1 { stdenv, lib, fetchzip, fetchurl, fetchedGitPrivate, sassc }:
3 chloe = { config }: rec {
4 environment = config.environment;
6 serviceDeps = [ "mysql.service" "${environment}-chloe-key.service" ];
7 socket = "/var/run/phpfpm/chloe-${environment}.sock";
11 group = ${apache.group}
12 listen.owner = ${apache.user}
13 listen.group = ${apache.group}
14 php_admin_value[upload_max_filesize] = 20M
15 php_admin_value[post_max_size] = 20M
16 ;php_admin_flag[log_errors] = on
17 php_admin_value[open_basedir] = "${../commons/spip/spip_mes_options.php}:${configDir}:${webRoot}:${varDir}:/tmp"
18 php_admin_value[session.save_path] = "${varDir}/phpSessions"
19 ${if environment == "dev" then ''
22 pm.process_idle_timeout = 60
27 pm.min_spare_servers = 1
28 pm.max_spare_servers = 3
31 keys."${environment}-chloe" = {
32 destDir = "/run/keys/webapps";
37 SetEnv SPIP_CONFIG_DIR "${configDir}"
38 SetEnv SPIP_VAR_DIR "${varDir}"
39 SetEnv SPIP_SITE "chloe-${environment}"
40 SetEnv SPIP_LDAP_BASE "dc=immae,dc=eu"
41 SetEnv SPIP_LDAP_HOST "ldaps://ldap.immae.eu"
42 SetEnv SPIP_LDAP_SEARCH_DN "${config.ldap.dn}"
43 SetEnv SPIP_LDAP_SEARCH_PW "${config.ldap.password}"
44 SetEnv SPIP_LDAP_SEARCH "${config.ldap.search}"
45 SetEnv SPIP_MYSQL_HOST "${config.mysql.host}"
46 SetEnv SPIP_MYSQL_PORT "${config.mysql.port}"
47 SetEnv SPIP_MYSQL_DB "${config.mysql.name}"
48 SetEnv SPIP_MYSQL_USER "${config.mysql.user}"
49 SetEnv SPIP_MYSQL_PASSWORD "${config.mysql.password}"
55 modules = [ "proxy_fcgi" ];
56 webappName = "chloe_${environment}";
57 root = "/run/current-system/webapps/${webappName}";
59 Include /run/keys/webapps/${environment}-chloe
62 ${if environment == "prod" then ''
63 RewriteRule ^/news.rss /spip.php?page=backend&id_rubrique=1
67 SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
71 DirectoryIndex index.php index.htm index.html
72 Options -Indexes +FollowSymLinks +MultiViews +Includes
73 Include ${root}/htaccess.txt
75 AllowOverride AuthConfig FileInfo Limit
79 <DirectoryMatch "${root}/squelettes">
83 <FilesMatch "(.htaccess|rewrite-rules|.gitignore)$">
87 ${if environment == "dev" then ''
90 Require ldap-group cn=chloe.immae.eu,cn=httpd,ou=services,dc=immae,dc=eu
91 ErrorDocument 401 "<html><meta http-equiv=\"refresh\" content=\"0;url=https://osteopathe-cc.fr\"></html>"
94 Use Stats osteopathe-cc.fr
99 deps = [ "wrappers" ];
101 install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir} ${varDir}/IMG ${varDir}/tmp ${varDir}/local
102 install -m 0750 -o ${apache.user} -g ${apache.group} -d ${varDir}/phpSessions
105 configDir = ./chloe_config_ + environment;
106 varDir = "/var/lib/chloe_${environment}";
107 siteDir = stdenv.mkDerivation (fetchedGitPrivate ./chloe.json // rec {
114 buildInputs = [ sassc ];
116 webRoot = stdenv.mkDerivation rec {
117 name = "chloe-${environment}-spip-${version}";
120 url = "https://files.spip.net/spip/archives/SPIP-v${version}.zip";
121 sha256 = "1r1mjvsnrp6mvkgjakvi3x4ms8m8k5mp93micbbg8r99fj7qlfkq";
123 paches = [ ../commons/spip/spip_ldap_patch.patch ];
125 rm -rf IMG local tmp config/remove.txt
126 ln -sf ${../commons/spip/spip_mes_options.php} config/mes_options.php
127 echo "Require all denied" > "config/.htaccess"
128 ln -sf ${varDir}/{IMG,local} .
132 cp -a ${siteDir}/* $out