123 lines
4.4 KiB
Nix
123 lines
4.4 KiB
Nix
{
|
|
config
|
|
, lib
|
|
, pkgs
|
|
, domain
|
|
, relativeDocumentRoot
|
|
, databaseName
|
|
, php
|
|
}:
|
|
|
|
let
|
|
|
|
documentRoot = "${config.custom.web-development.rootPath}/${relativeDocumentRoot}";
|
|
|
|
phpPackage = php.buildEnv {
|
|
extensions = { enabled, all }: enabled ++ (with all; [
|
|
xdebug
|
|
]);
|
|
extraConfig = ''
|
|
xdebug.mode = debug
|
|
'';
|
|
};
|
|
|
|
in {
|
|
custom.web-development = {
|
|
|
|
databases = [databaseName];
|
|
|
|
};
|
|
|
|
services = {
|
|
|
|
httpd.virtualHosts.${domain} = {
|
|
forceSSL = true;
|
|
sslServerCert = "${config.custom.web-development.certFolder}${domain}.pem";
|
|
sslServerKey = "${config.custom.web-development.certFolder}${domain}-key.pem";
|
|
|
|
inherit documentRoot;
|
|
|
|
extraConfig = ''
|
|
<Directory ${documentRoot}>
|
|
AllowOverride None
|
|
Require all granted
|
|
DirectoryIndex index.php
|
|
|
|
RewriteEngine On
|
|
|
|
# Store the current location in an environment variable CWD to use
|
|
# mod_rewrite in .htaccess files without knowing the RewriteBase
|
|
RewriteCond $0#%{REQUEST_URI} ([^#]*)#(.*)\1$
|
|
RewriteRule ^.*$ - [E=CWD:%2]
|
|
|
|
# Rule for versioned static files, configured through:
|
|
# - $GLOBALS['TYPO3_CONF_VARS']['BE']['versionNumberInFilename']
|
|
# - $GLOBALS['TYPO3_CONF_VARS']['FE']['versionNumberInFilename']
|
|
# IMPORTANT: This rule has to be the very first RewriteCond in order to work!
|
|
RewriteCond %{REQUEST_FILENAME} !-f
|
|
RewriteCond %{REQUEST_FILENAME} !-d
|
|
RewriteRule ^(.+)\.(\d+)\.(php|js|css|png|jpg|gif|gzip)$ %{ENV:CWD}$1.$3 [L]
|
|
|
|
# Access block for folders
|
|
RewriteRule _(?:recycler|temp)_/ - [F]
|
|
RewriteRule fileadmin/templates/.*\.(?:txt|ts)$ - [F]
|
|
RewriteRule ^(?:vendor|typo3_src|typo3temp/var) - [F]
|
|
RewriteRule (?:typo3conf/ext|typo3/sysext|typo3/ext)/[^/]+/(?:Configuration|Resources/Private|Tests?|Documentation|docs?)/ - [F]
|
|
|
|
# Block access to all hidden files and directories with the exception of
|
|
# the visible content from within the `/.well-known/` hidden directory (RFC 5785).
|
|
RewriteCond %{REQUEST_URI} "!(^|/)\.well-known/([^./]+./?)+$" [NC]
|
|
RewriteCond %{SCRIPT_FILENAME} -d [OR]
|
|
RewriteCond %{SCRIPT_FILENAME} -f
|
|
RewriteRule (?:^|/)\. - [F]
|
|
|
|
# Stop rewrite processing, if we are in any other known directory
|
|
# NOTE: Add your additional local storages here
|
|
RewriteRule ^(?:fileadmin/|typo3conf/|typo3temp/|uploads/) - [L]
|
|
|
|
# If the file/symlink/directory does not exist but is below /typo3/, redirect to the TYPO3 Backend entry point.
|
|
RewriteCond %{REQUEST_FILENAME} !-f
|
|
RewriteCond %{REQUEST_FILENAME} !-d
|
|
RewriteCond %{REQUEST_FILENAME} !-l
|
|
RewriteCond %{REQUEST_URI} ^/typo3/.*$
|
|
RewriteRule ^typo3/(.*)$ %{ENV:CWD}typo3/index.php [QSA,L]
|
|
|
|
# If the file/symlink/directory does not exist => Redirect to index.php.
|
|
# For httpd.conf, you need to prefix each '%{REQUEST_FILENAME}' with '%{DOCUMENT_ROOT}'.
|
|
RewriteCond %{REQUEST_FILENAME} !-f
|
|
RewriteCond %{REQUEST_FILENAME} !-d
|
|
RewriteCond %{REQUEST_FILENAME} !-l
|
|
RewriteRule ^.*$ %{ENV:CWD}index.php [QSA,L]
|
|
</Directory>
|
|
|
|
<FilesMatch "\.php$">
|
|
SetHandler "proxy:unix:${config.services.phpfpm.pools."${domain}".socket}|fcgi://${domain}/"
|
|
</FilesMatch>
|
|
'';
|
|
};
|
|
|
|
phpfpm.pools.${domain} = {
|
|
inherit (config.services.httpd) user group;
|
|
inherit phpPackage;
|
|
settings = {
|
|
"listen.owner" = config.services.httpd.user;
|
|
"listen.group" = config.services.httpd.group;
|
|
"pm" = "ondemand";
|
|
"pm.max_children" = 15;
|
|
"php_admin_value[max_execution_time]" = 240;
|
|
"php_admin_value[max_input_vars]" = 1500;
|
|
# NOTE: Looks like this doesn't work, we need to set in php itself, see above extraConfig
|
|
# "php_admin_value[xdebug.mode]" = "debug";
|
|
"php_admin_value[xdebug.max_nesting_level]" = 400;
|
|
};
|
|
phpEnv = {
|
|
TYPO3_ADDITIONAL_CONFIGURATION = "/var/projects/own/typo3-configuration/AdditionalConfiguration.inc.php";
|
|
TYPO3_DATABASE = databaseName;
|
|
TYPO3_CONTEXT = "Development/dsiepmann";
|
|
IMAGEMAGICK_PATH = lib.makeBinPath [ pkgs.imagemagick ] + "/";
|
|
};
|
|
};
|
|
|
|
};
|
|
}
|