+++ /dev/null
-{ env, mantisbt_2, mantisbt_2-plugins, config }:
-rec {
- activationScript = {
- deps = [ "httpd" ];
- text = ''
- install -m 0755 -o ${apache.user} -g ${apache.group} -d /var/lib/php/sessions/mantisbt
- '';
- };
- keys."webapps/tools-mantisbt" = {
- user = apache.user;
- group = apache.group;
- permissions = "0400";
- text = ''
- <?php
- $g_hostname = '${env.postgresql.socket}';
- $g_db_username = '${env.postgresql.user}';
- $g_db_password = '${env.postgresql.password}';
- $g_database_name = '${env.postgresql.database}';
- $g_db_type = 'pgsql';
- $g_crypto_master_salt = '${env.master_salt}';
- $g_allow_signup = OFF;
- $g_allow_anonymous_login = ON;
- $g_anonymous_account = 'anonymous';
-
- $g_phpMailer_method = PHPMAILER_METHOD_SENDMAIL;
- $g_smtp_host = 'localhost';
- $g_smtp_username = ''';
- $g_smtp_password = ''';
- $g_webmaster_email = 'mantisbt@tools.immae.eu';
- $g_from_email = 'mantisbt@tools.immae.eu';
- $g_return_path_email = 'mantisbt@tools.immae.eu';
- $g_from_name = 'Mantis Bug Tracker at git.immae.eu';
- $g_email_receive_own = ON;
- # --- LDAP ---
- $g_login_method = LDAP;
- $g_ldap_protocol_version = 3;
- $g_ldap_server = 'ldaps://${env.ldap.host}:636';
- $g_ldap_root_dn = 'ou=users,${env.ldap.base}';
- $g_ldap_bind_dn = '${env.ldap.dn}';
- $g_ldap_bind_passwd = '${env.ldap.password}';
- $g_use_ldap_email = ON;
- $g_use_ldap_realname = ON;
- $g_ldap_uid_field = 'uid';
- $g_ldap_realname_field = 'cn';
- $g_ldap_organization = '${env.ldap.filter}';
- '';
- };
- webRoot = (mantisbt_2.override { mantis_config = config.secrets.fullPaths."webapps/tools-mantisbt"; }).withPlugins (p: [p.slack p.source-integration]);
- apache = rec {
- user = "wwwrun";
- group = "wwwrun";
- modules = [ "proxy_fcgi" ];
- root = webRoot;
- vhostConf = socket: ''
- Alias /mantisbt "${root}"
- <Directory "${root}">
- DirectoryIndex index.php
- <FilesMatch "\.php$">
- SetHandler "proxy:unix:${socket}|fcgi://localhost"
- </FilesMatch>
-
- AllowOverride All
- SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
- Options FollowSymlinks
- Require all granted
- </Directory>
- <Directory "${root}/admin">
- #Reenable during upgrade
- Require all denied
- </Directory>
- '';
- };
- phpFpm = rec {
- serviceDeps = [ "postgresql.service" "openldap.service" ];
- basedir = builtins.concatStringsSep ":" (
- [ webRoot config.secrets.fullPaths."webapps/tools-mantisbt" ]
- ++ webRoot.plugins);
- pool = {
- "listen.owner" = apache.user;
- "listen.group" = apache.group;
- "pm" = "ondemand";
- "pm.max_children" = "60";
- "pm.process_idle_timeout" = "60";
-
- "php_admin_value[upload_max_filesize]" = "5000000";
-
- "php_admin_value[open_basedir]" = "${basedir}:/tmp:/var/lib/php/sessions/mantisbt";
- "php_admin_value[session.save_path]" = "/var/lib/php/sessions/mantisbt";
- };
- };
-}