X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Fwebsites%2Fconnexionswing%2Fproduction.nix;h=119a15e047e994b5b491d853a4c730bd04d163d7;hb=d3452fc59b9839846225fd254926c64a9c71f071;hp=fa31931eaa43418fad5f73b679357434b29c44f0;hpb=ab8f306d7c2c49b8116e1af7b355ed2384617ed9;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/websites/connexionswing/production.nix b/modules/private/websites/connexionswing/production.nix index fa31931..119a15e 100644 --- a/modules/private/websites/connexionswing/production.nix +++ b/modules/private/websites/connexionswing/production.nix @@ -1,16 +1,20 @@ { lib, pkgs, config, ... }: let secrets = config.myEnv.websites.connexionswing.production; - app = pkgs.webapps.connexionswing.override { environment = secrets.environment; }; + app = pkgs.callPackage ./app { + environment = secrets.environment; + varDir = "/var/lib/connexionswing_production"; + secretsPath = config.secrets.fullPaths."websites/connexionswing/production"; + }; cfg = config.myServices.websites.connexionswing.production; pcfg = config.services.phpApplication; in { options.myServices.websites.connexionswing.production.enable = lib.mkEnableOption "enable Connexionswing's website in production"; config = lib.mkIf cfg.enable { - services.duplyBackup.profiles.connexionswing_prod.rootDir = app.varDir; + services.duplyBackup.profiles.connexionswing_produdction.rootDir = app.varDir; services.webstats.sites = [ { name = "connexionswing.com"; } ]; - services.phpApplication.apps.connexionswing_prod = { + services.phpApplication.apps.connexionswing_production = { websiteEnv = "production"; httpdUser = config.services.httpd.Prod.user; httpdGroup = config.services.httpd.Prod.group; @@ -26,24 +30,24 @@ in { "./bin/console --env=${app.environment} cache:clear --no-warmup" ]; phpOpenbasedir = [ "/tmp" "/run/wrappers/bin/sendmail" ]; - phpPool = '' - php_admin_value[upload_max_filesize] = 20M - php_admin_value[post_max_size] = 20M - ;php_admin_flag[log_errors] = on - pm = dynamic - pm.max_children = 20 - pm.start_servers = 2 - pm.min_spare_servers = 1 - pm.max_spare_servers = 3 - ''; + phpPool = { + "php_admin_value[upload_max_filesize]" = "20M"; + "php_admin_value[post_max_size]" = "20M"; + #"php_admin_flag[log_errors]" = "on"; + "pm" = "dynamic"; + "pm.max_children" = "20"; + "pm.start_servers" = "2"; + "pm.min_spare_servers" = "1"; + "pm.max_spare_servers" = "3"; + }; phpWatchFiles = [ - config.secrets.fullPaths."webapps/${app.environment}-connexionswing" + config.secrets.fullPaths."websites/connexionswing/production" ]; }; secrets.keys = [ { - dest = "webapps/${app.environment}-connexionswing"; + dest = "websites/connexionswing/production"; user = config.services.httpd.Prod.user; group = config.services.httpd.Prod.group; permissions = "0400"; @@ -71,15 +75,15 @@ in { } ]; - services.websites.env.production.vhostConfs.connexionswing_prod = { + services.websites.env.production.vhostConfs.connexionswing_production = { certName = "connexionswing"; certMainHost = "connexionswing.com"; hosts = ["connexionswing.com" "sandetludo.com" "www.connexionswing.com" "www.sandetludo.com" ]; - root = pcfg.webappDirs.connexionswing_prod; + root = pcfg.webappDirs.connexionswing_production; extraConfig = [ '' - SetHandler "proxy:unix:${pcfg.phpListenPaths.connexionswing_prod}|fcgi://localhost" + SetHandler "proxy:unix:${pcfg.phpListenPaths.connexionswing_production}|fcgi://localhost" @@ -96,7 +100,7 @@ in { Use Stats connexionswing.com - + Options Indexes FollowSymLinks MultiViews Includes AllowOverride All Require all granted