1 { config, lib, name, ... }:
7 base = mkOption { description = "Base of the LDAP tree"; type = str; };
8 host = mkOption { description = "Host to access LDAP"; type = str; };
9 root_dn = mkOption { description = "DN of the root user"; type = str; };
10 root_pw = mkOption { description = "Hashed password of the root user"; type = str; };
11 replication_dn = mkOption { description = "DN of the user allowed to replicate the LDAP directory"; type = str; };
12 replication_pw = mkOption { description = "Password of the user allowed to replicate the LDAP directory"; type = str; };
14 mkLdapOptions = name: more: mkOption {
15 description = "${name} LDAP configuration";
17 options = ldapOptions // {
18 dn = mkOption { description = "DN of the ${name} user"; type = str; };
19 password = mkOption { description = "password of the ${name} user"; type = str; };
20 filter = mkOption { description = "Filter for ${name} users"; type = str; default = ""; };
25 host = mkOption { description = "Host to access Mysql"; type = str; };
26 remoteHost = mkOption { description = "Host to access Mysql from outside"; type = str; };
27 port = mkOption { description = "Port to access Mysql"; type = str; };
28 socket = mkOption { description = "Socket to access Mysql"; type = path; };
29 systemUsers = mkOption {
30 description = "Attrs of user-passwords allowed to access mysql";
34 description = "PAM configuration for mysql";
37 dn = mkOption { description = "DN to connect as to check users"; type = str; };
38 password = mkOption { description = "DN password to connect as to check users"; type = str; };
39 filter = mkOption { description = "filter to match users"; type = str; };
44 mkMysqlOptions = name: more: mkOption {
45 description = "${name} mysql configuration";
47 options = mysqlOptions // {
48 database = mkOption { description = "${name} database"; type = str; };
49 user = mkOption { description = "${name} user"; type = str; };
50 password = mkOption { description = "mysql password of the ${name} user"; type = str; };
55 host = mkOption { description = "Host to access Postgresql"; type = str; };
56 port = mkOption { description = "Port to access Postgresql"; type = str; };
57 socket = mkOption { description = "Socket to access Postgresql"; type = path; };
59 description = "PAM configuration for psql";
62 dn = mkOption { description = "DN to connect as to check users"; type = str; };
63 password = mkOption { description = "DN password to connect as to check users"; type = str; };
64 filter = mkOption { description = "filter to match users"; type = str; };
69 mkPsqlOptions = name: mkOption {
70 description = "${name} psql configuration";
72 options = psqlOptions // {
73 database = mkOption { description = "${name} database"; type = str; };
74 schema = mkOption { description = "${name} schema"; type = nullOr str; default = null; };
75 user = mkOption { description = "${name} user"; type = str; };
76 password = mkOption { description = "psql password of the ${name} user"; type = str; };
81 host = mkOption { description = "Host to access Redis"; type = str; };
82 port = mkOption { description = "Port to access Redis"; type = str; };
83 socket = mkOption { description = "Socket to access Redis"; type = path; };
85 description = "Attrs of db number. Each number should be unique to avoid collision!";
88 spiped_key = mkOption {
91 Key to use with spiped to make a secure channel to replication
95 description = "Predixy configuration. Unused yet";
98 read = mkOption { type = str; description = "Read password"; };
103 mkRedisOptions = name: mkOption {
104 description = "${name} redis configuration";
106 options = redisOptions // {
107 db = mkOption { description = "${name} database"; type = str; };
111 hostEnv = submodule {
114 description = "Host FQDN";
121 Sublist of users from realUsers. Function that takes pkgs as
122 argument and gives an array as a result
127 description = "List of e-mails that the server can be a sender of";
132 LDAP credentials for the host
136 password = mkOption { type = str; description = "Password for the LDAP connection"; };
137 dn = mkOption { type = str; description = "DN for the LDAP connection"; };
142 description = "subdomain and priority for MX server";
143 default = { enable = false; };
146 enable = mkEnableOption "Enable MX";
147 subdomain = mkOption { type = nullOr str; description = "Subdomain name (mx-*)"; };
148 priority = mkOption { type = nullOr str; description = "Priority"; };
154 attrs of ip4/ip6 grouped by section
156 type = attrsOf (submodule {
161 ip4 address of the host
168 ip6 addresses of the host
181 Attrs of servers information in the cluster (not necessarily handled by nixops)
184 type = attrsOf hostEnv;
186 hetznerCloud = mkOption {
188 Hetzner Cloud credential information
192 authToken = mkOption {
203 Hetzner credential information
207 user = mkOption { type = str; description = "User"; };
208 pass = mkOption { type = str; description = "Password"; };
214 sshd service credential information
220 LDAP credentials for cn=ssh,ou=services,dc=immae,dc=eu dn
224 password = mkOption { description = "Password"; type = str; };
233 non-standard reserved ports. Must be unique!
