modules/private/websites/immae/production.nix

   1 { lib, pkgs, config,  ... }:
   2 let
   3   cfg = config.myServices.websites.immae.production;
   4   varDir = "/var/lib/buildbot/outputs/immaeEu";
   5   coursDir = "/var/lib/buildbot/outputs/cours";
   6   rechercheDir = "/var/lib/buildbot/outputs/recherche";
   7   recettesDir = "/var/lib/buildbot/outputs/recettes";
   8   env = config.myEnv.websites.immae;
   9 in {
  10   options.myServices.websites.immae.production.enable = lib.mkEnableOption "enable Immae's website";
  11
  12   config = lib.mkIf cfg.enable {
  13     services.webstats.sites = [ { name = "www.immae.eu"; } ];
  14
  15     services.websites.env.production.vhostConfs.immae_production = {
  16       certName     = "immae";
  17       addToCerts   = true;
  18       certMainHost = "www.immae.eu";
  19       hosts        = [ "www.immae.eu" "immae.eu" ];
  20       root         = varDir;
  21       extraConfig  = [
  22         ''
  23         Use Stats www.immae.eu
  24
  25         <LocationMatch /.well-known/(webfinger|host-meta)>
  26           Header always set Referrer-Policy "strict-origin-when-cross-origin"
  27           Header always set Strict-Transport-Security "max-age=31536000"
  28           RequestHeader set X-Forwarded-Proto "https"
  29
  30           RewriteRule ^(.*)$ https://mastodon.immae.eu%{REQUEST_URI} [QSA,L]
  31         </LocationMatch>
  32
  33         RewriteEngine On
  34         RewriteCond "%{REQUEST_URI}" "!^/.well-known/(webfinger|host-meta)"
  35         RewriteCond "%{HTTP_HOST}" "!^www\.immae\.eu$" [NC]
  36         RewriteRule ^(.+)$ https://www.immae.eu$1 [R=302,L]
  37
  38         <Directory ${varDir}>
  39           DirectoryIndex index.htm index.html
  40           Options Indexes FollowSymLinks MultiViews Includes
  41           AllowOverride All
  42           Require all granted
  43         </Directory>
  44
  45         Alias /cours ${coursDir}
  46         <Directory ${coursDir}>
  47           DirectoryIndex index.htm index.html
  48           Options Indexes FollowSymLinks MultiViews Includes
  49           AllowOverride All
  50           Require all granted
  51         </Directory>
  52
  53         Alias /recherche ${rechercheDir}
  54         <Directory ${rechercheDir}>
  55           DirectoryIndex index.htm index.html
  56           Options Indexes FollowSymLinks MultiViews Includes
  57           AllowOverride All
  58           Require all granted
  59         </Directory>
  60
  61         Alias /recettes ${recettesDir}
  62         <Directory ${recettesDir}>
  63           DirectoryIndex index.htm index.html
  64           Options Indexes FollowSymLinks MultiViews Includes
  65           AllowOverride All
  66           Require all granted
  67         </Directory>
  68         ''
  69       ];
  70     };
  71
  72     services.websites.env.production.vhostConfs.immae_fr = {
  73       certName    = "immae";
  74       addToCerts  = true;
  75       hosts       = [ "www.immae.fr" "immae.fr" ];
  76       root        = null;
  77       extraConfig = [ ''
  78         RedirectMatch 301 ^/((?!\.well-known.*$).*)$ https://www.immae.eu/chapeaux/
  79         '' ];
  80     };
  81
  82     services.websites.env.production.vhostConfs.immae_bouya = {
  83       certName    = "immae";
  84       addToCerts  = true;
  85       hosts       = [ "bouya.org" "www.bouya.org" ];
  86       root        = null;
  87       extraConfig = [ ''
  88         RedirectMatch 301 ^/((?!\.well-known.*$).*)$ https://www.normalesup.org/~bouya/
  89         '' ];
  90     };
  91   };
  92 }