X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Fwebsites%2Fdefault.nix;h=701ad1df7a2f7dcfca6283ad6f5f72c6d88df58b;hb=ceb738defb58123fc38d8fd8b5f7713f4022ed67;hp=94506c9261065e1c18e15b27abadb7a2435f2b35;hpb=4c42e0beb65d2a92e988a81aa12f50aa6bd1f820;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/websites/default.nix b/modules/private/websites/default.nix index 94506c9..701ad1d 100644 --- a/modules/private/websites/default.nix +++ b/modules/private/websites/default.nix @@ -1,7 +1,7 @@ { lib, pkgs, config, ... }: let - www_root = "/run/current-system/webapps/_www"; - theme_root = "/run/current-system/webapps/_theme"; + www_root = ./_www; + theme_root = pkgs.webapps.apache-theme.theme; apacheConfig = { cache = { # This setting permits to ignore time-based cache for files in the @@ -52,7 +52,7 @@ let LDAPOpCacheTTL 600 - Include /var/secrets/apache-ldap + Include ${config.secrets.fullPaths."apache-ldap"} ''; }; global = { @@ -102,14 +102,10 @@ in options.myServices.websites.enable = lib.mkEnableOption "enable websites"; config = lib.mkIf config.myServices.websites.enable { - services.duplyBackup.profiles.php = { - rootDir = "/var/lib/php"; - }; users.users.wwwrun.extraGroups = [ "keys" ]; networking.firewall.allowedTCPPorts = [ 80 443 ]; - secrets.keys = [{ - dest = "apache-ldap"; + secrets.keys."apache-ldap" = { user = "wwwrun"; group = "wwwrun"; permissions = "0400"; @@ -125,7 +121,7 @@ in ''; - }]; + }; system.activationScripts = { httpd = '' @@ -148,9 +144,9 @@ in }; }; - services.filesWatcher.httpdProd.paths = [ "/var/secrets/apache-ldap" ]; - services.filesWatcher.httpdInte.paths = [ "/var/secrets/apache-ldap" ]; - services.filesWatcher.httpdTools.paths = [ "/var/secrets/apache-ldap" ]; + services.filesWatcher.httpdProd.paths = [ config.secrets.fullPaths."apache-ldap" ]; + services.filesWatcher.httpdInte.paths = [ config.secrets.fullPaths."apache-ldap" ]; + services.filesWatcher.httpdTools.paths = [ config.secrets.fullPaths."apache-ldap" ]; services.websites.env.production = { enable = true; @@ -216,11 +212,8 @@ in }; }; - services.websites.webappDirs = { - _www = ./_www; - _theme = pkgs.webapps.apache-theme.theme; - }; myServices.websites = { + bakeer.cloud.enable = true; capitaines.landing_pages.enable = true; chloe = { @@ -228,6 +221,12 @@ in production.enable = true; }; + christophe_carpentier = { + website.enable = true; + agorakit.enable = true; + agora-project.enable = true; + }; + cip-ca = { sympa.enable = true; }; @@ -241,10 +240,15 @@ in evariste.enable = true; denisejerome.enable = true; oms.enable = true; + bingo.enable = true; + aventuriers.enable = true; production.enable = true; }; - emilia.moodle.enable = true; + emilia = { + moodle.enable = false; + atelierfringant.enable = true; + }; florian = { app.enable = true; @@ -275,18 +279,32 @@ in nassime.production.enable = true; - nathanael.villon.enable = true; + nath.villon.enable = true; + nicecoop = { + gestion-compte.enable = true; + gestion-compte-integration.enable = true; + odoo.enable = true; + }; papa = { surveillance.enable = true; maison_bbc.enable = true; }; + patrick_fodella = { + ecolyeu.enable = true; + altermondia.enable = true; + }; + piedsjaloux = { integration.enable = true; production.enable = true; }; + ressourcerie_banon.production.enable = true; + ressourcerie_banon.cryptpad.enable = true; + ressourcerie_banon.cloud.enable = true; + richie.production.enable = true; syden.peertube.enable = true; @@ -296,6 +314,7 @@ in tools.assets.enable = true; tools.cloud.enable = true; tools.commento.enable = true; + tools.cryptpad.enable = true; tools.dav.enable = true; tools.db.enable = true; tools.diaspora.enable = true; @@ -307,8 +326,11 @@ in tools.performance.enable = true; tools.tools.enable = true; tools.email.enable = true; + tools.stats.enable = false; + tools.visio.enable = true; games.codenames.enable = true; + games.terraforming-mars.enable = true; }; }; }