Squash changes containing private information

[perso/Immae/Config/Nix.git] / systems / eldiron / websites / performance / default.nix

diff --git a/modules/private/websites/tools/performance/default.nix b/systems/eldiron/websites/performance/default.nix
similarity index 79%
rename from modules/private/websites/tools/performance/default.nix
rename to systems/eldiron/websites/performance/default.nix
index 5715ff08318a9c2b289d1e83c8470b65b7a3dcb8..23f754afec6a04bd444cecff0f9466d01a5fb7d4 100644 (file)
--- a/modules/private/websites/tools/performance/default.nix
+++ b/systems/eldiron/websites/performance/default.nix
@@ -1,7 +1,7 @@
 { pkgs, lib, config, ... }:
 let
   env = config.myEnv.tools.status_engine;
-  package = pkgs.status_engine.interface.override({ config_file = config.secrets.fullPaths."status_engine_ui"; });
+  package = pkgs.status-engine-interface.override({ config_file = config.secrets.fullPaths."status_engine_ui"; });
   apacheRoot = "${package}/public";
   cfg = config.myServices.websites.tools.performance;
 in
@@ -11,6 +11,9 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+    myServices.dns.zones."immae.eu".subdomains.performance =
+      with config.myServices.dns.helpers; ips servers.eldiron.ips.main;
+
     secrets.keys = {
       status_engine_ui = {
         permissions = "0400";
@@ -36,7 +39,7 @@ in
           use_mysql: 1
           mysql:
               host: 127.0.0.1
-              port: ${env.mysql.port}
+              port: ${builtins.toString env.mysql.port}
               username: ${env.mysql.user}
               password: ${env.mysql.password}
               database: ${env.mysql.database}
@@ -48,9 +51,9 @@ in
 
     services.websites.env.tools.modules = [ "proxy_fcgi" ];
 
+    security.acme.certs.eldiron.extraDomainNames = [ "performance.immae.eu" ];
     services.websites.env.tools.vhostConfs.performance = {
       certName   = "eldiron";
-      addToCerts = true;
       hosts      = [ "performance.immae.eu" ];
       root       = apacheRoot;
       extraConfig = [
@@ -79,9 +82,11 @@ in
         "pm.min_spare_servers" = "1";
         "pm.max_spare_servers" = "10";
 
+        "php_admin_value[session.save_handler]" = "redis";
+        "php_admin_value[session.save_path]" = "'unix:///run/redis-php-sessions/redis.sock?persistent=1&prefix=Tools:StatusEngine:'";
         "php_admin_value[open_basedir]" = "${package}:/tmp:${config.secrets.fullPaths."status_engine_ui"}";
       };
-      phpPackage = pkgs.php74;
+      phpPackage = pkgs.php74.withExtensions({ enabled, all }: enabled ++ [ all.redis ]);
     };
 
   };