Add Immae's website

Fixes https://git.immae.eu/mantisbt/view.php?id=76

1 files changed, 69 insertions, 0 deletions

diff --git a/nixops/modules/websites/ftp/immae.nix b/nixops/modules/websites/ftp/immae.nix
new file mode 100644
index 0000000..6acfe44
--- /dev/null
+++ b/nixops/modules/websites/ftp/immae.nix
@@ -0,0 +1,69 @@
+{ lib, pkgs, config, myconfig, mylibs, ... }:
+let
+    cfg = config.services.myWebsites.Immae;
+    varDir = "/var/lib/ftp/immae";
+    env = myconfig.env.websites.immae;
+in {
+  options.services.myWebsites.Immae = {
+    production = {
+      enable = lib.mkEnableOption "enable Immae's website";
+    };
+  };
+
+  imports = [
+    ../commons/stats.nix
+  ];
+
+  config = lib.mkIf cfg.production.enable {
+    services.myWebsites.commons.stats.enable = true;
+    services.myWebsites.commons.stats.sites = [
+      {
+        name = "www.immae.eu";
+        conf = ./immae_goaccess.conf;
+      }
+    ];
+
+    security.acme.certs."eldiron".extraDomains."www.immae.eu" = null;
+
+    services.myPhpfpm.poolConfigs.immae = ''
+      listen = /run/phpfpm/immae.sock
+      user = wwwrun
+      group = wwwrun
+      listen.owner = wwwrun
+      listen.group = wwwrun
+
+      pm = ondemand
+      pm.max_children = 5
+      pm.process_idle_timeout = 60
+
+      php_admin_value[open_basedir] = "${varDir}:/tmp"
+      '';
+    services.myWebsites.production.modules = [ "proxy_fcgi" ];
+    services.myWebsites.production.vhostConfs.immae = {
+      certName    = "eldiron";
+      hosts       = [ "www.immae.eu" ];
+      root        = varDir;
+      extraConfig = [
+        ''
+        Use Stats www.immae.eu
+
+        <FilesMatch "\.php$">
+          SetHandler "proxy:unix:/run/phpfpm/immae.sock|fcgi://localhost"
+        </FilesMatch>
+
+        <Directory ${varDir}>
+          DirectoryIndex index.php index.htm index.html
+          Options Indexes FollowSymLinks MultiViews Includes
+          AllowOverride All
+          Require all granted
+        </Directory>
+
+        <Location /blog_old/>
+          Use LDAPConnect
+          Require ldap-group cn=blog,cn=immae.eu,ou=services,dc=immae,dc=eu
+        </Location>
+        ''
+      ];
+    };
+  };
+}