718 lines
24 KiB
Nix
718 lines
24 KiB
Nix
{ config
|
|
, lib
|
|
, modulesPath
|
|
, options
|
|
, pkgs
|
|
, ...
|
|
}:
|
|
|
|
let
|
|
cfg = config.services.invoiceninja;
|
|
user = cfg.user;
|
|
group = cfg.group;
|
|
invoiceninja = pkgs.callPackage ../package.nix {
|
|
inherit (cfg) dataDir runtimeDir;
|
|
};
|
|
configFormat = pkgs.formats.keyValue { };
|
|
configFile = pkgs.writeText "invoiceninja-env" (lib.generators.toKeyValue { } cfg.settings);
|
|
|
|
# PHP environment
|
|
phpPackage = cfg.phpPackage.buildEnv {
|
|
extensions =
|
|
{ enabled, all }:
|
|
(
|
|
with all;
|
|
enabled
|
|
++ [
|
|
bcmath
|
|
ctype
|
|
curl
|
|
fileinfo
|
|
gd
|
|
gmp
|
|
iconv
|
|
imagick
|
|
intl
|
|
mbstring
|
|
mysqli
|
|
openssl
|
|
pdo
|
|
soap
|
|
tokenizer
|
|
zip
|
|
]
|
|
++ lib.optional cfg.redis.createLocally redis
|
|
);
|
|
|
|
extraConfig = "memory_limit = 1024M";
|
|
};
|
|
|
|
# Chromium is required for PDF invoice generation
|
|
chromium = pkgs.chromium;
|
|
extraPrograms = [ chromium ];
|
|
|
|
# Management script
|
|
invoiceninja-manage = pkgs.writeShellScriptBin "invoiceninja-manage" ''
|
|
cd ${invoiceninja}
|
|
sudo=exec
|
|
if [[ "$USER" != ${user} ]]; then
|
|
sudo='exec /run/wrappers/bin/sudo -u ${user}'
|
|
fi
|
|
$sudo ${phpPackage}/bin/php artisan "$@"
|
|
'';
|
|
in
|
|
{
|
|
options.services.invoiceninja = {
|
|
enable = lib.mkEnableOption "invoiceninja";
|
|
|
|
package = lib.mkPackageOption pkgs "invoiceninja" { };
|
|
|
|
phpPackage = lib.mkPackageOption pkgs "php82" { };
|
|
|
|
user = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "invoiceninja";
|
|
description = ''
|
|
User account under which Invoice Ninja runs.
|
|
|
|
If left as the default value this user will automatically be created
|
|
on system activation, otherwise you are responsible for
|
|
ensuring the user exists before the Invoice Ninja application starts.
|
|
'';
|
|
};
|
|
|
|
group = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "invoiceninja";
|
|
description = ''
|
|
Group account under which Invoice Ninja runs.
|
|
|
|
If left as the default value this group will automatically be created
|
|
on system activation, otherwise you are responsible for
|
|
ensuring the group exists before the Invoice Ninja application starts.
|
|
'';
|
|
};
|
|
|
|
msmtp.accounts.invoiceninja = lib.mkOption {
|
|
type = lib.types.attrs;
|
|
default = { };
|
|
example = {
|
|
host = "smtp.example";
|
|
port = 25;
|
|
auth = true;
|
|
tls = true;
|
|
tls_starttls = true;
|
|
user = "realperson";
|
|
passwordeval = "cat /secrets/password.txt";
|
|
};
|
|
description = ''
|
|
Define the msmtp configuration for an invoiceninja account which
|
|
will be used by Invoice Ninja to send email message when
|
|
`config.services.invoiceninja.settings.MAIL_MAILER` is `sendmail`.
|
|
|
|
It is advised to use the `passwordeval` setting to read the password
|
|
from a secret file to avoid having it written in the world-readable
|
|
nix store. The password file must end with a newline (`\n`).
