]> git.immae.eu Git - perso/Immae/Config/Nix.git/blob - modules/private/websites/commons/adminer.nix
Protect adminer access
[perso/Immae/Config/Nix.git] / modules / private / websites / commons / adminer.nix
1 {}:
2 rec {
3 phpFpm = {
4 socket = "/var/run/phpfpm/adminer.sock";
5 };
6 apache = rec {
7 modules = [ "proxy_fcgi" ];
8 webappName = "_adminer";
9 root = "/run/current-system/webapps/${webappName}";
10 vhostConf = ''
11 Alias /adminer ${root}
12 <Directory ${root}>
13 DirectoryIndex index.php
14 <FilesMatch "\.php$">
15 SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
16 </FilesMatch>
17
18 Use LDAPConnect
19 Require ldap-group cn=users,cn=mysql,cn=pam,ou=services,dc=immae,dc=eu
20 Require ldap-group cn=users,cn=postgresql,cn=pam,ou=services,dc=immae,dc=eu
21 </Directory>
22 '';
23 };
24 }