X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=nixops%2Fmodules%2Fwebsites%2Fchloe%2Fchloe.nix;h=e2381d83e92ba44f932b42b81c315c7fc913f2e8;hb=1b3154e40a568a296c74759d68827366b5f26da9;hp=0861cdf69c326b51b176c59c06fed63bcc89b703;hpb=ca330baa14da56456ec538b232a91e1c443241bb;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/nixops/modules/websites/chloe/chloe.nix b/nixops/modules/websites/chloe/chloe.nix index 0861cdf..e2381d8 100644 --- a/nixops/modules/websites/chloe/chloe.nix +++ b/nixops/modules/websites/chloe/chloe.nix @@ -3,7 +3,7 @@ let chloe = { config }: rec { environment = config.environment; phpFpm = rec { - serviceDeps = [ "mysql.service" "${environment}-chloe-key.service" ]; + serviceDeps = [ "mysql.service" ]; socket = "/var/run/phpfpm/chloe-${environment}.sock"; pool = '' listen = ${socket} @@ -28,8 +28,8 @@ let pm.max_spare_servers = 3 ''}''; }; - keys."${environment}-chloe" = { - destDir = "/run/keys/webapps"; + keys = [{ + dest = "webapps/${environment}-chloe"; user = apache.user; group = apache.group; permissions = "0400"; @@ -48,7 +48,7 @@ let SetEnv SPIP_MYSQL_USER "${config.mysql.user}" SetEnv SPIP_MYSQL_PASSWORD "${config.mysql.password}" ''; - }; + }]; apache = rec { user = "wwwrun"; group = "wwwrun"; @@ -56,7 +56,7 @@ let webappName = "chloe_${environment}"; root = "/run/current-system/webapps/${webappName}"; vhostConf = '' - Include /run/keys/webapps/${environment}-chloe + Include /var/secrets/webapps/${environment}-chloe RewriteEngine On ${if environment == "prod" then ''