};
};
};
- secret_token = writeText "secret_token.rb" ''
- Diaspora::Application.config.secret_key_base = '${env.secret_token}'
+ keys.tools-diaspora-secret_token = {
+ destDir = "/run/keys/webapps";
+ user = "diaspora";
+ group = "diaspora";
+ permissions = "0700";
+ text = ''
+ Diaspora::Application.config.secret_key_base = '${env.secret_token}'
'';
- config = writeText "diaspora.yml" ''
+ };
+ keys.tools-diaspora-config = {
+ destDir = "/run/keys/webapps";
+ user = "diaspora";
+ group = "diaspora";
+ permissions = "0700";
+ text = ''
configuration:
environment:
url: "https://diaspora.immae.eu/"
development:
environment:
'';
- database_config = writeText "database.yml" ''
+ };
+ keys.tools-diaspora-database_config = {
+ destDir = "/run/keys/webapps";
+ user = "diaspora";
+ group = "diaspora";
+ permissions = "0700";
+ text = ''
postgresql: &postgresql
adapter: postgresql
host: "${env.postgresql.socket}"
<<: *combined
database: diaspora_integration2
'';
-
+ };
railsRoot = stdenv.mkDerivation {
name = "diaspora_immae";
inherit diaspora;
+ # FIXME: build machine will contain some passwords in the nix store
builder = writeText "build_diaspora_immae" ''
source $stdenv/setup
cp -a $diaspora $out
cd $out
chmod -R u+rwX .
tar -czf public/source.tar.gz ./{app,db,lib,script,Gemfile,Gemfile.lock,Rakefile,config.ru}
- ln -s ${database_config} config/database.yml
- ln -s ${config} config/diaspora.yml
- ln -s ${secret_token} config/initializers/secret_token.rb
+ ln -s ${writeText "database.yml" keys.tools-diaspora-database_config.text} config/database.yml
+ ln -s ${writeText "diaspora.yml" keys.tools-diaspora-config.text} config/diaspora.yml
+ ln -s ${writeText "secret_token.rb" keys.tools-diaspora-secret_token.text} config/initializers/secret_token.rb
ln -sf ${varDir}/schedule.yml config/schedule.yml
ln -sf ${varDir}/oidc_key.pem config/oidc_key.pem
ln -sf ${varDir}/uploads public/uploads
RAILS_ENV=production ${gems}/bin/rake assets:precompile
+ ln -sf /run/keys/webapps/tools-diaspora-database_config config/database.yml
+ ln -sf /run/keys/webapps/tools-diaspora-config config/diaspora.yml
+ ln -sf /run/keys/webapps/tools-diaspora-secret_token config/initializers/secret_token.rb
rm -rf tmp log
ln -sf ${varDir}/tmp tmp
ln -sf ${varDir}/log log
};
in
{
- inherit railsRoot varDir socketsDir gems;
+ inherit railsRoot varDir socketsDir gems keys;
railsSocket = "${socketsDir}/diaspora.sock";
}