1 { config, lib, name, ... }:
7 base = mkOption { description = "Base of the LDAP tree"; type = str; };
8 host = mkOption { description = "Host to access LDAP"; type = str; };
9 root_dn = mkOption { description = "DN of the root user"; type = str; };
10 root_pw = mkOption { description = "Hashed password of the root user"; type = str; };
11 replication_dn = mkOption { description = "DN of the user allowed to replicate the LDAP directory"; type = str; };
12 replication_pw = mkOption { description = "Password of the user allowed to replicate the LDAP directory"; type = str; };
14 mkLdapOptions = name: more: mkOption {
15 description = "${name} LDAP configuration";
17 options = ldapOptions // {
18 dn = mkOption { description = "DN of the ${name} user"; type = str; };
19 password = mkOption { description = "password of the ${name} user"; type = str; };
20 filter = mkOption { description = "Filter for ${name} users"; type = str; default = ""; };
25 host = mkOption { description = "Host to access Mysql"; type = str; };
26 remoteHost = mkOption { description = "Host to access Mysql from outside"; type = str; };
27 port = mkOption { description = "Port to access Mysql"; type = str; };
28 socket = mkOption { description = "Socket to access Mysql"; type = path; };
29 systemUsers = mkOption {
30 description = "Attrs of user-passwords allowed to access mysql";
34 description = "PAM configuration for mysql";
37 dn = mkOption { description = "DN to connect as to check users"; type = str; };
38 password = mkOption { description = "DN password to connect as to check users"; type = str; };
39 filter = mkOption { description = "filter to match users"; type = str; };
44 mkMysqlOptions = name: more: mkOption {
45 description = "${name} mysql configuration";
47 options = mysqlOptions // {
48 database = mkOption { description = "${name} database"; type = str; };
49 user = mkOption { description = "${name} user"; type = str; };
50 password = mkOption { description = "mysql password of the ${name} user"; type = str; };
55 host = mkOption { description = "Host to access Postgresql"; type = str; };
56 port = mkOption { description = "Port to access Postgresql"; type = str; };
57 socket = mkOption { description = "Socket to access Postgresql"; type = path; };
59 description = "PAM configuration for psql";
62 dn = mkOption { description = "DN to connect as to check users"; type = str; };
63 password = mkOption { description = "DN password to connect as to check users"; type = str; };
64 filter = mkOption { description = "filter to match users"; type = str; };
69 mkPsqlOptions = name: mkOption {
70 description = "${name} psql configuration";
72 options = psqlOptions // {
73 database = mkOption { description = "${name} database"; type = str; };
74 schema = mkOption { description = "${name} schema"; type = nullOr str; default = null; };
75 user = mkOption { description = "${name} user"; type = str; };
76 password = mkOption { description = "psql password of the ${name} user"; type = str; };
81 host = mkOption { description = "Host to access Redis"; type = str; };
82 port = mkOption { description = "Port to access Redis"; type = str; };
83 socket = mkOption { description = "Socket to access Redis"; type = path; };
85 description = "Attrs of db number. Each number should be unique to avoid collision!";
88 spiped_key = mkOption {
91 Key to use with spiped to make a secure channel to replication
95 description = "Predixy configuration. Unused yet";
98 read = mkOption { type = str; description = "Read password"; };
103 mkRedisOptions = name: mkOption {
104 description = "${name} redis configuration";
106 options = redisOptions // {
107 db = mkOption { description = "${name} database"; type = str; };
112 host = mkOption { description = "Host to access SMTP"; type = str; };
113 port = mkOption { description = "Port to access SMTP"; type = str; };
115 mkSmtpOptions = name: mkOption {
