modules/private/websites/denise/evariste.nix

   1 { lib, config, pkgs, ... }:
   2 let
   3   cfg = config.myServices.websites.denise.evariste;
   4   nsiVarDir = "/var/lib/ftp/denise/nsievariste";
   5   stmgVarDir = "/var/lib/ftp/denise/stmgevariste";
   6   apacheUser = config.services.httpd.Prod.user;
   7   apacheGroup = config.services.httpd.Prod.group;
   8 in {
   9   options.myServices.websites.denise.evariste.enable = lib.mkEnableOption "enable NSI/STMG Evariste website";
  10
  11   config = lib.mkIf cfg.enable {
  12     services.webstats.sites = [
  13       { name = "nsievariste.immae.eu"; }
  14       { name = "stmgevariste.immae.eu"; }
  15     ];
  16
  17     services.websites.env.production.modules = [ "proxy_fcgi" ];
  18     system.activationScripts.denise_evariste = {
  19       deps = [ "httpd" ];
  20       text = ''
  21         install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/denise_nsievariste
  22         install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/denise_stmgevariste
  23         '';
  24     };
  25     services.phpfpm.pools.denise_nsievariste = {
  26       user = apacheUser;
  27       group = apacheGroup;
  28       settings = {
  29         "listen.owner" = apacheUser;
  30         "listen.group" = apacheGroup;
  31
  32         "pm" = "dynamic";
  33         "pm.max_children" = "20";
  34         "pm.start_servers" = "2";
  35         "pm.min_spare_servers" = "1";
  36         "pm.max_spare_servers" = "3";
  37
  38         "php_admin_value[open_basedir]" = "/var/lib/php/sessions/denise_nsievariste:${nsiVarDir}:/tmp";
  39         "php_admin_value[session.save_path]" = "/var/lib/php/sessions/denise_nsievariste";
  40       };
  41       phpPackage = pkgs.php72;
  42     };
  43     services.websites.env.production.vhostConfs.denise_nsievariste = {
  44       certName     = "denise_evariste";
  45       addToCerts   = true;
  46       certMainHost = "nsievariste.immae.eu";
  47       hosts        = ["nsievariste.immae.eu" ];
  48       root         = nsiVarDir;
  49       extraConfig  = [
  50         ''
  51         Use Stats nsievariste.immae.eu
  52
  53         <FilesMatch "\.php$">
  54           SetHandler "proxy:unix:${config.services.phpfpm.pools.denise_nsievariste.socket}|fcgi://localhost"
  55         </FilesMatch>
  56
  57         <Directory ${nsiVarDir}>
  58           DirectoryIndex index.php index.htm index.html
  59           Options Indexes FollowSymLinks MultiViews Includes
  60           AllowOverride None
  61           Require all granted
  62         </Directory>
  63           ''
  64       ];
  65     };
  66
  67     services.phpfpm.pools.denise_stmgevariste = {
  68       user = apacheUser;
  69       group = apacheGroup;
  70       settings = {
  71         "listen.owner" = apacheUser;
  72         "listen.group" = apacheGroup;
  73
  74         "pm" = "dynamic";
  75         "pm.max_children" = "20";
  76         "pm.start_servers" = "2";
  77         "pm.min_spare_servers" = "1";
  78         "pm.max_spare_servers" = "3";
  79
  80         "php_admin_value[open_basedir]" = "/var/lib/php/sessions/denise_stmgevariste:${stmgVarDir}:/tmp";
  81         "php_admin_value[session.save_path]" = "/var/lib/php/sessions/denise_stmgevariste";
  82       };
  83       phpPackage = pkgs.php72;
  84     };
  85     services.websites.env.production.vhostConfs.denise_stmgevariste = {
  86       certName     = "denise_evariste";
  87       addToCerts   = true;
  88       hosts        = ["stmgevariste.immae.eu" ];
  89       root         = stmgVarDir;
  90       extraConfig  = [
  91         ''
  92         Use Stats stmgevariste.immae.eu
  93
  94         <FilesMatch "\.php$">
  95           SetHandler "proxy:unix:${config.services.phpfpm.pools.denise_stmgevariste.socket}|fcgi://localhost"
  96         </FilesMatch>
  97
  98         <Directory ${stmgVarDir}>
  99           DirectoryIndex index.php index.htm index.html
 100           Options Indexes FollowSymLinks MultiViews Includes
 101           AllowOverride None
 102           Require all granted
 103         </Directory>
 104           ''
 105       ];
 106     };
 107   };
 108 }