X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Fwebsites%2Fdefault.nix;h=e8193242b08e2c3980de7d0c026361051656b62a;hb=4c4652aabf2cb3ac8b40f2856eca07a1df9c27e0;hp=07ffc3e98fb431186150868512488733c5cded6e;hpb=8c91e92ca891c8364d91a941813877b95a7103ad;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/websites/default.nix b/modules/private/websites/default.nix index 07ffc3e..e819324 100644 --- a/modules/private/websites/default.nix +++ b/modules/private/websites/default.nix @@ -52,7 +52,7 @@ let LDAPOpCacheTTL 600 - Include /var/secrets/apache-ldap + Include ${config.secrets.fullPaths."apache-ldap"} ''; }; global = { @@ -109,8 +109,7 @@ in users.users.wwwrun.extraGroups = [ "keys" ]; networking.firewall.allowedTCPPorts = [ 80 443 ]; - secrets.keys = [{ - dest = "apache-ldap"; + secrets.keys."apache-ldap" = { user = "wwwrun"; group = "wwwrun"; permissions = "0400"; @@ -126,7 +125,7 @@ in ''; - }]; + }; system.activationScripts = { httpd = '' @@ -149,9 +148,9 @@ in }; }; - services.filesWatcher.httpdProd.paths = [ "/var/secrets/apache-ldap" ]; - services.filesWatcher.httpdInte.paths = [ "/var/secrets/apache-ldap" ]; - services.filesWatcher.httpdTools.paths = [ "/var/secrets/apache-ldap" ]; + services.filesWatcher.httpdProd.paths = [ config.secrets.fullPaths."apache-ldap" ]; + services.filesWatcher.httpdInte.paths = [ config.secrets.fullPaths."apache-ldap" ]; + services.filesWatcher.httpdTools.paths = [ config.secrets.fullPaths."apache-ldap" ]; services.websites.env.production = { enable = true; @@ -243,11 +242,15 @@ in evariste.enable = true; denisejerome.enable = true; oms.enable = true; + bingo.enable = true; aventuriers.enable = true; production.enable = true; }; - emilia.moodle.enable = false; + emilia = { + moodle.enable = false; + atelierfringant.enable = true; + }; florian = { app.enable = true; @@ -317,6 +320,7 @@ in tools.performance.enable = true; tools.tools.enable = true; tools.email.enable = true; + tools.stats.enable = false; games.codenames.enable = true; games.terraforming-mars.enable = true;