diff options
Diffstat (limited to 'modules/private/websites/tools/tools/wallabag.nix')
-rw-r--r-- | modules/private/websites/tools/tools/wallabag.nix | 142 |
1 files changed, 0 insertions, 142 deletions
diff --git a/modules/private/websites/tools/tools/wallabag.nix b/modules/private/websites/tools/tools/wallabag.nix deleted file mode 100644 index 0ebdb0b..0000000 --- a/modules/private/websites/tools/tools/wallabag.nix +++ /dev/null | |||
@@ -1,142 +0,0 @@ | |||
1 | { env, wallabag, mylibs, config }: | ||
2 | rec { | ||
3 | varDir = "/var/lib/wallabag"; | ||
4 | keys."webapps/tools-wallabag" = { | ||
5 | user = apache.user; | ||
6 | group = apache.group; | ||
7 | permissions = "0400"; | ||
8 | text = '' | ||
9 | # This file is auto-generated during the composer install | ||
10 | parameters: | ||
11 | database_driver: pdo_pgsql | ||
12 | database_driver_class: Wallabag\CoreBundle\Doctrine\DBAL\Driver\CustomPostgreSQLDriver | ||
13 | database_host: ${env.postgresql.socket} | ||
14 | database_port: ${env.postgresql.port} | ||
15 | database_name: ${env.postgresql.database} | ||
16 | database_user: ${env.postgresql.user} | ||
17 | database_password: ${env.postgresql.password} | ||
18 | database_path: null | ||
19 | database_table_prefix: wallabag_ | ||
20 | database_socket: null | ||
21 | database_charset: utf8 | ||
22 | domain_name: https://tools.immae.eu/wallabag | ||
23 | mailer_transport: sendmail | ||
24 | mailer_host: 127.0.0.1 | ||
25 | mailer_user: null | ||
26 | mailer_password: null | ||
27 | locale: fr | ||
28 | secret: ${env.secret} | ||
29 | twofactor_auth: true | ||
30 | twofactor_sender: wallabag@tools.immae.eu | ||
31 | fosuser_registration: false | ||
32 | fosuser_confirmation: true | ||
33 | from_email: wallabag@tools.immae.eu | ||
34 | rss_limit: 50 | ||
35 | rabbitmq_host: localhost | ||
36 | rabbitmq_port: 5672 | ||
37 | rabbitmq_user: guest | ||
38 | rabbitmq_password: guest | ||
39 | rabbitmq_prefetch_count: 10 | ||
40 | redis_scheme: unix | ||
41 | redis_host: null | ||
42 | redis_port: null | ||
43 | redis_path: ${env.redis.socket} | ||
44 | redis_password: null | ||
45 | sites_credentials: { } | ||
46 | ldap_enabled: true | ||
47 | ldap_host: ${env.ldap.host} | ||
48 | ldap_port: 636 | ||
49 | ldap_tls: false | ||
50 | ldap_ssl: true | ||
51 | ldap_bind_requires_dn: true | ||
52 | ldap_base: '${env.ldap.base}' | ||
53 | ldap_manager_dn: '${env.ldap.dn}' | ||
54 | ldap_manager_pw: ${env.ldap.password} | ||
55 | ldap_filter: '${env.ldap.filter}' | ||
56 | ldap_admin_filter: '${env.ldap.admin_filter}' | ||
57 | ldap_username_attribute: uid | ||
58 | ldap_email_attribute: mail | ||
59 | ldap_name_attribute: cn | ||
60 | ldap_enabled_attribute: null | ||
61 | services: | ||
62 | swiftmailer.mailer.default.transport: | ||
63 | class: Swift_SendmailTransport | ||
64 | arguments: ['/run/wrappers/bin/sendmail -bs'] | ||
65 | ''; | ||
66 | }; | ||
67 | webappDir = wallabag.override { ldap = true; wallabag_config = config.secrets.fullPaths."webapps/tools-wallabag"; }; | ||
