115 lines
3.5 KiB
Nix
115 lines
3.5 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
|
|
environment.systemPackages = with pkgs; [ nextcloud ];
|
|
|
|
services.nginx.virtualHosts."cloud.stubbe.rocks" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
serverName = "cloud.stubbe.rocks";
|
|
root = "/var/www/nextcloud/";
|
|
extraConfig = ''
|
|
client_max_body_size 1024M;
|
|
gzip off;
|
|
error_page 403 /core/templates/403.php;
|
|
error_page 404 /core/templates/404.php;
|
|
'';
|
|
|
|
locations = {
|
|
"/robots.txt" = {
|
|
extraConfig = "allow all;";
|
|
};
|
|
"/.well-known/carddav" = {
|
|
extraConfig = "return 301 $scheme://$host/remote.php/dav;";
|
|
};
|
|
"/.well-known/caldav" = {
|
|
extraConfig = "return 301 $scheme://$host/remote.php/dav;";
|
|
};
|
|
# Root
|
|
"/" = {
|
|
extraConfig = ''
|
|
rewrite ^ /index.php$uri;
|
|
'';
|
|
};
|
|
# PHP files
|
|
"~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\\.php(?:$|/)" = {
|
|
extraConfig = ''
|
|
fastcgi_split_path_info ^(.+\\.php)(/.*)$;
|
|
include ${pkgs.nginx}/conf/fastcgi_params;
|
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
|
fastcgi_pass unix:/run/phpfpm/nextcloud.sock;
|
|
'';
|
|
};
|
|
# CSS and JavaScript files
|
|
"~* ^/(?!apps-local).*\\.(?:css|js)$" = {
|
|
tryFiles = "$uri /index.php$uri$is_args$args";
|
|
};
|
|
# Other static assets
|
|
"~* ^/(?!apps-local).*\\.(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$" = {
|
|
tryFiles = "$uri /index.php$uri$is_args$args";
|
|
};
|
|
# Locally installed apps:
|
|
#
|
|
# No need to specify location for PHP files of installed apps???
|
|
#
|
|
# CSS and JavaScript files for installed apps
|
|
"~* ^/apps-local/.*\\.(?:css|js)$" = {
|
|
root = "/var/nextcloud";
|
|
tryFiles = "$uri =404";
|
|
};
|
|
# Other static assets for installed apps
|
|
"~* ^/apps-local/.*\\.(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$" = {
|
|
root = "/var/nextcloud";
|
|
tryFiles = "$uri =404";
|
|
};
|
|
"~ ^/(?:build|tests|config|lib|3rdparty|templates|data|\\.|autotest|occ|issue|indie|db_|console)" = {
|
|
extraConfig = "deny all;";
|
|
};
|
|
};
|
|
};
|
|
|
|
users.extraUsers.nextcloud.packages = [
|
|
pkgs.php71
|
|
pkgs.php71Packages.apcu
|
|
pkgs.php71Packages.memcached
|
|
pkgs.php71Packages.redis
|
|
pkgs.php71Packages.imagick
|
|
];
|
|
|
|
# Option I: PHP-FPM pool for Nextcloud
|
|
services.phpfpm.poolConfigs = let
|
|
phpfpmSocketName = "/run/phpfpm/nextcloud.sock";
|
|
phpfpmUser = "nextcloud";
|
|
phpfpmGroup = "nextcloud";
|
|
server = "nginx";
|
|
in
|
|
{
|
|
nextcloud = ''
|
|
listen = ${phpfpmSocketName}
|
|
listen.owner = ${server}
|
|
listen.group = ${server}
|
|
user = ${phpfpmUser}
|
|
group = ${phpfpmGroup}
|
|
pm = ondemand
|
|
pm.max_children = 4
|
|
pm.process_idle_timeout = 10s
|
|
pm.max_requests = 200
|
|
'';
|
|
};
|
|
|
|
services.phpfpm.phpOptions = ''
|
|
opcache.enable=1
|
|
opcache.enable_cli=1
|
|
opcache.interned_strings_buffer=8
|
|
opcache.max_accelerated_files=10000
|
|
opcache.memory_consumption=128
|
|
opcache.save_comments=1
|
|
opcache.revalidate_freq=1
|
|
'';
|
|
|
|
services.phpfpm.phpPackage = pkgs.php71;
|
|
|
|
}
|