From 8db658122eb6559915a3cfe4832b0508db3f5916 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Sun, 24 Mar 2024 08:20:54 +0100
Subject: [PATCH] WIP: nixify

---
 dist/simplesamlphp-config.php | 11 ++++++++--
 nix/module.nix                | 21 +++++++++++++++----
 nix/package.nix               |  4 ++--
 nix/php-generator.nix         | 38 ++++++++++++++++++-----------------
 www/index.php                 |  2 --
 5 files changed, 48 insertions(+), 28 deletions(-)

diff --git a/dist/simplesamlphp-config.php b/dist/simplesamlphp-config.php
index db66eff..9ece739 100644
--- a/dist/simplesamlphp-config.php
+++ b/dist/simplesamlphp-config.php
@@ -1,7 +1,14 @@
 <?php
 
-require dirname(dirname(dirname(dirname(__DIR__)))) . '/config.php';
-echo $SAML_COOKIE_SECURE;
+# require_once(dirname(dirname(dirname(dirname(__DIR__)))) . DIRECTORY_SEPARATOR . 'config.php');
+
+/*
+$config_dir = dirname(__DIR__);
+while (!file_exists($config_dir . DIRECTORY_SEPARATOR . 'config.php')) {
+	$config_dir = dirname($config_dir);
+}
+include $config_dir . DIRECTORY_SEPARATOR . 'config.php';
+*/
 
 /**
  * The configuration of SimpleSAMLphp
diff --git a/nix/module.nix b/nix/module.nix
index 489749f..bf47d46 100644
--- a/nix/module.nix
+++ b/nix/module.nix
@@ -95,7 +95,20 @@ in
   };
 
 
-  config = mkIf cfg.enable {
+  config = mkIf cfg.enable (let
+    # NOTE: This should absolutely not be necessary, but for some reason this file refuses to import
+    #       the toplevel configuration file.
+    # NOTE: Nvm, don't this this was the problem after all?
+    finalPackage = cfg.package.overrideAttrs (_: _: {
+      postInstall = cfg.package.postInstall + ''
+        substituteInPlace $simplesamlphp/config/config.php \
+          --replace '$SAML_COOKIE_SECURE' '${format.lib.valueToString cfg.settings.SAML.COOKIE_SECURE}' \
+          --replace '$SAML_COOKIE_SALT' '${format.lib.valueToString cfg.settings.SAML.COOKIE_SALT}' \
+          --replace '$SAML_ADMIN_PASSWORD' '${format.lib.valueToString cfg.settings.SAML.ADMIN_PASSWORD}' \
+          --replace '$SAML_TRUSTED_DOMAINS' '${format.lib.valueToString cfg.settings.SAML.TRUSTED_DOMAINS}'
+      '';
+    });
+  in {
     users.users = mkIf (cfg.user == "pvv-nettsiden") {
       "pvv-nettsiden" = {
         description = "PVV Website Service User";
@@ -120,13 +133,13 @@ in
         enableACME = mkDefault true;
         locations = {
           "/" = {
-            root = "${cfg.package}/share/php/pvv-nettsiden/www/";
+            root = "${finalPackage}/share/php/pvv-nettsiden/www/";
             index = "index.php";
           };
 
           "~ \\.php$".extraConfig = ''
             include ${pkgs.nginx}/conf/fastcgi_params;
-            fastcgi_param SCRIPT_FILENAME ${cfg.package}/share/php/pvv-nettsiden/www$fastcgi_script_name;
+            fastcgi_param SCRIPT_FILENAME ${finalPackage}/share/php/pvv-nettsiden/www$fastcgi_script_name;
             fastcgi_pass unix:${config.services.phpfpm.pools."pvv-nettsiden".socket};
           '';
 
@@ -157,5 +170,5 @@ in
         "pm.max_requests" = mkDefault 500;
       };
     };
-  };
+  });
 }
diff --git a/nix/package.nix b/nix/package.nix
index c6b3db1..6db79dd 100644
--- a/nix/package.nix
+++ b/nix/package.nix
@@ -6,9 +6,9 @@ php.buildComposerProject {
   version = "0.0.1";
   vendorHash = "sha256-DSn0ifj7Hjjia1SF/1wfziD/IdsiOES8XNDVz3F/cTI=";
 
-  postInstall = ''
-    simplesamlphp="$out/share/php/pvv-nettsiden/vendor/simplesamlphp/simplesamlphp"
+  simplesamlphp = "${placeholder "out"}/share/php/pvv-nettsiden/vendor/simplesamlphp/simplesamlphp";
 
+  postInstall = ''
     mkdir -p $simplesamlphp/config
     mkdir -p $simplesamlphp/metadata
 
diff --git a/nix/php-generator.nix b/nix/php-generator.nix
index 10cd99a..28fcf98 100644
--- a/nix/php-generator.nix
+++ b/nix/php-generator.nix
@@ -2,27 +2,27 @@
 
 with lib;
 
-{ }: {
+{ }: let
+  valueToString = val:
+    if val == null then
+      "null"
+    else if isString val then
+       builtins.toJSON val
+    else if isBool val then
+      boolToString val
+    else if isInt val || isFloat val then
+      toString val
+    else if isList val then
+      "array(${concatMapStringsSep ", " valueToString val})"
+    else if isAttrs val && val ? value && (val._type or "") == "raw" then
+      val.value
+    else if isAttrs val then
+      throw "Found unexpected attrs, that were not created by mkRaw. Have you put attrs in an array?\n${val}"
+    else throw "unsupported :')";
+in {
   inherit (pkgs.formats.json { }) type;
 
   generate = name: value: let
-    valueToString = val:
-      if val == null then
-        "null"
-      else if isString val then
-         builtins.toJSON val
-      else if isBool val then
-        boolToString val
-      else if isInt val || isFloat val then
-        toString val
-      else if isList val then
-        "array(${concatMapStringsSep ", " valueToString val})"
-      else if isAttrs val && val ? value && (val._type or "") == "raw" then
-        val.value
-      else if isAttrs val then
-        throw "Found unexpected attrs, that were not created by mkRaw. Have you put attrs in an array?\n${val}"
-      else throw "unsupported :')";
-
     flattenStructuredSettings = attrs: let
       partitionAttrs = pred: attrs: lib.pipe attrs [
         attrsToList
@@ -50,6 +50,8 @@ with lib;
   in pkgs.writeText name content;
 
   lib = {
+    inherit valueToString;
+
     mkRaw = value: {
       inherit value;
       _type = "raw";
diff --git a/www/index.php b/www/index.php
index 84dab7b..11adae9 100644
--- a/www/index.php
+++ b/www/index.php
@@ -1,8 +1,6 @@
 <?php
 require_once dirname(__DIR__) . implode(DIRECTORY_SEPARATOR, ['', 'inc', 'include.php']);
 
-echo $DOOR_SECRET;
-
 $translation = ['I dag', 'I morgen', 'Denne uka', 'Neste uke', 'Denne måneden', 'Neste måned'];
 $pdo = new \PDO($DB_DSN, $DB_USER, $DB_PASS);
 $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);