aboutsummaryrefslogtreecommitdiff
path: root/nixops/modules/websites/ludivine
diff options
context:
space:
mode:
authorIsmaël Bouya <ismael.bouya@normalesup.org>2019-01-26 14:51:19 +0100
committerIsmaël Bouya <ismael.bouya@normalesup.org>2019-01-26 14:57:15 +0100
commit7ebcaad53a3261d8a4aefd8a64c5c7d9d8ac2fa0 (patch)
tree955c11eb61c79333296cfb82f49836bd7e3eca70 /nixops/modules/websites/ludivine
parentbad8f8d3cfaf48e6693f9718857a4648a86b0d37 (diff)
downloadNix-7ebcaad53a3261d8a4aefd8a64c5c7d9d8ac2fa0.tar.gz
Nix-7ebcaad53a3261d8a4aefd8a64c5c7d9d8ac2fa0.tar.zst
Nix-7ebcaad53a3261d8a4aefd8a64c5c7d9d8ac2fa0.zip
Fix the SSL state for databases connections
Whenever possible, we use a socket connexion (all postgresql connections, and a few mysql ones) When remote (only mysql), we require SSL in the users database (cannot be enforced globally) Also, put pam configurations in a correct state Fixes https://git.immae.eu/mantisbt/view.php?id=89 Fixes https://git.immae.eu/mantisbt/view.php?id=90 Fixes https://git.immae.eu/mantisbt/view.php?id=88
Diffstat (limited to 'nixops/modules/websites/ludivine')
-rw-r--r--nixops/modules/websites/ludivine/ludivinecassal.nix4
1 files changed, 2 insertions, 2 deletions
diff --git a/nixops/modules/websites/ludivine/ludivinecassal.nix b/nixops/modules/websites/ludivine/ludivinecassal.nix
index eff0bf8..e17a64e 100644
--- a/nixops/modules/websites/ludivine/ludivinecassal.nix
+++ b/nixops/modules/websites/ludivine/ludivinecassal.nix
@@ -7,8 +7,8 @@ let
7 writeText "parameters.yml" '' 7 writeText "parameters.yml" ''
8 # This file is auto-generated during the composer install 8 # This file is auto-generated during the composer install
9 parameters: 9 parameters:
10 database_host: db-1.immae.eu 10 database_host: ${config.mysql.host}
11 database_port: null 11 database_port: ${config.mysql.port}
12 database_name: ${config.mysql.name} 12 database_name: ${config.mysql.name}
13 database_user: ${config.mysql.user} 13 database_user: ${config.mysql.user}
14 database_password: ${config.mysql.password} 14 database_password: ${config.mysql.password}