Add php to iridologie website

diff --git a/modules/private/websites/isabelle/iridologie.nix b/modules/private/websites/isabelle/iridologie.nix
index 652f86d5d75cd045ba124bf67540ae24528eb22d..cb4e3005350600f2f62716e748e2703d1f9b7688 100644 (file)
--- a/modules/private/websites/isabelle/iridologie.nix
+++ b/modules/private/websites/isabelle/iridologie.nix
@@ -7,6 +7,29 @@ in {
 
   config = lib.mkIf cfg.enable {
     services.webstats.sites = [ { name = "iridologie.icommandeur.org"; } ];
 
   config = lib.mkIf cfg.enable {
     services.webstats.sites = [ { name = "iridologie.icommandeur.org"; } ];

+    system.activationScripts.iridologie = {
+      deps = [ "httpd" ];
+      text = ''
+        install -m 0755 -o wwwrun -g wwwrun -d /var/lib/php/sessions/iridologie
+        '';
+    };
+    services.phpfpm.pools.iridologie = {
+      listen = "/run/phpfpm/iridologie.sock";
+      extraConfig = ''
+        user = wwwrun
+        group = wwwrun
+        listen.owner = wwwrun
+        listen.group = wwwrun
+
+        pm = ondemand
+        pm.max_children = 5
+        pm.process_idle_timeout = 60
+
+        php_admin_value[open_basedir] = "/var/lib/php/sessions/iridologie:${varDir}:/tmp"
+        php_admin_value[session.save_path] = "/var/lib/php/sessions/iridologie"
+        '';
+    };
+    services.websites.env.production.modules = [ "proxy_fcgi" ];

     services.websites.env.production.vhostConfs.iridologie = {
       certName    = "aten";
       addToCerts  = true;
     services.websites.env.production.vhostConfs.iridologie = {
       certName    = "aten";
       addToCerts  = true;


@@ -19,9 +42,13 @@ in {
         RewriteCond "%{HTTP_HOST}" "!^iridologie\.icommandeur\.org$" [NC]
         RewriteRule ^(.+)$ https://iridologie.icommandeur.org$1 [R=302,L]
 
         RewriteCond "%{HTTP_HOST}" "!^iridologie\.icommandeur\.org$" [NC]
         RewriteRule ^(.+)$ https://iridologie.icommandeur.org$1 [R=302,L]
 

+        <FilesMatch "\.php$">
+          SetHandler "proxy:unix:/run/phpfpm/iridologie.sock|fcgi://localhost"
+        </FilesMatch>
+

         <Directory ${varDir}>
         <Directory ${varDir}>

-          DirectoryIndex index.html
-          AllowOverride None
+          DirectoryIndex index.php index.htm index.html
+          AllowOverride All

           Require all granted
         </Directory>
           ''
           Require all granted
         </Directory>
           ''