summaryrefslogtreecommitdiff
path: root/config-service-wiki.PKGBUILD
diff options
context:
space:
mode:
Diffstat (limited to 'config-service-wiki.PKGBUILD')
-rw-r--r--config-service-wiki.PKGBUILD112
1 files changed, 112 insertions, 0 deletions
diff --git a/config-service-wiki.PKGBUILD b/config-service-wiki.PKGBUILD
new file mode 100644
index 0000000..c8809a3
--- /dev/null
+++ b/config-service-wiki.PKGBUILD
@@ -0,0 +1,112 @@
+. ${BUILDFILE%/*}/common.sh
+pkgver=20161106.2
+
+package() {
+preamble
+
+depends+=(uwsgi-plugin-php php-apcu-bc php-intl)
+depends+=(mariadb imagemagick config-mgmt-uwsgi config-mgmt-certbot)
+depends+=(git)
+
+add-file -m755 etc/ssl/misc/certbot-get.d/10-git <<EOF
+#!/bin/bash
+echo wiki.{parabola.nu,parabolagnulinux.org}
+EOF
+
+add-file etc/nginx/sites/server-wiki_parabola_nu.conf <<EOF
+# -*- Mode: nginx; nginx-indent-level: 8; indent-tabs-mode: t -*-
+
+server {
+ server_name wiki.parabola.nu;
+ listen 443 ssl http2;
+ listen [::]:443 ssl http2;
+
+ error_log /var/log/nginx/nginx.http.wiki_parabola_nu.error.log error;
+ access_log /var/log/nginx/nginx.http.wiki_parabola_nu.access.log specific;
+
+ location = /favicon.ico {
+ alias /srv/http/\$server_name/skins/ArchLinux/favicon.ico;
+ }
+
+ location = /robots.txt {
+ alias /srv/http/\$server_name/robots.txt;
+ }
+
+ index index.php;
+ location / { root /var/empty; try_files /bogus @rewrite; }
+ location /images/ { }
+ location /skins/ { }
+ location /resources/ { }
+ location /api.php { root /var/empty; try_files /bogus @php; }
+ location /api.php5 { root /var/empty; try_files /bogus @php; }
+ location /img_auth.php { root /var/empty; try_files /bogus @php; }
+ location /img_auth.php5 { root /var/empty; try_files /bogus @php; }
+ location /index.php { root /var/empty; try_files /bogus @php; }
+ location /index.php5 { root /var/empty; try_files /bogus @php; }
+ location /load.php { root /var/empty; try_files /bogus @php; }
+ location /load.php5 { root /var/empty; try_files /bogus @php; }
+ location /opensearch_desc.php { root /var/empty; try_files /bogus @php; }
+ location /opensearch_desc.php5 { root /var/empty; try_files /bogus @php; }
+ location /profileinfo.php { root /var/empty; try_files /bogus @php; }
+ location /thumb.php { root /var/empty; try_files /bogus @php; }
+ location /thumb.php5 { root /var/empty; try_files /bogus @php; }
+ location /thumb_handler.php { root /var/empty; try_files /bogus @php; }
+ location /thumb_handler.php5 { root /var/empty; try_files /bogus @php; }
+ location /wiki.phtml { root /var/empty; try_files /bogus @php; }
+
+ location @rewrite {
+ rewrite ^/(.*)\$ /index.php?title=\$1&\$args;
+ }
+
+ location @php {
+ uwsgi_cache_key \$host\$request_uri;
+ uwsgi_cache_valid 5m;
+ #uwsgi_cache one;
+
+ include uwsgi_params;
+ uwsgi_modifier1 14; # Standard PHP request
+ uwsgi_pass unix:/run/uwsgi/wiki.sock;
+ }
+}
+EOF
+
+add-file etc/cron.spool/wiki <<EOF
+0 0 * * * /srv/http/wiki.parabola.nu/FunnyQuestion.conf.php.sh
+EOF
+
+add-file etc/uwsgi/wiki.ini <<EOF
+[uwsgi]
+master = true
+processes = 4
+
+uid = %n
+gid = http
+
+plugins = php
+
+# Native code is faster than PHP fallback code
+php-set = extension=intl.so
+
+# Required for MediaWiki
+php-set = extension=iconv.so
+
+php-set = extension=mysqli.so
+
+# Enable OPcache bytecode caching
+php-set = zend_extension=opcache.so
+
+# Enable APCu object caching (related to LocalSettings.php:$wgMainCacheType=CACHE_ACCEL)
+php-set = extension=apcu.so
+php-set = extension=apc.so
+
+# Restrict the files that can be opened:
+# - /srv/http/wiki.parabola.nu: duh, the PHP code
+# - /usr/bin: to check for diff3, imagemagick, et c.
+# - /tmp: eh?
+php-set = open_basedir=/srv/http/wiki.parabola.nu:/usr/bin:/tmp
+EOF
+
+add-unit etc/systemd/system/sockets.target.wants/uwsgi@wiki.socket
+
+postamble
+}