X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=nixops%2Fmodules%2Fwebsites%2Fftp%2Fjerome.nix;h=5b86697610d0cb1edea14ee73fd8f5a4ddecc7e1;hb=8a964143a4173fcbd6f398fffee727f228f952fa;hp=6c0decd188497594a2b130f9f8c2c84bb7bc73c8;hpb=85f5ed68104de9edd8f8e532dc0c2de931e3ca1b;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/nixops/modules/websites/ftp/jerome.nix b/nixops/modules/websites/ftp/jerome.nix index 6c0decd..5b86697 100644 --- a/nixops/modules/websites/ftp/jerome.nix +++ b/nixops/modules/websites/ftp/jerome.nix @@ -1,4 +1,4 @@ -{ lib, pkgs, config, myconfig, mylibs, ... }: +{ lib, pkgs, config, myconfig, ... }: let adminer = pkgs.callPackage ../commons/adminer.nix {}; cfg = config.services.myWebsites.Jerome; @@ -11,26 +11,16 @@ in { }; }; - imports = [ - ../commons/stats.nix - ]; - config = lib.mkIf cfg.production.enable { - services.myWebsites.commons.stats.enable = true; - services.myWebsites.commons.stats.sites = [ - { - name = "naturaloutil.immae.eu"; - conf = ./jerome_goaccess.conf; - } - ]; + services.webstats.sites = [ { name = "naturaloutil.immae.eu"; } ]; security.acme.certs."ftp".extraDomains."naturaloutil.immae.eu" = null; security.acme.certs."naturaloutil" = config.services.myCertificates.certConfig // { domain = "naturaloutil.immae.eu"; }; - deployment.keys."prod-naturaloutil" = { - destDir = "/run/keys/webapps"; + secrets.keys = [{ + dest = "webapps/prod-naturaloutil"; user = "wwwrun"; group = "wwwrun"; permissions = "0400"; @@ -49,8 +39,8 @@ in { $database = connect_db($db, $mysql_server, $mysql_base, $mysql_user, $mysql_password); ?> ''; - }; - services.myPhpfpm.serviceDependencies.jerome = [ "mysql.service" "prod-naturaloutil-key.service" ]; + }]; + services.myPhpfpm.serviceDependencies.jerome = [ "mysql.service" ]; services.myPhpfpm.poolConfigs.jerome = '' listen = /run/phpfpm/naturaloutil.sock user = wwwrun @@ -62,8 +52,8 @@ in { pm.max_children = 5 pm.process_idle_timeout = 60 - env[BDD_CONNECT] = "/run/keys/webapps/prod-naturaloutil" - php_admin_value[open_basedir] = "/run/keys/webapps/prod-naturaloutil:${varDir}:/tmp" + env[BDD_CONNECT] = "/var/secrets/webapps/prod-naturaloutil" + php_admin_value[open_basedir] = "/var/secrets/webapps/prod-naturaloutil:${varDir}:/tmp" ''; services.myPhpfpm.poolPhpConfigs.jerome = '' extension=${pkgs.php}/lib/php/extensions/mysqli.so