Skip to content

Movim

services.movim.dataDir

State directory of the movim user which holds the application’s state & data. Type: non-empty string

Default

"/var/lib/movim"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.database.createLocally

local database using UNIX socket authentication Type: boolean

Default

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.database.name

Database name. Type: string

Default

"movim"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.database.type

Database engine to use. Type: one of "mysql", "postgresql"

Default

"postgresql"

Example

"mysql"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.database.user

Database username. Type: string

Default

"movim"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.debug

Debugging logs. Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.domain

Fully-qualified domain name (FQDN) for the Movim instance. Type: non-empty string

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.enable

Whether to enable a Movim instance. Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.group

Group running Movim service Type: non-empty string

Default

"movim"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.logDir

Log directory of the movim user which holds the application’s logs. Type: non-empty string

Default

"/var/log/movim"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.minifyStaticFiles

Do minification on public static files Type: boolean or (submodule)

Default

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx

With this option, you can customize an nginx virtual host which already has sensible defaults for Movim. Set to { } if you do not need any customization to the virtual host. If enabled, then by default, the {option}serverName is ${domain}, If this is set to null (the default), no nginx virtualHost will be configured.

Type: null or (submodule)

Default

null

Example

{serverAliases = ["pics.${config.networking.domain}"];enableACME = true;forceHttps = true;}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.acmeFallbackHost

Host which to proxy requests to if ACME challenge is not found. Useful if you want multiple hosts to be able to verify the same domain name.

With this option, you could request certificates for the present domain with an ACME client that is running on another host, which you would specify here.

Type: null or string

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.acmeRoot

Directory for the ACME challenge, which is public. Don't put certs or keys in here. Set to null to inherit from config.security.acme.

Type: null or string

Default

"/var/lib/acme/acme-challenge"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.addSSL

Whether to enable HTTPS in addition to plain HTTP. This will set defaults for listen to listen on all interfaces on the respective default ports (80, 443).

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.basicAuth

Basic Auth protection for a vhost.

WARNING: This is implemented to store the password in plain text in the Nix store.

Type: attribute set of string

Default

{ }

Example

{user = "password";};

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.basicAuthFile

Basic Auth password file for a vhost. Can be created via: {command}htpasswd -c <filename> <username>.

WARNING: The generate file contains the users' passwords in a non-cryptographically-securely hashed way.

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.default

Makes this vhost the default.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.enableACME

Whether to ask Let's Encrypt to sign a certificate for this vhost. Alternately, you can use an existing certificate through {option}useACMEHost.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.extraConfig

These lines go to the end of the vhost verbatim.

Type: strings concatenated with "\n"

Default

""

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.forceSSL

Whether to add a separate nginx server block that redirects (defaults to 301, configurable with redirectCode) all plain HTTP traffic to HTTPS. This will set defaults for listen to listen on all interfaces on the respective default ports (80, 443), where the non-SSL listens are used for the redirect vhosts.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.globalRedirect

If set, all requests for this host are redirected (defaults to 301, configurable with redirectCode) to the given hostname.

Type: null or string

Default

null

Example

"newserver.example.org"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.http2

Whether to enable the HTTP/2 protocol. Note that (as of writing) due to nginx's implementation, to disable HTTP/2 you have to disable it on all vhosts that use a given IP address / port. If there is one server block configured to enable http2, then it is enabled for all server blocks on this IP. See https://stackoverflow.com/a/39466948/263061.

Type: boolean

Default

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.http3

Whether to enable the HTTP/3 protocol. This requires using pkgs.nginxQuic package which can be achieved by setting services.nginx.package = pkgs.nginxQuic; and activate the QUIC transport protocol services.nginx.virtualHosts.<name>.quic = true;. Note that HTTP/3 support is experimental and not yet recommended for production. Read more at https://quic.nginx.org/ HTTP/3 availability must be manually advertised, preferably in each location block.

Type: boolean

Default

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.http3_hq

Whether to enable the HTTP/0.9 protocol negotiation used in QUIC interoperability tests. This requires using pkgs.nginxQuic package which can be achieved by setting services.nginx.package = pkgs.nginxQuic; and activate the QUIC transport protocol services.nginx.virtualHosts.<name>.quic = true;. Note that special application protocol support is experimental and not yet recommended for production. Read more at https://quic.nginx.org/

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.kTLS

Whether to enable kTLS support. Implementing TLS in the kernel (kTLS) improves performance by significantly reducing the need for copying operations between user space and the kernel. Required Nginx version 1.21.4 or later.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.listen

Listen addresses and ports for this virtual host. IPv6 addresses must be enclosed in square brackets. Note: this option overrides addSSL and onlySSL.

