6 files changed, 188 insertions, 182 deletions

diff --git a/nixops/modules/websites/connexionswing/connexionswing.nix b/nixops/modules/websites/connexionswing/connexionswing.nix
index 60ddb63..77b839c 100644
--- a/nixops/modules/websites/connexionswing/connexionswing.nix
+++ b/nixops/modules/websites/connexionswing/connexionswing.nix
@@ -1,189 +1,166 @@
-{ pkgs, lib, writeText, fetchedGitPrivate, stdenv, composerEnv, phpPackages, fetchurl, fetchgit }:
-let
-  connexionswing = { config }: rec {
-    environment = config.environment;
-    varDir = "/var/lib/connexionswing_${environment}";
-    keys = [{
-      dest = "webapps/${environment}-connexionswing";
-      user = apache.user;
-      group = apache.group;
-      permissions = "0400";
-      text = ''
-        # This file is auto-generated during the composer install
-        parameters:
-            database_host: ${config.mysql.host}
-            database_port: ${config.mysql.port}
-            database_name: ${config.mysql.name}
-            database_user: ${config.mysql.user}
-            database_password: ${config.mysql.password}
-            database_server_version: ${pkgs.mariadb.mysqlVersion}
-            mailer_transport: sendmail
-            mailer_host: null
-            mailer_user: null
-            mailer_password: null
-            subscription_email: ${config.email}
-            allow_robots: true
-            secret: ${config.secret}
-        ${if environment == "prod" then ''
-        services:
-          swiftmailer.mailer.default.transport:
-              class:     Swift_SendmailTransport
-              arguments: ['/run/wrappers/bin/sendmail -bs']
-        '' else ""}
+{ connexionswing, pkgs, phpPackages, config }:
+rec {
+  app = connexionswing.override { inherit (config) environment; };
+  keys = [{
+    dest = "webapps/${app.environment}-connexionswing";
+    user = apache.user;
+    group = apache.group;
+    permissions = "0400";
+    text = ''
+      # This file is auto-generated during the composer install
+      parameters:
+          database_host: ${config.mysql.host}
+          database_port: ${config.mysql.port}
+          database_name: ${config.mysql.name}
+          database_user: ${config.mysql.user}
+          database_password: ${config.mysql.password}
+          database_server_version: ${pkgs.mariadb.mysqlVersion}
+          mailer_transport: sendmail
+          mailer_host: null
+          mailer_user: null
+          mailer_password: null
+          subscription_email: ${config.email}
+          allow_robots: true
+          secret: ${config.secret}
+      ${if app.environment == "prod" then ''
+      services:
+        swiftmailer.mailer.default.transport:
+            class:     Swift_SendmailTransport
+            arguments: ['/run/wrappers/bin/sendmail -bs']
+      '' else ""}
+    '';
+  }];
+  phpFpm = rec {
+    preStart = ''
+      if [ ! -f "${app.varDir}/currentWebappDir" -o \
+          ! -f "${app.varDir}/currentKey" -o \
+          "${app}" != "$(cat ${app.varDir}/currentWebappDir 2>/dev/null)" ] \
+          || ! sha512sum -c --status ${app.varDir}/currentKey; then
+        pushd ${app} > /dev/null
+        /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=${app.environment} cache:clear --no-warmup
+        popd > /dev/null
+        echo -n "${app}" > ${app.varDir}/currentWebappDir
+        sha512sum /var/secrets/webapps/${app.environment}-connexionswing > ${app.varDir}/currentKey
+      fi
       '';
-    }];
-    phpFpm = rec {
-      preStart = ''
-        if [ ! -f "${varDir}/currentWebappDir" -o \
-            ! -f "${varDir}/currentKey" -o \
-            "${webappDir}" != "$(cat ${varDir}/currentWebappDir 2>/dev/null)" ] \
-            || ! sha512sum -c --status ${varDir}/currentKey; then
-          pushd ${webappDir} > /dev/null
-          /run/wrappers/bin/sudo -u wwwrun ./bin/console --env=${environment} cache:clear --no-warmup
-          popd > /dev/null
-          echo -n "${webappDir}" > ${varDir}/currentWebappDir
-          sha512sum /var/secrets/webapps/${environment}-connexionswing > ${varDir}/currentKey
-        fi
-        '';
-      serviceDeps = [ "mysql.service" ];
-      socket = "/var/run/phpfpm/connexionswing-${environment}.sock";
-      phpConfig = ''
-        extension=${phpPackages.imagick}/lib/php/extensions/imagick.so
-        '';
-      pool = ''
-        listen = ${socket}
-        user = ${apache.user}
-        group = ${apache.group}
-        listen.owner = ${apache.user}
-        listen.group = ${apache.group}
-        php_admin_value[upload_max_filesize] = 20M
-        php_admin_value[post_max_size] = 20M
-        ;php_admin_flag[log_errors] = on
-        php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/secrets/webapps/${environment}-connexionswing:${webappDir}:${varDir}:/tmp"
-        php_admin_value[session.save_path] = "${varDir}/phpSessions"
-        ${if environment == "dev" then ''
-        pm = ondemand
-        pm.max_children = 5
-        pm.process_idle_timeout = 60
-        env[SYMFONY_DEBUG_MODE] = "yes"
-        '' else ''
-        pm = dynamic
-        pm.max_children = 20
-        pm.start_servers = 2
-        pm.min_spare_servers = 1
-        pm.max_spare_servers = 3
-        ''}'';
-    };
-    apache = rec {
-      user = "wwwrun";
-      group = "wwwrun";
-      modules = [ "proxy_fcgi" ];
-      webappName = "connexionswing_${environment}";
-      root = "/run/current-system/webapps/${webappName}";
-      vhostConf = ''
-      <FilesMatch "\.php$">
-        SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
-      </FilesMatch>
+    serviceDeps = [ "mysql.service" ];
+    socket = "/var/run/phpfpm/connexionswing-${app.environment}.sock";
+    phpConfig = ''
+      extension=${phpPackages.imagick}/lib/php/extensions/imagick.so
+      '';
+    pool = ''
+      listen = ${socket}
+      user = ${apache.user}
+      group = ${apache.group}
+      listen.owner = ${apache.user}
+      listen.group = ${apache.group}
+      php_admin_value[upload_max_filesize] = 20M
+      php_admin_value[post_max_size] = 20M
+      ;php_admin_flag[log_errors] = on
+      php_admin_value[open_basedir] = "/run/wrappers/bin/sendmail:/var/secrets/webapps/${app.environment}-connexionswing:${app}:${app.varDir}:/tmp"
+      php_admin_value[session.save_path] = "${app.varDir}/phpSessions"
+      ${if app.environment == "dev" then ''
+      pm = ondemand
+      pm.max_children = 5
+      pm.process_idle_timeout = 60
+      env[SYMFONY_DEBUG_MODE] = "yes"
+      '' else ''
+      pm = dynamic
+      pm.max_children = 20
+      pm.start_servers = 2
+      pm.min_spare_servers = 1
+      pm.max_spare_servers = 3
+      ''}'';
+  };
+  apache = rec {
+    user = "wwwrun";
+    group = "wwwrun";
+    modules = [ "proxy_fcgi" ];
+    webappName = "connexionswing_${app.environment}";
+    root = "/run/current-system/webapps/${webappName}";
+    vhostConf = ''
+    <FilesMatch "\.php$">
+      SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost"
+    </FilesMatch>
 
