diff options
author | Ismaël Bouya <ismael.bouya@normalesup.org> | 2019-01-25 23:15:08 +0100 |
---|---|---|
committer | Ismaël Bouya <ismael.bouya@normalesup.org> | 2019-01-25 23:15:08 +0100 |
commit | 01f21083a897b86bf148f1d2bb9c8edca4d3786a (patch) | |
tree | 784f04e9b6ef99a49e572c84e4b7ab40b5eb5fde /nixops/modules/websites/tools/dav/davical.nix | |
parent | bfe3c9c9df0c5112bc8806483292b55ed0f7e02d (diff) | |
download | Nix-01f21083a897b86bf148f1d2bb9c8edca4d3786a.tar.gz Nix-01f21083a897b86bf148f1d2bb9c8edca4d3786a.tar.zst Nix-01f21083a897b86bf148f1d2bb9c8edca4d3786a.zip |
Rename virtual folder to nixops
Fixes https://git.immae.eu/mantisbt/view.php?id=82
Diffstat (limited to 'nixops/modules/websites/tools/dav/davical.nix')
-rw-r--r-- | nixops/modules/websites/tools/dav/davical.nix | 160 |
1 files changed, 160 insertions, 0 deletions
diff --git a/nixops/modules/websites/tools/dav/davical.nix b/nixops/modules/websites/tools/dav/davical.nix new file mode 100644 index 0000000..4d0639f --- /dev/null +++ b/nixops/modules/websites/tools/dav/davical.nix | |||
@@ -0,0 +1,160 @@ | |||
1 | { stdenv, fetchurl, gettext, writeText, env }: | ||
2 | let | ||
3 | awl = stdenv.mkDerivation rec { | ||
4 | version = "0.59"; | ||
5 | name = "awl-${version}"; | ||
6 | src = fetchurl { | ||
7 | url = "https://www.davical.org/downloads/awl_${version}.orig.tar.xz"; | ||
8 | sha256 = "01b7km7ga3ggbpp8axkc55nizgk5c35fl2z93iydb3hwbxmsvnjp"; | ||
9 | }; | ||
10 | unpackCmd = '' | ||
11 | tar --one-top-level -xf $curSrc | ||
12 | ''; | ||
13 | installPhase = '' | ||
14 | mkdir -p $out | ||
15 | cp -ra dba docs inc scripts tests $out | ||
16 | ''; | ||
17 | }; | ||
18 | davical = rec { | ||
19 | config = writeText "davical_config.php" '' | ||
20 | <?php | ||
21 | $c->pg_connect[] = "dbname=davical user=davical_app host=db-1.immae.eu password=${env.postgresql.password}"; | ||
22 | |||
23 | $c->readonly_webdav_collections = false; | ||
24 | |||
25 | $c->admin_email ='davical@immae.eu'; | ||
26 | |||
27 | $c->restrict_setup_to_admin = true; | ||
28 | |||
29 | $c->collections_always_exist = false; | ||
30 | |||
31 | $c->external_refresh = 60; | ||
32 | |||
33 | $c->enable_scheduling = true; | ||
34 | |||
35 | $c->iMIP = (object) array("send_email" => true); | ||
36 | |||
37 | $c->authenticate_hook['optional'] = false; | ||
38 | $c->authenticate_hook['call'] = 'LDAP_check'; | ||
39 | $c->authenticate_hook['config'] = array( | ||
40 | 'host' => 'ldap.immae.eu', | ||
41 | 'port' => '389', | ||
42 | 'startTLS' => 'yes', | ||
43 | 'bindDN'=> 'cn=davical,ou=services,dc=immae,dc=eu', | ||
44 | 'passDN'=> '${env.ldap.password}', | ||
45 | 'protocolVersion' => '3', | ||
46 | 'baseDNUsers'=> array('ou=users,dc=immae,dc=eu', 'ou=group_users,dc=immae,dc=eu'), | ||
47 | 'filterUsers' => 'memberOf=cn=users,cn=davical,ou=services,dc=immae,dc=eu', | ||
48 | 'baseDNGroups' => 'ou=groups,dc=immae,dc=eu', | ||
49 | 'filterGroups' => 'memberOf=cn=groups,cn=davical,ou=services,dc=immae,dc=eu', | ||
50 | 'mapping_field' => array( | ||
51 | "username" => "uid", | ||
52 | "fullname" => "cn", | ||
53 | "email" => "mail", | ||
54 | "modified" => "modifyTimestamp", | ||
55 | ), | ||
56 | 'format_updated'=> array('Y' => array(0,4),'m' => array(4,2),'d'=> array(6,2),'H' => array(8,2),'M'=>array(10,2),'S' => array(12,2)), | ||
57 | /** used to set default value for all users, will be overcharged by ldap if defined also in mapping_field **/ | ||
58 | // 'default_value' => array("date_format_type" => "E","locale" => "fr_FR"), | ||
59 | 'group_mapping_field' => array( | ||
60 | "username" => "cn", | ||
61 | "updated" => "modifyTimestamp", | ||
62 | "fullname" => "givenName", | ||
63 | "displayname" => "givenName", | ||
64 | "members" => "memberUid", | ||
65 | "email" => "mail", | ||
66 | ), | ||
67 | ); | ||