238 noDupl = x: builtins.length (builtins.attrValues x) == builtins.length (unique (builtins.attrValues x));
240 x: if isAttrs x && noDupl x then x else throw "Non unique values for ports";
244 httpd service credential information
250 LDAP credentials for cn=httpd,ou=services,dc=immae,dc=eu dn
254 password = mkOption { description = "Password"; type = str; };
263 LDAP server configuration
266 options = ldapOptions;
269 databases = mkOption {
270 description = "Databases configuration";
274 type = submodule { options = mysqlOptions; };
275 description = "Mysql configuration";
278 type = submodule { options = redisOptions; };
279 description = "Redis configuration";
281 postgresql = mkOption {
282 type = submodule { options = psqlOptions; };
283 description = "Postgresql configuration";
289 description = "Jabber configuration";
292 postfix_user_filter = mkOption { type = str; description = "Postfix filter to get xmpp users"; };
293 ldap = mkLdapOptions "Jabber" {};
294 postgresql = mkPsqlOptions "Jabber";
298 realUsers = mkOption {
300 Attrset of function taking pkgs as argument.
301 Real users settings, should provide a subattr of users.users.<name>
302 with at least: name, (hashed)Password, shell
304 type = attrsOf unspecified;
307 description = "System and regular users uid/gid";
308 type = attrsOf (submodule {
311 description = "user uid";
315 description = "user gid";
322 description = "DNS configuration";
326 description = "SOA information";
330 description = "Serial number. Should be incremented at each change and unique";
334 description = "Refresh time";
338 description = "Retry time";
342 description = "Expire time";
346 description = "Default TTL time";
350 description = "hostmaster e-mail";
354 description = "Primary NS";
361 description = "Attrs of NS servers group";
364 "ns1.foo.com" = [ "198.51.100.10" "2001:db8:abcd::1" ];
365 "ns2.foo.com" = [ "198.51.100.15" "2001:db8:1234::1" ];
368 type = attrsOf (attrsOf (listOf str));
370 slaveZones = mkOption {
371 description = "List of slave zones";
372 type = listOf (submodule {
374 name = mkOption { type = str; description = "zone name"; };
376 description = "NS master groups of this zone";
382 masterZones = mkOption {
383 description = "List of master zones";
384 type = listOf (submodule {
386 name = mkOption { type = str; description = "zone name"; };
388 description = "NS slave groups of this zone";
392 description = "groups names that should have their NS entries listed here";
396 description = "Extra zone configuration for bind";
402 entries = mkOption { type = lines; description = "Regular entries of the NS zone"; };
403 withEmail = mkOption {
404 description = "List of domains that should have mail entries (MX, dkim, SPF, ...)";
406 type = listOf (submodule {
408 domain = mkOption { type = str; description = "Which subdomain is concerned"; };
409 send = mkOption { type = bool; description = "Whether there can be e-mails originating from the subdomain"; };
410 receive = mkOption { type = bool; description = "Whether there can be e-mails arriving to the subdomain"; };
422 Remote backup with duplicity
426 password = mkOption { type = str; description = "Password for encrypting files"; };
427 remote = mkOption { type = str; description = "Remote url access"; };
428 accessKeyId = mkOption { type = str; description = "Remote access-key"; };
429 secretAccessKey = mkOption { type = str; description = "Remote access secret"; };
433 rsync_backup = mkOption {
435 Rsync backup configuration from controlled host
440 description = "SSH key information";
443 public = mkOption { type = str; description = "Public part of the key"; };
444 private = mkOption { type = lines; description = "Private part of the key"; };
448 profiles = mkOption {
449 description = "Attrs of profiles to backup";
450 type = attrsOf (submodule {
452 keep = mkOption { type = int; description = "Number of backups to keep"; };
453 check_command = mkOption { type = str; description = "command to check if backup needs to be done"; default = "backup"; };
454 login = mkOption { type = str; description = "Login to connect to host"; };
