modules/private/websites/papa/maison_bbc.nix

   1 { lib, pkgs, config, ... }:
   2 let
   3   cfg = config.myServices.websites.papa.maison_bbc;
   4   varDir = "/var/lib/ftp/papa/site";
   5   apacheUser = config.services.httpd.Prod.user;
   6   apacheGroup = config.services.httpd.Prod.group;
   7 in {
   8   options.myServices.websites.papa.maison_bbc.enable = lib.mkEnableOption "enable Papa Maison bbc website";
   9
  10   config = lib.mkIf cfg.enable {
  11     services.duplyBackup.profiles.papa_maison_bbc.rootDir = varDir;
  12     services.webstats.sites = [ { name = "maison.bbc.bouya.org"; } ];
  13     services.phpfpm.pools.papa_maison_bbc = {
  14       user = apacheUser;
  15       group = apacheGroup;
  16       settings = {
  17         "listen.owner" = apacheUser;
  18         "listen.group" = apacheGroup;
  19
  20         "pm" = "ondemand";
  21         "pm.max_children" = "5";
  22         "pm.process_idle_timeout" = "60";
  23
  24         "php_admin_value[open_basedir]" = varDir;
  25       };
  26       phpOptions = config.services.phpfpm.phpOptions + ''
  27         date.timezone = 'Europe/Paris'
  28         extension=${pkgs.php72}/lib/php/extensions/mysqli.so
  29         '';
  30       phpPackage = pkgs.php72;
  31     };
  32
  33     services.websites.env.production.modules = [ "proxy_fcgi" ];
  34     services.websites.env.production.vhostNoSSLConfs.papa_maison_bbc = {
  35       hosts        = [ "maison.bbc.bouya.org" ];
  36       root         = varDir;
  37       extraConfig  = [
  38         ''
  39         Alias /.well-known/acme-challenge ${config.security.acme.certs.papa.webroot}/.well-known/acme-challenge
  40         RedirectMatch 301 ^/((?!(\.well-known|add.php).*$).*)$ https://maison.bbc.bouya.org/$1
  41         <Directory ${varDir}>
  42           DirectoryIndex index.php index.htm index.html
  43           AllowOverride None
  44           Require all granted
  45           <FilesMatch "\.php$">
  46             SetHandler "proxy:unix:${config.services.phpfpm.pools.papa_maison_bbc.socket}|fcgi://localhost"
  47           </FilesMatch>
  48         </Directory>
  49         <Directory "${config.security.acme.certs.papa.webroot}">
  50           Options Indexes FollowSymLinks
  51           AllowOverride None
  52           Require all granted
  53         </Directory>
  54           ''
  55       ];
  56     };
  57     services.websites.env.production.vhostConfs.papa_maison_bbc = {
  58       certName     = "papa";
  59       addToCerts   = true;
  60       hosts        = [ "maison.bbc.bouya.org" ];
  61       root         = varDir;
  62       forceSSL     = false;
  63       extraConfig  = [
  64         ''
  65         <Directory ${varDir}>
  66           DirectoryIndex index.php index.htm index.html
  67           AllowOverride None
  68           Require all granted
  69           <FilesMatch "\.php$">
  70             SetHandler "proxy:unix:${config.services.phpfpm.pools.papa_maison_bbc.socket}|fcgi://localhost"
  71           </FilesMatch>
  72         </Directory>
  73           ''
  74       ];
  75     };
  76   };
  77 }
  78