Merge pull request #276496 from Izorkin/update-roundcube-nginx (7f91c8ef) · Commits · nix / nixpkgs

nixos/modules/services/mail/roundcube.nix

+31 −12

Original line number	Diff line number	Diff line
		@@ -102,6 +102,12 @@ in
		apply = configuredMaxAttachmentSize: "${toString (configuredMaxAttachmentSize * 1.3)}M";
		};

		configureNginx = lib.mkOption {
		type = lib.types.bool;
		default = true;
		description = lib.mdDoc "Configure nginx as a reverse proxy for roundcube.";
		};

		extraConfig = mkOption {
		type = types.lines;
		default = "";
		@@ -142,26 +148,39 @@ in
		${cfg.extraConfig}
		'';

		services.nginx = {
		services.nginx = lib.mkIf cfg.configureNginx {
		enable = true;
		virtualHosts = {
		${cfg.hostName} = {
		forceSSL = mkDefault true;
		enableACME = mkDefault true;
		locations."/" = {
		root = cfg.package;
		locations."/" = {
		index = "index.php";
		priority = 1100;
		extraConfig = ''
		add_header Cache-Control 'public, max-age=604800, must-revalidate';
		'';
		};
		locations."~ ^/(SQL\|bin\|config\|logs\|temp\|vendor)/" = {
		priority = 3110;
		extraConfig = ''
		return 404;
		'';
		};
		locations."~ ^/(CHANGELOG.md\|INSTALL\|LICENSE\|README.md\|SECURITY.md\|UPGRADING\|composer.json\|composer.lock)" = {
		priority = 3120;
		extraConfig = ''
		return 404;
		'';
		};
		locations."~* \\.php(/\|$)" = {
		priority = 3130;
		extraConfig = ''
		location ~* \.php(/\|$) {
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass unix:${fpm.socket};

		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		fastcgi_param PATH_INFO $fastcgi_path_info;

		include ${config.services.nginx.package}/conf/fastcgi_params;
		include ${pkgs.nginx}/conf/fastcgi.conf;
		}
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		include ${config.services.nginx.package}/conf/fastcgi.conf;
		'';
		};
		};