aboutsummaryrefslogtreecommitdiff
path: root/modules/private/websites/tools/tools/wallabag.nix
diff options
context:
space:
mode:
authorIsmaël Bouya <ismael.bouya@normalesup.org>2023-10-04 01:35:06 +0200
committerIsmaël Bouya <ismael.bouya@normalesup.org>2023-10-04 02:11:48 +0200
commit1a64deeb894dc95e2645a75771732c6cc53a79ad (patch)
tree1b9df4838f894577a09b9b260151756272efeb53 /modules/private/websites/tools/tools/wallabag.nix
parentfa25ffd4583cc362075cd5e1b4130f33306103f0 (diff)
downloadNix-1a64deeb894dc95e2645a75771732c6cc53a79ad.tar.gz
Nix-1a64deeb894dc95e2645a75771732c6cc53a79ad.tar.zst
Nix-1a64deeb894dc95e2645a75771732c6cc53a79ad.zip
Squash changes containing private information
There were a lot of changes since the previous commit, but a lot of them contained personnal information about users. All thos changes got stashed into a single commit (history is kept in a different place) and private information was moved in a separate private repository
Diffstat (limited to 'modules/private/websites/tools/tools/wallabag.nix')
-rw-r--r--modules/private/websites/tools/tools/wallabag.nix142
1 files changed, 0 insertions, 142 deletions
diff --git a/modules/private/websites/tools/tools/wallabag.nix b/modules/private/websites/tools/tools/wallabag.nix
deleted file mode 100644
index 0ebdb0b..0000000
--- a/modules/private/websites/tools/tools/wallabag.nix
+++ /dev/null
@@ -1,142 +0,0 @@
1{ env, wallabag, mylibs, config }:
2rec {
3 varDir = "/var/lib/wallabag";
4 keys."webapps/tools-wallabag" = {
5 user = apache.user;
6 group = apache.group;
7 permissions = "0400";
8 text = ''
9 # This file is auto-generated during the composer install
10 parameters:
11 database_driver: pdo_pgsql
12 database_driver_class: Wallabag\CoreBundle\Doctrine\DBAL\Driver\CustomPostgreSQLDriver
13 database_host: ${env.postgresql.socket}
14 database_port: ${env.postgresql.port}
15 database_name: ${env.postgresql.database}
16 database_user: ${env.postgresql.user}
17 database_password: ${env.postgresql.password}
18 database_path: null
19 database_table_prefix: wallabag_
20 database_socket: null
21 database_charset: utf8
22 domain_name: https://tools.immae.eu/wallabag
23 mailer_transport: sendmail
24 mailer_host: 127.0.0.1
25 mailer_user: null
26 mailer_password: null
27 locale: fr
28 secret: ${env.secret}
29 twofactor_auth: true
30 twofactor_sender: wallabag@tools.immae.eu
31 fosuser_registration: false
32 fosuser_confirmation: true
33 from_email: wallabag@tools.immae.eu
34 rss_limit: 50
35 rabbitmq_host: localhost
36 rabbitmq_port: 5672
37 rabbitmq_user: guest
38 rabbitmq_password: guest
39 rabbitmq_prefetch_count: 10
40 redis_scheme: unix
41 redis_host: null
42 redis_port: null
43 redis_path: ${env.redis.socket}
44 redis_password: null
45 sites_credentials: { }
46 ldap_enabled: true
47 ldap_host: ${env.ldap.host}
48 ldap_port: 636
49 ldap_tls: false
50 ldap_ssl: true
51 ldap_bind_requires_dn: true
52 ldap_base: '${env.ldap.base}'
53 ldap_manager_dn: '${env.ldap.dn}'
54 ldap_manager_pw: ${env.ldap.password}
55 ldap_filter: '${env.ldap.filter}'
56 ldap_admin_filter: '${env.ldap.admin_filter}'
57 ldap_username_attribute: uid
58 ldap_email_attribute: mail
59 ldap_name_attribute: cn
60 ldap_enabled_attribute: null
61 services:
62 swiftmailer.mailer.default.transport:
63 class: Swift_SendmailTransport
64 arguments: ['/run/wrappers/bin/sendmail -bs']
65 '';
66 };
67 webappDir = wallabag.override { ldap = true; wallabag_config = config.secrets.fullPaths."webapps/tools-wallabag"; };
68 activationScript = ''
69 install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir} \
70 ${varDir}/var ${varDir}/data/db ${varDir}/assets/images
71 '';
72 webRoot = "${webappDir}/web";
73 # Domain migration: Table wallabag_entry contains whole
74 # https://tools.immae.eu/wallabag domain name in preview_picture
75 apache = rec {
76 user = "wwwrun";
77 group = "wwwrun";
78 modules = [ "proxy_fcgi" ];
79 root = webRoot;
80 vhostConf = socket: ''
81 Alias /wallabag "${root}"
82 <Directory "${root}">
83 AllowOverride None
84 Require all granted
85 # For OAuth (apps)
86 CGIPassAuth On
87
88 <FilesMatch "\.php$">
89 SetHandler "proxy:unix:${socket}|fcgi://localhost"
90 </FilesMatch>
91
92 <IfModule mod_rewrite.c>
93 Options -MultiViews
94 RewriteEngine On
95 RewriteCond %{REQUEST_FILENAME} !-f
96 RewriteRule ^(.*)$ app.php [QSA,L]
97 </IfModule>
98 </Directory>
99 <Directory "${root}/bundles">
100 <IfModule mod_rewrite.c>
101 RewriteEngine Off
102 </IfModule>
103 </Directory>
104 <Directory "${varDir}/assets">
105 AllowOverride None
106 Require all granted
107 </Directory>
108 '';
109 };
110 phpFpm = rec {
111 preStart = ''
112 if [ ! -f "${varDir}/currentWebappDir" -o \
113 ! -f "${varDir}/currentKey" -o \
114 "${webappDir}" != "$(cat ${varDir}/currentWebappDir 2>/dev/null)" ] \
115 || ! sha512sum -c --status ${varDir}/currentKey; then
116 pushd ${webappDir} > /dev/null
117 /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=prod cache:clear
118 rm -rf /var/lib/wallabag/var/cache/pro_
119 /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=prod doctrine:migrations:migrate --no-interaction
120 popd > /dev/null
121 echo -n "${webappDir}" > ${varDir}/currentWebappDir
122 sha512sum ${config.secrets.fullPaths."webapps/tools-wallabag"} > ${varDir}/currentKey
123 fi
124 '';
125 serviceDeps = [ "postgresql.service" "openldap.service" ];
126 basedir = builtins.concatStringsSep ":" [ webappDir config.secrets.fullPaths."webapps/tools-wallabag" varDir ];
127 pool = {
128 "listen.owner" = apache.user;
129 "listen.group" = apache.group;
130 "pm" = "dynamic";
131 "pm.max_children" = "60";
132 "pm.start_servers" = "2";
133 "pm.min_spare_servers" = "1";
134 "pm.max_spare_servers" = "10";
135
136 # Needed to avoid clashes in browser cookies (same domain)
137 "php_value[session.name]" = "WallabagPHPSESSID";
138 "php_admin_value[open_basedir]" = "/run/wrappers/bin/sendmail:${basedir}:/tmp";
139 "php_value[max_execution_time]" = "300";
140 };
141 };
142}