Files
stubbfelnix/services/nextcloud.nix
2017-11-26 17:11:43 +01:00

112 lines
3.5 KiB
Nix

{ config, pkgs, ... }:
{
environment.systemPackages = with pkgs; [ nextcloud ];
services.nginx.virtualHosts."cloud.stubbe.rocks" = {
enableACME = true;
forceSSL = true;
serverName = "cloud.stubbe.rocks";
root = "/var/www/nextcloud/";
extraConfig = ''
client_max_body_size 1024M;
gzip off;
error_page 403 /core/templates/403.php;
error_page 404 /core/templates/404.php;
'';
locations = {
"/robots.txt" = {
extraConfig = "allow all;";
};
"/.well-known/carddav" = {
extraConfig = "return 301 $scheme://$host/remote.php/dav;";
};
"/.well-known/caldav" = {
extraConfig = "return 301 $scheme://$host/remote.php/dav;";
};
# Root
"/" = {
extraConfig = ''
rewrite ^ /index.php$uri;
'';
};
# PHP files
"~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\\.php(?:$|/)" = {
extraConfig = ''
fastcgi_split_path_info ^(.+\\.php)(/.*)$;
include ${pkgs.nginx}/conf/fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_pass unix:/run/phpfpm/nextcloud.sock;
'';
};
# CSS and JavaScript files
"~* ^/(?!apps-local).*\\.(?:css|js)$" = {
tryFiles = "$uri /index.php$uri$is_args$args";
};
# Other static assets
"~* ^/(?!apps-local).*\\.(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$" = {
tryFiles = "$uri /index.php$uri$is_args$args";
};
# Locally installed apps:
#
# No need to specify location for PHP files of installed apps???
#
# CSS and JavaScript files for installed apps
"~* ^/apps-local/.*\\.(?:css|js)$" = {
root = "/var/nextcloud";
tryFiles = "$uri =404";
};
# Other static assets for installed apps
"~* ^/apps-local/.*\\.(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$" = {
root = "/var/nextcloud";
tryFiles = "$uri =404";
};
"~ ^/(?:build|tests|config|lib|3rdparty|templates|data|\\.|autotest|occ|issue|indie|db_|console)" = {
extraConfig = "deny all;";
};
};
};
users.extraUsers.nextcloud.packages = [
pkgs.php
pkgs.php71Packages.apcu
pkgs.php71Packages.memcached
pkgs.php71Packages.redis
pkgs.php71Packages.imagick
];
# Option I: PHP-FPM pool for Nextcloud
services.phpfpm.poolConfigs = let
phpfpmSocketName = "/run/phpfpm/nextcloud.sock";
phpfpmUser = "nextcloud";
phpfpmGroup = "nextcloud";
server = "nginx";
in
{
nextcloud = ''
listen = ${phpfpmSocketName}
listen.owner = ${server}
listen.group = ${server}
user = ${phpfpmUser}
group = ${phpfpmGroup}
pm = ondemand
pm.max_children = 4
pm.process_idle_timeout = 10s
pm.max_requests = 200
'';
};
services.phpfpm.phpOptions = ''
opcache.enable=1
opcache.enable_cli=1
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.memory_consumption=128
opcache.save_comments=1
opcache.revalidate_freq=1
'';
}