From: Ismaël Bouya <ismael.bouya@normalesup.org>
Date: Wed, 8 Jan 2020 20:36:05 +0000 (+0100)
Subject: Add php to iridologie website
X-Git-Url: https://git.immae.eu/?p=perso%2FImmae%2FConfig%2FNix.git;a=commitdiff_plain;h=fd2af8fa50dc1a60d40a1aa3c4252d8eb3abf5b0

Add php to iridologie website
---

diff --git a/modules/private/websites/isabelle/iridologie.nix b/modules/private/websites/isabelle/iridologie.nix
index 652f86d..cb4e300 100644
--- a/modules/private/websites/isabelle/iridologie.nix
+++ b/modules/private/websites/isabelle/iridologie.nix
@@ -7,6 +7,29 @@ in {
 
   config = lib.mkIf cfg.enable {
     services.webstats.sites = [ { name = "iridologie.icommandeur.org"; } ];
+    system.activationScripts.iridologie = {
+      deps = [ "httpd" ];
+      text = ''
+        install -m 0755 -o wwwrun -g wwwrun -d /var/lib/php/sessions/iridologie
+        '';
+    };
+    services.phpfpm.pools.iridologie = {
+      listen = "/run/phpfpm/iridologie.sock";
+      extraConfig = ''
+        user = wwwrun
+        group = wwwrun
+        listen.owner = wwwrun
+        listen.group = wwwrun
+
+        pm = ondemand
+        pm.max_children = 5
+        pm.process_idle_timeout = 60
+
+        php_admin_value[open_basedir] = "/var/lib/php/sessions/iridologie:${varDir}:/tmp"
+        php_admin_value[session.save_path] = "/var/lib/php/sessions/iridologie"
+        '';
+    };
+    services.websites.env.production.modules = [ "proxy_fcgi" ];
     services.websites.env.production.vhostConfs.iridologie = {
       certName    = "aten";
       addToCerts  = true;
@@ -19,9 +42,13 @@ in {
         RewriteCond "%{HTTP_HOST}" "!^iridologie\.icommandeur\.org$" [NC]
         RewriteRule ^(.+)$ https://iridologie.icommandeur.org$1 [R=302,L]
 
+        <FilesMatch "\.php$">
+          SetHandler "proxy:unix:/run/phpfpm/iridologie.sock|fcgi://localhost"
+        </FilesMatch>
+
         <Directory ${varDir}>
-          DirectoryIndex index.html
-          AllowOverride None
+          DirectoryIndex index.php index.htm index.html
+          AllowOverride All
           Require all granted
         </Directory>
           ''