X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Fwebsites%2Fconnexionswing%2Fintegration.nix;h=9cf2b94c6ec38f53f9455b2c4b4319e727ae9be3;hb=7c5e6fe8b639e3175798c097170a0b94ca7326b7;hp=4f7b72d75dbdb2f19ab10b70a14cc635a4c4efe7;hpb=5400b9b6f65451d41a9106fae6fc00f97d83f4ef;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/websites/connexionswing/integration.nix b/modules/private/websites/connexionswing/integration.nix index 4f7b72d..9cf2b94 100644 --- a/modules/private/websites/connexionswing/integration.nix +++ b/modules/private/websites/connexionswing/integration.nix @@ -1,28 +1,28 @@ { lib, pkgs, config, ... }: let secrets = config.myEnv.websites.connexionswing.integration; - app = pkgs.webapps.connexionswing.override { environment = secrets.environment; }; + webRoot = "/var/lib/ftp/immae/connexionswing/web"; + varDir = "/var/lib/ftp/immae/connexionswing_var"; cfg = config.myServices.websites.connexionswing.integration; pcfg = config.services.phpApplication; in { options.myServices.websites.connexionswing.integration.enable = lib.mkEnableOption "enable Connexionswing's website in integration"; config = lib.mkIf cfg.enable { - services.duplyBackup.profiles.connexionswing_dev.rootDir = app.varDir; - services.phpApplication.apps.connexionswing_dev = { + services.phpApplication.apps.connexionswing_integration = { websiteEnv = "integration"; httpdUser = config.services.httpd.Inte.user; httpdGroup = config.services.httpd.Inte.group; - inherit (app) webRoot varDir; + inherit webRoot varDir; varDirPaths = { "medias" = "0700"; "uploads" = "0700"; "var" = "0700"; }; - inherit app; + app = "/var/lib/ftp/immae/connexionswing"; serviceDeps = [ "mysql.service" ]; preStartActions = [ - "./bin/console --env=${app.environment} cache:clear --no-warmup" + "./bin/console --env=dev cache:clear --no-warmup" ]; phpOpenbasedir = [ "/tmp" "/run/wrappers/bin/sendmail" ]; phpPool = { @@ -34,57 +34,55 @@ in { "pm.process_idle_timeout" = "60"; }; phpEnv = { - SYMFONY_DEBUG_MODE = "yes"; + SYMFONY_DEBUG_MODE = "\"yes\""; }; phpWatchFiles = [ - config.secrets.fullPaths."webapps/${app.environment}-connexionswing" + config.secrets.fullPaths."websites/connexionswing/integration" ]; + phpPackage = pkgs.php72; }; - secrets.keys = [ - { - dest = "webapps/${app.environment}-connexionswing"; - user = config.services.httpd.Inte.user; - group = config.services.httpd.Inte.group; - permissions = "0400"; - text = '' - # This file is auto-generated during the composer install - parameters: - database_host: ${secrets.mysql.host} - database_port: ${secrets.mysql.port} - database_name: ${secrets.mysql.database} - database_user: ${secrets.mysql.user} - database_password: ${secrets.mysql.password} - database_server_version: ${pkgs.mariadb.mysqlVersion} - mailer_transport: sendmail - mailer_host: null - mailer_user: null - mailer_password: null - subscription_email: ${secrets.email} - allow_robots: true - secret: ${secrets.secret} - ''; - } - ]; - - services.websites.env.integration.vhostConfs.connexionswing_dev = { - certName = "integration"; + secrets.keys."websites/connexionswing/integration" = { + user = config.services.httpd.Inte.user; + group = config.services.httpd.Inte.group; + permissions = "0400"; + text = '' + # This file is auto-generated during the composer install + parameters: + database_host: ${secrets.mysql.host} + database_port: ${secrets.mysql.port} + database_name: ${secrets.mysql.database} + database_user: ${secrets.mysql.user} + database_password: ${secrets.mysql.password} + database_server_version: ${pkgs.mariadb.mysqlVersion} + mailer_transport: sendmail + mailer_host: null + mailer_user: null + mailer_password: null + subscription_email: ${secrets.email} + allow_robots: true + secret: ${secrets.secret} + ''; + }; + + services.websites.env.integration.vhostConfs.connexionswing_integration = { + certName = "integration"; addToCerts = true; - hosts = ["connexionswing.immae.eu" "sandetludo.immae.eu" ]; - root = pcfg.webappDirs.connexionswing_dev; + hosts = ["connexionswing.cs.immae.dev" "sandetludo.cs.immae.dev" ]; + root = webRoot; extraConfig = [ '' - SetHandler "proxy:unix:${pcfg.phpListenPaths.connexionswing_dev}|fcgi://localhost" + SetHandler "proxy:unix:${pcfg.phpListenPaths.connexionswing_integration}|fcgi://localhost" - + Options FollowSymLinks AllowOverride None Require all granted - + Options FollowSymLinks AllowOverride None Require all granted @@ -92,11 +90,11 @@ in { Use LDAPConnect - Require ldap-group cn=connexionswing.immae.eu,cn=httpd,ou=services,dc=immae,dc=eu + Require ldap-group cn=cs.immae.dev,cn=httpd,ou=services,dc=immae,dc=eu ErrorDocument 401 "" - + Options Indexes FollowSymLinks MultiViews Includes AllowOverride None Require all granted