|
|
'';
|
|
};
|
|
|
|
redis.createLocally = lib.mkOption {
|
|
type = lib.types.bool;
|
|
default = true;
|
|
description = "Enable a local Redis server for Invoice Ninja.";
|
|
};
|
|
|
|
dataDir = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "/var/lib/invoiceninja";
|
|
description = ''
|
|
State directory of the `invoiceninja` user which holds
|
|
the application's state and data.
|
|
'';
|
|
};
|
|
|
|
runtimeDir = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "/run/invoiceninja";
|
|
description = ''
|
|
Rutime directory of the `invoiceninja` user which holds
|
|
the application's caches and temporary files.
|
|
'';
|
|
};
|
|
|
|
hostname = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "localhost";
|
|
description = ''
|
|
FQDN for the Invoice Ninja instance.
|
|
|
|
:: note
|
|
The default value is useful for local development and
|
|
disables HTTPS. Set to anything else to enable HTTPS.
|
|
::
|
|
'';
|
|
};
|
|
|
|
phpfpm.settings = lib.mkOption {
|
|
type =
|
|
with lib.types;
|
|
attrsOf (oneOf [
|
|
int
|
|
str
|
|
bool
|
|
]);
|
|
default = {
|
|
"pm" = "dynamic";
|
|
"pm.start_servers" = "2";
|
|
"pm.min_spare_servers" = "2";
|
|
"pm.max_spare_servers" = "4";
|
|
"pm.max_children" = "8";
|
|
"pm.max_requests" = "500";
|
|
|
|
"request_terminate_timeout" = 300;
|
|
|
|
"php_admin_value[error_log]" = "stderr";
|
|
"php_admin_flag[log_errors]" = true;
|
|
};
|
|
|
|
description = ''
|
|
Options for Invoice Ninja's PHPFPM pool.
|
|
'';
|
|
};
|
|
|
|
secretFile = lib.mkOption {
|
|
type = lib.types.path;
|
|
description = ''
|
|
A secret file to be sourced for the .env settings.
|
|
Place `APP_KEY`, `UPDATE_SECRET`, and other settings that should not end up in the Nix store here.
|
|
'';
|
|
};
|
|
|
|
settings = lib.mkOption {
|
|
default = { };
|
|
description = ''
|
|
.env settings for Invoice Ninja.
|
|
Secrets should use `secretFile` option instead.
|
|
'';
|
|
example = lib.literalExpression ''
|
|
{
|
|
EXTENDED_LOGGING = true;
|
|
SESSION_DRIVER = "file";
|
|
MAIL_MAILER = "sendmail";
|
|
}
|
|
'';
|
|
type = lib.types.submodule {
|
|
freeformType = configFormat.type;
|
|
options = {
|
|
APP_NAME = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = ''"Invoice Ninja"'';
|
|
description = "Your application name - used in client portal title banner";
|
|
};
|
|
APP_DEBUG = lib.mkOption {
|
|
type = lib.types.bool;
|
|
default = false;
|
|
description = ''
|
|
Puts Invoice Ninja in debug mode for additional logging. You should only set to `true` if your
|
|
debugging.
|
|
'';
|
|
};
|
|
APP_ENV = lib.mkOption {
|
|
type = lib.types.enum [
|
|
"development"
|
|
"local"
|
|
"production"
|
|
];
|
|
default = "production";
|
|
description = ''
|
|
Environment Invoice Ninja is set to run in. Leave set to the default unless your working on
|
|
Invoice Ninja code or this module definition.
|
|
'';
|
|
};
|
|
EXTENDED_LOGGING = lib.mkOption {
|
|
type = lib.types.bool;
|
|
default = false;
|
|
description = "Pushes additional logging to the log channel";
|
|
};
|
|
LOG_CHANNEL = lib.mkOption {
|
|
type = lib.types.enum [
|
|
"invoiceninja"
|
|
"null"
|
|
"stack"
|
|
];
|
|
default = "stack";
|
|
description = "Where we send logs to.";
|
|
};
|
|
MAIL_MAILER = lib.mkOption {
|
|
type = lib.types.enum [
|
|
""
|
|
"log"
|
|
"sendmail"
|
|
"mailgun"
|
|
];
|
|
default = "";
|
|
description = "Controls the method used by Invoice Ninja to send mail.";
|
|
};
|
|
MAIL_SENDMAIL_PATH = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = ''"/run/wrappers/bin/sendmail -t -a invoiceninja"'';
|
|
description = ''
|
|
Path to sendmail along with arguments for Invoice Ninja to use when using sendmail
|
|
as mail transport agent.
