Add Chloé's website

[perso/Immae/Config/Nix.git] / virtual / eldiron.nix

diff --git a/virtual/eldiron.nix b/virtual/eldiron.nix
index 68eddf607446c5630f46ac13b9659271893c6377..3f2ba27886f188a9712cdacdced60c79789ce7ba 100644 (file)
--- a/virtual/eldiron.nix
+++ b/virtual/eldiron.nix
@@ -42,6 +42,16 @@
         cmakeFlags = old.cmakeFlags ++ [ "-DWITH_AUTHENTICATION_PAM=ON" ];
         buildInputs = old.buildInputs ++ [ pkgs.pam ];
       });
+      goaccess = oldpkgs.goaccess.overrideAttrs(old: rec {
+        name = "goaccess-${version}";
+        version = "1.3";
+        src = pkgs.fetchurl {
+          url = "https://tar.goaccess.io/${name}.tar.gz";
+          sha256 = "16vv3pj7pbraq173wlxa89jjsd279004j4kgzlrsk1dz4if5qxwc";
+        };
+        configureFlags = old.configureFlags ++ [ "--enable-tcb=btree" ];
+        buildInputs = old.buildInputs ++ [ pkgs.tokyocabinet pkgs.bzip2 ];
+      });
     };
 
     networking = {
@@ -85,6 +95,7 @@
     in [
       pkgs.telnet
       pkgs.vim
+      pkgs.goaccess
       occ
     ];
 
@@ -108,6 +119,8 @@
           "cloud.immae.eu" = null;
           "ludivine.immae.eu" = null;
           "dev.aten.pro" = null;
+          "piedsjaloux.immae.eu" = null;
+          "chloe.immae.eu" = null;
         };
       };
       "ludivinecassal" = {
@@ -134,6 +147,18 @@
           "www.aten.pro" = null;
         };
       };
+      "piedsjaloux" = {
+        webroot = "/var/lib/acme/acme-challenge";
+        email = "ismael@bouya.org";
+        domain = "piedsjaloux.fr";
+        plugins = [ "cert.pem" "chain.pem" "fullchain.pem" "full.pem" "key.pem" "account_key.json" ];
+        postRun = ''
+          systemctl reload httpd.service
+        '';
+        extraDomains = {
+          "www.piedsjaloux.fr" = null;
+        };
+      };
       # "connexionswing" = {
       #   webroot = "/var/lib/acme/acme-challenge";
       #   email = "ismael@bouya.org";
@@ -202,6 +227,10 @@
         connexionswing_prod = mypkgs.connexionswing_prod.phpFpm.pool;
         ludivinecassal_dev = mypkgs.ludivinecassal_dev.phpFpm.pool;
         ludivinecassal_prod = mypkgs.ludivinecassal_prod.phpFpm.pool;
+        piedsjaloux_dev = mypkgs.piedsjaloux_dev.phpFpm.pool;
+        piedsjaloux_prod = mypkgs.piedsjaloux_prod.phpFpm.pool;
+        chloe_dev = mypkgs.chloe_dev.phpFpm.pool;
+        chloe_prod = mypkgs.chloe_prod.phpFpm.pool;
         aten_dev = mypkgs.aten_dev.phpFpm.pool;
         aten_prod = mypkgs.aten_prod.phpFpm.pool;
         nextcloud = mypkgs.nextcloud.phpFpm.pool;
@@ -213,7 +242,11 @@
       connexionswing_dev  = mypkgs.connexionswing_dev.activationScript;
       connexionswing_prod = mypkgs.connexionswing_prod.activationScript;
       ludivinecassal_dev  = mypkgs.ludivinecassal_dev.activationScript;
-      ludivinecassal_prod  = mypkgs.ludivinecassal_prod.activationScript;
+      ludivinecassal_prod = mypkgs.ludivinecassal_prod.activationScript;
+      piedsjaloux_dev     = mypkgs.piedsjaloux_dev.activationScript;
+      piedsjaloux_prod    = mypkgs.piedsjaloux_prod.activationScript;
+      chloe_dev  = mypkgs.chloe_dev.activationScript;
+      chloe_prod = mypkgs.chloe_prod.activationScript;
       aten_dev  = mypkgs.aten_dev.activationScript;
       aten_prod = mypkgs.aten_prod.activationScript;
       nextcloud = mypkgs.nextcloud.activationScript;
@@ -247,6 +280,12 @@
           fi
         '';
       };
+      goaccess = ''
+        mkdir -p /var/lib/goaccess
+        mkdir -p /var/lib/goaccess/aten.pro
+        mkdir -p /var/lib/goaccess/ludivinecassal.com
+        mkdir -p /var/lib/goaccess/piedsjaloux.fr
+        '';
     };
 