If you only want to set the addresses manually and not the ports, take a look at listenAddresses.

Type: list of (submodule)

Default

[ ]

Example

[{addr = "195.154.1.1";port = 443;ssl = true;}{addr = "192.154.1.1";port = 80;}{addr = "unix:/var/run/nginx.sock";}]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.listen.*.addr

Listen address. Type: string

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.listen.*.extraParameters

Extra parameters of this listen directive. Type: list of string

Default

[ ]

Example

["backlog=1024""deferred"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.listen.*.port

Port number to listen on. If unset and the listen address is not a socket then nginx defaults to 80.

Type: null or 16 bit unsigned integer; between 0 and 65535 (both inclusive)

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.listen.*.proxyProtocol

Enable PROXY protocol. Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.listen.*.ssl

Enable SSL. Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.listenAddresses

Listen addresses for this virtual host. Compared to listen this only sets the addresses and the ports are chosen automatically.

Note: This option overrides enableIPv6

Type: list of string

Default

[ ]

Example

["127.0.0.1""[::1]"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations

Declarative location config Type: attribute set of (submodule)

Default

{ }

Example

{"/" = {proxyPass = "http://localhost:3000";};};

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.alias

Alias directory for requests.

Type: null or path

Default

null

Example

"/your/alias/directory"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.basicAuth

Basic Auth protection for a vhost.

WARNING: This is implemented to store the password in plain text in the Nix store.

Type: attribute set of string

Default

{ }

Example

{user = "password";};

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.basicAuthFile

Basic Auth password file for a vhost. Can be created via: {command}htpasswd -c <filename> <username>.

WARNING: The generate file contains the users' passwords in a non-cryptographically-securely hashed way.

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.extraConfig

These lines go to the end of the location verbatim.

Type: strings concatenated with "\n"

Default

""

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.fastcgiParams

FastCGI parameters to override. Unlike in the Nginx configuration file, overriding only some default parameters won't unset the default values for other parameters.

Type: attribute set of (string or path)

Default

{ }

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.index

Adds index directive.

Type: null or string

Default

null

Example

"index.php index.html"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.priority

Order of this location block in relation to the others in the vhost. The semantics are the same as with lib.mkOrder. Smaller values have a greater priority.

Type: signed integer

Default

1000

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.proxyPass

Adds proxy_pass directive and sets recommended proxy headers if recommendedProxySettings is enabled.

Type: null or string

Default

null

Example

"http://www.example.org/"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.proxyWebsockets

Whether to support proxying websocket connections with HTTP/1.1.

Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.recommendedProxySettings

Enable recommended proxy settings.

Type: boolean

Default

config.services.nginx.recommendedProxySettings

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.return

Adds a return directive, for e.g. redirections.

Type: null or string or signed integer

Default

null

Example

"301 http://example.com$request_uri"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.root

Root directory for requests.

Type: null or path

Default

null

Example

"/your/root/directory"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.locations.<name>.tryFiles

Adds try_files directive.

Type: null or string

Default

null

Example

"$uri =404"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.onlySSL

Whether to enable HTTPS and reject plain HTTP connections. This will set defaults for listen to listen on all interfaces on port 443.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.quic

Whether to enable the QUIC transport protocol. This requires using pkgs.nginxQuic package which can be achieved by setting services.nginx.package = pkgs.nginxQuic;. Note that QUIC support is experimental and not yet recommended for production. Read more at https://quic.nginx.org/

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.redirectCode

HTTP status used by globalRedirect and forceSSL. Possible usecases include temporary (302, 307) redirects, keeping the request method and body (307, 308), or explicitly resetting the method to GET (303). See https://developer.mozilla.org/en-US/docs/Web/HTTP/Redirections.

Type: integer between 300 and 399 (both inclusive)

Default

301

Example

308

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.rejectSSL

Whether to listen for and reject all HTTPS connections to this vhost. Useful in default server blocks to avoid serving the certificate for another vhost. Uses the ssl_reject_handshake directive available in nginx versions 1.19.4 and above.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.reuseport

Create an individual listening socket . It is required to specify only once on one of the hosts.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.root

The path of the web root directory.