|
|
|
|
:: note
|
|
The default value will work with the `msmtp.accounts.invoiceninja` setting. Only
|
|
change if you know what your doing.
|
|
::
|
|
'';
|
|
};
|
|
MAIL_FROM_NAME = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "";
|
|
example = "Real Person";
|
|
description = "Set the 'To' email header name attribute.";
|
|
};
|
|
MAIL_FROM_EMAIL = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "";
|
|
example = "example@email.com";
|
|
description = "Set the 'To' email header address attribute.";
|
|
};
|
|
ERROR_EMAIL = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "";
|
|
example = "example@email.com";
|
|
description = "Email address Invoice Ninja will send errors.";
|
|
};
|
|
SESSION_DRIVER = lib.mkOption {
|
|
type = lib.types.enum [
|
|
"database"
|
|
"redis"
|
|
"file"
|
|
];
|
|
default =
|
|
if cfg.redis.createLocally then "redis" else (if cfg.database.createLocally then "database" else "file");
|
|
defaultText = lib.literalExpression ''
|
|
if config.services.invoiceninja.redis.enable
|
|
then "redis"
|
|
else (if config.services.invoie-ninja.database.createLocally then "database" else "file")
|
|
'';
|
|
description = "Where session data is stored for Invoice Ninja.";
|
|
};
|
|
SESSION_LIFETIME = lib.mkOption {
|
|
type = lib.types.int;
|
|
default = 120;
|
|
description = ''
|
|
Here you may specify the number of minutes that you wish the session to be allowed to remain
|
|
idle before it expires.
|
|
'';
|
|
};
|
|
QUEUE_CONNECTION = lib.mkOption {
|
|
type = lib.types.enum [
|
|
"database"
|
|
"redis"
|
|
"sync"
|
|
];
|
|
default =
|
|
if cfg.redis.createLocally then "redis" else (if cfg.database.createLocally then "database" else "sync");
|
|
defaultText = lib.literalExpression ''
|
|
if config.services.invoiceninja.redis.enable
|
|
then "redis"
|
|
else (if config.services.invoie-ninja.database.createLocally then "database" else "sync")
|
|
'';
|
|
description = "Where Invoice Ninja will store queued jobs.";
|
|
};
|
|
CACHE_DRIVER = lib.mkOption {
|
|
type = lib.types.enum [
|
|
"file"
|
|
"redis"
|
|
];
|
|
default = if cfg.redis.createLocally then "redis" else "file";
|
|
defaultText = lib.literalExpression ''if config.services.invoiceninja.redis.enable then "redis" else "file"'';
|
|
description = "Laravel cache driver for Invoice Ninja to use.";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
adminAccount = {
|
|
enable = lib.mkOption {
|
|
type = lib.types.bool;
|
|
default = true;
|
|
description = ''
|
|
When set to `true`, an admin account will be created for Invoice Ninja. If set to `false`
|
|
Invoice Ninja will run a setup wizard on first use.
|
|
'';
|
|
};
|
|
email = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "admin@email.com";
|
|
description = "Email address of the first (admin) account for this Invoice Ninja installation";
|
|
};
|
|
passwordFile = lib.mkOption {
|
|
type = lib.types.path;
|
|
description = "Password of the first (admin) account for this Invoice Ninja installation";
|
|
};
|
|
};
|
|
|
|
database = {
|
|
createLocally = lib.mkOption {
|
|
type = lib.types.bool;
|
|
default = true;
|
|
description = "Installs a local MariaDB server to use with Invoice Ninja.";
|
|
};
|
|
|
|
name = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "invoiceninja";
|
|
description = "Name of the database to use for Invoice Ninja.";
|
|
};
|
|
};
|
|
|
|
maxUploadSize = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "8M";
|
|
description = "Maximum allowed upload size to Invoice Ninja.";
|
|
};
|
|
|
|
proxy = {
|
|
server = lib.mkOption {
|
|
type = lib.types.enum [
|
|
"caddy"
|
|
"nginx"
|
|
"none"
|
|
];
|
|
default = "nginx";
|
|
example = "caddy";
|
|
description = ''
|
|
Choose the proxy server to serve Invoice Ninja. Setting this to
|
|
`none` results in no proxy server being installed.
