1 { lib, pkgs, config, myconfig, ... }:
3 cfg = config.services.myWebsites;
4 www_root = "/run/current-system/webapps/_www";
5 theme_root = "/run/current-system/webapps/_theme";
8 modules = [ "deflate" "filter" ];
10 AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript
14 modules = [ "macro" ];
18 <Macro Stats %{domain}>
19 Alias /webstats ${config.services.webstats.dataDir}/%{domain}
20 <Directory ${config.services.webstats.dataDir}/%{domain}>
21 DirectoryIndex index.html
27 Require ldap-group cn=%{domain},ou=stats,cn=httpd,ou=services,dc=immae,dc=eu
33 modules = [ "ldap" "authnz_ldap" ];
35 <IfModule ldap_module>
36 LDAPSharedCacheSize 500000
39 LDAPOpCacheEntries 1024
43 Include /var/secrets/apache-ldap
47 extraConfig = (pkgs.webapps.apache-default.override { inherit www_root;}).apacheConfig;
50 extraConfig = (pkgs.webapps.apache-theme.override { inherit theme_root; }).apacheConfig;
53 modules = [ "http2" ];
60 LogFormat "%v:%p %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combinedVhost
64 makeModules = lib.lists.flatten (lib.attrsets.mapAttrsToList (n: v: v.modules or []) apacheConfig);
65 makeExtraConfig = (builtins.filter (x: x != null) (lib.attrsets.mapAttrsToList (n: v: v.extraConfig or null) apacheConfig));
80 ./ftp/denisejerome.nix
92 ./tools/mediagoblin.nix
96 # Adapted from base phpfpm
101 users.users.wwwrun.extraGroups = [ "keys" ];
102 networking.firewall.allowedTCPPorts = [ 80 443 ];
104 nixpkgs.overlays = [ (self: super: rec {
105 #openssl = self.openssl_1_1;
107 php72 = (super.php72.override {
108 mysql.connector-c = self.mariadb;
109 config.php.mysqlnd = false;
110 config.php.mysqli = false;
111 }).overrideAttrs(old: rec {
112 # Didn't manage to build with mysqli + mysql_config connector
113 configureFlags = old.configureFlags ++ [
114 "--with-mysqli=shared,mysqlnd"
116 # preConfigure = (old.preConfigure or "") + ''
117 # export CPPFLAGS="$CPPFLAGS -I${pkgs.mariadb}/include/mysql/server";
118 # sed -i -e 's/#include "mysqli_priv.h"/#include "mysqli_priv.h"\n#include <mysql_version.h>/' \
119 # ext/mysqli/mysqli.c ext/mysqli/mysqli_prop.c
122 phpPackages = super.php72Packages.override { inherit php; };
125 services.myWebsites.tools.databases.enable = true;
126 services.myWebsites.tools.tools.enable = true;
127 services.myWebsites.tools.dav.enable = true;
128 services.myWebsites.tools.cloud.enable = true;
129 services.myWebsites.tools.git.enable = true;
130 services.myWebsites.tools.mastodon.enable = true;
131 services.myWebsites.tools.mediagoblin.enable = true;
132 services.myWebsites.tools.diaspora.enable = true;
133 services.myWebsites.tools.etherpad-lite.enable = true;
134 services.myWebsites.tools.peertube.enable = true;
136 services.myWebsites.Chloe.production.enable = true;
137 services.myWebsites.Ludivine.production.enable = true;
138 services.myWebsites.Aten.production.enable = true;
139 services.myWebsites.PiedsJaloux.production.enable = true;
140 services.myWebsites.Connexionswing.production.enable = true;
141 services.myWebsites.Jerome.production.enable = true;
142 services.myWebsites.Nassime.production.enable = true;
143 services.myWebsites.Florian.production.enable = true;
144 services.myWebsites.Leila.production.enable = true;
145 services.myWebsites.Papa.production.enable = true;
146 services.myWebsites.DeniseJerome.production.enable = true;
147 services.myWebsites.Emilia.production.enable = true;
148 services.myWebsites.Capitaines.production.enable = true;
