wurzel/fruitbasket
9
1
Fork 0
Code Issues 5 Pull requests Packages Projects Releases Wiki Activity

Revert "kanboard: move away from podman because of nftables and podman bug"

Browse source 
This reverts commit 6416be37f5.
This commit is contained in:
quitte 2024-10-23 23:58:08 +02:00
parent dd9aaba3ef
commit 2fa18c816d
1 changed files with 15 additions and 47 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

62
modules/kanboard.nix
View file

@ -1,65 +1,33 @@
{ pkgs, config, lib, ... }: { config, pkgs, ... }:
let let
domain = "kanboard.${config.networking.domain}"; domain = "kanboard.${config.networking.domain}";
domain_short = "kb.${config.networking.domain}"; domain_short = "kb.${config.networking.domain}";
user = "kanboard";
group = "kanboard";
in in
{ {
users.users.${user} = { sops.secrets."kanboard_env" = { };
group = group;
isSystemUser = true;
};
users.groups.${group} = { };
services.phpfpm.pools.kanboard = { virtualisation.oci-containers = {
user = "kanboard"; containers.kanboard = {
group = "kanboard"; image = "ghcr.io/kanboard/kanboard:v1.2.39";
settings = { volumes = [
"listen.owner" = config.services.nginx.user; "kanboard_data:/var/www/app/data"
"pm" = "dynamic"; "kanboard_plugins:/var/www/app/plugins"
"pm.max_children" = 32; ];
"pm.max_requests" = 500; ports = [ "127.0.0.1:8045:80" ];
"pm.start_servers" = 2; environmentFiles = [
"pm.min_spare_servers" = 2; config.sops.secrets."kanboard_env".path
"pm.max_spare_servers" = 5; ];
"php_admin_value[error_log]" = "stderr";
"php_admin_flag[log_errors]" = true;
"catch_workers_output" = true;
}; };
phpEnv."PATH" = lib.makeBinPath [ pkgs.php ];
}; };
services.nginx.enable = true;
services.nginx = { services.nginx = {
virtualHosts."${domain_short}" = { virtualHosts."${domain_short}" = {
locations."/".return = "301 $scheme://${domain}$request_uri"; locations."/".return = "301 $scheme://${domain}$request_uri";
}; };
virtualHosts."${domain}" = { virtualHosts."${domain}" = {
root = "/srv/web/kanboard"; locations."/" = {
extraConfig = '' proxyPass = "http://127.0.0.1:8045";
index index.html index.php;
'';
locations = {
"/" = {
tryFiles = "$uri $uri/ =404";
};
"~ \.php$" = {
extraConfig = ''
try_files $uri =404;
fastcgi_pass unix:${config.services.phpfpm.pools.kanboard.socket};
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_index index.php;
include ${pkgs.nginx}/conf/fastcgi_params;
include ${pkgs.nginx}/conf/fastcgi.conf;
fastcgi_param SCRIPT_FILENAME $document_root/$fastcgi_script_name;
'';
};
"/data".return = "403";
}; };
}; };
}; };