68 | activationScript = '' | ||
69 | install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir} \ | ||
70 | ${varDir}/var ${varDir}/data/db ${varDir}/assets/images | ||
71 | ''; | ||
72 | webRoot = "${webappDir}/web"; | ||
73 | # Domain migration: Table wallabag_entry contains whole | ||
74 | # https://tools.immae.eu/wallabag domain name in preview_picture | ||
75 | apache = rec { | ||
76 | user = "wwwrun"; | ||
77 | group = "wwwrun"; | ||
78 | modules = [ "proxy_fcgi" ]; | ||
79 | root = webRoot; | ||
80 | vhostConf = socket: '' | ||
81 | Alias /wallabag "${root}" | ||
82 | <Directory "${root}"> | ||
83 | AllowOverride None | ||
84 | Require all granted | ||
85 | # For OAuth (apps) | ||
86 | CGIPassAuth On | ||
87 | |||
88 | <FilesMatch "\.php$"> | ||
89 | SetHandler "proxy:unix:${socket}|fcgi://localhost" | ||
90 | </FilesMatch> | ||
91 | |||
92 | <IfModule mod_rewrite.c> | ||
93 | Options -MultiViews | ||
94 | RewriteEngine On | ||
95 | RewriteCond %{REQUEST_FILENAME} !-f | ||
96 | RewriteRule ^(.*)$ app.php [QSA,L] | ||
97 | </IfModule> | ||
98 | </Directory> | ||
99 | <Directory "${root}/bundles"> | ||
100 | <IfModule mod_rewrite.c> | ||
101 | RewriteEngine Off | ||
102 | </IfModule> | ||
103 | </Directory> | ||
104 | <Directory "${varDir}/assets"> | ||
105 | AllowOverride None | ||
106 | Require all granted | ||
107 | </Directory> | ||
108 | ''; | ||
109 | }; | ||
110 | phpFpm = rec { | ||
111 | preStart = '' | ||
112 | if [ ! -f "${varDir}/currentWebappDir" -o \ | ||
113 | ! -f "${varDir}/currentKey" -o \ | ||
114 | "${webappDir}" != "$(cat ${varDir}/currentWebappDir 2>/dev/null)" ] \ | ||
115 | || ! sha512sum -c --status ${varDir}/currentKey; then | ||
116 | pushd ${webappDir} > /dev/null | ||
117 | /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=prod cache:clear | ||
118 | rm -rf /var/lib/wallabag/var/cache/pro_ | ||
119 | /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=prod doctrine:migrations:migrate --no-interaction | ||
120 | popd > /dev/null | ||
121 | echo -n "${webappDir}" > ${varDir}/currentWebappDir | ||
122 | sha512sum ${config.secrets.fullPaths."webapps/tools-wallabag"} > ${varDir}/currentKey | ||
123 | fi | ||
124 | ''; | ||
125 | serviceDeps = [ "postgresql.service" "openldap.service" ]; | ||
126 | basedir = builtins.concatStringsSep ":" [ webappDir config.secrets.fullPaths."webapps/tools-wallabag" varDir ]; | ||
127 | pool = { | ||
128 | "listen.owner" = apache.user; | ||
129 | "listen.group" = apache.group; | ||
130 | "pm" = "dynamic"; | ||
131 | "pm.max_children" = "60"; | ||
132 | "pm.start_servers" = "2"; | ||
133 | "pm.min_spare_servers" = "1"; | ||
134 | "pm.max_spare_servers" = "10"; | ||
135 | |||
136 | # Needed to avoid clashes in browser cookies (same domain) | ||
137 | "php_value[session.name]" = "WallabagPHPSESSID"; | ||
138 | "php_admin_value[open_basedir]" = "/run/wrappers/bin/sendmail:${basedir}:/tmp"; | ||
139 | "php_value[max_execution_time]" = "300"; | ||
140 | }; | ||
141 | }; | ||
142 | } | ||