nixops/modules/websites/aten/default.nix

   1 { lib, pkgs, config, myconfig, mylibs, ... }:
   2 let
   3     aten = pkgs.callPackage ./aten.nix { inherit (mylibs) fetchedGitPrivate yarn2nixPackage; };
   4     aten_dev  = aten {
   5       config = myconfig.env.websites.aten.integration;
   6     };
   7     aten_prod = aten {
   8       config = myconfig.env.websites.aten.production;
   9     };
  10
  11     cfg = config.services.myWebsites.Aten;
  12 in {
  13   options.services.myWebsites.Aten = {
  14     production = {
  15       enable = lib.mkEnableOption "enable Aten's website in production";
  16     };
  17     integration = {
  18       enable = lib.mkEnableOption "enable Aten's website in integration";
  19     };
  20   };
  21
  22   imports = [
  23     ../commons/stats.nix
  24   ];
  25
  26   config = lib.mkMerge [
  27     (lib.mkIf cfg.production.enable {
  28       secrets.keys = aten_prod.keys;
  29       services.myWebsites.commons.stats.enable = true;
  30       services.myWebsites.commons.stats.sites = [
  31         {
  32           name = "aten.pro";
  33           conf = ./goaccess.conf;
  34         }
  35       ];
  36
  37       security.acme.certs."aten" = config.services.myCertificates.certConfig // {
  38         domain = "aten.pro";
  39         extraDomains = {
  40           "www.aten.pro" = null;
  41         };
  42       };
  43
  44       services.myPhpfpm.preStart.aten_prod = aten_prod.phpFpm.preStart;
  45       services.myPhpfpm.serviceDependencies.aten_prod = aten_prod.phpFpm.serviceDeps;
  46       services.myPhpfpm.poolConfigs.aten_prod = aten_prod.phpFpm.pool;
  47       system.activationScripts.aten_prod = aten_prod.activationScript;
  48       system.extraSystemBuilderCmds = ''
  49         mkdir -p $out/webapps
  50         ln -s ${aten_prod.webRoot} $out/webapps/${aten_prod.apache.webappName}
  51         '';
  52       services.myWebsites.apacheConfig.aten_prod.modules = aten_prod.apache.modules;
  53       services.myWebsites.production.modules = aten_prod.apache.modules;
  54       services.myWebsites.production.vhostConfs.aten = {
  55         certName    = "aten";
  56         hosts       = [ "aten.pro" "www.aten.pro" ];
  57         root        = aten_prod.apache.root;
  58         extraConfig = [ aten_prod.apache.vhostConf ];
  59       };
  60     })
  61     (lib.mkIf cfg.integration.enable {
  62       secrets.keys = aten_dev.keys;
  63       security.acme.certs."eldiron".extraDomains."dev.aten.pro" = null;
  64       services.myPhpfpm.preStart.aten_dev = aten_dev.phpFpm.preStart;
  65       services.myPhpfpm.serviceDependencies.aten_dev = aten_dev.phpFpm.serviceDeps;
  66       services.myPhpfpm.poolConfigs.aten_dev = aten_dev.phpFpm.pool;
  67       system.activationScripts.aten_dev = aten_dev.activationScript;
  68       system.extraSystemBuilderCmds = ''
  69         mkdir -p $out/webapps
  70         ln -s ${aten_dev.webRoot} $out/webapps/${aten_dev.apache.webappName}
  71         '';
  72       services.myWebsites.integration.modules = aten_dev.apache.modules;
  73       services.myWebsites.integration.vhostConfs.aten = {
  74         certName    = "eldiron";
  75         hosts       = [ "dev.aten.pro" ];
  76         root        = aten_dev.apache.root;
  77         extraConfig = [ aten_dev.apache.vhostConf ];
  78       };
  79     })
  80   ];
  81 }
  82