116 description = "${name} smtp configuration";
118 options = smtpOptions // {
119 email = mkOption { description = "${name} email"; type = str; };
120 password = mkOption { description = "SMTP password of the ${name} user"; type = str; };
124 hostEnv = submodule {
127 description = "Host FQDN";
134 Sublist of users from realUsers. Function that takes pkgs as
135 argument and gives an array as a result
140 description = "List of e-mails that the server can be a sender of";
145 LDAP credentials for the host
149 password = mkOption { type = str; description = "Password for the LDAP connection"; };
150 dn = mkOption { type = str; description = "DN for the LDAP connection"; };
155 description = "subdomain and priority for MX server";
156 default = { enable = false; };
159 enable = mkEnableOption "Enable MX";
160 subdomain = mkOption { type = nullOr str; description = "Subdomain name (mx-*)"; };
161 priority = mkOption { type = nullOr str; description = "Priority"; };
167 attrs of ip4/ip6 grouped by section
169 type = attrsOf (submodule {
174 ip4 address of the host
181 ip6 addresses of the host
194 Attrs of servers information in the cluster (not necessarily handled by nixops)
197 type = attrsOf hostEnv;
199 hetznerCloud = mkOption {
201 Hetzner Cloud credential information
205 authToken = mkOption {
216 Hetzner credential information
220 user = mkOption { type = str; description = "User"; };
221 pass = mkOption { type = str; description = "Password"; };
227 sshd service credential information
233 LDAP credentials for cn=ssh,ou=services,dc=immae,dc=eu dn
237 password = mkOption { description = "Password"; type = str; };
246 non-standard reserved ports. Must be unique!
251 noDupl = x: builtins.length (builtins.attrValues x) == builtins.length (unique (builtins.attrValues x));
253 x: if isAttrs x && noDupl x then x else throw "Non unique values for ports";
257 httpd service credential information
263 LDAP credentials for cn=httpd,ou=services,dc=immae,dc=eu dn
267 password = mkOption { description = "Password"; type = str; };
275 type = submodule { options = smtpOptions; };
276 description = "SMTP configuration";
280 LDAP server configuration
283 options = ldapOptions;
286 databases = mkOption {
287 description = "Databases configuration";
291 type = submodule { options = mysqlOptions; };
292 description = "Mysql configuration";
295 type = submodule { options = redisOptions; };
296 description = "Redis configuration";
298 postgresql = mkOption {
299 type = submodule { options = psqlOptions; };
300 description = "Postgresql configuration";
306 description = "Jabber configuration";
309 postfix_user_filter = mkOption { type = str; description = "Postfix filter to get xmpp users"; };
310 ldap = mkLdapOptions "Jabber" {};
311 postgresql = mkPsqlOptions "Jabber";
315 realUsers = mkOption {
317 Attrset of function taking pkgs as argument.
318 Real users settings, should provide a subattr of users.users.<name>
319 with at least: name, (hashed)Password, shell
321 type = attrsOf unspecified;
324 description = "System and regular users uid/gid";
325 type = attrsOf (submodule {
328 description = "user uid";
332 description = "user gid";
339 description = "DNS configuration";
343 description = "SOA information";
347 description = "Serial number. Should be incremented at each change and unique";
351 description = "Refresh time";
355 description = "Retry time";
359 description = "Expire time";
363 description = "Default TTL time";
367 description = "hostmaster e-mail";
371 description = "Primary NS";
378 description = "Attrs of NS servers group";
381 "ns1.foo.com" = [ "198.51.100.10" "2001:db8:abcd::1" ];
382 "ns2.foo.com" = [ "198.51.100.15" "2001:db8:1234::1" ];
385 type = attrsOf (attrsOf (listOf str));
387 slaveZones = mkOption {
388 description = "List of slave zones";
389 type = listOf (submodule {
391 name = mkOption { type = str; description = "zone name"; };
