From acaf5190dfc41c6e5528f73017d56aed31b86117 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Isma=C3=ABl=20Bouya?= <ismael.bouya@normalesup.org>
Date: Mon, 11 Feb 2019 10:19:02 +0100
Subject: [PATCH] Move nextcloud configuration to var dir

Fixes https://git.immae.eu/mantisbt/view.php?id=96
---
 nixops/modules/websites/tools/cloud/default.nix   | 2 +-
 nixops/modules/websites/tools/cloud/nextcloud.nix | 8 ++++++--
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/nixops/modules/websites/tools/cloud/default.nix b/nixops/modules/websites/tools/cloud/default.nix
index 241b982..0c6d13d 100644
--- a/nixops/modules/websites/tools/cloud/default.nix
+++ b/nixops/modules/websites/tools/cloud/default.nix
@@ -30,7 +30,7 @@ in {
         cd ${nextcloud.webRoot}
         NEXTCLOUD_CONFIG_DIR="${nextcloud.webRoot}/config" \
           exec \
-          ${pkgs.php}/bin/php \
+          sudo -u wwwrun ${pkgs.php}/bin/php \
           -c ${pkgs.php}/etc/php.ini \
           occ $*
         '';
diff --git a/nixops/modules/websites/tools/cloud/nextcloud.nix b/nixops/modules/websites/tools/cloud/nextcloud.nix
index 1e770b8..0185b0f 100644
--- a/nixops/modules/websites/tools/cloud/nextcloud.nix
+++ b/nixops/modules/websites/tools/cloud/nextcloud.nix
@@ -146,7 +146,6 @@ let
         'overwrite.cli.url' => 'https://cloud.immae.eu',
         'ldapIgnoreNamingRules' => false,
         'ldapProviderFactory' => '\\OCA\\User_LDAP\\LDAPProviderFactory',
-        'config_is_read_only' => true,
       );
       '';
     config = stdenv.mkDerivation rec {
@@ -172,7 +171,7 @@ let
         mkdir -p $out/
         cp -R . $out/
         rm -r $out/config
-        ln -sf ${config} $out/config
+        ln -sf ../../../../../${varDir}/config $out/config
         ${builtins.concatStringsSep "\n" (
           lib.attrsets.mapAttrsToList (name: value: "ln -sf ${value} $out/apps/${name}") apps
         )}
@@ -191,6 +190,11 @@ let
       text = ''
         install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir}
         install -m 0750 -o ${apache.user} -g ${apache.group} -d ${varDir}/phpSessions
+        if [ ! -e ${varDir}/config ]; then
+          cp -a ${config} ${varDir}/config
+          chown -R ${apache.user}:${apache.group} ${varDir}/config
+          chmod -R u+w ${varDir}/config
+        fi
       '';
     };
     apache = {
-- 
2.41.0