455 port = mkOption { type = str; default = "22"; description = "Port to connect to host"; };
456 host = mkOption { type = str; description = "Host to connect to"; };
457 host_key = mkOption { type = str; description = "Host key"; };
458 host_key_type = mkOption { type = str; description = "Host key type"; };
460 description = "Parts to backup for this host";
461 type = attrsOf (submodule {
463 remote_folder = mkOption { type = path; description = "Remote folder to backup";};
464 exclude_from = mkOption {
467 description = "List of folders/files to exclude from the backup";
469 files_from = mkOption {
472 description = "List of folders/files to backup in the base folder";
477 description = "Extra arguments to pass to rsync";
488 monitoring = mkOption {
489 description = "Monitoring configuration";
492 status_url = mkOption { type = str; description = "URL to push status to"; };
493 status_token = mkOption { type = str; description = "Token for the status url"; };
494 http_user_password = mkOption { type = str; description = "HTTP credentials to check services behind wall"; };
495 email = mkOption { type = str; description = "Admin E-mail"; };
496 ssh_public_key = mkOption { type = str; description = "SSH public key"; };
497 ssh_secret_key = mkOption { type = str; description = "SSH secret key"; };
498 imap_login = mkOption { type = str; description = "IMAP login"; };
499 imap_password = mkOption { type = str; description = "IMAP password"; };
500 eriomem_keys = mkOption { type = listOf (listOf str); description = "Eriomem keys"; default = []; };
502 description = "OVH credentials for sms script";
505 endpoint = mkOption { type = str; default = "ovh-eu"; description = "OVH endpoint"; };
506 application_key = mkOption { type = str; description = "Application key"; };
507 application_secret = mkOption { type = str; description = "Application secret"; };
508 consumer_key = mkOption { type = str; description = "Consumer key"; };
509 account = mkOption { type = str; description = "Account"; };
513 nrdp_tokens = mkOption { type = listOf str; description = "Tokens allowed to push status update"; };
514 slack_url = mkOption { type = str; description = "Slack webhook url to push status update"; };
515 slack_channel = mkOption { type = str; description = "Slack channel to push status update"; };
516 contacts = mkOption { type = attrsOf unspecified; description = "Contact dicts to fill naemon objects"; };
517 email_check = mkOption {
518 description = "Emails services to check";
519 type = attrsOf (submodule {
521 local = mkOption { type = bool; default = false; description = "Use local configuration"; };
522 port = mkOption { type = nullOr str; default = null; description = "Port to connect to ssh"; };
523 login = mkOption { type = nullOr str; default = null; description = "Login to connect to ssh"; };
524 targets = mkOption { type = listOf str; description = "Hosts to send E-mails to"; };
525 mail_address = mkOption { type = nullOr str; default = null; description = "E-mail recipient part to send e-mail to"; };
526 mail_domain = mkOption { type = nullOr str; default = null; description = "E-mail domain part to send e-mail to"; };
534 description = "MPD configuration";
537 folder = mkOption { type = str; description = "Folder to serve from the MPD instance"; };
538 password = mkOption { type = str; description = "Password to connect to the MPD instance"; };
539 host = mkOption { type = str; description = "Host to connect to the MPD instance"; };
540 port = mkOption { type = str; description = "Port to connect to the MPD instance"; };
545 description = "FTP configuration";
548 ldap = mkLdapOptions "FTP" {};
553 description = "VPN configuration";
554 type = attrsOf (submodule {
556 prefix = mkOption { type = str; description = "ipv6 prefix for the vpn subnet"; };
557 privateKey = mkOption { type = str; description = "Private key for the host"; };
558 publicKey = mkOption { type = str; description = "Public key for the host"; };
563 description = "Mail configuration";
567 description = "DMARC configuration";
570 ignore_hosts = mkOption {
573 Hosts to ignore when checking for dmarc