393 description = "NS master groups of this zone";
399 masterZones = mkOption {
400 description = "List of master zones";
401 type = listOf (submodule {
403 name = mkOption { type = str; description = "zone name"; };
404 withCAA = mkOption { type = nullOr str; description = "CAA entry"; default = null; };
406 description = "NS slave groups of this zone";
410 description = "groups names that should have their NS entries listed here";
414 description = "Extra zone configuration for bind";
420 entries = mkOption { type = lines; description = "Regular entries of the NS zone"; };
421 withEmail = mkOption {
422 description = "List of domains that should have mail entries (MX, dkim, SPF, ...)";
424 type = listOf (submodule {
426 domain = mkOption { type = str; description = "Which subdomain is concerned"; };
427 send = mkOption { type = bool; description = "Whether there can be e-mails originating from the subdomain"; };
428 receive = mkOption { type = bool; description = "Whether there can be e-mails arriving to the subdomain"; };
440 Remote backup with duplicity
444 password = mkOption { type = str; description = "Password for encrypting files"; };
446 type = attrsOf (submodule {
450 example = literalExample ''
451 bucket: "s3://some_host/${bucket}";
455 Takes a bucket name as argument and returns a url
458 accessKeyId = mkOption { type = str; description = "Remote access-key"; };
459 secretAccessKey = mkOption { type = str; description = "Remote access secret"; };
466 zrepl_backup = mkOption {
470 description = "SSH key information";
473 public = mkOption { type = str; description = "Public part of the key"; };
474 private = mkOption { type = lines; description = "Private part of the key"; };
478 mysql = mkMysqlOptions "Zrepl" {};
482 rsync_backup = mkOption {
484 Rsync backup configuration from controlled host
489 description = "SSH key information";
492 public = mkOption { type = str; description = "Public part of the key"; };
493 private = mkOption { type = lines; description = "Private part of the key"; };
497 profiles = mkOption {
498 description = "Attrs of profiles to backup";
499 type = attrsOf (submodule {
501 keep = mkOption { type = int; description = "Number of backups to keep"; };
502 check_command = mkOption { type = str; description = "command to check if backup needs to be done"; default = "backup"; };
503 login = mkOption { type = str; description = "Login to connect to host"; };
504 port = mkOption { type = str; default = "22"; description = "Port to connect to host"; };
505 host = mkOption { type = str; description = "Host to connect to"; };
506 host_key = mkOption { type = str; description = "Host key"; };
507 host_key_type = mkOption { type = str; description = "Host key type"; };
509 description = "Parts to backup for this host";
510 type = attrsOf (submodule {
512 remote_folder = mkOption { type = path; description = "Remote folder to backup";};
513 exclude_from = mkOption {
516 description = "List of folders/files to exclude from the backup";
518 files_from = mkOption {
521 description = "List of folders/files to backup in the base folder";
526 description = "Extra arguments to pass to rsync";
537 monitoring = mkOption {
538 description = "Monitoring configuration";
541 status_url = mkOption { type = str; description = "URL to push status to"; };
542 status_token = mkOption { type = str; description = "Token for the status url"; };
543 http_user_password = mkOption { type = str; description = "HTTP credentials to check services behind wall"; };
544 email = mkOption { type = str; description = "Admin E-mail"; };
545 ssh_public_key = mkOption { type = str; description = "SSH public key"; };
546 ssh_secret_key = mkOption { type = str; description = "SSH secret key"; };
547 imap_login = mkOption { type = str; description = "IMAP login"; };
548 imap_password = mkOption { type = str; description = "IMAP password"; };
