X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Ftasks%2Fdefault.nix;h=c4f065b20f33be7d14ed5a6b420387b3cf187d81;hb=ab8f306d7c2c49b8116e1af7b355ed2384617ed9;hp=83a1b616b13934f567a6d509a5d4f76ac617a6db;hpb=17f6eae9907a122d4472da727ae8b1ac1c40c027;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/tasks/default.nix b/modules/private/tasks/default.nix index 83a1b61..c4f065b 100644 --- a/modules/private/tasks/default.nix +++ b/modules/private/tasks/default.nix @@ -1,10 +1,10 @@ -{ lib, pkgs, config, myconfig, ... }: +{ lib, pkgs, config, ... }: let cfg = config.myServices.tasks; server_vardir = config.services.taskserver.dataDir; fqdn = "task.immae.eu"; user = config.services.taskserver.user; - env = myconfig.env.tools.task; + env = config.myEnv.tools.task; group = config.services.taskserver.group; taskserver-user-certs = pkgs.runCommand "taskserver-user-certs" {} '' mkdir -p $out/bin @@ -86,6 +86,15 @@ in { }; config = lib.mkIf cfg.enable { + services.duplyBackup.profiles.tasks = { + rootDir = "/var/lib"; + excludeFile = '' + + /var/lib/taskserver + + /var/lib/taskwarrior-web + - /var/lib + ''; + }; + secrets.keys = [{ dest = "webapps/tools-taskwarrior-web"; user = "wwwrun"; @@ -98,12 +107,12 @@ in { SetEnv TASKD_LDAP_DN "${env.ldap.dn}" SetEnv TASKD_LDAP_PASSWORD "${env.ldap.password}" SetEnv TASKD_LDAP_BASE "${env.ldap.base}" - SetEnv TASKD_LDAP_FILTER "${env.ldap.search}" + SetEnv TASKD_LDAP_FILTER "${env.ldap.filter}" ''; }]; - services.websites.tools.watchPaths = [ "/var/secrets/webapps/tools-taskwarrior-web" ]; - services.websites.tools.modules = [ "proxy_fcgi" "sed" ]; - services.websites.tools.vhostConfs.task = { + services.websites.env.tools.watchPaths = [ "/var/secrets/webapps/tools-taskwarrior-web" ]; + services.websites.env.tools.modules = [ "proxy_fcgi" "sed" ]; + services.websites.env.tools.vhostConfs.task = { certName = "eldiron"; addToCerts = true; hosts = [ "task.immae.eu" ]; @@ -183,7 +192,7 @@ in { myServices.websites.webappDirs._task = ./www; - security.acme.certs."task" = config.services.myCertificates.certConfig // { + security.acme.certs."task" = config.myServices.certificates.certConfig // { inherit user group; plugins = [ "fullchain.pem" "key.pem" "cert.pem" "account_key.json" ]; domain = fqdn;