diff options
author | Ismaël Bouya <ismael.bouya@normalesup.org> | 2020-04-18 16:10:56 +0200 |
---|---|---|
committer | Ismaël Bouya <ismael.bouya@normalesup.org> | 2020-04-20 01:51:48 +0200 |
commit | d3452fc59b9839846225fd254926c64a9c71f071 (patch) | |
tree | a98a0958b826ac4b2ab137720edf0195c65dd958 /modules/private/websites/denise | |
parent | 514f9ec3beec470c4445be690673a0ceab9115b4 (diff) | |
download | Nix-d3452fc59b9839846225fd254926c64a9c71f071.tar.gz Nix-d3452fc59b9839846225fd254926c64a9c71f071.tar.zst Nix-d3452fc59b9839846225fd254926c64a9c71f071.zip |
Refactor websites
Diffstat (limited to 'modules/private/websites/denise')
-rw-r--r-- | modules/private/websites/denise/denisejerome.nix | 31 | ||||
-rw-r--r-- | modules/private/websites/denise/evariste.nix | 102 |
2 files changed, 133 insertions, 0 deletions
diff --git a/modules/private/websites/denise/denisejerome.nix b/modules/private/websites/denise/denisejerome.nix new file mode 100644 index 0000000..a75e591 --- /dev/null +++ b/modules/private/websites/denise/denisejerome.nix | |||
@@ -0,0 +1,31 @@ | |||
1 | { lib, config, ... }: | ||
2 | let | ||
3 | cfg = config.myServices.websites.denise.denisejerome; | ||
4 | varDir = "/var/lib/ftp/denise/denisejerome"; | ||
5 | env = config.myEnv.websites.denisejerome; | ||
6 | in { | ||
7 | options.myServices.websites.denise.denisejerome.enable = lib.mkEnableOption "enable Denise Jerome's website"; | ||
8 | |||
9 | config = lib.mkIf cfg.enable { | ||
10 | services.webstats.sites = [ { name = "denisejerome.piedsjaloux.fr"; } ]; | ||
11 | |||
12 | services.websites.env.production.vhostConfs.denise_denisejerome = { | ||
13 | certName = "denise"; | ||
14 | certMainHost = "denisejerome.piedsjaloux.fr"; | ||
15 | hosts = ["denisejerome.piedsjaloux.fr" ]; | ||
16 | root = varDir; | ||
17 | extraConfig = [ | ||
18 | '' | ||
19 | Use Stats denisejerome.piedsjaloux.fr | ||
20 | |||
21 | <Directory ${varDir}> | ||
22 | DirectoryIndex index.htm index.html | ||
23 | Options Indexes FollowSymLinks MultiViews Includes | ||
24 | AllowOverride AuthConfig | ||
25 | Require all granted | ||
26 | </Directory> | ||
27 | '' | ||
28 | ]; | ||
29 | }; | ||
30 | }; | ||
31 | } | ||
diff --git a/modules/private/websites/denise/evariste.nix b/modules/private/websites/denise/evariste.nix new file mode 100644 index 0000000..460302b --- /dev/null +++ b/modules/private/websites/denise/evariste.nix | |||
@@ -0,0 +1,102 @@ | |||
1 | { lib, config, ... }: | ||
2 | let | ||
3 | cfg = config.myServices.websites.denise.evariste; | ||
4 | nsiVarDir = "/var/lib/ftp/denise/nsievariste"; | ||
5 | stmgVarDir = "/var/lib/ftp/denise/stmgevariste"; | ||
6 | apacheUser = config.services.httpd.Prod.user; | ||
7 | apacheGroup = config.services.httpd.Prod.group; | ||
8 | in { | ||
9 | options.myServices.websites.denise.evariste.enable = lib.mkEnableOption "enable NSI/STMG Evariste website"; | ||
10 | |||
11 | config = lib.mkIf cfg.enable { | ||
12 | services.webstats.sites = [ | ||
13 | { name = "nsievariste.immae.eu"; } | ||
14 | { name = "stmgevariste.immae.eu"; } | ||
15 | ]; | ||
16 | |||
