modules/private/websites/denise/evariste.nix

   1 { lib, config, pkgs, ... }:
   2 let
   3   cfg = config.myServices.websites.denise.evariste;
   4   nsiVarDir = "/var/lib/ftp/denise/nsievariste";
   5   stmgVarDir = "/var/lib/ftp/denise/stmgevariste";
   6   apacheUser = config.services.httpd.Prod.user;
   7   apacheGroup = config.services.httpd.Prod.group;
   8 in {
   9   options.myServices.websites.denise.evariste.enable = lib.mkEnableOption "enable NSI/STMG Evariste website";
  10
  11   config = lib.mkIf cfg.enable {
  12     services.webstats.sites = [
  13       { name = "nsievariste.immae.eu"; }
  14       { name = "stmgevariste.immae.eu"; }
  15     ];
  16
  17     services.websites.env.production.modules = [ "proxy_fcgi" ];
  18     system.activationScripts.denise_evariste = {
  19       deps = [ "httpd" ];
  20       text = ''
  21         install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/denise_nsievariste
  22         install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/denise_stmgevariste
  23         '';
  24     };
  25     services.phpfpm.pools.denise_nsievariste = {
  26       user = apacheUser;
  27       group = apacheGroup;
  28       settings = {
  29         "listen.owner" = apacheUser;
  30         "listen.group" = apacheGroup;
  31
  32         "pm" = "ondemand";
  33         "pm.max_children" = "5";
  34         "pm.process_idle_timeout" = "60";
  35
  36         "php_admin_value[open_basedir]" = "/var/lib/php/sessions/denise_nsievariste:${nsiVarDir}:/tmp";
  37         "php_admin_value[session.save_path]" = "/var/lib/php/sessions/denise_nsievariste";
  38       };
  39       phpPackage = pkgs.php72;
  40     };
  41     services.websites.env.production.vhostConfs.denise_nsievariste = {
  42       certName     = "denise_evariste";
  43       addToCerts   = true;
  44       certMainHost = "nsievariste.immae.eu";
  45       hosts        = ["nsievariste.immae.eu" ];
  46       root         = nsiVarDir;
  47       extraConfig  = [
  48         ''
  49         Use Stats nsievariste.immae.eu
  50
  51         <FilesMatch "\.php$">
  52           SetHandler "proxy:unix:${config.services.phpfpm.pools.denise_nsievariste.socket}|fcgi://localhost"
  53         </FilesMatch>
  54
  55         <Directory ${nsiVarDir}>
  56           DirectoryIndex index.php index.htm index.html
  57           Options Indexes FollowSymLinks MultiViews Includes
  58           AllowOverride None
  59           Require all granted
  60         </Directory>
  61           ''
  62       ];
  63     };
  64
  65     services.phpfpm.pools.denise_stmgevariste = {
  66       user = apacheUser;
  67       group = apacheGroup;
  68       settings = {
  69         "listen.owner" = apacheUser;
  70         "listen.group" = apacheGroup;
  71
  72         "pm" = "ondemand";
  73         "pm.max_children" = "5";
  74         "pm.process_idle_timeout" = "60";
  75
  76         "php_admin_value[open_basedir]" = "/var/lib/php/sessions/denise_stmgevariste:${stmgVarDir}:/tmp";
  77         "php_admin_value[session.save_path]" = "/var/lib/php/sessions/denise_stmgevariste";
  78       };
  79       phpPackage = pkgs.php72;
  80     };
  81     services.websites.env.production.vhostConfs.denise_stmgevariste = {
  82       certName     = "denise_evariste";
  83       addToCerts   = true;
  84       hosts        = ["stmgevariste.immae.eu" ];
  85       root         = stmgVarDir;
  86       extraConfig  = [
  87         ''
  88         Use Stats stmgevariste.immae.eu
  89
  90         <FilesMatch "\.php$">
  91           SetHandler "proxy:unix:${config.services.phpfpm.pools.denise_stmgevariste.socket}|fcgi://localhost"
  92         </FilesMatch>
  93
  94         <Directory ${stmgVarDir}>
  95           DirectoryIndex index.php index.htm index.html
  96           Options Indexes FollowSymLinks MultiViews Includes
  97           AllowOverride None
  98           Require all granted
  99         </Directory>
 100           ''
 101       ];
 102     };
 103   };
 104 }