Prepare production configuration for connexionswing

[perso/Immae/Config/Nix.git] / virtual / packages.nix

diff --git a/virtual/packages.nix b/virtual/packages.nix
index cd98b79c3a6caebaa683084dd623987e8c9e1ec8..ef9feb5840a042d0c146667e5b751d85be11ebf6 100644 (file)
--- a/virtual/packages.nix
+++ b/virtual/packages.nix
@@ -61,6 +61,18 @@ let
         SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
       </FilesMatch>
 
+      <Directory ${varDir}/medias>
+        Options FollowSymLinks
+        AllowOverride None
+        Require all granted
+      </Directory>
+
+      <Directory ${varDir}/uploads>
+        Options FollowSymLinks
+        AllowOverride None
+        Require all granted
+      </Directory>
+
       ${if environment == "dev" then ''
       <Location />
         Use LDAPConnect
@@ -131,6 +143,7 @@ let
       # FIXME: can we do better than symlink?
       # FIXME: imagick optional
       # FIXME: initial sync
+      # FIXME: backup
       buildPhase = ''
         export GIT_SSL_CAINFO=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt
         export SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt