diff options
author | Ismaël Bouya <ismael.bouya@normalesup.org> | 2019-01-26 14:51:19 +0100 |
---|---|---|
committer | Ismaël Bouya <ismael.bouya@normalesup.org> | 2019-01-26 14:57:15 +0100 |
commit | 7ebcaad53a3261d8a4aefd8a64c5c7d9d8ac2fa0 (patch) | |
tree | 955c11eb61c79333296cfb82f49836bd7e3eca70 /nixops/modules/websites/tools/git/mantisbt | |
parent | bad8f8d3cfaf48e6693f9718857a4648a86b0d37 (diff) | |
download | Nix-7ebcaad53a3261d8a4aefd8a64c5c7d9d8ac2fa0.tar.gz Nix-7ebcaad53a3261d8a4aefd8a64c5c7d9d8ac2fa0.tar.zst Nix-7ebcaad53a3261d8a4aefd8a64c5c7d9d8ac2fa0.zip |
Fix the SSL state for databases connections
Whenever possible, we use a socket connexion (all postgresql
connections, and a few mysql ones)
When remote (only mysql), we require SSL in the users database (cannot
be enforced globally)
Also, put pam configurations in a correct state
Fixes https://git.immae.eu/mantisbt/view.php?id=89
Fixes https://git.immae.eu/mantisbt/view.php?id=90
Fixes https://git.immae.eu/mantisbt/view.php?id=88
Diffstat (limited to 'nixops/modules/websites/tools/git/mantisbt')
-rw-r--r-- | nixops/modules/websites/tools/git/mantisbt/mantisbt.nix | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/nixops/modules/websites/tools/git/mantisbt/mantisbt.nix b/nixops/modules/websites/tools/git/mantisbt/mantisbt.nix index bc2ff3a..c6c3bff 100644 --- a/nixops/modules/websites/tools/git/mantisbt/mantisbt.nix +++ b/nixops/modules/websites/tools/git/mantisbt/mantisbt.nix | |||
@@ -20,10 +20,10 @@ let | |||
20 | config = | 20 | config = |
21 | writeText "config_inc.php" '' | 21 | writeText "config_inc.php" '' |
22 | <?php | 22 | <?php |
23 | $g_hostname = 'db-1.immae.eu'; | 23 | $g_hostname = '${env.postgresql.socket}'; |
24 | $g_db_username = 'mantisbt'; | 24 | $g_db_username = '${env.postgresql.user}'; |
25 | $g_db_password = '${env.postgresql.password}'; | 25 | $g_db_password = '${env.postgresql.password}'; |
26 | $g_database_name = 'mantisbt'; | 26 | $g_database_name = '${env.postgresql.database}'; |
27 | $g_db_type = 'pgsql'; | 27 | $g_db_type = 'pgsql'; |
28 | $g_crypto_master_salt = '${env.master_salt}'; | 28 | $g_crypto_master_salt = '${env.master_salt}'; |
29 | $g_allow_signup = OFF; | 29 | $g_allow_signup = OFF; |