Move each php session to a private destination

[perso/Immae/Config/Nix.git] / virtual / packages / aten.nix
diff --git a/virtual/packages/aten.nix b/virtual/packages/aten.nix

index 016676f92aaa913d179ef28f1c0acac28d8efba8..d67f7b7c8587eb64b657641eb0a23ef3dcc5f43d 100644 (file)
--- a/virtual/packages/aten.nix
+++ b/virtual/packages/aten.nix
@@ -16,6 +16,7 @@ let
          php_admin_value[post_max_size] = 20M
          ;php_admin_flag[log_errors] = on
          php_admin_value[open_basedir] = "${webappDir}:${varDir}:/tmp"
+        php_admin_value[session.save_path] = "${varDir}/phpSessions"
          ${if environment == "dev" then ''
          pm = ondemand
          pm.max_children = 5
@@ -58,6 +59,8 @@ let
          ErrorDocument 401 "<html><meta http-equiv=\"refresh\" content=\"0;url=https://aten.pro\"></html>"
        </Location>
        '' else ''
+      Use Stats aten.pro
+
        <Location /backend>
          Use LDAPConnect
          Require ldap-group   cn=aten.pro,cn=httpd,ou=services,dc=immae,dc=eu
@@ -78,6 +81,7 @@ let
        deps = [ "wrappers" ];
        text = ''
        install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir}
+      install -m 0750 -o ${apache.user} -g ${apache.group} -d ${varDir}/phpSessions
        if [ ! -f "${varDir}/currentWebappDir" -o \
            "${webappDir}" != "$(cat ${varDir}/currentWebappDir 2>/dev/null)" ]; then
          pushd ${webappDir} > /dev/null