wurzel/fruitbasket
10
1
Fork 1
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity

Neuer sharepic-generator. Keine Begrenzug auf Uninetz da keine SPD-Assets mehr

Browse source
This commit is contained in:
Frieder Hannenheim 2025-02-03 19:13:19 +01:00
parent 969ff27555
commit f1f330daab
1 changed files with 6 additions and 55 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

61
modules/web/sharepic.nix
View file

@ -1,63 +1,14 @@
{ pkgs, config, lib, ... }: { pkgs, config, lib, ... }:
let let
domain = "sharepic.${config.networking.domain}"; domain = "sharepic.${config.networking.domain}";
user = "sharepic";
group = "sharepic";
in in
{ {
users.users.${user} = { services.nginx.virtualHosts."${domain}" = {
group = group; root = pkgs.fetchFromGitHub {
isSystemUser = true; owner = "jannikmenzel";
}; repo = "iFSR-Sharepicgenerator";
users.groups.${group} = { }; rev = "ac721d5fff2dba1f046939a6d6532b1a8cfceba8";
hash = "sha256-of+N58TDt2BcbDVEriKn6rjQVl0GdV4ZMEblrdUutZk=";
services.phpfpm.pools.sharepic = {
user = "sharepic";
group = "sharepic";
settings = {
"listen.owner" = config.services.nginx.user;
"pm" = "dynamic";
"pm.max_children" = 32;
"pm.max_requests" = 500;
"pm.start_servers" = 2;
"pm.min_spare_servers" = 2;
"pm.max_spare_servers" = 5;
"php_admin_value[error_log]" = "stderr";
"php_admin_flag[log_errors]" = true;
"catch_workers_output" = true;
};
phpEnv."PATH" = lib.makeBinPath [ pkgs.php ];
};
services.nginx = {
enable = true;
virtualHosts."${domain}" = {
root = "/srv/web/sharepic";
extraConfig = ''
index index.php index.html;
allow 141.30.0.0/16;
allow 141.76.0.0/16;
deny all;
'';
locations = {
"/" = {
tryFiles = "$uri $uri/ =404";
};
"~ \.php$" = {
extraConfig = ''
try_files $uri =404;
fastcgi_pass unix:${config.services.phpfpm.pools.sharepic.socket};
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_index index.php;
include ${pkgs.nginx}/conf/fastcgi_params;
include ${pkgs.nginx}/conf/fastcgi.conf;
fastcgi_param SCRIPT_FILENAME $document_root/$fastcgi_script_name;
'';
};
"/data".return = "403";
}; };
};
}; };
} }