|
|
'';
|
|
};
|
|
caddyConfig = lib.mkOption {
|
|
type = lib.types.submodule (
|
|
import (modulesPath + "/services/web-servers/caddy/vhost-options.nix") { cfg = config.services.caddy; }
|
|
);
|
|
default = { };
|
|
description = ''
|
|
Extra configuration for the Caddy virtual host of Invoice Ninja.
|
|
Leave this option at the default to use the default configuration
|
|
'';
|
|
};
|
|
nginxConfig = lib.mkOption {
|
|
type = lib.types.submodule (
|
|
(import (modulesPath + "/services/web-servers/nginx/vhost-options.nix") { inherit config lib; })
|
|
);
|
|
default = { };
|
|
description = ''
|
|
Extra configuration for the Nginx virtual host of Invoice Ninja.
|
|
Leave this option at the default to use the default configuration
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
users.users.invoiceninja = lib.mkIf (cfg.user == "invoiceninja") {
|
|
isSystemUser = true;
|
|
home = cfg.dataDir;
|
|
createHome = true;
|
|
group = cfg.group;
|
|
};
|
|
|
|
users.groups.invoiceninja = lib.mkIf (cfg.group == "invoiceninja") { };
|
|
|
|
environment.systemPackages = [ invoiceninja-manage ] ++ extraPrograms;
|
|
|
|
programs.msmtp = lib.mkIf (cfg.settings.MAIL_MAILER == "sendmail") {
|
|
inherit (cfg.msmtp) accounts;
|
|
enable = true;
|
|
};
|
|
|
|
services.invoiceninja.settings = lib.mkMerge [
|
|
({
|
|
APP_URL = lib.mkDefault (
|
|
if (cfg.hostname == "localhost") then ("http://" + cfg.hostname) else ("https://" + cfg.hostname)
|
|
);
|
|
DEMO_MODE = lib.mkDefault false;
|
|
BROADCAST_DRIVER = lib.mkDefault "log";
|
|
REQUIRE_HTTPS = lib.mkDefault (if (cfg.hostname != "localhost") then true else false);
|
|
TRUSTED_PROXIES = lib.mkDefault "*";
|
|
NINJA_ENVIRONMENT = lib.mkDefault "selfhost";
|
|
PDF_GENERATOR = lib.mkDefault "snappdf";
|
|
SNAPPDF_CHROMIUM_PATH = lib.mkDefault "${chromium}/bin/chromium";
|
|
PRECONFIGURED_INSTALL = lib.mkDefault true;
|
|
})
|
|
(lib.mkIf (cfg.database.createLocally) {
|
|
DB_CONNECTION = lib.mkDefault "mysql";
|
|
DB_HOST = lib.mkDefault "localhost";
|
|
DB_SOCKET = lib.mkDefault "/run/mysqld/mysqld.sock";
|
|
DB_DATABASE = lib.mkDefault cfg.database.name;
|
|
DB_USERNAME = lib.mkDefault user;
|
|
})
|
|
(lib.mkIf cfg.redis.createLocally {
|
|
REDIS_HOST = lib.mkDefault config.services.redis.servers.invoiceninja.bind;
|
|
REDIS_PORT = lib.mkDefault config.services.redis.servers.invoiceninja.port;
|
|
})
|
|
];
|
|
|
|
services.phpfpm.pools.invoiceninja = {
|
|
inherit user group phpPackage;
|
|
|
|
settings = {
|
|
"listen.owner" = user;
|
|
"listen.group" = group;
|
|
"listen.mode" = "0660";
|
|
"catch_workers_output" = true;
|
|
} // cfg.phpfpm.settings;
|
|
|
|
phpOptions = ''
|
|
post_max_size = ${cfg.maxUploadSize}
|
|
upload_max_filesize = ${cfg.maxUploadSize}
|
|
max_execution_time = 600;
|
|
'';
|
|
};
|
|
|
|