549 eriomem_keys = mkOption { type = listOf (listOf str); description = "Eriomem keys"; default = []; };
551 description = "OVH credentials for sms script";
554 endpoint = mkOption { type = str; default = "ovh-eu"; description = "OVH endpoint"; };
555 application_key = mkOption { type = str; description = "Application key"; };
556 application_secret = mkOption { type = str; description = "Application secret"; };
557 consumer_key = mkOption { type = str; description = "Consumer key"; };
558 account = mkOption { type = str; description = "Account"; };
563 description = "Eban credentials for webhook";
566 password = mkOption { type = str; description = "Password"; };
570 nrdp_tokens = mkOption { type = listOf str; description = "Tokens allowed to push status update"; };
571 slack_url = mkOption { type = str; description = "Slack webhook url to push status update"; };
572 slack_channel = mkOption { type = str; description = "Slack channel to push status update"; };
573 netdata_aggregator = mkOption { type = str; description = "Url where netdata information should be sent"; };
574 netdata_keys = mkOption { type = attrsOf str; description = "netdata host keys"; };
575 contacts = mkOption { type = attrsOf unspecified; description = "Contact dicts to fill naemon objects"; };
576 email_check = mkOption {
577 description = "Emails services to check";
578 type = attrsOf (submodule {
580 local = mkOption { type = bool; default = false; description = "Use local configuration"; };
581 port = mkOption { type = nullOr str; default = null; description = "Port to connect to ssh"; };
582 login = mkOption { type = nullOr str; default = null; description = "Login to connect to ssh"; };
583 targets = mkOption { type = listOf str; description = "Hosts to send E-mails to"; };
584 mail_address = mkOption { type = nullOr str; default = null; description = "E-mail recipient part to send e-mail to"; };
585 mail_domain = mkOption { type = nullOr str; default = null; description = "E-mail domain part to send e-mail to"; };
593 description = "MPD configuration";
596 folder = mkOption { type = str; description = "Folder to serve from the MPD instance"; };
597 password = mkOption { type = str; description = "Password to connect to the MPD instance"; };
598 host = mkOption { type = str; description = "Host to connect to the MPD instance"; };
599 port = mkOption { type = str; description = "Port to connect to the MPD instance"; };
604 description = "FTP configuration";
607 ldap = mkLdapOptions "FTP" {};
612 description = "VPN configuration";
613 type = attrsOf (submodule {
615 prefix = mkOption { type = str; description = "ipv6 prefix for the vpn subnet"; };
616 privateKey = mkOption { type = str; description = "Private key for the host"; };
617 publicKey = mkOption { type = str; description = "Public key for the host"; };
622 description = "Mail configuration";
626 description = "DMARC configuration";
629 ignore_hosts = mkOption {
632 Hosts to ignore when checking for dmarc
639 description = "DKIM configuration";
640 type = attrsOf (submodule {
646 "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3w1a2aMxWw9+hdcmbqX4UevcVqr204y0K73Wdc7MPZiOOlUJQYsMNSYR1Y/SC7jmPKeitpcJCpQgn/cveJZbuikjjPLsDReHyFEYmC278ZLRTELHx6f1IXM8WE08JIRT69CfZiMi1rVcOh9qRT4F93PyjCauU8Y5hJjtg9ThsWwIDAQAB" )
648 description = "Public entry to put in DNS TXT field";
650 private = mkOption { type = str; description = "Private key"; };
655 description = "Postfix configuration";
658 additional_mailbox_domains = mkOption {
660 List of domains that are used as mailbox final destination, in addition to those defined in the DNS records
664 mysql = mkMysqlOptions "Postfix" {
665 password_encrypt = mkOption { type = str; description = "Key to encrypt relay password in database"; };
667 backup_domains = mkOption {
669 Domains that are accepted for relay as backup domain
671 type = attrsOf (submodule {
673 domains = mkOption { type = listOf str; description = "Domains list"; };
