wallabag "${webRoot}"
108 <Directory "${webRoot}">
114 <FilesMatch "\.php$">
115 SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
118 <IfModule mod_rewrite.c>
121 RewriteCond %{REQUEST_FILENAME} !-f
122 RewriteRule ^(.*)$ app.php [QSA,L]
125 <Directory "${webRoot}/bundles">
126 <IfModule mod_rewrite.c>
130 <Directory "${varDir}/assets">
137 basedir = builtins.concatStringsSep ":" [ webappDir parameters varDir ];
138 socket = "/var/run/phpfpm/wallabag.sock";
141 user = ${apache.user}
142 group = ${apache.group}
143 listen.owner = ${apache.user}
144 listen.group = ${apache.group}
148 pm.min_spare_servers = 1
149 pm.max_spare_servers = 10
151 ; Needed to avoid clashes in browser cookies (same domain)
152 php_value[session.name] = WallabagPHPSESSID
153 php_admin_value[open_basedir] = "${basedir}:/tmp"
154 php_value[max_execution_time] = 300