add zammad to fw vm, add web-arm machine

hosts/web-arm/sites/gbv.cloonar.dev.nix

@@ -0,0 +1,71 @@
+{ pkgs, lib, config, ... }:
+let
+  domain = "gbv.cloonar.dev";
+  dataDir = "/var/www/${domain}";
+in {
+  systemd.services."phpfpm-${domain}".serviceConfig.ProtectHome = lib.mkForce false;
+
+  services.phpfpm.pools."${domain}" = {
+    user = domain;
+    settings = {
+      "listen.owner" = config.services.nginx.user;
+      "pm" = "dynamic";
+      "pm.max_children" = 32;
+      "pm.max_requests" = 500;
+      "pm.start_servers" = 2;
+      "pm.min_spare_servers" = 2;
+      "pm.max_spare_servers" = 5;
+      "php_admin_value[error_log]" = "/var/log/$pool.error.log";
+      "php_admin_flag[log_errors]" = true;
+      "php_admin_value[display_errors]" = true;
+      "catch_workers_output" = true;
+      "access.log" = "/var/log/$pool.access.log";
+    };
+    phpPackage = pkgs.nur.repos.izorkin.php74;
+    phpEnv."PATH" = lib.makeBinPath [ pkgs.nur.repos.izorkin.php74 ];
+  };
+
+  services.nginx.virtualHosts."${domain}" = {
+    forceSSL = true;
+    enableACME = true;
+    acmeRoot = null;
+    root = "${dataDir}";
+
+    locations."/favicon.ico".extraConfig = ''
+      log_not_found off;
+      access_log off;
+    '';
+
+    locations."/".extraConfig = ''
+      index index.php index.html;
+      try_files $uri $uri/ /index.php$is_args$args;
+    '';
+
+    locations."~ [^/]\.php(/|$)".extraConfig = ''
+        fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+        if (!-f $document_root$fastcgi_script_name) {
+            return 404;
+        }
+        include ${pkgs.nginx}/conf/fastcgi_params;
+        include ${pkgs.nginx}/conf/fastcgi.conf;
+        fastcgi_buffer_size 32k;
+        fastcgi_buffers 8 16k;
+        fastcgi_connect_timeout 240s;
+        fastcgi_read_timeout 240s;
+        fastcgi_send_timeout 240s;
+        fastcgi_pass unix:${config.services.phpfpm.pools."${domain}".socket};
+        fastcgi_index        index.php;
+    '';
+  };
+  users.users."${domain}" = {
+    isSystemUser = true;
+    createHome = true;
+    home = dataDir;
+    homeMode= "770";
+    #home = "/home/${domain}";
+    group  = "nginx";
+  };
+  users.groups.${domain} = {};
+
+  services.mysqlBackup.databases = [ "gbv_stage" ];
+}