674 relay_restrictions = mkOption {
677 Restrictions for relaying the e-mails from the domains
680 recipient_maps = mkOption {
682 Recipient map to accept relay for.
683 Must be specified for domain, the rules apply to everyone!
685 type = listOf (submodule {
688 type = enum [ "hash" ];
689 description = "Map type";
693 description = "Map content";
705 description = "Dovecot configuration";
708 ldap = mkLdapOptions "Dovecot" {
709 pass_attrs = mkOption { type = str; description = "Password attribute in LDAP"; };
710 user_attrs = mkOption { type = str; description = "User attribute mapping in LDAP"; };
711 iterate_attrs = mkOption { type = str; description = "User attribute mapping for listing in LDAP"; };
712 iterate_filter = mkOption { type = str; description = "User attribute filter for listing in LDAP"; };
713 postfix_mailbox_filter = mkOption { type = str; description = "Postfix filter to get mailboxes"; };
719 description = "rspamd configuration";
722 redis = mkRedisOptions "Redis";
723 read_password_hashed = mkOption { type = str; description = "Hashed read password for rspamd"; };
724 write_password_hashed = mkOption { type = str; description = "Hashed write password for rspamd"; };
725 read_password = mkOption {
727 description = "Read password for rspamd. Unused";
730 write_password = mkOption {
732 description = "Write password for rspamd. Unused";
739 description = "Mail script recipients";
740 type = attrsOf (submodule {
742 external = mkEnableOption "Create a script_<name>@mail.immae.eu external address";
745 git source to fetch the script from.
746 It must have a default.nix file as its root accepting a scriptEnv parameter
750 url = mkOption { type = str; description = "git url to fetch"; };
751 rev = mkOption { type = str; description = "git reference to fetch"; };
756 description = "Variables to pass to the script";
763 description = "Sympa configuration";
766 listmasters = mkOption {
768 description = "Listmasters";
770 postgresql = mkPsqlOptions "Sympa";
771 data_sources = mkOption {
774 description = "Data sources to make available to sympa";
779 description = "Scenari to make available to sympa";
787 buildbot = mkOption {
788 description = "Buildbot configuration";
792 description = "Buildbot user";
796 description = "user uid";
800 description = "user gid";
807 description = "Ldap configuration for buildbot";
810 password = mkOption { type = str; description = "Buildbot password"; };
814 projects = mkOption {
815 description = "Projects to make a buildbot for";
816 type = attrsOf (submodule {
818 name = mkOption { type = str; description = "Project name"; };
819 packages = mkOption {
821 example = literalExample ''
822 pkgs: [ pkgs.bash pkgs.git pkgs.gzip pkgs.openssh ];
826 Builds packages list to make available to buildbot project.
827 Takes pkgs as argument.
830 pythonPackages = mkOption {
832 example = literalExample ''
833 p: pkgs: [ pkgs.python3Packages.pip ];
837 Builds python packages list to make available to buildbot project.
838 Takes buildbot python module as first argument and pkgs as second argument in order to augment the python modules list.
841 pythonPathHome = mkOption { type = bool; description = "Whether to add project’s python home to python path"; };
844 description = "Secrets for the project to dump as files";
846 environment = mkOption {
849 Environment variables for the project.
850 BUILDBOT_ is prefixed to the variable names
853 activationScript = mkOption {
856 Activation script to run during deployment
859 builderPaths = mkOption {
860 type = attrsOf unspecified;
