]> git.immae.eu Git - perso/Immae/Config/Nix.git/blob - modules/private/websites/immae/production.nix
dc89ae33b0895d19b6b7974bb9ef512da3669d15
[perso/Immae/Config/Nix.git] / modules / private / websites / immae / production.nix
1 { lib, pkgs, config, ... }:
2 let
3 cfg = config.myServices.websites.immae.production;
4 varDir = "/var/lib/buildbot/outputs/immaeEu";
5 coursDir = "/var/lib/buildbot/outputs/cours";
6 rechercheDir = "/var/lib/buildbot/outputs/recherche";
7 recettesDir = "/var/lib/buildbot/outputs/recettes";
8 env = config.myEnv.websites.immae;
9 in {
10 options.myServices.websites.immae.production.enable = lib.mkEnableOption "enable Immae's website";
11
12 config = lib.mkIf cfg.enable {
13 services.webstats.sites = [ { name = "www.immae.eu"; } ];
14
15 services.websites.env.production.vhostConfs.immae_production = {
16 certName = "immae";
17 addToCerts = true;
18 certMainHost = "www.immae.eu";
19 hosts = [ "www.immae.eu" "immae.eu" ];
20 root = varDir;
21 extraConfig = [
22 ''
23 Use Stats www.immae.eu
24
25 <LocationMatch /.well-known/(webfinger|host-meta)>
26 Header always set Referrer-Policy "strict-origin-when-cross-origin"
27 Header always set Strict-Transport-Security "max-age=31536000"
28 RequestHeader set X-Forwarded-Proto "https"
29
30 RewriteRule ^(.*)$ https://mastodon.immae.eu%{REQUEST_URI} [QSA,L]
31 </LocationMatch>
32
33 RewriteEngine On
34 RewriteCond "%{REQUEST_URI}" "!^/.well-known/(webfinger|host-meta)"
35 RewriteCond "%{HTTP_HOST}" "!^www\.immae\.eu$" [NC]
36 RewriteRule ^(.+)$ https://www.immae.eu$1 [R=302,L]
37
38 <Directory ${varDir}>
39 DirectoryIndex index.htm index.html
40 Options Indexes FollowSymLinks MultiViews Includes
41 AllowOverride All
42 Require all granted
43 </Directory>
44
45 Alias /cours ${coursDir}
46 <Directory ${coursDir}>
47 DirectoryIndex index.htm index.html
48 Options Indexes FollowSymLinks MultiViews Includes
49 AllowOverride All
50 Require all granted
51 </Directory>
52
53 Alias /recherche ${rechercheDir}
54 <Directory ${rechercheDir}>
55 DirectoryIndex index.htm index.html
56 Options Indexes FollowSymLinks MultiViews Includes
57 AllowOverride All
58 Require all granted
59 </Directory>
60
61 Alias /recettes ${recettesDir}
62 <Directory ${recettesDir}>
63 DirectoryIndex index.htm index.html
64 Options Indexes FollowSymLinks MultiViews Includes
65 AllowOverride All
66 Require all granted
67 </Directory>
68 ''
69 ];
70 };
71
72 services.websites.env.production.vhostConfs.immae_fr = {
73 certName = "immae";
74 addToCerts = true;
75 hosts = [ "www.immae.fr" "immae.fr" ];
76 root = null;
77 extraConfig = [ ''
78 RedirectMatch 301 ^/((?!\.well-known.*$).*)$ https://www.immae.eu/chapeaux/
79 '' ];
80 };
81
82 services.websites.env.production.vhostConfs.immae_bouya = {
83 certName = "immae";
84 addToCerts = true;
85 hosts = [ "bouya.org" "www.bouya.org" ];
86 root = null;
87 extraConfig = [ ''
88 RedirectMatch 301 ^/((?!\.well-known.*$).*)$ https://www.normalesup.org/~bouya/
89 '' ];
90 };
91 };
92 }