]> git.immae.eu Git - perso/Immae/Config/Nix.git/blob - nixops/modules/websites/tools/dav/default.nix
Move secrets module outside of nixops
[perso/Immae/Config/Nix.git] / nixops / modules / websites / tools / dav / default.nix
1 { lib, pkgs, config, myconfig, mylibs, ... }:
2 let
3 infcloud = rec {
4 webappName = "tools_infcloud";
5 root = "/run/current-system/webapps/${webappName}";
6 vhostConf = ''
7 Alias /carddavmate ${root}
8 Alias /caldavzap ${root}
9 Alias /infcloud ${root}
10 <Directory ${root}>
11 AllowOverride All
12 Options FollowSymlinks
13 Require all granted
14 DirectoryIndex index.html
15 </Directory>
16 '';
17 };
18 davical = pkgs.callPackage ./davical.nix {
19 env = myconfig.env.tools.davical;
20 inherit (pkgs.webapps) davical awl;
21 };
22
23 cfg = config.services.myWebsites.tools.dav;
24 in {
25 options.services.myWebsites.tools.dav = {
26 enable = lib.mkEnableOption "enable dav website";
27 };
28
29 config = lib.mkIf cfg.enable {
30 security.acme.certs."eldiron".extraDomains."dav.immae.eu" = null;
31
32 secrets.keys = davical.keys;
33 services.myWebsites.tools.modules = davical.apache.modules;
34
35 services.myWebsites.tools.vhostConfs.dav = {
36 certName = "eldiron";
37 hosts = ["dav.immae.eu" ];
38 root = null;
39 extraConfig = [
40 infcloud.vhostConf
41 davical.apache.vhostConf
42 ];
43 };
44
45 services.myPhpfpm.poolConfigs = {
46 davical = davical.phpFpm.pool;
47 };
48
49 system.extraSystemBuilderCmds = ''
50 mkdir -p $out/webapps
51 ln -s ${davical.webRoot} $out/webapps/${davical.apache.webappName}
52 ln -s ${pkgs.webapps.infcloud} $out/webapps/${infcloud.webappName}
53 '';
54 };
55 }
56