postfixadmin: remove, doesn't support php >8.1

- [sx](https://github.com/earnestly/sx), a simple alternative to both xinit and startx for starting a Xorg server. Available as [services.xserver.displayManager.sx](#opt-services.xserver.displayManager.sx.enable)

- [postfixadmin](https://postfixadmin.sourceforge.io/), a web based virtual user administration interface for Postfix mail servers. Available as [postfixadmin](#opt-services.postfixadmin.enable).

- [postfixadmin](https://postfixadmin.sourceforge.io/), a web based virtual user administration interface for Postfix mail servers.

- [prowlarr](https://wiki.servarr.com/prowlarr), an indexer manager/proxy built on the popular arr .net/reactjs base stack [services.prowlarr](#opt-services.prowlarr.enable).

  ./services/mail/pfix-srsd.nix

  ./services/mail/postfix-tlspol.nix

  ./services/mail/postfix.nix

  ./services/mail/postfixadmin.nix

  ./services/mail/postgrey.nix

  ./services/mail/postsrsd.nix

  ./services/mail/protonmail-bridge.nix

      services.invoiceplane has been removed since the service only supported PHP 8.1 which is EOL

      and removed from nixpkgs.

    '')

    (mkRemovedOptionModule [ "services" "postfixadmin" ] ''

      services.postfixadmin has been removed since it was unmaintained in nixpkgs and the version

      available only supported PHP 8.1 which is EOL.

    '')

    # Do NOT add any option renames here, see top of the file

  ];

}

{

  lib,

  config,

  pkgs,

  ...

}:

let

  cfg = config.services.postfixadmin;

  fpm = config.services.phpfpm.pools.postfixadmin;

  localDB = cfg.database.host == "localhost";

  pgsql = config.services.postgresql;

  user = if localDB then cfg.database.username else "nginx";

in

{

  options.services.postfixadmin = {

    enable = lib.mkOption {

      type = lib.types.bool;

      default = false;

      description = ''

        Whether to enable postfixadmin.

        Also enables nginx virtual host management.

        Further nginx configuration can be done by adapting `services.nginx.virtualHosts.<name>`.

        See [](#opt-services.nginx.virtualHosts) for further information.

      '';

    };

    hostName = lib.mkOption {

      type = lib.types.str;

      example = "postfixadmin.example.com";

      description = "Hostname to use for the nginx vhost";

    };

    adminEmail = lib.mkOption {

      type = lib.types.str;

      example = "postmaster@example.com";

      description = ''

        Defines the Site Admin's email address.

        This will be used to send emails from to create mailboxes and

        from Send Email / Broadcast message pages.

      '';

    };

    setupPasswordFile = lib.mkOption {

      type = lib.types.path;

      description = ''

        Password file for the admin.

        Generate with `php -r "echo password_hash('some password here', PASSWORD_DEFAULT);"`

      '';

    };

    database = {

      username = lib.mkOption {

        type = lib.types.str;

        default = "postfixadmin";

        description = ''

          Username for the postgresql connection.

          If `database.host` is set to `localhost`, a unix user and group of the same name will be created as well.

        '';

      };

      host = lib.mkOption {

        type = lib.types.str;

        default = "localhost";

        description = ''

          Host of the postgresql server. If this is not set to

          `localhost`, you have to create the

          postgresql user and database yourself, with appropriate

          permissions.

        '';

      };

      passwordFile = lib.mkOption {

        type = lib.types.path;

        description = "Password file for the postgresql connection. Must be readable by user `nginx`.";

      };

      dbname = lib.mkOption {

        type = lib.types.str;

        default = "postfixadmin";

        description = "Name of the postgresql database";

      };

    };

    extraConfig = lib.mkOption {

      type = lib.types.lines;

      default = "";

      description = "Extra configuration for the postfixadmin instance, see postfixadmin's config.inc.php for available options.";

    };

  };

  config = lib.mkIf cfg.enable {

    environment.etc."postfixadmin/config.local.php".text = ''

      <?php

      $CONF['setup_password'] = file_get_contents('${cfg.setupPasswordFile}');

      $CONF['database_type'] = 'pgsql';

      $CONF['database_host'] = ${if localDB then "null" else "'${cfg.database.host}'"};

      ${lib.optionalString localDB "$CONF['database_user'] = '${cfg.database.username}';"}

