X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Fwebsites%2Fisabelle%2Firidologie.nix;h=460bd2a902db048e8c6ae9148036883a8e5056d7;hb=423c3f1caefdf5f125a2acf7456b5ca0273cee4b;hp=652f86d5d75cd045ba124bf67540ae24528eb22d;hpb=31b1365c4184e9e5331ed7f6f339f340f6637052;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/websites/isabelle/iridologie.nix b/modules/private/websites/isabelle/iridologie.nix index 652f86d..460bd2a 100644 --- a/modules/private/websites/isabelle/iridologie.nix +++ b/modules/private/websites/isabelle/iridologie.nix @@ -1,32 +1,49 @@ -{ lib, config, ... }: +{ lib, pkgs, config, ... }: let + iridologie = pkgs.callPackage ./spip_builder.nix { + inherit (pkgs.webapps) iridologie; + config = config.myEnv.websites.isabelle.iridologie; + apacheUser = config.services.httpd.Prod.user; + apacheGroup = config.services.httpd.Prod.group; + }; + cfg = config.myServices.websites.isabelle.iridologie; - varDir = "/var/lib/ftp/isabelle"; in { options.myServices.websites.isabelle.iridologie.enable = lib.mkEnableOption "enable Iridologie's website"; config = lib.mkIf cfg.enable { + services.duplyBackup.profiles.iridologie_prod.rootDir = iridologie.app.varDir; + secrets.keys = iridologie.keys; services.webstats.sites = [ { name = "iridologie.icommandeur.org"; } ]; + + systemd.services.phpfpm-iridologie.after = lib.mkAfter iridologie.phpFpm.serviceDeps; + systemd.services.phpfpm-iridologie.wants = iridologie.phpFpm.serviceDeps; + services.phpfpm.pools.iridologie = { + listen = iridologie.phpFpm.socket; + extraConfig = iridologie.phpFpm.pool; + phpOptions = config.services.phpfpm.phpOptions + '' + extension=${pkgs.php}/lib/php/extensions/mysqli.so + ''; + }; + system.activationScripts.iridologie = iridologie.activationScript; + myServices.websites.webappDirs."${iridologie.apache.webappName}" = iridologie.app.webRoot; + services.websites.env.production.modules = iridologie.apache.modules; services.websites.env.production.vhostConfs.iridologie = { - certName = "aten"; - addToCerts = true; - hosts = [ "iridologie.icommandeur.org" "icommandeur.org" "www.icommandeur.org" ]; - root = varDir; - extraConfig = [ + certName = "aten"; + addToCerts = true; + hosts = [ "iridologie.icommandeur.org" "icommandeur.org" "www.icommandeur.org" ]; + root = iridologie.apache.root; + extraConfig = [ '' - Use Stats iridologie.icommandeur.org - RewriteEngine On - RewriteCond "%{HTTP_HOST}" "!^iridologie\.icommandeur\.org$" [NC] - RewriteRule ^(.+)$ https://iridologie.icommandeur.org$1 [R=302,L] - - - DirectoryIndex index.html - AllowOverride None - Require all granted - + RewriteEngine On + RewriteCond "%{HTTP_HOST}" "!^iridologie\.icommandeur\.org$" [NC] + RewriteRule ^(.+)$ https://iridologie.icommandeur.org$1 [R=302,L] '' + iridologie.apache.vhostConf ]; }; + services.websites.env.production.watchPaths = [ + "/var/secrets/webapps/${iridologie.app.environment}-iridologie" + ]; }; } -