580 description = "DKIM configuration";
581 type = attrsOf (submodule {
587 "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3w1a2aMxWw9+hdcmbqX4UevcVqr204y0K73Wdc7MPZiOOlUJQYsMNSYR1Y/SC7jmPKeitpcJCpQgn/cveJZbuikjjPLsDReHyFEYmC278ZLRTELHx6f1IXM8WE08JIRT69CfZiMi1rVcOh9qRT4F93PyjCauU8Y5hJjtg9ThsWwIDAQAB" )
589 description = "Public entry to put in DNS TXT field";
591 private = mkOption { type = str; description = "Private key"; };
596 description = "Postfix configuration";
599 additional_mailbox_domains = mkOption {
601 List of domains that are used as mailbox final destination, in addition to those defined in the DNS records
605 mysql = mkMysqlOptions "Postfix" {
606 password_encrypt = mkOption { type = str; description = "Key to encrypt relay password in database"; };
608 backup_domains = mkOption {
610 Domains that are accepted for relay as backup domain
612 type = attrsOf (submodule {
614 domains = mkOption { type = listOf str; description = "Domains list"; };
615 relay_restrictions = mkOption {
618 Restrictions for relaying the e-mails from the domains
621 recipient_maps = mkOption {
623 Recipient map to accept relay for.
624 Must be specified for domain, the rules apply to everyone!
626 type = listOf (submodule {
629 type = enum [ "hash" ];
630 description = "Map type";
634 description = "Map content";
646 description = "Dovecot configuration";
649 ldap = mkLdapOptions "Dovecot" {
650 pass_attrs = mkOption { type = str; description = "Password attribute in LDAP"; };
651 user_attrs = mkOption { type = str; description = "User attribute mapping in LDAP"; };
652 iterate_attrs = mkOption { type = str; description = "User attribute mapping for listing in LDAP"; };
653 iterate_filter = mkOption { type = str; description = "User attribute filter for listing in LDAP"; };
654 postfix_mailbox_filter = mkOption { type = str; description = "Postfix filter to get mailboxes"; };
660 description = "rspamd configuration";
663 redis = mkRedisOptions "Redis";
664 read_password_hashed = mkOption { type = str; description = "Hashed read password for rspamd"; };
665 write_password_hashed = mkOption { type = str; description = "Hashed write password for rspamd"; };
666 read_password = mkOption {
668 description = "Read password for rspamd. Unused";
671 write_password = mkOption {
673 description = "Write password for rspamd. Unused";
680 description = "Mail script recipients";
681 type = attrsOf (submodule {
683 external = mkEnableOption "Create a script_<name>@mail.immae.eu external address";
686 git source to fetch the script from.
687 It must have a default.nix file as its root accepting a scriptEnv parameter
691 url = mkOption { type = str; description = "git url to fetch"; };
692 rev = mkOption { type = str; description = "git reference to fetch"; };
697 description = "Variables to pass to the script";
704 description = "Sympa configuration";
707 listmasters = mkOption {
709 description = "Listmasters";
711 postgresql = mkPsqlOptions "Sympa";
712 data_sources = mkOption {
715 description = "Data sources to make available to sympa";
720 description = "Scenari to make available to sympa";
728 buildbot = mkOption {
729 description = "Buildbot configuration";
733 description = "Buildbot user";
737 description = "user uid";
741 description = "user gid";
748 description = "Ldap configuration for buildbot";
751 password = mkOption { type = str; description = "Buildbot password"; };
755 projects = mkOption {
756 description = "Projects to make a buildbot for";
757 type = attrsOf (submodule {
759 name = mkOption { type = str; description = "Project name"; };
760 packages = mkOption {
762 example = literalExample ''
763 pkgs: [ pkgs.bash pkgs.git pkgs.gzip pkgs.openssh ];
767 Builds packages list to make available to buildbot project.
768 Takes pkgs as argument.
771 pythonPackages = mkOption {
773 example = literalExample ''
774 p: pkgs: [ pkgs.python3Packages.pip ];
778 Builds python packages list to make available to buildbot project.
779 Takes buildbot python module as first argument and pkgs as second argument in order to augment the python modules list.