17 | services.websites.env.production.modules = [ "proxy_fcgi" ]; | ||
18 | system.activationScripts.denise_evariste = { | ||
19 | deps = [ "httpd" ]; | ||
20 | text = '' | ||
21 | install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/denise_nsievariste | ||
22 | install -m 0755 -o ${apacheUser} -g ${apacheGroup} -d /var/lib/php/sessions/denise_stmgevariste | ||
23 | ''; | ||
24 | }; | ||
25 | services.phpfpm.pools.denise_nsievariste = { | ||
26 | user = apacheUser; | ||
27 | group = apacheGroup; | ||
28 | settings = { | ||
29 | "listen.owner" = apacheUser; | ||
30 | "listen.group" = apacheGroup; | ||
31 | |||
32 | "pm" = "ondemand"; | ||
33 | "pm.max_children" = "5"; | ||
34 | "pm.process_idle_timeout" = "60"; | ||
35 | |||
36 | "php_admin_value[open_basedir]" = "/var/lib/php/sessions/denise_nsievariste:${nsiVarDir}:/tmp"; | ||
37 | "php_admin_value[session.save_path]" = "/var/lib/php/sessions/denise_nsievariste"; | ||
38 | }; | ||
39 | }; | ||
40 | services.websites.env.production.vhostConfs.denise_nsievariste = { | ||
41 | certName = "denise_evariste"; | ||
42 | addToCerts = true; | ||
43 | certMainHost = "nsievariste.immae.eu"; | ||
44 | hosts = ["nsievariste.immae.eu" ]; | ||
45 | root = nsiVarDir; | ||
46 | extraConfig = [ | ||
47 | '' | ||
48 | Use Stats nsievariste.immae.eu | ||
49 | |||
50 | <FilesMatch "\.php$"> | ||
51 | SetHandler "proxy:unix:${config.services.phpfpm.pools.denise_nsievariste.socket}|fcgi://localhost" | ||
52 | </FilesMatch> | ||
53 | |||
54 | <Directory ${nsiVarDir}> | ||
55 | DirectoryIndex index.php index.htm index.html | ||
56 | Options Indexes FollowSymLinks MultiViews Includes | ||
57 | AllowOverride None | ||
58 | Require all granted | ||
59 | </Directory> | ||
60 | '' | ||
61 | ]; | ||
62 | }; | ||
63 | |||
64 | services.phpfpm.pools.denise_stmgevariste = { | ||
65 | user = apacheUser; | ||
66 | group = apacheGroup; | ||
67 | settings = { | ||
68 | "listen.owner" = apacheUser; | ||
69 | "listen.group" = apacheGroup; | ||
70 | |||
71 | "pm" = "ondemand"; | ||
72 | "pm.max_children" = "5"; | ||
73 | "pm.process_idle_timeout" = "60"; | ||
74 | |||
75 | "php_admin_value[open_basedir]" = "/var/lib/php/sessions/denise_stmgevariste:${stmgVarDir}:/tmp"; | ||
76 | "php_admin_value[session.save_path]" = "/var/lib/php/sessions/denise_stmgevariste"; | ||
77 | }; | ||
78 | }; | ||
79 | services.websites.env.production.vhostConfs.denise_stmgevariste = { | ||
80 | certName = "denise_evariste"; | ||
81 | addToCerts = true; | ||
82 | hosts = ["stmgevariste.immae.eu" ]; | ||
83 | root = stmgVarDir; | ||
84 | extraConfig = [ | ||
85 | '' | ||
86 | Use Stats stmgevariste.immae.eu | ||
87 | |||
88 | <FilesMatch "\.php$"> | ||
89 | SetHandler "proxy:unix:${config.services.phpfpm.pools.denise_stmgevariste.socket}|fcgi://localhost" | ||
90 | </FilesMatch> | ||
91 | |||
92 | <Directory ${stmgVarDir}> | ||
93 | DirectoryIndex index.php index.htm index.html | ||
94 | Options Indexes FollowSymLinks MultiViews Includes | ||
95 | AllowOverride None | ||
96 | Require all granted | ||
97 | </Directory> | ||
98 | '' | ||
99 | ]; | ||
100 | }; | ||
101 | }; | ||
102 | } | ||