machine-config/bert/services/http/stjohnscccc.org.nix

{ pkgs, lib, config, ... }:
let
  app = "stjohnscccc";
  domain = "${app}.chandlerswift.com"; # TODO
  dataDir = "/srv/www/stjohnscccc.org";
in {
  services.phpfpm.pools.${app} = {
    user = app;
    settings = {
      "listen.owner" = config.services.caddy.user;
      "pm" = "dynamic";
      "pm.max_children" = 32;
      # "pm.max_requests" = 500;
      "pm.start_servers" = 1;
      "pm.min_spare_servers" = 1;
      "pm.max_spare_servers" = 4;
      "php_admin_value[error_log]" = "stderr";
      "php_admin_flag[log_errors]" = true;
      "catch_workers_output" = true;
    };
    # phpEnv."PATH" = lib.makeBinPath [ pkgs.php ];
  };
  services.caddy.virtualHosts.${domain}.extraConfig = ''
    root * ${dataDir}/public

    handle /downloads/* {
      file_server {
        browse ${./caddy-browse-template.html}
        hide .gitignore
      }
    }

    handle {
      encode zstd gzip
      php_fastcgi unix/${config.services.phpfpm.pools.${app}.socket}
      file_server
    }

    handle_errors {
      respond "{err.status_code} {err.status_text}"
    }
  '';
  users.users.${app} = {
    isSystemUser = true;
    home = dataDir;
    group = app;
  };
  users.groups.${app} = {};
  systemd.tmpfiles.settings."10-stjohnscccc.org" = {
    "/srv/www/stjohnscccc.org" = {
      d = {};
    };
  };
}