782 pythonPathHome = mkOption { type = bool; description = "Whether to add project’s python home to python path"; };
785 description = "Secrets for the project to dump as files";
787 environment = mkOption {
790 Environment variables for the project.
791 BUILDBOT_ is prefixed to the variable names
794 activationScript = mkOption {
797 Activation script to run during deployment
800 builderPaths = mkOption {
801 type = attrsOf unspecified;
804 Attrs of functions to make accessible specifically per builder.
805 Takes pkgs as argument and should return a single path containing binaries.
806 This path will be accessible as BUILDBOT_PATH_<attrskey>
809 webhookTokens = mkOption {
810 type = nullOr (listOf str);
813 List of tokens allowed to push to project’s change_hook/base endpoint
823 description = "Tools configurations";
826 contact = mkOption { type = str; description = "Contact e-mail address"; };
828 description = "Davical configuration";
831 postgresql = mkPsqlOptions "Davical";
832 ldap = mkLdapOptions "Davical" {};
836 diaspora = mkOption {
837 description = "Diaspora configuration";
840 postgresql = mkPsqlOptions "Diaspora";
841 redis = mkRedisOptions "Diaspora";
842 ldap = mkLdapOptions "Diaspora" {};
843 secret_token = mkOption { type = str; description = "Secret token"; };
847 dmarc_reports = mkOption {
848 description = "DMARC reports configuration";
851 mysql = mkMysqlOptions "DMARC" {};
852 anonymous_key = mkOption { type = str; description = "Anonymous hashing key"; };
856 etherpad-lite = mkOption {
857 description = "Etherpad configuration";
860 postgresql = mkPsqlOptions "Etherpad";
861 ldap = mkLdapOptions "Etherpad" {
862 group_filter = mkOption { type = str; description = "Filter for groups"; };
864 adminPassword = mkOption { type = str; description = "Admin password for mypads / admin"; };
865 session_key = mkOption { type = str; description = "Session key"; };
866 api_key = mkOption { type = str; description = "API key"; };
867 redirects = mkOption { type = str; description = "Redirects for apache"; };
871 gitolite = mkOption {
872 description = "Gitolite configuration";
875 ldap = mkLdapOptions "Gitolite" {};
879 kanboard = mkOption {
880 description = "Kanboard configuration";
883 postgresql = mkPsqlOptions "Kanboard";
884 ldap = mkLdapOptions "Kanboard" {
885 admin_dn = mkOption { type = str; description = "Admin DN"; };
890 mantisbt = mkOption {
891 description = "Mantisbt configuration";
894 postgresql = mkPsqlOptions "Mantisbt";
895 ldap = mkLdapOptions "Mantisbt" {};
896 master_salt = mkOption { type = str; description = "Master salt for password hash"; };
900 mastodon = mkOption {
901 description = "Mastodon configuration";
904 postgresql = mkPsqlOptions "Mastodon";
905 redis = mkRedisOptions "Mastodon";
906 ldap = mkLdapOptions "Mastodon" {};
907 paperclip_secret = mkOption { type = str; description = "Paperclip secret"; };
908 otp_secret = mkOption { type = str; description = "OTP secret"; };
909 secret_key_base = mkOption { type = str; description = "Secret key base"; };
911 description = "vapid key";
914 private = mkOption { type = str; description = "Private key"; };
915 public = mkOption { type = str; description = "Public key"; };
922 mediagoblin = mkOption {
923 description = "Mediagoblin configuration";
926 postgresql = mkPsqlOptions "Mediagoblin";
927 redis = mkRedisOptions "Mediagoblin";
928 ldap = mkLdapOptions "Mediagoblin" {};
932 nextcloud = mkOption {
933 description = "Nextcloud configuration";
936 postgresql = mkPsqlOptions "Peertube";
937 redis = mkRedisOptions "Peertube";
938 password_salt = mkOption { type = str; description = "Password salt"; };
939 instance_id = mkOption { type = str; description = "Instance ID"; };
