many changes

hosts/web-arm/sites/support.cloonar.dev.nix

@@ -0,0 +1,72 @@
+{ pkgs, lib, config, ... }:
+let
+  domain = "support.cloonar.dev";
+  user = "support_cloonar_dev";
+
+  # phpPackage = pkgs.php82.withExtensions ({ enabled, all }:
+  #     enabled ++ [ all.imagick all.pcntl all.mbstring ]);
+
+  phpPackage = pkgs.php83.buildEnv {
+    extensions = ({ enabled, all }: enabled ++ (with all; [
+      imagick
+      mbstring
+      pcntl
+      imap
+      gd
+      curl
+      intl
+      zip
+    ]));
+  };
+
+in {
+  services.webstack.instances."${domain}" = {
+    enableDefaultLocations = false;
+    enableMysql = true;
+    authorizedKeys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIChPB1wdZUO/VTt2J9e0+mLYhXcsWSL487HNQfmt23vB"
+    ];
+    extraConfig = ''
+      add_header X-Frame-Options "SAMEORIGIN";
+      add_header X-Content-Type-Options "nosniff";
+
+      index index.php
+
+      charset utf-8;
+
+      error_page 404 /index.php;
+    '';
+    locations."/favicon.ico".extraConfig = ''
+      log_not_found off;
+      access_log off;
+    '';
+    locations."/robots.txt".extraConfig = ''
+      access_log off;
+      log_not_found off;
+    '';
+
+    locations."/".extraConfig = ''
+      try_files $uri $uri/ /index.php$is_args$args;
+    '';
+    phpPackage = phpPackage;
+  };
+
+  systemd.services."freescout-worker" = {
+    enable = true;
+    serviceConfig = {
+      User = "${user}";
+      ExecStart = "${phpPackage}/bin/php /var/www/${domain}/artisan queue:work --queue=emails,default,a5b8cea21bd06d071d2d8da9307d9e04 --sleep=5 --tries=1 --timeout=1800";
+    };
+  };
+
+  systemd.services."freescout-cron" = {
+    startAt = "*:*";
+    wants = [ "freescout-worker.service" ];
+    serviceConfig = {
+      Type = "oneshot";
+      User = "${user}";
+      ExecStart = "${phpPackage}/bin/php /var/www/${domain}/artisan schedule:run --no-interaction";
+    };
+  };
+
+}