Type: null or path

Default

null

Example

"/data/webserver/docs"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.serverAliases

Additional names of virtual hosts served by this virtual host configuration.

Type: list of string

Default

[ ]

Example

["www.example.org""example.org"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.serverName

Name of this virtual host. Defaults to attribute name in virtualHosts.

Type: null or string

Default

null

Example

"example.org"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.sslCertificate

Path to server SSL certificate. Type: path

Example

"/var/host.cert"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.sslCertificateKey

Path to server SSL certificate key. Type: path

Example

"/var/host.key"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.sslTrustedCertificate

Path to root SSL certificate for stapling and client certificates. Type: null or path

Default

null

Example

"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.nginx.useACMEHost

A host of an existing Let's Encrypt certificate to use. This is useful if you have many subdomains and want to avoid hitting the rate limit. Alternately, you can generate a certificate through {option}enableACME. Note that this option does not create any certificates, nor it does add subdomains to existing ones – you will need to create them manually using .

Type: null or string

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.package

The movim package to use. Type: package

Default

pkgs.movim

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.phpCfg

Extra PHP INI options such as memory_limit, max_execution_time, etc. Type: attribute set of (signed integer or string or boolean)

Default

{error_reporting = "E_ALL & ~E_DEPRECATED & ~E_STRICT";"opcache.enable_cli" = 1;"opcache.fast_shutdown" = 1;"opcache.interned_strings_buffer" = 8;"opcache.max_accelerated_files" = 6144;"opcache.memory_consumption" = 128;"opcache.revalidate_freq" = 2;output_buffering = 0;}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.phpPackage

The php package to use. Type: package

Default

pkgs.php

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig

Pod configuration (values from php daemon.php config --help). Note that these values will now be disabled in the admin panel.

Type: submodule

Default

{ }

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.chatonly

Disable all the social feature (Communities, Blog…) and keep only the chat ones Type: null or boolean

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.description

General description of the instance Type: null or string

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.disableregistration

Remove the XMPP registration flow and buttons from the interface Type: null or boolean

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.info

Content of the info box on the login page Type: null or string

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.locale

The server main locale Type: null or string

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.loglevel

The server loglevel Type: null or integer between 0 and 3 (both inclusive)

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.restrictsuggestions

Only suggest chatrooms, Communities and other contents that are available on the user XMPP server and related services Type: null or boolean

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.timezone

The server timezone Type: null or string

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.xmppdescription

The default XMPP server description Type: null or string

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.xmppdomain

The default XMPP server domain Type: null or string

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.podConfig.xmppwhitelist

The allowlisted XMPP servers Type: null or string

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.poolConfig

Options for Movim’s PHP-FPM pool. Type: attribute set of (signed integer or string or boolean)

Default

{ }

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.port

Movim daemon port. Type: 16 bit unsigned integer; between 0 and 65535 (both inclusive)

Default

8080

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.precompressStaticFiles

Aggressively precompress static files Type: submodule

Default

{brotli = {enable = true;};gzip = {enable = false;};}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.precompressStaticFiles.brotli.compressionLevel

Brotli compression level Type: integer between 0 and 11 (both inclusive)

Default

11

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.precompressStaticFiles.brotli.enable

Whether to enable Brotli precompression. Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.precompressStaticFiles.brotli.package

The brotli package to use. Type: package

Default

pkgs.brotli

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.precompressStaticFiles.gzip.compressionLevel

Gzip compression level Type: integer between 1 and 9 (both inclusive)

Default

9

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.precompressStaticFiles.gzip.enable

Whether to enable Gzip precompression. Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.precompressStaticFiles.gzip.package

The gzip package to use. Type: package

Default

pkgs.gzip

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.runtimeDir

Runtime directory of the movim user which holds the application’s caches & temporary files. Type: non-empty string

Default

"/run/movim"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.secretFile

The secret file to be sourced for the .env settings. Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.settings

.env settings for Movim. Secrets should use secretFile option instead. nulls will be culled. Type: attribute set of (null or signed integer or string or boolean)

Default

{ }

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.user

User running Movim service Type: non-empty string

Default

"movim"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix

services.movim.verbose

Verbose logs. Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/web-apps/movim.nix