110 lines
4 KiB
Nix
110 lines
4 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
let
|
|
poolName = "roundcube_pool";
|
|
|
|
roundcube = (pkgs.callPackage ./pkg-roundcube.nix {
|
|
conf = pkgs.writeText "roundcube-config.inc.php" ''
|
|
<?php
|
|
$config = array();
|
|
$config['db_dsnw'] = 'sqlite:///${config.variables.roundcubeDataDir}/roundcube.sqlite?mode=0600';
|
|
$config['default_host'] = 'tls://${config.variables.myFQDN}';
|
|
$config['smtp_server'] = 'tls://${config.variables.myFQDN}';
|
|
$config['smtp_port'] = 587;
|
|
$config['smtp_user'] = '%u';
|
|
$config['smtp_pass'] = '%p';
|
|
$config['product_name'] = 'Webmail';
|
|
$config['des_key'] = 'JQgS7JcnFMNcU3cHKrr880wO';
|
|
$config['plugins'] = array(
|
|
'archive',
|
|
'managesieve',
|
|
'zipdownload',
|
|
);
|
|
$config['skin'] = 'larry';
|
|
'';
|
|
temp = "${config.variables.roundcubeDataDir}/temp";
|
|
logs = "${config.variables.roundcubeDataDir}/logs";
|
|
} );
|
|
in
|
|
{
|
|
services.nginx.virtualHosts."${config.variables.roundcubeFQDN}" = {
|
|
forceSSL = config.variables.useSSL;
|
|
enableACME = config.variables.useSSL;
|
|
root = "${roundcube}/public_html";
|
|
locations."~ ^/favicon.ico/.*$" = {
|
|
extraConfig = "try_files $uri kins/larry/images/$uri;";
|
|
};
|
|
locations."/" = {
|
|
extraConfig = ''
|
|
index index.php;
|
|
try_files $uri /public/$uri /index.php$is_args$args;
|
|
|
|
etag off;
|
|
add_header etag "\"${builtins.substring 11 32 roundcube}\"";
|
|
'';
|
|
};
|
|
locations."~ [^/]\.php(/|$)" = {
|
|
extraConfig = ''
|
|
etag off;
|
|
add_header etag "\"${builtins.substring 11 32 roundcube}\"";
|
|
|
|
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
|
|
if (!-f $document_root$fastcgi_script_name) {
|
|
return 404;
|
|
}
|
|
|
|
fastcgi_pass ${config.variables.roundcubePhpfpmHostPort};
|
|
fastcgi_index index.php;
|
|
|
|
fastcgi_param QUERY_STRING $query_string;
|
|
fastcgi_param REQUEST_METHOD $request_method;
|
|
fastcgi_param CONTENT_TYPE $content_type;
|
|
fastcgi_param CONTENT_LENGTH $content_length;
|
|
|
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
|
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
|
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
|
|
fastcgi_param REQUEST_URI $request_uri;
|
|
fastcgi_param DOCUMENT_URI $document_uri;
|
|
fastcgi_param DOCUMENT_ROOT $document_root;
|
|
fastcgi_param SERVER_PROTOCOL $server_protocol;
|
|
|
|
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
|
|
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
|
|
|
|
fastcgi_param REMOTE_ADDR $remote_addr;
|
|
fastcgi_param REMOTE_PORT $remote_port;
|
|
fastcgi_param SERVER_ADDR $server_addr;
|
|
fastcgi_param SERVER_PORT $server_port;
|
|
fastcgi_param SERVER_NAME $server_name;
|
|
|
|
fastcgi_param HTTPS $https;
|
|
fastcgi_param HTTP_PROXY "";
|
|
'';
|
|
};
|
|
};
|
|
systemd.services.roundcube-install = {
|
|
serviceConfig.Type = "oneshot";
|
|
wantedBy = [ "multi-user.target" ];
|
|
script = ''
|
|
mkdir -p ${config.variables.roundcubeDataDir}/temp ${config.variables.roundcubeDataDir}/logs
|
|
chown -Rc ${config.variables.roundcubeUser} ${config.variables.roundcubeDataDir}
|
|
chmod -c 700 ${config.variables.roundcubeDataDir}
|
|
'';
|
|
};
|
|
services.phpfpm.pools."${poolName}" = {
|
|
listen = config.variables.roundcubePhpfpmHostPort;
|
|
extraConfig = ''
|
|
user = ${config.variables.roundcubeUser}
|
|
pm = dynamic
|
|
pm.max_children = 75
|
|
pm.min_spare_servers = 5
|
|
pm.max_spare_servers = 20
|
|
pm.max_requests = 10
|
|
catch_workers_output = 1
|
|
'';
|
|
};
|
|
users.extraUsers."${config.variables.roundcubeUser}" = { };
|
|
}
|