1 { lib, config, pkgs, ... }:
3 cfg = config.myServices.websites.richie.production;
4 vardir = "/var/lib/richie_production";
5 richieSrc = pkgs.stdenv.mkDerivation rec {
6 version = pkgs.sources.websites-richie-app.version;
8 name = "${pname}-${version}";
9 src = pkgs.sources.websites-richie-app;
10 phases = "installPhase";
14 ln -sf ${vardir}/files $out/
15 ln -sf ${vardir}/drapeaux $out/images/
16 ln -sf ${vardir}/photos $out/
17 sed -i "s@localedef --list-archive@localedef --list-archive /run/current-system/sw/lib/locale/locale-archive@" $out/admin/parametres.php
20 secretPath = config.secrets.fullPaths."websites/richie/production";
21 apacheUser = config.services.httpd.Prod.user;
22 apacheGroup = config.services.httpd.Prod.group;
25 options.myServices.websites.richie.production.enable = lib.mkEnableOption "enable Richie's website";
26 config = lib.mkIf cfg.enable {
27 services.webstats.sites = [ { name = "europe-richie.org"; } ];
29 secrets.keys."websites/richie/production" = {
33 text = with config.myEnv.websites.richie; ''
36 $hote_sql = '${mysql.host}';
37 $login_sql = '${mysql.user}';
38 $bdd_sql = '${mysql.database}';
39 $mdp_sql = '${mysql.password}';
41 $db = mysqli_connect($hote_sql,$login_sql,$mdp_sql);
44 $smtp_mailer->Auth('${smtp_mailer.user}', '${smtp_mailer.password}');
48 system.activationScripts.richie_production = {
51 install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/richie_production
52 install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d ${vardir}
55 services.phpfpm.pools.richie_production = {
59 "listen.owner" = apacheUser;
60 "listen.group" = apacheGroup;
63 "pm.max_children" = "20";
64 "pm.start_servers" = "2";
65 "pm.min_spare_servers" = "1";
66 "pm.max_spare_servers" = "3";
68 "php_admin_value[open_basedir]" = "${vardir}:/var/lib/php/sessions/richie_production:${secretPath}:${richieSrc}:/tmp";
69 "php_admin_value[session.save_path]" = "/var/lib/php/sessions/richie_production";
72 PATH = "/run/current-system/sw/bin:${lib.makeBinPath [ pkgs.imagemagick ]}";
73 BDD_CONNECT = secretPath;
75 phpOptions = config.services.phpfpm.phpOptions + ''
76 date.timezone = 'Europe/Paris'
78 phpPackage = pkgs.php72;
80 services.websites.env.production.modules = [ "proxy_fcgi" ];
81 services.websites.env.production.vhostConfs.richie_production = {
84 certMainHost = "europe-richie.org";
85 hosts = [ "europe-richie.org" "www.europe-richie.org" ];
89 Use Stats europe-richie.org
90 ErrorDocument 404 /404.html
91 <LocationMatch "^/files/.*/admin/">
94 <Directory ${richieSrc}>
95 DirectoryIndex index.php index.htm index.html
96 Options Indexes FollowSymLinks MultiViews Includes
100 <FilesMatch "\.php$">
101 SetHandler "proxy:unix:${config.services.phpfpm.pools.richie_production.socket}|fcgi://localhost"