services.redis.servers.invoiceninja = lib.mkIf cfg.redis.createLocally {
|
|
enable = true;
|
|
port = 6379;
|
|
};
|
|
|
|
users.users."${config.services.nginx.user}" = lib.mkIf (cfg.proxy.server == "nginx") {
|
|
extraGroups = [ cfg.group ];
|
|
};
|
|
services.nginx = lib.mkIf (cfg.proxy.server == "nginx") {
|
|
enable = true;
|
|
|
|
recommendedTlsSettings = (if (cfg.hostname == "localhost") then false else true);
|
|
recommendedGzipSettings = true;
|
|
recommendedProxySettings = true;
|
|
recommendedOptimisation = true;
|
|
|
|
clientMaxBodySize = cfg.maxUploadSize;
|
|
|
|
virtualHosts."${cfg.hostname}" = lib.mkMerge [
|
|
cfg.proxy.nginxConfig
|
|
{
|
|
root = lib.mkForce "${invoiceninja}/public";
|
|
addSSL = lib.mkForce (if (cfg.hostname == "localhost") then false else true);
|
|
enableACME = lib.mkForce (if (cfg.hostname == "localhost") then false else true);
|
|
locations = {
|
|
"/".tryFiles = "$uri $uri/ /index.php?$query_string";
|
|
"/".extraConfig = ''
|
|
if (!-e $request_filename) {
|
|
rewrite ^(.+)$ /index.php?q=$1 last;
|
|
}
|
|
add_header 'Access-Control-Allow-Origin' '*';
|
|
add_header 'Access-Control-Allow-Methods' '*';
|
|
add_header 'Access-Control-Max-Age' 0;
|
|
add_header 'Content-Length' 0;
|
|
add_header 'Access-Control-Allow-Headers' 'X-API-COMPANY-KEY,X-API-SECRET,X-API-TOKEN,X-API-PASSWORD,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Disposition,Content-Type,Range,X-CSRF-TOKEN,X-XSRF-TOKEN,X-LIVEWIRE';
|
|
add_header 'Access-Control-Expose-Headers' 'X-APP-VERSION,X-MINIMUM-CLIENT-VERSION,X-CSRF-TOKEN,X-XSRF-TOKEN,X-LIVEWIRE';
|
|
add_header 'Access-Control-Allow-Credentials' false;
|
|
'';
|
|
"~ \\.php$".extraConfig = "return 403;";
|
|
"= /index.php".extraConfig = ''
|
|
fastcgi_pass unix:${config.services.phpfpm.pools.invoiceninja.socket};
|
|
'';
|
|
"~ /\\.ht".extraConfig = "deny all;";
|
|
};
|
|
extraConfig = ''
|
|
index index.html index.htm index.php;
|
|
error_page 404 /index.php;
|
|
'';
|
|
}
|
|
(lib.mkIf (cfg.hostname != "localhost") {
|
|
forceSSL = lib.mkDefault true;
|
|
enableACME = lib.mkDefault true;
|
|
})
|
|
];
|
|
};
|
|
|
|
users.users."${config.services.caddy.user}" = lib.mkIf (cfg.proxy.server == "caddy") {
|
|
extraGroups = [ cfg.group ];
|
|
};
|
|
services.caddy =
|
|
let
|
|
proto_hostname = (
|
|
if (cfg.hostname == "localhost")
|
|
then (cfg.hostname + ":80")
|
|
else (cfg.hostname + ":443")
|
|
);
|
|
in
|
|
lib.mkIf (cfg.proxy.server == "caddy") {
|
|
enable = true;
|
|
|
|
globalConfig = lib.mkIf (cfg.hostname == "localhost") ''
|
|
auto_https disable_redirects
|
|
'';
|
|
|
|
virtualHosts."${proto_hostname}" = lib.mkMerge [
|
|
cfg.proxy.caddyConfig
|
|
{
|
|
hostName = lib.mkForce proto_hostname;
|
|
extraConfig = ''
|
|
encode zstd gzip
|
|
root * ${invoiceninja}/public
|
|
php_fastcgi unix/${config.services.phpfpm.pools.invoiceninja.socket}
