modules/private/websites/denise/evariste.nix

   1 { lib, config,  ... }:
   2 let
   3   cfg = config.myServices.websites.denise.evariste;
   4   nsiVarDir = "/var/lib/ftp/denise/nsievariste";
   5   stmgVarDir = "/var/lib/ftp/denise/stmgevariste";
   6   apacheUser = config.services.httpd.Prod.user;
   7   apacheGroup = config.services.httpd.Prod.group;
   8 in {
   9   options.myServices.websites.denise.evariste.enable = lib.mkEnableOption "enable NSI/STMG Evariste website";
  10
  11   config = lib.mkIf cfg.enable {
  12     services.webstats.sites = [
  13       { name = "nsievariste.immae.eu"; }
  14       { name = "stmgevariste.immae.eu"; }
  15     ];
  16
  17     services.websites.env.production.modules = [ "proxy_fcgi" ];
  18     system.activationScripts.denise_evariste = {
  19       deps = [ "httpd" ];
  20       text = ''
  21         install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/denise_nsievariste
  22         install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/denise_stmgevariste
  23         '';
  24     };
  25     services.phpfpm.pools.denise_nsievariste = {
  26       user = apacheUser;
  27       group = apacheGroup;
  28       settings = {
  29         "listen.owner" = apacheUser;
  30         "listen.group" = apacheGroup;
  31
  32         "pm" = "ondemand";
  33         "pm.max_children" = "5";
  34         "pm.process_idle_timeout" = "60";
  35
  36         "php_admin_value[open_basedir]" = "/var/lib/php/sessions/denise_nsievariste:${nsiVarDir}:/tmp";
  37         "php_admin_value[session.save_path]" = "/var/lib/php/sessions/denise_nsievariste";
  38       };
  39     };
  40     services.websites.env.production.vhostConfs.denise_nsievariste = {
  41       certName     = "denise_evariste";
  42       addToCerts   = true;
  43       certMainHost = "nsievariste.immae.eu";
  44       hosts        = ["nsievariste.immae.eu" ];
  45       root         = nsiVarDir;
  46       extraConfig  = [
  47         ''
  48         Use Stats nsievariste.immae.eu
  49
  50         <FilesMatch "\.php$">
  51           SetHandler "proxy:unix:${config.services.phpfpm.pools.denise_nsievariste.socket}|fcgi://localhost"
  52         </FilesMatch>
  53
  54         <Directory ${nsiVarDir}>
  55           DirectoryIndex index.php index.htm index.html
  56           Options Indexes FollowSymLinks MultiViews Includes
  57           AllowOverride None
  58           Require all granted
  59         </Directory>
  60           ''
  61       ];
  62     };
  63
  64     services.phpfpm.pools.denise_stmgevariste = {
  65       user = apacheUser;
  66       group = apacheGroup;
  67       settings = {
  68         "listen.owner" = apacheUser;
  69         "listen.group" = apacheGroup;
  70
  71         "pm" = "ondemand";
  72         "pm.max_children" = "5";
  73         "pm.process_idle_timeout" = "60";
  74
  75         "php_admin_value[open_basedir]" = "/var/lib/php/sessions/denise_stmgevariste:${stmgVarDir}:/tmp";
  76         "php_admin_value[session.save_path]" = "/var/lib/php/sessions/denise_stmgevariste";
  77       };
  78     };
  79     services.websites.env.production.vhostConfs.denise_stmgevariste = {
  80       certName     = "denise_evariste";
  81       addToCerts   = true;
  82       hosts        = ["stmgevariste.immae.eu" ];
  83       root         = stmgVarDir;
  84       extraConfig  = [
  85         ''
  86         Use Stats stmgevariste.immae.eu
  87
  88         <FilesMatch "\.php$">
  89           SetHandler "proxy:unix:${config.services.phpfpm.pools.denise_stmgevariste.socket}|fcgi://localhost"
  90         </FilesMatch>
  91
  92         <Directory ${stmgVarDir}>
  93           DirectoryIndex index.php index.htm index.html
  94           Options Indexes FollowSymLinks MultiViews Includes
  95           AllowOverride None
  96           Require all granted
  97         </Directory>
  98           ''
  99       ];
 100     };
 101   };
 102 }