940 secret = mkOption { type = str; description = "App secret"; };
944 peertube = mkOption {
945 description = "Peertube configuration";
948 listenPort = mkOption { type = port; description = "Port to listen to"; };
949 postgresql = mkPsqlOptions "Peertube";
950 redis = mkRedisOptions "Peertube";
951 ldap = mkLdapOptions "Peertube" {};
955 syden_peertube = mkOption {
956 description = "Peertube Syden configuration";
959 listenPort = mkOption { type = port; description = "Port to listen to"; };
960 postgresql = mkPsqlOptions "Peertube";
961 redis = mkRedisOptions "Peertube";
965 phpldapadmin = mkOption {
966 description = "phpLdapAdmin configuration";
969 ldap = mkLdapOptions "phpldapadmin" {};
974 description = "Rompr configuration";
978 description = "MPD configuration";
981 host = mkOption { type = str; description = "Host for MPD"; };
982 port = mkOption { type = port; description = "Port to access MPD host"; };
989 roundcubemail = mkOption {
990 description = "Roundcubemail configuration";
993 postgresql = mkPsqlOptions "TT-RSS";
994 secret = mkOption { type = str; description = "Secret"; };
999 description = "Shaarli configuration";
1002 ldap = mkLdapOptions "Shaarli" {};
1007 description = "Taskwarrior configuration";
1010 ldap = mkLdapOptions "Taskwarrior" {};
1011 taskwarrior-web = mkOption {
1012 description = "taskwarrior-web profiles";
1013 type = attrsOf (submodule {
1017 description = "List of ldap uids having access to this profile";
1019 org = mkOption { type = str; description = "Taskd organisation"; };
1020 key = mkOption { type = str; description = "Taskd key"; };
1021 date = mkOption { type = str; description = "Preferred date format"; };
1029 description = "TT-RSS configuration";
1032 postgresql = mkPsqlOptions "TT-RSS";
1033 ldap = mkLdapOptions "TT-RSS" {};
1037 wallabag = mkOption {
1038 description = "Wallabag configuration";
1041 postgresql = mkPsqlOptions "Wallabag";
1042 ldap = mkLdapOptions "Wallabag" {
1043 admin_filter = mkOption { type = str; description = "Admin users filter"; };
1045 redis = mkRedisOptions "Wallabag";
1046 secret = mkOption { type = str; description = "App secret"; };
1050 webhooks = mkOption {
1052 description = "Mapping 'name'.php => script for webhooks";
1055 description = "Ympd configuration";
1058 listenPort = mkOption { type = port; description = "Port to listen to"; };
1060 description = "MPD configuration";
1063 password = mkOption { type = str; description = "Password to access MPD host"; };
1064 host = mkOption { type = str; description = "Host for MPD"; };
1065 port = mkOption { type = port; description = "Port to access MPD host"; };
1073 description = "Yourls configuration";
1076 mysql = mkMysqlOptions "Yourls" {};
1077 ldap = mkLdapOptions "Yourls" {};
1078 cookieKey = mkOption { type = str; description = "Cookie key"; };
1085 websites = mkOption {
1086 description = "Websites configurations";
1090 description = "Immae configuration by environment";
1094 description = "Temp configuration";
1097 ldap = mkLdapOptions "Immae temp" {
1098 filter = mkOption { type = str; description = "Filter for user access"; };
1106 isabelle = mkOption {
1107 description = "Isabelle configurations by environment";
1110 atenSubmodule = mkOption {
1111 description = "environment configuration";
1114 environment = mkOption { type = str; description = "Symfony environment"; };
1115 secret = mkOption { type = str; description = "Symfony App secret"; };
1116 postgresql = mkPsqlOptions "Aten";
1123 aten_production = atenSubmodule;
1124 aten_integration = atenSubmodule;
1125 iridologie = mkOption {
1126 description = "environment configuration";