      $CONF['database_password'] = ${

        if localDB then "'dummy'" else "file_get_contents('${cfg.database.passwordFile}')"

      };

      $CONF['database_name'] = '${cfg.database.dbname}';

      $CONF['configured'] = true;

      ${cfg.extraConfig}

    '';

    systemd.tmpfiles.settings."10-postfixadmin"."/var/cache/postfixadmin/templates_c".d = {

      inherit user;

      group = user;

      mode = "700";

    };

    services.nginx = {

      enable = true;

      virtualHosts = {

        ${cfg.hostName} = {

          forceSSL = lib.mkDefault true;

          enableACME = lib.mkDefault true;

          locations."/" = {

            root = "${pkgs.postfixadmin}/public";

            index = "index.php";

            extraConfig = ''

              location ~* \.php$ {

                fastcgi_split_path_info ^(.+\.php)(/.+)$;

                fastcgi_pass unix:${fpm.socket};

                include ${config.services.nginx.package}/conf/fastcgi_params;

                include ${pkgs.nginx}/conf/fastcgi.conf;

              }

            '';

          };

        };

      };

    };

    services.postgresql = lib.mkIf localDB {

      enable = true;

      ensureUsers = [

        {

          name = cfg.database.username;

        }

      ];

    };

    # The postgresql module doesn't currently support concepts like

    # objects owners and extensions; for now we tack on what's needed

    # here.

    systemd.services.postfixadmin-postgres = lib.mkIf localDB {

      after = [ "postgresql.target" ];

      bindsTo = [ "postgresql.target" ];

      wantedBy = [ "multi-user.target" ];

      path = [

        pgsql.package

        pkgs.util-linux

      ];

      script = ''

        set -euo pipefail

        PSQL() {

            psql --port=${toString pgsql.settings.port} "$@"

        }

        PSQL -tAc "SELECT 1 FROM pg_database WHERE datname = '${cfg.database.dbname}'" | grep -q 1 || PSQL -tAc 'CREATE DATABASE "${cfg.database.dbname}" OWNER "${cfg.database.username}"'

        current_owner=$(PSQL -tAc "SELECT pg_catalog.pg_get_userbyid(datdba) FROM pg_catalog.pg_database WHERE datname = '${cfg.database.dbname}'")

        if [[ "$current_owner" != "${cfg.database.username}" ]]; then

            PSQL -tAc 'ALTER DATABASE "${cfg.database.dbname}" OWNER TO "${cfg.database.username}"'

            if [[ -e "${pgsql.dataDir}/.reassigning_${cfg.database.dbname}" ]]; then

                echo "Reassigning ownership of database ${cfg.database.dbname} to user ${cfg.database.username} failed on last boot. Failing..."

                exit 1

            fi

            touch "${pgsql.dataDir}/.reassigning_${cfg.database.dbname}"

            PSQL "${cfg.database.dbname}" -tAc "REASSIGN OWNED BY \"$current_owner\" TO \"${cfg.database.username}\""

            rm "${pgsql.dataDir}/.reassigning_${cfg.database.dbname}"

        fi

      '';

      serviceConfig = {

        User = pgsql.superUser;

        Type = "oneshot";

        RemainAfterExit = true;

      };

    };

    users.users.${user} = lib.mkIf localDB {

      group = user;

      isSystemUser = true;

      createHome = false;

    };

    users.groups.${user} = lib.mkIf localDB { };

    services.phpfpm.pools.postfixadmin = {

      user = user;

      phpPackage = pkgs.php81;

      phpOptions = ''

        error_log = 'stderr'

        log_errors = on

      '';

      settings = lib.mapAttrs (_: lib.mkDefault) {

        "listen.owner" = "nginx";

        "listen.group" = "nginx";

        "listen.mode" = "0660";

        "pm" = "dynamic";

        "pm.max_children" = 75;

        "pm.start_servers" = 2;

        "pm.min_spare_servers" = 1;

        "pm.max_spare_servers" = 20;

        "pm.max_requests" = 500;

        "catch_workers_output" = true;

      };

    };

  };

}

    handleTest ./postfix-raise-smtpd-tls-security-level.nix

      { };

  postfix-tlspol = runTest ./postfix-tlspol.nix;

  postfixadmin = runTest ./postfixadmin.nix;

  postgres-websockets = runTest ./postgres-websockets.nix;

  postgresql = handleTest ./postgresql { };

  postgrest = runTest ./postgrest.nix;