X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fprivate%2Fwebsites%2Fludivinecassal%2Fbuilder.nix;fp=nixops%2Fmodules%2Fwebsites%2Fludivine%2Fludivinecassal.nix;h=3167bce7358ad7da61a54ea8935be233abc01d2c;hb=f8026b6e4c869aa108f6361c8ccd50890657994d;hp=39fd08871cfc50b607c0746c06b2b953e2771022;hpb=4aac110f17f0528d90510eec00c9a8df60bcf04f;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/nixops/modules/websites/ludivine/ludivinecassal.nix b/modules/private/websites/ludivinecassal/builder.nix similarity index 88% rename from nixops/modules/websites/ludivine/ludivinecassal.nix rename to modules/private/websites/ludivinecassal/builder.nix index 39fd088..3167bce 100644 --- a/nixops/modules/websites/ludivine/ludivinecassal.nix +++ b/modules/private/websites/ludivinecassal/builder.nix @@ -1,11 +1,11 @@ -{ config, ludivinecassal, pkgs, ruby, sass, imagemagick }: +{ apacheUser, apacheGroup, config, ludivinecassal, pkgs, ruby, sass, imagemagick }: rec { app = ludivinecassal.override { inherit (config) environment; }; varDir = "/var/lib/ludivinecassal_${app.environment}"; keys = [{ dest = "webapps/${app.environment}-ludivinecassal"; - user = apache.user; - group = apache.group; + user = apacheUser; + group = apacheGroup; permissions = "0400"; text = '' # This file is auto-generated during the composer install @@ -45,7 +45,7 @@ rec { "${app}" != "$(cat ${app.varDir}/currentWebappDir 2>/dev/null)" ] \ || ! sha512sum -c --status ${app.varDir}/currentKey; then pushd ${app} > /dev/null - /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=${app.environment} cache:clear --no-warmup + /run/wrappers/bin/sudo -u ${apacheUser} ./bin/console --env=${app.environment} cache:clear --no-warmup popd > /dev/null echo -n "${app}" > ${app.varDir}/currentWebappDir sha512sum /var/secrets/webapps/${app.environment}-ludivinecassal > ${app.varDir}/currentKey @@ -55,10 +55,10 @@ rec { socket = "/var/run/phpfpm/ludivinecassal-${app.environment}.sock"; pool = '' listen = ${socket} - user = ${apache.user} - group = ${apache.group} - listen.owner = ${apache.user} - listen.group = ${apache.group} + user = ${apacheUser} + group = ${apacheGroup} + listen.owner = ${apacheUser} + listen.group = ${apacheGroup} php_admin_value[upload_max_filesize] = 20M php_admin_value[post_max_size] = 20M ;php_admin_flag[log_errors] = on @@ -78,8 +78,6 @@ rec { ''}''; }; apache = rec { - user = "wwwrun"; - group = "wwwrun"; modules = [ "proxy_fcgi" ]; webappName = "ludivine_${app.environment}"; root = "/run/current-system/webapps/${webappName}"; @@ -149,9 +147,9 @@ rec { activationScript = { deps = [ "wrappers" ]; text = '' - install -m 0755 -o ${apache.user} -g ${apache.group} -d ${app.varDir} - install -m 0755 -o ${apache.user} -g ${apache.group} -d ${app.varDir}/tmp - install -m 0750 -o ${apache.user} -g ${apache.group} -d ${app.varDir}/phpSessions + install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d ${app.varDir} + install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d ${app.varDir}/tmp + install -m 0750 -o ${apacheUser} -g ${apacheGroup} -d ${app.varDir}/phpSessions ''; }; }