diff options
Diffstat (limited to 'nixops/modules/websites/tools/git/mantisbt/mantisbt.nix')
-rw-r--r-- | nixops/modules/websites/tools/git/mantisbt/mantisbt.nix | 120 |
1 files changed, 120 insertions, 0 deletions
diff --git a/nixops/modules/websites/tools/git/mantisbt/mantisbt.nix b/nixops/modules/websites/tools/git/mantisbt/mantisbt.nix new file mode 100644 index 0000000..bc2ff3a --- /dev/null +++ b/nixops/modules/websites/tools/git/mantisbt/mantisbt.nix | |||
@@ -0,0 +1,120 @@ | |||
1 | { lib, env, writeText, stdenv, fetchurl, fetchedGithub }: | ||
2 | let | ||
3 | mantisbt = let | ||
4 | plugins = { | ||
5 | slack = stdenv.mkDerivation (fetchedGithub ./mantisbt-plugin-slack.json // rec { | ||
6 | installPhase = '' | ||
7 | sed -i -e "s/return '@' . \\\$username;/return \\\$username;/" Slack.php | ||
8 | cp -a . $out | ||
9 | ''; | ||
10 | }); | ||
11 | source-integration = stdenv.mkDerivation (fetchedGithub ./mantisbt-plugin-source-integration.json // rec { | ||
12 | installPhase = '' | ||
13 | mkdir $out | ||
14 | patch -p1 < ${./mantisbt-plugin-source-integration_Source.API.php.diff} | ||
15 | cp -a Source* $out/ | ||
16 | ''; | ||
17 | }); | ||
18 | }; | ||
19 | in rec { | ||
20 | config = | ||
21 | writeText "config_inc.php" '' | ||
22 | <?php | ||
23 | $g_hostname = 'db-1.immae.eu'; | ||
24 | $g_db_username = 'mantisbt'; | ||
25 | $g_db_password = '${env.postgresql.password}'; | ||
26 | $g_database_name = 'mantisbt'; | ||
27 | $g_db_type = 'pgsql'; | ||
28 | $g_crypto_master_salt = '${env.master_salt}'; | ||
29 | $g_allow_signup = OFF; | ||
30 | $g_allow_anonymous_login = ON; | ||
31 | $g_anonymous_account = 'anonymous'; | ||
32 | |||
33 | $g_phpMailer_method = PHPMAILER_METHOD_SMTP; | ||
34 | $g_smtp_host = 'mail.immae.eu'; | ||
35 | $g_smtp_username = '''; | ||
36 | $g_smtp_password = '''; | ||
37 | $g_webmaster_email = 'webmaster@immae.eu'; | ||
38 | $g_from_email = 'noreply@immae.eu'; | ||
39 | $g_return_path_email = 'webmaster@immae.eu'; | ||
40 | $g_from_name = 'Mantis Bug Tracker at immae.eu'; | ||
41 | $g_email_receive_own = OFF; | ||
42 | # --- LDAP --- | ||
43 | $g_login_method = LDAP; | ||
44 | $g_ldap_protocol_version = 3; | ||
45 | $g_ldap_server = 'ldaps://ldap.immae.eu:636'; | ||
46 | $g_ldap_root_dn = 'ou=users,dc=immae,dc=eu'; | ||
47 | $g_ldap_bind_dn = 'cn=mantisbt,ou=services,dc=immae,dc=eu'; | ||
48 | $g_ldap_bind_passwd = '${env.ldap.password}'; | ||
49 | $g_use_ldap_email = ON; | ||
50 | $g_use_ldap_realname = ON; | ||
51 | $g_ldap_uid_field = 'uid'; | ||
52 | $g_ldap_realname_field = 'cn'; | ||
53 | $g_ldap_organization = '(memberOf=cn=users,cn=mantisbt,ou=services,dc=immae,dc=eu)'; | ||
54 | ''; | ||
55 | webRoot = stdenv.mkDerivation rec { | ||
56 | name = "mantisbt-${version}"; | ||
57 | version = "2.11.1"; | ||
58 | src = fetchurl { | ||
59 | url = "https://downloads.sourceforge.net/project/mantisbt/mantis-stable/${version}/${name}.tar.gz"; | ||
60 | sha256 = "0jnrqz6r2hf53v0k1lh3il7hlfiphn61r9wgg6mzyywkjxwq07md"; | ||
61 | }; | ||
62 | patches = [ | ||
63 | ./patches/bug_report.php.diff | ||
64 | ./patches/bug_report_page.php.diff | ||
65 | ./patches/bugnote_add.php.diff | ||
66 | ./patches/bugnote_add_inc.php.diff | ||
67 | ]; | ||
68 | installPhase = '' | ||
69 | cp -a . $out | ||
70 | ln -s ${config} $out/config/config_inc.php | ||
71 | ln -s ${plugins.slack} $out/plugins/Slack | ||
72 | ln -s ${plugins.source-integration}/Source* $out/plugins/ | ||
73 | ''; | ||
74 | }; | ||
75 | apache = { | ||
76 | user = "wwwrun"; | ||
77 | group = "wwwrun"; | ||
78 | modules = [ "proxy_fcgi" ]; | ||
79 | vhostConf = '' | ||
80 | Alias /mantisbt "${webRoot}" | ||
81 | <Directory "${webRoot}"> | ||
82 | DirectoryIndex index.php | ||
83 | <FilesMatch "\.php$"> | ||
84 | SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost" | ||
85 | </FilesMatch> | ||
86 | |||
87 | AllowOverride All | ||
88 | Options FollowSymlinks | ||
89 | Require all granted | ||
90 | </Directory> | ||
91 | <Directory "${webRoot}/admin"> | ||
92 | #Reenable during upgrade | ||
93 | Require all denied | ||
94 | </Directory> | ||
95 | ''; | ||
96 | }; | ||
97 | phpFpm = rec { | ||
98 | basedir = builtins.concatStringsSep ":" ( | ||
99 | [ webRoot config ] | ||
100 | ++ lib.attrsets.mapAttrsToList (name: value: value) plugins); | ||
101 | socket = "/var/run/phpfpm/mantisbt.sock"; | ||
102 | pool = '' | ||
103 | listen = ${socket} | ||
104 | user = ${apache.user} | ||
105 | group = ${apache.group} | ||
106 | listen.owner = ${apache.user} | ||
107 | listen.group = ${apache.group} | ||
108 | pm = ondemand | ||
109 | pm.max_children = 60 | ||
110 | pm.process_idle_timeout = 60 | ||
111 | |||
112 | php_admin_value[upload_max_filesize] = 5000000 | ||
113 | |||
114 | php_admin_value[open_basedir] = "${basedir}:/tmp" | ||
115 | php_admin_value[session.save_path] = "/var/lib/php/sessions/mantisbt" | ||
116 | ''; | ||
117 | }; | ||
118 | }; | ||
119 | in | ||
120 | mantisbt | ||