149 services.myWebsites.Immae.production.enable = true;
150 services.myWebsites.Release.production.enable = true;
151 services.myWebsites.Temp.production.enable = true;
153 services.myWebsites.Chloe.integration.enable = true;
154 services.myWebsites.Ludivine.integration.enable = true;
155 services.myWebsites.Aten.integration.enable = true;
156 services.myWebsites.PiedsJaloux.integration.enable = true;
157 services.myWebsites.Connexionswing.integration.enable = true;
158 services.myWebsites.TellesFlorian.integration.enable = true;
159 services.myWebsites.Florian.integration.enable = true;
162 dest = "apache-ldap";
165 permissions = "0400";
168 <IfModule authnz_ldap_module>
169 AuthLDAPURL ldap://ldap.immae.eu:389/dc=immae,dc=eu STARTTLS
170 AuthLDAPBindDN cn=httpd,ou=services,dc=immae,dc=eu
171 AuthLDAPBindPassword "${myconfig.env.httpd.ldap.password}"
173 AuthName "Authentification requise (Acces LDAP)"
174 AuthBasicProvider ldap
180 system.activationScripts = {
182 install -d -m 0755 /var/lib/acme/acme-challenge
183 install -d -m 0750 -o wwwrun -g wwwrun /var/lib/php/sessions
184 install -d -m 0750 -o wwwrun -g wwwrun /var/lib/php/sessions/adminer
185 install -d -m 0750 -o wwwrun -g wwwrun /var/lib/php/tmp/adminer
186 install -d -m 0750 -o wwwrun -g wwwrun /var/lib/php/sessions/mantisbt
187 install -d -m 0750 -o wwwrun -g wwwrun /var/lib/php/sessions/davical
188 install -d -m 0750 -o wwwrun -g wwwrun /var/lib/php/sessions/phpldapadmin
192 system.extraSystemBuilderCmds = let
193 adminer = pkgs.callPackage ./commons/adminer.nix {};
195 mkdir -p $out/webapps
196 ln -s ${pkgs.webapps.apache-default.www} $out/webapps/_www
197 ln -s ${pkgs.webapps.apache-theme.theme} $out/webapps/_theme
198 ln -s ${adminer.webRoot} $out/webapps/${adminer.apache.webappName}
201 services.myPhpfpm = {
202 phpPackage = pkgs.php;
204 session.save_path = "/var/lib/php/sessions"
207 session.gc_maxlifetime = 1296000
209 session.cache_expire = 43200
216 services.websites.production = {
218 adminAddr = "httpd@immae.eu";
221 let ips = myconfig.env.servers.eldiron.ips.production;
222 in [ips.ip4] ++ (ips.ip6 or []);
223 modules = makeModules;
224 extraConfig = makeExtraConfig;
226 certName = "eldiron";
227 hosts = ["eldiron.immae.eu" ];
229 extraConfig = [ "DirectoryIndex index.htm" ];
233 services.websites.integration = {
235 adminAddr = "httpd@immae.eu";
238 let ips = myconfig.env.servers.eldiron.ips.integration;
239 in [ips.ip4] ++ (ips.ip6 or []);
240 modules = makeModules;
241 extraConfig = makeExtraConfig;
243 certName = "eldiron";
244 hosts = ["eldiron.immae.eu" ];
246 extraConfig = [ "DirectoryIndex index.htm" ];
250 services.websites.tools = {
252 adminAddr = "httpd@immae.eu";
255 let ips = myconfig.env.servers.eldiron.ips.main;
256 in [ips.ip4] ++ (ips.ip6 or []);
257 modules = makeModules;
258 extraConfig = makeExtraConfig ++
260 RedirectMatch ^/licen[cs]es?_et_tip(ping)?$ https://www.immae.eu/licences_et_tip.html
261 RedirectMatch ^/licen[cs]es?_and_tip(ping)?$ https://www.immae.eu/licenses_and_tipping.html
262 RedirectMatch ^/licen[cs]es?$ https://www.immae.eu/licenses_and_tipping.html
263 RedirectMatch ^/tip(ping)?$ https://www.immae.eu/licenses_and_tipping.html
264 RedirectMatch ^/(mentions|mentions_legales|legal)$ https://www.immae.eu/mentions.html
265 RedirectMatch ^/CGU$ https://www.immae.eu/CGU
270 host = "nossl.immae.eu";
273 certName = "eldiron";
274 hosts = ["eldiron.immae.eu" ];
276 extraConfig = [ "DirectoryIndex index.htm" ];