X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Ftasks%2Fdefault.nix;h=b523995370416e77affe6baf329f2fa84555c188;hb=74a10960d8659eaffa8224cee31fcf217c69609f;hp=42cc8d282588e4778bdcc76973146e3b27dfb1a2;hpb=5400b9b6f65451d41a9106fae6fc00f97d83f4ef;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/tasks/default.nix b/modules/private/tasks/default.nix index 42cc8d2..b523995 100644 --- a/modules/private/tasks/default.nix +++ b/modules/private/tasks/default.nix @@ -190,14 +190,14 @@ in { phpEnv = { PATH = "/etc/profiles/per-user/${user}/bin"; }; + phpPackage = pkgs.php72; }; }; - myServices.websites.webappDirs._task = ./www; + services.websites.webappDirs._task = ./www; security.acme.certs."task" = config.myServices.certificates.certConfig // { inherit user group; - plugins = [ "fullchain.pem" "key.pem" "cert.pem" "account_key.json" "account_reg.json" ]; domain = fqdn; postRun = '' systemctl restart taskserver.service @@ -263,6 +263,10 @@ in { ''; }; + systemd.slices.taskwarrior = { + description = "Taskwarrior slice"; + }; + systemd.services = (lib.attrsets.mapAttrs' (name: userConfig: let credentials = "${userConfig.org}/${name}/${userConfig.key}"; @@ -314,6 +318,7 @@ in { ''; serviceConfig = { + Slice = "taskwarrior.slice"; User = user; PrivateTmp = true; Restart = "always"; @@ -334,6 +339,9 @@ in { chown :${group} "${server_vardir}/keys/ca.key" chmod g+r "${server_vardir}/keys/ca.key" ''; + taskserver-ca.serviceConfig.Slice = "taskwarrior.slice"; + taskserver-init.serviceConfig.Slice = "taskwarrior.slice"; + taskserver.serviceConfig.Slice = "taskwarrior.slice"; }; };