68 | |||
69 | $c->do_not_sync_from_ldap = array('admin' => true); | ||
70 | include('drivers_ldap.php'); | ||
71 | ''; | ||
72 | webapp = stdenv.mkDerivation rec { | ||
73 | version = "1.1.7"; | ||
74 | name = "davical-${version}"; | ||
75 | src = fetchurl { | ||
76 | url = "https://www.davical.org/downloads/davical_${version}.orig.tar.xz"; | ||
77 | sha256 = "1ar5m2dxr92b204wkdi8z33ir9vz2jbh5k1p74icpv9ywifvjjp9"; | ||
78 | }; | ||
79 | unpackCmd = '' | ||
80 | tar --one-top-level -xf $curSrc | ||
81 | ''; | ||
82 | makeFlags = "all"; | ||
83 | patches = [ ./davical_19eb79ebf9250e5f339675319902458c40ed1755.patch ]; | ||
84 | installPhase = '' | ||
85 | mkdir -p $out | ||
86 | cp -ra config dba docs htdocs inc locale po scripts testing zonedb $out | ||
87 | ln -s ${config} $out/config/config.php | ||
88 | ''; | ||
89 | buildInputs = [ gettext ]; | ||
90 | }; | ||
91 | webRoot = "${webapp}/htdocs"; | ||
92 | apache = { | ||
93 | user = "wwwrun"; | ||
94 | group = "wwwrun"; | ||
95 | modules = [ "proxy_fcgi" ]; | ||
96 | vhostConf = '' | ||
97 | Alias /davical "${webRoot}" | ||
98 | Alias /caldav.php "${webRoot}/caldav.php" | ||
99 | <Directory "${webRoot}"> | ||
100 | DirectoryIndex index.php index.html | ||
101 | AcceptPathInfo On | ||
102 | AllowOverride None | ||
103 | Require all granted | ||
104 | |||
105 | <FilesMatch "\.php$"> | ||
106 | CGIPassAuth on | ||
107 | SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost" | ||
108 | </FilesMatch> | ||
109 | |||
110 | RewriteEngine On | ||
111 | <IfModule mod_headers.c> | ||
112 | Header unset Access-Control-Allow-Origin | ||
113 | Header unset Access-Control-Allow-Methods | ||
114 | Header unset Access-Control-Allow-Headers | ||
115 | Header unset Access-Control-Allow-Credentials | ||
116 | Header unset Access-Control-Expose-Headers | ||
117 | |||
118 | Header always set Access-Control-Allow-Origin "*" | ||
119 | Header always set Access-Control-Allow-Methods "GET,POST,OPTIONS,PROPFIND,PROPPATCH,REPORT,PUT,MOVE,DELETE,LOCK,UNLOCK" | ||
120 | Header always set Access-Control-Allow-Headers "User-Agent,Authorization,Content-type,Depth,If-match,If-None-Match,Lock-Token,Timeout,Destination,Overwrite,Prefer,X-client,X-Requested-With" | ||
121 | Header always set Access-Control-Allow-Credentials false | ||
122 | Header always set Access-Control-Expose-Headers "Etag,Preference-Applied" | ||
123 | |||
124 | RewriteCond %{HTTP:Access-Control-Request-Method} !^$ | ||
125 | RewriteCond %{REQUEST_METHOD} OPTIONS | ||
126 | RewriteRule ^(.*)$ $1 [R=200,L] | ||
127 | </IfModule> | ||
128 | </Directory> | ||
129 | ''; | ||
130 | }; | ||
131 | phpFpm = rec { | ||
132 | basedir = builtins.concatStringsSep ":" [ webapp config awl ]; | ||
133 | socket = "/var/run/phpfpm/davical.sock"; | ||
134 | pool = '' | ||
135 | listen = ${socket} | ||
136 | user = ${apache.user} | ||
137 | group = ${apache.group} | ||
138 | listen.owner = ${apache.user} | ||
139 | listen.group = ${apache.group} | ||
140 | pm = dynamic | ||
141 | pm.max_children = 60 | ||
142 | pm.start_servers = 2 | ||
143 | pm.min_spare_servers = 1 | ||
144 | pm.max_spare_servers = 10 | ||
145 | |||
146 | ; Needed to avoid clashes in browser cookies (same domain) | ||
147 | php_value[session.name] = DavicalPHPSESSID | ||
148 | php_admin_value[open_basedir] = "${basedir}:/tmp" | ||
149 | php_admin_value[include_path] = "${awl}/inc:${webapp}/inc" | ||
150 | php_admin_value[session.save_path] = "/var/lib/php/sessions/davical" | ||
151 | php_flag[magic_quotes_gpc] = Off | ||
152 | php_flag[register_globals] = Off | ||
153 | php_admin_value[error_reporting] = "E_ALL & ~E_NOTICE" | ||
154 | php_admin_value[default_charset] = "utf-8" | ||
155 | php_flag[magic_quotes_runtime] = Off | ||
156 | ''; | ||
157 | }; | ||
158 | }; | ||
159 | in | ||
160 | davical | ||