863 Attrs of functions to make accessible specifically per builder.
864 Takes pkgs as argument and should return a single path containing binaries.
865 This path will be accessible as BUILDBOT_PATH_<attrskey>
868 webhookTokens = mkOption {
869 type = nullOr (listOf str);
872 List of tokens allowed to push to project’s change_hook/base endpoint
882 description = "Tools configurations";
885 contact = mkOption { type = str; description = "Contact e-mail address"; };
888 type = attrsOf (submodule {
890 url = mkOption { type = str; description = "URL to fetch"; };
891 sha256 = mkOption { type = str; description = "Hash of the url"; };
894 description = "Assets to provide on assets.immae.eu";
897 description = "Davical configuration";
900 postgresql = mkPsqlOptions "Davical";
901 ldap = mkLdapOptions "Davical" {};
905 diaspora = mkOption {
906 description = "Diaspora configuration";
909 postgresql = mkPsqlOptions "Diaspora";
910 redis = mkRedisOptions "Diaspora";
911 ldap = mkLdapOptions "Diaspora" {};
912 secret_token = mkOption { type = str; description = "Secret token"; };
916 dmarc_reports = mkOption {
917 description = "DMARC reports configuration";
920 mysql = mkMysqlOptions "DMARC" {};
921 anonymous_key = mkOption { type = str; description = "Anonymous hashing key"; };
925 etherpad-lite = mkOption {
926 description = "Etherpad configuration";
929 postgresql = mkPsqlOptions "Etherpad";
930 ldap = mkLdapOptions "Etherpad" {
931 group_filter = mkOption { type = str; description = "Filter for groups"; };
933 adminPassword = mkOption { type = str; description = "Admin password for mypads / admin"; };
934 session_key = mkOption { type = str; description = "Session key"; };
935 api_key = mkOption { type = str; description = "API key"; };
936 redirects = mkOption { type = str; description = "Redirects for apache"; };
940 gitolite = mkOption {
941 description = "Gitolite configuration";
944 ldap = mkLdapOptions "Gitolite" {};
948 kanboard = mkOption {
949 description = "Kanboard configuration";
952 postgresql = mkPsqlOptions "Kanboard";
953 ldap = mkLdapOptions "Kanboard" {
954 admin_dn = mkOption { type = str; description = "Admin DN"; };
959 mantisbt = mkOption {
960 description = "Mantisbt configuration";
963 postgresql = mkPsqlOptions "Mantisbt";
964 ldap = mkLdapOptions "Mantisbt" {};
965 master_salt = mkOption { type = str; description = "Master salt for password hash"; };
969 mastodon = mkOption {
970 description = "Mastodon configuration";
973 postgresql = mkPsqlOptions "Mastodon";
974 redis = mkRedisOptions "Mastodon";
975 ldap = mkLdapOptions "Mastodon" {};
976 paperclip_secret = mkOption { type = str; description = "Paperclip secret"; };
977 otp_secret = mkOption { type = str; description = "OTP secret"; };
978 secret_key_base = mkOption { type = str; description = "Secret key base"; };
980 description = "vapid key";
983 private = mkOption { type = str; description = "Private key"; };
984 public = mkOption { type = str; description = "Public key"; };
991 mediagoblin = mkOption {
992 description = "Mediagoblin configuration";
995 postgresql = mkPsqlOptions "Mediagoblin";
996 redis = mkRedisOptions "Mediagoblin";
997 ldap = mkLdapOptions "Mediagoblin" {};
1001 nextcloud = mkOption {
1002 description = "Nextcloud configuration";
1005 postgresql = mkPsqlOptions "Peertube";
1006 redis = mkRedisOptions "Peertube";
1007 password_salt = mkOption { type = str; description = "Password salt"; };
1008 instance_id = mkOption { type = str; description = "Instance ID"; };
1009 secret = mkOption { type = str; description = "App secret"; };
1013 peertube = mkOption {
1014 description = "Peertube configuration";
1017 listenPort = mkOption { type = port; description = "Port to listen to"; };
1018 postgresql = mkPsqlOptions "Peertube";
1019 redis = mkRedisOptions "Peertube";
1020 ldap = mkLdapOptions "Peertube" {};
1024 syden_peertube = mkOption {
1025 description = "Peertube Syden configuration";
1028 listenPort = mkOption { type = port; description = "Port to listen to"; };
