modules/private/websites/isabelle/iridologie.nix

   1 { lib, config,  ... }:
   2 let
   3   cfg = config.myServices.websites.isabelle.iridologie;
   4   varDir = "/var/lib/ftp/isabelle";
   5 in {
   6   options.myServices.websites.isabelle.iridologie.enable = lib.mkEnableOption "enable Iridologie's website";
   7
   8   config = lib.mkIf cfg.enable {
   9     services.webstats.sites = [ { name = "iridologie.icommandeur.org"; } ];
  10     system.activationScripts.iridologie = {
  11       deps = [ "httpd" ];
  12       text = ''
  13         install -m 0755 -o wwwrun -g wwwrun -d /var/lib/php/sessions/iridologie
  14         '';
  15     };
  16     services.phpfpm.pools.iridologie = {
  17       listen = "/run/phpfpm/iridologie.sock";
  18       extraConfig = ''
  19         user = wwwrun
  20         group = wwwrun
  21         listen.owner = wwwrun
  22         listen.group = wwwrun
  23
  24         pm = ondemand
  25         pm.max_children = 5
  26         pm.process_idle_timeout = 60
  27
  28         php_admin_value[open_basedir] = "/var/lib/php/sessions/iridologie:${varDir}:/tmp"
  29         php_admin_value[session.save_path] = "/var/lib/php/sessions/iridologie"
  30         '';
  31     };
  32     services.websites.env.production.modules = [ "proxy_fcgi" ];
  33     services.websites.env.production.vhostConfs.iridologie = {
  34       certName    = "aten";
  35       addToCerts  = true;
  36       hosts       = [ "iridologie.icommandeur.org" "icommandeur.org" "www.icommandeur.org" ];
  37       root        = varDir;
  38       extraConfig = [
  39         ''
  40         Use Stats iridologie.icommandeur.org
  41         RewriteEngine On
  42         RewriteCond "%{HTTP_HOST}" "!^iridologie\.icommandeur\.org$" [NC]
  43         RewriteRule ^(.+)$ https://iridologie.icommandeur.org$1 [R=302,L]
  44
  45         <FilesMatch "\.php$">
  46           SetHandler "proxy:unix:/run/phpfpm/iridologie.sock|fcgi://localhost"
  47         </FilesMatch>
  48
  49         <Directory ${varDir}>
  50           DirectoryIndex index.php index.htm index.html
  51           AllowOverride All
  52           Require all granted
  53         </Directory>
  54           ''
  55       ];
  56     };
  57   };
  58 }
  59