···

       
24
       
 
       
        default = false;

     

       
25
       
 
       
        description = ''

     

       
26
       
 
       
          Enable piwik web analytics with php-fpm backend.

     

       
0
       
 
       

     

       
27
       
 
       
        '';

     

       
28
       
 
       
      };

     

       
29
       
 
       


     

       
30
       
 
       
      webServerUser = mkOption {

     

       
31
       
-
       
        type = types.str;

     

       
32
       
-
       
        example = "nginx";

     

       
0
       
 
       

     

       
33
       
 
       
        description = ''

     

       
34
       
-
       
          Name of the owner of the ${phpSocket} fastcgi socket for piwik.

     

       
0
       
 
       

     

       
35
       
 
       
          If you want to use another webserver than nginx, you need to set this to that server's user

     

       
36
       
 
       
          and pass fastcgi requests to `index.php` and `piwik.php` to this socket.

     

       
37
       
 
       
        '';

     
···

       
67
       
 
       
        };

     

       
68
       
 
       
        description = ''

     

       
69
       
 
       
            With this option, you can customize an nginx virtualHost which already has sensible defaults for piwik.

     

       
0
       
 
       

     

       
70
       
 
       
            Set this to {} to just enable the virtualHost if you don't need any customization.

     

       
71
       
 
       
            If enabled, then by default, the serverName is piwik.$\{config.networking.hostName\}, SSL is active,

     

       
72
       
 
       
            and certificates are acquired via ACME.

     
···

       
77
       
 
       
  };

     

       
78
       
 
       


     

       
79
       
 
       
  config = mkIf cfg.enable {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
80
       
 
       


     

       
81
       
 
       
    users.extraUsers.${user} = {

     

       
82
       
 
       
      isSystemUser = true;

     
···

       
132
       
 
       
      serviceConfig.UMask = "0007";

     

       
133
       
 
       
    };

     

       
134
       
 
       


     

       
135
       
-
       
    services.phpfpm.poolConfigs = {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
136
       
 
       
      ${pool} = ''

     

       
137
       
 
       
        listen = "${phpSocket}"

     

       
138
       
-
       
        listen.owner = ${cfg.webServerUser}

     

       
139
       
 
       
        listen.group = root

     

       
140
       
 
       
        listen.mode = 0600

     

       
141
       
 
       
        user = ${user}

     

···

       
24
       
 
       
        default = false;

     

       
25
       
 
       
        description = ''

     

       
26
       
 
       
          Enable piwik web analytics with php-fpm backend.

     

       
27
       
+
       
          Either the nginx option or the webServerUser option is mandatory.

     

       
28
       
 
       
        '';

     

       
29
       
 
       
      };

     

       
30
       
 
       


     

       
31
       
 
       
      webServerUser = mkOption {

     

       
32
       
+
       
        type = types.nullOr types.str;

     

       
33
       
+
       
        default = null;

     

       
34
       
+
       
        example = "lighttpd";

     

       
35
       
 
       
        description = ''

     

       
36
       
+
       
          Name of the web server user that forwards requests to the ${phpSocket} fastcgi socket for piwik if the nginx

     

       
37
       
+
       
          option is not used. Either this option or the nginx option is mandatory.

     

       
38
       
 
       
          If you want to use another webserver than nginx, you need to set this to that server's user

     

       
39
       
 
       
          and pass fastcgi requests to `index.php` and `piwik.php` to this socket.

     

       
40
       
 
       
        '';

     
···

       
70
       
 
       
        };

     

       
71
       
 
       
        description = ''

     

       
72
       
 
       
            With this option, you can customize an nginx virtualHost which already has sensible defaults for piwik.

     

       
73
       
+
       
            Either this option or the webServerUser option is mandatory.

     

       
74
       
 
       
            Set this to {} to just enable the virtualHost if you don't need any customization.

     

       
75
       
 
       
            If enabled, then by default, the serverName is piwik.$\{config.networking.hostName\}, SSL is active,

     

       
76
       
 
       
            and certificates are acquired via ACME.

     
···

       
81
       
 
       
  };

     

       
82
       
 
       


     

       
83
       
 
       
  config = mkIf cfg.enable {

     

       
84
       
+
       
    warnings = mkIf (cfg.nginx != null && cfg.webServerUser != null) [

     

       
85
       
+
       
      "If services.piwik.nginx is set, services.piwik.nginx.webServerUser is ignored and should be removed."

     

       
86
       
+
       
    ];

     

       
87
       
+
       


     

       
88
       
+
       
    assertions = [ {

     

       
89
       
+
       
        assertion = cfg.nginx != null || cfg.webServerUser != null;

     

       
90
       
+
       
        message = "Either services.piwik.nginx or services.piwik.nginx.webServerUser is mandatory";

     

       
91
       
+
       
    }];

     

       
92
       
 
       


     

       
93
       
 
       
    users.extraUsers.${user} = {

     

       
94
       
 
       
      isSystemUser = true;

     
···

       
144
       
 
       
      serviceConfig.UMask = "0007";

     

       
145
       
 
       
    };

     

       
146
       
 
       


     

       
147
       
+
       
    services.phpfpm.poolConfigs = let

     

       
148
       
+
       
      # workaround for when both are null and need to generate a string,

     

       
149
       
+
       
      # which is illegal, but as assertions apparently are being triggered *after* config generation,

     

       
150
       
+
       
      # we have to avoid already throwing errors at this previous stage.

     

       
151
       
+
       
      socketOwner = if (cfg.nginx != null) then config.services.nginx.user

     

       
152
       
+
       
      else if (cfg.webServerUser != null) then cfg.webServerUser else "";

     

       
153
       
+
       
    in {

     

       
154
       
 
       
      ${pool} = ''

     

       
155
       
 
       
        listen = "${phpSocket}"

     

       
156
       
+
       
        listen.owner = ${socketOwner}

     

       
157
       
 
       
        listen.group = root

     

       
158
       
 
       
        listen.mode = 0600

     

       
159
       
 
       
        user = ${user}