};
imports = [
+ ./modules/certificates.nix
./modules/gitolite.nix
./modules/gitweb.nix
./modules/databases.nix
+ ./modules/websites/chloe.nix
+ ./modules/websites/ludivine.nix
+ ./modules/websites/aten.nix
+ ./modules/websites/piedsjaloux.nix
+ ./modules/websites/connexionswing.nix
];
services.myGitolite.enable = true;
services.myGitweb.enable = true;
services.myDatabases.enable = true;
+ services.myWebsites.Chloe.production.enable = true;
+ services.myWebsites.Chloe.integration.enable = true;
+ services.myWebsites.Ludivine.production.enable = true;
+ services.myWebsites.Ludivine.integration.enable = true;
+ services.myWebsites.Aten.production.enable = true;
+ services.myWebsites.Aten.integration.enable = true;
+ services.myWebsites.PiedsJaloux.production.enable = true;
+ services.myWebsites.PiedsJaloux.integration.enable = true;
+ services.myWebsites.Connexionswing.production.enable = true;
+ services.myWebsites.Connexionswing.integration.enable = true;
nixpkgs.config.packageOverrides = oldpkgs: rec {
goaccess = oldpkgs.goaccess.overrideAttrs(old: rec {
occ
];
- # FIXME: doesn't work with httpd?
- security.acme.preliminarySelfsigned = true;
- security.acme.certs = {
- # FIXME: /!\ To create a new certificate, create it before using
- # it in httpd
- "eldiron" = {
- webroot = "/var/lib/acme/acme-challenge";
- email = "ismael@bouya.org";
- domain = "eldiron.immae.eu";
- plugins = [ "cert.pem" "chain.pem" "fullchain.pem" "full.pem" "key.pem" "account_key.json" ];
- postRun = ''
- systemctl reload httpd.service
- '';
- allowKeysForGroup = true;
- extraDomains = {
- "db-1.immae.eu" = null;
- "tools.immae.eu" = null;
- "connexionswing.immae.eu" = null;
- "sandetludo.immae.eu" = null;
- "cloud.immae.eu" = null;
- "ludivine.immae.eu" = null;
- "dev.aten.pro" = null;
- "piedsjaloux.immae.eu" = null;
- "chloe.immae.eu" = null;
- "dav.immae.eu" = null;
- };
- };
- "ludivinecassal" = {
- webroot = "/var/lib/acme/acme-challenge";
- email = "ismael@bouya.org";
- domain = "ludivinecassal.com";
- plugins = [ "cert.pem" "chain.pem" "fullchain.pem" "full.pem" "key.pem" "account_key.json" ];
- postRun = ''
- systemctl reload httpd.service
- '';
- extraDomains = {
- "www.ludivinecassal.com" = null;
- };
- };
- "aten" = {
- webroot = "/var/lib/acme/acme-challenge";
- email = "ismael@bouya.org";
- domain = "aten.pro";
- plugins = [ "cert.pem" "chain.pem" "fullchain.pem" "full.pem" "key.pem" "account_key.json" ];
- postRun = ''
- systemctl reload httpd.service
- '';
- extraDomains = {
- "www.aten.pro" = null;
- };
- };
- "piedsjaloux" = {
- webroot = "/var/lib/acme/acme-challenge";
- email = "ismael@bouya.org";
- domain = "piedsjaloux.fr";
- plugins = [ "cert.pem" "chain.pem" "fullchain.pem" "full.pem" "key.pem" "account_key.json" ];
- postRun = ''
- systemctl reload httpd.service
- '';
- extraDomains = {
- "www.piedsjaloux.fr" = null;
- };
- };
- "chloe" = {
- webroot = "/var/lib/acme/acme-challenge";
- email = "ismael@bouya.org";
- domain = "osteopathe-cc.fr";
- plugins = [ "cert.pem" "chain.pem" "fullchain.pem" "full.pem" "key.pem" "account_key.json" ];
- postRun = ''
- systemctl reload httpd.service
- '';
- extraDomains = {
- "www.osteopathe-cc.fr" = null;
- };
- };
- "connexionswing" = {
- webroot = "/var/lib/acme/acme-challenge";
- email = "ismael@bouya.org";
- domain = "connexionswing.com";
- plugins = [ "cert.pem" "chain.pem" "fullchain.pem" "full.pem" "key.pem" "account_key.json" ];
- postRun = ''
- systemctl reload httpd.service
- '';
- extraDomains = {
- "www.connexionswing.com" = null;
- "sandetludo.com" = null;
- "www.sandetludo.com" = null;
- };
- };
+ security.acme.certs."eldiron".extraDomains = {
+ "db-1.immae.eu" = null;
+ "tools.immae.eu" = null;
+ "cloud.immae.eu" = null;
+ "dav.immae.eu" = null;
};
services.openssh.extraConfig = ''
'';
poolConfigs = {
adminer = mypkgs.adminer.phpFpm.pool;
- connexionswing_dev = mypkgs.connexionswing_dev.phpFpm.pool;
- connexionswing_prod = mypkgs.connexionswing_prod.phpFpm.pool;
- ludivinecassal_dev = mypkgs.ludivinecassal_dev.phpFpm.pool;
- ludivinecassal_prod = mypkgs.ludivinecassal_prod.phpFpm.pool;
- piedsjaloux_dev = mypkgs.piedsjaloux_dev.phpFpm.pool;
- piedsjaloux_prod = mypkgs.piedsjaloux_prod.phpFpm.pool;
- chloe_dev = mypkgs.chloe_dev.phpFpm.pool;
- chloe_prod = mypkgs.chloe_prod.phpFpm.pool;
- aten_dev = mypkgs.aten_dev.phpFpm.pool;
- aten_prod = mypkgs.aten_prod.phpFpm.pool;
nextcloud = mypkgs.nextcloud.phpFpm.pool;
mantisbt = mypkgs.mantisbt.phpFpm.pool;
ttrss = mypkgs.ttrss.phpFpm.pool;
};
system.activationScripts = {
- connexionswing_dev = mypkgs.connexionswing_dev.activationScript;
- connexionswing_prod = mypkgs.connexionswing_prod.activationScript;
- ludivinecassal_dev = mypkgs.ludivinecassal_dev.activationScript;
- ludivinecassal_prod = mypkgs.ludivinecassal_prod.activationScript;
- piedsjaloux_dev = mypkgs.piedsjaloux_dev.activationScript;
- piedsjaloux_prod = mypkgs.piedsjaloux_prod.activationScript;
- chloe_dev = mypkgs.chloe_dev.activationScript;
- chloe_prod = mypkgs.chloe_prod.activationScript;
- aten_dev = mypkgs.aten_dev.activationScript;
- aten_prod = mypkgs.aten_prod.activationScript;
nextcloud = mypkgs.nextcloud.activationScript;
ttrss = mypkgs.ttrss.activationScript;
roundcubemail = mypkgs.roundcubemail.activationScript;