|
|
try_files {path} /index.html
|
|
header {
|
|
Access-Control-Allow-Origin "*"
|
|
Access-Control-Allow-Methods "*"
|
|
Access-Control-Max-Age "0"
|
|
Access-Control-Allow-Headers "X-API-COMPANY-KEY,X-API-SECRET,X-API-TOKEN,X-API-PASSWORD,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Disposition,Content-Type,Range,X-CSRF-TOKEN,X-XSRF-TOKEN,X-LIVEWIRE"
|
|
Access-Control-Expose-Headers "X-APP-VERSION,X-MINIMUM-CLIENT-VERSION,X-CSRF-TOKEN,X-XSRF-TOKEN,X-LIVEWIRE"
|
|
Access-Control-Allow-Credentials false
|
|
}
|
|
file_server
|
|
'';
|
|
}
|
|
];
|
|
};
|
|
|
|
services.mysql = lib.mkIf (cfg.database.createLocally) {
|
|
enable = lib.mkDefault true;
|
|
package = lib.mkDefault pkgs.mariadb;
|
|
ensureDatabases = [ cfg.database.name ];
|
|
ensureUsers = [
|
|
{
|
|
name = user;
|
|
ensurePermissions = {
|
|
"${cfg.database.name}.*" = "ALL PRIVILEGES";
|
|
};
|
|
}
|
|
];
|
|
};
|
|
|
|
systemd.services.phpfpm-invoiceninja.after = [ "invoiceninja-data-setup.service" ];
|
|
systemd.services.phpfpm-invoiceninja.requires = [
|
|
"invoiceninja-data-setup.service"
|
|
] ++ lib.optional cfg.database.createLocally "mysql.service";
|
|
# Ensure chromium is available
|
|
systemd.services.phpfpm-invoiceninja.path = extraPrograms;
|
|
|
|
systemd.services.invoiceninja-queue-worker = {
|
|
description = "Invoice Ninja periodic tasks";
|
|
after = [ "invoiceninja-data-setup.service" ];
|
|
requires = [ "phpfpm-invoiceninja.service" ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
reloadTriggers = [ invoiceninja ];
|
|
reload = "${invoiceninja-manage}/bin/invoiceninja-manage queue:restart";
|
|
|
|
serviceConfig = {
|
|
ExecStart = "${invoiceninja-manage}/bin/invoiceninja-manage queue:work ${
|
|
lib.strings.optionalString (cfg.settings.QUEUE_CONNECTION == "redis") "redis"
|
|
}";
|
|
User = user;
|
|
Group = group;
|
|
StateDirectory = lib.mkIf (cfg.dataDir == "/var/lib/invoiceninja") "invoiceninja";
|
|
Restart = "always";
|
|
};
|
|
};
|
|
|
|
systemd.services.invoiceninja-data-setup = {
|
|
description = "Invoice Ninja setup: migrations, environment file update, cache reload, data changes";
|
|
wantedBy = [ "multi-user.target" ];
|
|
after = lib.optional cfg.database.createLocally "mysql.service";
|
|
requires = lib.optional cfg.database.createLocally "mysql.service";
|
|
path =
|
|
with pkgs;
|
|
[
|
|
bash
|
|
invoiceninja-manage
|
|
rsync
|
|
config.services.mysql.package
|
|
]
|
|
++ extraPrograms;
|
|
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
User = user;
|
|
Group = group;
|
|
StateDirectory = lib.mkIf (cfg.dataDir == "/var/lib/invoiceninja") "invoiceninja";
|
|
StateDirectoryMode = "0750";
|
|
LoadCredential = [
|
|
"env-secrets:${cfg.secretFile}"
|
|
"admin-pass:${cfg.adminAccount.passwordFile}"
|
|
];
|
|
UMask = "077";
|
|
};
|
|
|
|
script = ''