1029 postgresql = mkPsqlOptions "Peertube";
1030 redis = mkRedisOptions "Peertube";
1034 phpldapadmin = mkOption {
1035 description = "phpLdapAdmin configuration";
1038 ldap = mkLdapOptions "phpldapadmin" {};
1043 description = "Rompr configuration";
1047 description = "MPD configuration";
1050 host = mkOption { type = str; description = "Host for MPD"; };
1051 port = mkOption { type = port; description = "Port to access MPD host"; };
1058 roundcubemail = mkOption {
1059 description = "Roundcubemail configuration";
1062 postgresql = mkPsqlOptions "TT-RSS";
1063 secret = mkOption { type = str; description = "Secret"; };
1067 shaarli = mkOption {
1068 description = "Shaarli configuration";
1071 ldap = mkLdapOptions "Shaarli" {};
1075 status_engine = mkOption {
1076 description = "Status Engine configuration";
1079 mysql = mkMysqlOptions "StatusEngine" {};
1080 ldap = mkLdapOptions "StatusEngine" {};
1085 description = "Taskwarrior configuration";
1088 ldap = mkLdapOptions "Taskwarrior" {};
1089 taskwarrior-web = mkOption {
1090 description = "taskwarrior-web profiles";
1091 type = attrsOf (submodule {
1095 description = "List of ldap uids having access to this profile";
1097 org = mkOption { type = str; description = "Taskd organisation"; };
1098 key = mkOption { type = str; description = "Taskd key"; };
1099 date = mkOption { type = str; description = "Preferred date format"; };
1107 description = "TT-RSS configuration";
1110 postgresql = mkPsqlOptions "TT-RSS";
1111 ldap = mkLdapOptions "TT-RSS" {};
1115 wallabag = mkOption {
1116 description = "Wallabag configuration";
1119 postgresql = mkPsqlOptions "Wallabag";
1120 ldap = mkLdapOptions "Wallabag" {
1121 admin_filter = mkOption { type = str; description = "Admin users filter"; };
1123 redis = mkRedisOptions "Wallabag";
1124 secret = mkOption { type = str; description = "App secret"; };
1128 webhooks = mkOption {
1130 description = "Mapping 'name'.php => script for webhooks";
1132 csp_reports = mkOption {
1133 description = "CSP report configuration";
1136 report_uri = mkOption { type = str; description = "URI to report CSP violations to"; };
1137 policies = mkOption { type = attrsOf str; description = "CSP policies to apply"; };
1138 postgresql = mkPsqlOptions "CSP reports";
1142 commento = mkOption {
1143 description = "Commento configuration";
1146 listenPort = mkOption { type = port; description = "Port to listen to"; };
1147 postgresql = mkPsqlOptions "Commento";
1148 smtp = mkSmtpOptions "Commento";
1153 description = "Ympd configuration";
1156 listenPort = mkOption { type = port; description = "Port to listen to"; };
1158 description = "MPD configuration";
1161 password = mkOption { type = str; description = "Password to access MPD host"; };
1162 host = mkOption { type = str; description = "Host for MPD"; };
1163 port = mkOption { type = port; description = "Port to access MPD host"; };
1171 description = "Yourls configuration";
1174 mysql = mkMysqlOptions "Yourls" {};
1175 ldap = mkLdapOptions "Yourls" {};
1176 cookieKey = mkOption { type = str; description = "Cookie key"; };
1183 serverSpecific = mkOption { type = attrsOf unspecified; description = "Server specific configuration"; };
1184 websites = mkOption {
1185 description = "Websites configurations";
1189 description = "Immae configuration by environment";
1193 description = "Temp configuration";
1196 ldap = mkLdapOptions "Immae temp" {
1197 filter = mkOption { type = str; description = "Filter for user access"; };
1205 isabelle = mkOption {
1206 description = "Isabelle configurations by environment";
1209 atenSubmodule = mkOption {
1210 description = "environment configuration";
1213 environment = mkOption { type = str; description = "Symfony environment"; };
1214 secret = mkOption { type = str; description = "Symfony App secret"; };
1215 postgresql = mkPsqlOptions "Aten";
1222 aten_production = atenSubmodule;
1223 aten_integration = atenSubmodule;
1224 iridologie = mkOption {
1225 description = "environment configuration";
