]> git.immae.eu Git - perso/Immae/Config/Nix.git/blob - nixops/modules/websites/ludivine/default.nix
Move Ludivine Piedsjaloux and Florian's websites passwords to a secure location
[perso/Immae/Config/Nix.git] / nixops / modules / websites / ludivine / default.nix
1 { lib, pkgs, config, myconfig, mylibs, ... }:
2 let
3 ludivinecassal = pkgs.callPackage ./ludivinecassal.nix { inherit (mylibs) fetchedGitPrivate; };
4 ludivinecassal_dev = ludivinecassal {
5 config = myconfig.env.websites.ludivinecassal.integration;
6 };
7 ludivinecassal_prod = ludivinecassal {
8 config = myconfig.env.websites.ludivinecassal.production;
9 };
10
11 cfg = config.services.myWebsites.Ludivine;
12 in {
13 options.services.myWebsites.Ludivine = {
14 production = {
15 enable = lib.mkEnableOption "enable Ludivine's website in production";
16 };
17 integration = {
18 enable = lib.mkEnableOption "enable Ludivine's website in integration";
19 };
20 };
21
22 config = lib.mkMerge [
23 (lib.mkIf cfg.production.enable {
24 deployment.keys = ludivinecassal_prod.keys;
25 services.myWebsites.commons.stats.enable = true;
26 services.myWebsites.commons.stats.sites = [
27 {
28 name = "ludivinecassal.com";
29 conf = ./goaccess.conf;
30 }
31 ];
32
33 security.acme.certs."ludivinecassal" = config.services.myCertificates.certConfig // {
34 domain = "ludivinecassal.com";
35 extraDomains = {
36 "www.ludivinecassal.com" = null;
37 };
38 };
39
40 services.myPhpfpm.poolConfigs.ludivinecassal_prod = ludivinecassal_prod.phpFpm.pool;
41 system.activationScripts.ludivinecassal_prod = ludivinecassal_prod.activationScript;
42 system.extraSystemBuilderCmds = ''
43 mkdir -p $out/webapps
44 ln -s ${ludivinecassal_prod.webRoot} $out/webapps/${ludivinecassal_prod.apache.webappName}
45 '';
46 services.myWebsites.production.modules = ludivinecassal_prod.apache.modules;
47 services.myWebsites.production.vhostConfs.ludivine = {
48 certName = "ludivinecassal";
49 hosts = ["ludivinecassal.com" "www.ludivinecassal.com" ];
50 root = ludivinecassal_prod.apache.root;
51 extraConfig = [ ludivinecassal_prod.apache.vhostConf ];
52 };
53 })
54 (lib.mkIf cfg.integration.enable {
55 deployment.keys = ludivinecassal_dev.keys;
56 security.acme.certs."eldiron".extraDomains."ludivine.immae.eu" = null;
57
58 services.myPhpfpm.poolConfigs.ludivinecassal_dev = ludivinecassal_dev.phpFpm.pool;
59 system.activationScripts.ludivinecassal_dev = ludivinecassal_dev.activationScript;
60 system.extraSystemBuilderCmds = ''
61 mkdir -p $out/webapps
62 ln -s ${ludivinecassal_dev.webRoot} $out/webapps/${ludivinecassal_dev.apache.webappName}
63 '';
64 services.myWebsites.apacheConfig.ludivinecassal_dev.modules = ludivinecassal_dev.apache.modules;
65 services.myWebsites.integration.modules = ludivinecassal_dev.apache.modules;
66 services.myWebsites.integration.vhostConfs.ludivine = {
67 certName = "eldiron";
68 hosts = [ "ludivine.immae.eu" ];
69 root = ludivinecassal_dev.apache.root;
70 extraConfig = [ ludivinecassal_dev.apache.vhostConf ];
71 };
72 })
73 ];
74 }