|
|
# Before running any PHP program, cleanup the code cache.
|
|
# It's necessary if you upgrade the application otherwise you might
|
|
# try to import non-existent modules.
|
|
rm -f ${cfg.runtimeDir}/app.php
|
|
rm -rf ${cfg.runtimeDir}/cache/*
|
|
|
|
# Concatenate non-secret .env and secret .env
|
|
rm -f ${cfg.dataDir}/.env
|
|
cp --no-preserve=all ${configFile} ${cfg.dataDir}/.env
|
|
echo -e '\n' >> ${cfg.dataDir}/.env
|
|
cat "$CREDENTIALS_DIRECTORY/env-secrets" >> ${cfg.dataDir}/.env
|
|
|
|
# Link the static storage (package provided) to the runtime storage
|
|
rsync -av --no-perms ${invoiceninja}/storage-static/ ${cfg.dataDir}/storage
|
|
|
|
# Link the app.php in the runtime folder.
|
|
# We cannot link the cache folder only because bootstrap folder needs to be writeable.
|
|
ln -sf ${invoiceninja}/bootstrap-static/app.php ${cfg.runtimeDir}/app.php
|
|
|
|
# Perform the first migration
|
|
[[ ! -f ${cfg.dataDir}/.initial-migration ]] && invoiceninja-manage migrate --force && touch ${cfg.dataDir}/.initial-migration
|
|
|
|
# Seed database with records
|
|
# Necessary for languages, currencies, countries, etc.
|
|
[[ ! -f ${cfg.dataDir}/.db-seeded ]] && invoiceninja-manage db:seed --force && touch ${cfg.dataDir}/.db-seeded
|
|
|
|
# Create Invoice Ninja admin account
|
|
[[ (! -f ${cfg.dataDir}/.admin-created) && (${
|
|
if cfg.adminAccount.enable then "true" else "false"
|
|
} == "true") ]] \
|
|
&& invoiceninja-manage ninja:create-account --email=${cfg.adminAccount.email} --password=$(cat $CREDENTIALS_DIRECTORY/admin-pass) \
|
|
&& touch ${cfg.dataDir}/.admin-created
|
|
|
|
invoiceninja-manage route:cache
|
|
invoiceninja-manage view:cache
|
|
invoiceninja-manage config:cache
|
|
'';
|
|
};
|
|
|
|
systemd.tmpfiles.settings."10-invoiceninja" =
|
|
lib.attrsets.genAttrs
|
|
[
|
|
cfg.dataDir
|
|
"${cfg.dataDir}/storage"
|
|
"${cfg.dataDir}/storage/app"
|
|
"${cfg.dataDir}/storage/app/public"
|
|
"${cfg.dataDir}/storage/framework"
|
|
"${cfg.dataDir}/storage/framework/cache"
|
|
"${cfg.dataDir}/storage/framework/sessions"
|
|
"${cfg.dataDir}/storage/framework/testing"
|
|
"${cfg.dataDir}/storage/framework/views"
|
|
"${cfg.dataDir}/storage/logs"
|
|
"${cfg.dataDir}/vendor"
|
|
"${cfg.dataDir}/vendor/bin"
|
|
]
|
|
(n: {
|
|
d = {
|
|
user = user;
|
|
group = group;
|
|
mode = "0770";
|
|
};
|
|
})
|
|
// lib.attrsets.genAttrs
|
|
[
|
|
cfg.runtimeDir
|
|
"${cfg.runtimeDir}/cache"
|
|
]
|
|
(n: {
|
|
d = {
|
|
user = user;
|
|
group = group;
|
|
mode = "0750";
|
|
};
|
|
});
|
|
};
|
|
}
|