1228 environment = mkOption { type = str; description = "SPIP environment"; };
1229 mysql = mkMysqlOptions "Iridologie" {};
1230 ldap = mkLdapOptions "Iridologie" {};
1238 description = "Chloe configurations by environment";
1241 chloeSubmodule = mkOption {
1242 description = "environment configuration";
1245 environment = mkOption { type = str; description = "SPIP environment"; };
1246 mysql = mkMysqlOptions "Chloe" {};
1247 ldap = mkLdapOptions "Chloe" {};
1254 production = chloeSubmodule;
1255 integration = chloeSubmodule;
1259 connexionswing = mkOption {
1260 description = "Connexionswing configurations by environment";
1263 csSubmodule = mkOption {
1264 description = "environment configuration";
1267 environment = mkOption { type = str; description = "Symfony environment"; };
1268 mysql = mkMysqlOptions "Connexionswing" {};
1269 secret = mkOption { type = str; description = "Symfony App secret"; };
1270 email = mkOption { type = str; description = "Symfony email notification"; };
1277 production = csSubmodule;
1278 integration = csSubmodule;
1283 description = "Naturaloutil configuration";
1286 mysql = mkMysqlOptions "Naturaloutil" {};
1287 server_admin = mkOption { type = str; description = "Server admin e-mail"; };
1291 telio_tortay = mkOption {
1292 description = "Telio Tortay configuration";
1295 server_admin = mkOption { type = str; description = "Server admin e-mail"; };
1299 ludivine = mkOption {
1300 description = "Ludivinecassal configurations by environment";
1303 lcSubmodule = mkOption {
1304 description = "environment configuration";
1307 environment = mkOption { type = str; description = "Symfony environment"; };
1308 mysql = mkMysqlOptions "LudivineCassal" {};
1309 ldap = mkLdapOptions "LudivineCassal" {};
1310 secret = mkOption { type = str; description = "Symfony App secret"; };
1317 production = lcSubmodule;
1318 integration = lcSubmodule;
1323 description = "Emilia configuration";
1326 postgresql = mkPsqlOptions "Emilia";
1330 florian = mkOption {
1331 description = "Florian configuration";
1334 server_admin = mkOption { type = str; description = "Server admin e-mail"; };
1338 nassime = mkOption {
1339 description = "Nassime configuration";
1342 server_admin = mkOption { type = str; description = "Server admin e-mail"; };
1346 piedsjaloux = mkOption {
1347 description = "Piedsjaloux configurations by environment";
1350 pjSubmodule = mkOption {
1351 description = "environment configuration";
1354 environment = mkOption { type = str; description = "Symfony environment"; };
1355 mysql = mkMysqlOptions "Piedsjaloux" {};
1356 secret = mkOption { type = str; description = "Symfony App secret"; };
1363 production = pjSubmodule;
1364 integration = pjSubmodule;
1369 description = "Europe Richie configurations by environment";
1372 mysql = mkMysqlOptions "Richie" {};
1373 smtp_mailer = mkOption {
1374 description = "SMTP mailer configuration";
1377 user = mkOption { type = str; description = "Username"; };
1378 password = mkOption { type = str; description = "Password"; };
1385 caldance = mkOption {
1386 description = "Caldance configurations by environment";
1389 integration = mkOption {
1390 description = "environment configuration";
1393 password = mkOption { type = str; description = "Password file content for basic auth"; };
1400 tellesflorian = mkOption {
1401 description = "Tellesflorian configurations by environment";
1404 tfSubmodule = mkOption {
1405 description = "environment configuration";
1408 environment = mkOption { type = str; description = "Symfony environment"; };
1409 mysql = mkMysqlOptions "Tellesflorian" {};
1410 secret = mkOption { type = str; description = "Symfony App secret"; };
1411 invite_passwords = mkOption { type = str; description = "Password basic auth"; };
1418 integration = tfSubmodule;
1426 privateFiles = mkOption {
1429 Path to secret files to make available during build
1433 options.hostEnv = mkOption {
1436 default = config.myEnv.servers."${name}";
1437 description = "Host environment";