1129 environment = mkOption { type = str; description = "SPIP environment"; };
1130 mysql = mkMysqlOptions "Iridologie" {};
1131 ldap = mkLdapOptions "Iridologie" {};
1139 description = "Chloe configurations by environment";
1142 chloeSubmodule = mkOption {
1143 description = "environment configuration";
1146 environment = mkOption { type = str; description = "SPIP environment"; };
1147 mysql = mkMysqlOptions "Chloe" {};
1148 ldap = mkLdapOptions "Chloe" {};
1155 production = chloeSubmodule;
1156 integration = chloeSubmodule;
1160 connexionswing = mkOption {
1161 description = "Connexionswing configurations by environment";
1164 csSubmodule = mkOption {
1165 description = "environment configuration";
1168 environment = mkOption { type = str; description = "Symfony environment"; };
1169 mysql = mkMysqlOptions "Connexionswing" {};
1170 secret = mkOption { type = str; description = "Symfony App secret"; };
1171 email = mkOption { type = str; description = "Symfony email notification"; };
1178 production = csSubmodule;
1179 integration = csSubmodule;
1184 description = "Naturaloutil configuration";
1187 mysql = mkMysqlOptions "Naturaloutil" {};
1188 server_admin = mkOption { type = str; description = "Server admin e-mail"; };
1192 telio_tortay = mkOption {
1193 description = "Telio Tortay configuration";
1196 server_admin = mkOption { type = str; description = "Server admin e-mail"; };
1200 ludivine = mkOption {
1201 description = "Ludivinecassal configurations by environment";
1204 lcSubmodule = mkOption {
1205 description = "environment configuration";
1208 environment = mkOption { type = str; description = "Symfony environment"; };
1209 mysql = mkMysqlOptions "LudivineCassal" {};
1210 ldap = mkLdapOptions "LudivineCassal" {};
1211 secret = mkOption { type = str; description = "Symfony App secret"; };
1218 production = lcSubmodule;
1219 integration = lcSubmodule;
1224 description = "Emilia configuration";
1227 postgresql = mkPsqlOptions "Emilia";
1231 florian = mkOption {
1232 description = "Florian configuration";
1235 server_admin = mkOption { type = str; description = "Server admin e-mail"; };
1239 nassime = mkOption {
1240 description = "Nassime configuration";
1243 server_admin = mkOption { type = str; description = "Server admin e-mail"; };
1247 piedsjaloux = mkOption {
1248 description = "Piedsjaloux configurations by environment";
1251 pjSubmodule = mkOption {
1252 description = "environment configuration";
1255 environment = mkOption { type = str; description = "Symfony environment"; };
1256 mysql = mkMysqlOptions "Piedsjaloux" {};
1257 secret = mkOption { type = str; description = "Symfony App secret"; };
1264 production = pjSubmodule;
1265 integration = pjSubmodule;
1270 description = "Europe Richie configurations by environment";
1273 mysql = mkMysqlOptions "Richie" {};
1274 smtp_mailer = mkOption {
1275 description = "SMTP mailer configuration";
1278 user = mkOption { type = str; description = "Username"; };
1279 password = mkOption { type = str; description = "Password"; };
1286 tellesflorian = mkOption {
1287 description = "Tellesflorian configurations by environment";
1290 tfSubmodule = mkOption {
1291 description = "environment configuration";
1294 environment = mkOption { type = str; description = "Symfony environment"; };
1295 mysql = mkMysqlOptions "Tellesflorian" {};
1296 secret = mkOption { type = str; description = "Symfony App secret"; };
1297 invite_passwords = mkOption { type = str; description = "Password basic auth"; };
1304 integration = tfSubmodule;
1312 privateFiles = mkOption {
1315 Path to secret files to make available during build
1319 options.hostEnv = mkOption {
1322 default = config.myEnv.servers."${name}";
1323 description = "Host environment";