     environment.etc."ssh/ldap_authorized_keys" = let
@@ -313,6 +352,19 @@
                 AuthBasicProvider    ldap
               </IfModule>
             </Macro>
+
+            <Macro Stats %{domain}>
+              Alias /awstats /var/lib/goaccess/%{domain}
+              <Directory /var/lib/goaccess/%{domain}>
+                DirectoryIndex index.html
+                AllowOverride None
+                Require all granted
+              </Directory>
+              <Location /awstats>
+                Use LDAPConnect
+                Require ldap-group cn=%{domain},ou=stats,cn=httpd,ou=services,dc=immae,dc=eu
+              </Location>
+            </Macro>
           '';
         };
         http2 = {
@@ -324,7 +376,7 @@
         customLog = {
           modules = [];
           extraConfig = ''
-            LogFormat "%v %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %p" combinedVhost
+            LogFormat "%v:%p %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combinedVhost
           '';
         };
       };
@@ -341,6 +393,10 @@
         mypkgs.connexionswing_prod.apache.modules ++
         mypkgs.ludivinecassal_dev.apache.modules ++
         mypkgs.ludivinecassal_prod.apache.modules ++
+        mypkgs.piedsjaloux_dev.apache.modules ++
+        mypkgs.piedsjaloux_prod.apache.modules ++
+        mypkgs.chloe_dev.apache.modules ++
+        mypkgs.chloe_prod.apache.modules ++
         mypkgs.aten_dev.apache.modules ++
         mypkgs.aten_prod.apache.modules ++
         mypkgs.ympd.apache.modules ++
@@ -396,6 +452,36 @@
             mypkgs.ludivinecassal_prod.apache.vhostConf
           ];
         })
+        (withConf "eldiron" // {
+          hostName = "piedsjaloux.immae.eu";
+          documentRoot = mypkgs.piedsjaloux_dev.webRoot;
+          extraConfig = builtins.concatStringsSep "\n" [
+            mypkgs.piedsjaloux_dev.apache.vhostConf
+          ];
+        })
+        (withConf "piedsjaloux" // {
+          hostName = "piedsjaloux.fr";
+          serverAliases = [ "www.piedsjaloux.fr" ];
+          documentRoot = mypkgs.piedsjaloux_prod.webRoot;
+          extraConfig = builtins.concatStringsSep "\n" [
+            mypkgs.piedsjaloux_prod.apache.vhostConf
+          ];
+        })
+        (withConf "eldiron" // {
+          hostName = "chloe.immae.eu";
+          documentRoot = mypkgs.chloe_dev.webRoot;
+          extraConfig = builtins.concatStringsSep "\n" [
+            mypkgs.chloe_dev.apache.vhostConf
+          ];
+        })
+        (withConf "eldiron" // {
+          hostName = "osteopathe-cc.fr";
+          serverAliases = [ "www.osteopathe-cc.fr" ];
+          documentRoot = mypkgs.chloe_prod.webRoot;
+          extraConfig = builtins.concatStringsSep "\n" [
+            mypkgs.chloe_prod.apache.vhostConf
+          ];
+        })
         (withConf "eldiron" // {
           hostName = "dev.aten.pro";
           documentRoot = mypkgs.aten_dev.webRoot;
@@ -525,5 +611,16 @@
         #host  all     all             all                     pam
       '';
     };
+
+    services.cron = {
+      enable = true;
+      systemCronJobs = let
+        stats = domain: conf: "${pkgs.gnused}/bin/sed -n '/\\['$(LC_ALL=C ${pkgs.coreutils}/bin/date -d yesterday +'%d\\/%b\\/%Y')'/ p' /var/log/httpd/access_log-${domain} | ${pkgs.goaccess}/bin/goaccess -o /var/lib/goaccess/${domain}/index.html -p ${conf}";
+      in [
+        "5 0 * * * root ${stats "aten.pro" ./packages/aten_goaccess.conf}"
+        "5 0 * * * root ${stats "ludivinecassal.com" ./packages/ludivinecassal_goaccess.conf}"
+        "5 0 * * * root ${stats "piedsjaloux.fr" ./packages/piedsjaloux_goaccess.conf}"
+        ];
+    };
   };
 }