-      <Directory ${varDir}/medias>
-        Options FollowSymLinks
-        AllowOverride None
-        Require all granted
-      </Directory>
+    <Directory ${app.varDir}/medias>
+      Options FollowSymLinks
+      AllowOverride None
+      Require all granted
+    </Directory>
 
-      <Directory ${varDir}/uploads>
-        Options FollowSymLinks
-        AllowOverride None
-        Require all granted
-      </Directory>
+    <Directory ${app.varDir}/uploads>
+      Options FollowSymLinks
+      AllowOverride None
+      Require all granted
+    </Directory>
 
-      ${if environment == "dev" then ''
-      <Location />
-        Use LDAPConnect
-        Require ldap-group   cn=connexionswing.immae.eu,cn=httpd,ou=services,dc=immae,dc=eu
-        ErrorDocument 401 "<html><meta http-equiv=\"refresh\" content=\"0;url=https://connexionswing.com\"></html>"
-      </Location>
+    ${if app.environment == "dev" then ''
+    <Location />
+      Use LDAPConnect
+      Require ldap-group   cn=connexionswing.immae.eu,cn=httpd,ou=services,dc=immae,dc=eu
+      ErrorDocument 401 "<html><meta http-equiv=\"refresh\" content=\"0;url=https://connexionswing.com\"></html>"
+    </Location>
 
-      <Directory ${root}>
-        Options Indexes FollowSymLinks MultiViews Includes
-        AllowOverride None
-        Require all granted
+    <Directory ${root}>
+      Options Indexes FollowSymLinks MultiViews Includes
+      AllowOverride None
+      Require all granted
 
-        DirectoryIndex app_dev.php
+      DirectoryIndex app_dev.php
 
-        <IfModule mod_negotiation.c>
-        Options -MultiViews
-        </IfModule>
+      <IfModule mod_negotiation.c>
+      Options -MultiViews
+      </IfModule>
 
-        <IfModule mod_rewrite.c>
-          RewriteEngine On
+      <IfModule mod_rewrite.c>
+        RewriteEngine On
 
-          RewriteCond %{REQUEST_URI}::$1 ^(/.+)/(.*)::\2$
-          RewriteRule ^(.*) - [E=BASE:%1]
+        RewriteCond %{REQUEST_URI}::$1 ^(/.+)/(.*)::\2$
+        RewriteRule ^(.*) - [E=BASE:%1]
 
-          # Maintenance script
-          RewriteCond %{DOCUMENT_ROOT}/maintenance.php -f
-          RewriteCond %{SCRIPT_FILENAME} !maintenance.php
-          RewriteRule ^.*$ %{ENV:BASE}/maintenance.php [R=503,L]
-          ErrorDocument 503 /maintenance.php
+        # Maintenance script
+        RewriteCond %{DOCUMENT_ROOT}/maintenance.php -f
+        RewriteCond %{SCRIPT_FILENAME} !maintenance.php
+        RewriteRule ^.*$ %{ENV:BASE}/maintenance.php [R=503,L]
+        ErrorDocument 503 /maintenance.php
 
-          # Sets the HTTP_AUTHORIZATION header removed by Apache
-          RewriteCond %{HTTP:Authorization} .
-          RewriteRule ^ - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
+        # Sets the HTTP_AUTHORIZATION header removed by Apache
+        RewriteCond %{HTTP:Authorization} .
+        RewriteRule ^ - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
 
-          RewriteCond %{ENV:REDIRECT_STATUS} ^$
-          RewriteRule ^app_dev\.php(?:/(.*)|$) %{ENV:BASE}/$1 [R=301,L]
+        RewriteCond %{ENV:REDIRECT_STATUS} ^$
+        RewriteRule ^app_dev\.php(?:/(.*)|$) %{ENV:BASE}/$1 [R=301,L]
 
-          # If the requested filename exists, simply serve it.
-          # We only want to let Apache serve files and not directories.
-          RewriteCond %{REQUEST_FILENAME} -f
-          RewriteRule ^ - [L]
+        # If the requested filename exists, simply serve it.
+        # We only want to let Apache serve files and not directories.
+        RewriteCond %{REQUEST_FILENAME} -f
+        RewriteRule ^ - [L]
 
-          # Rewrite all other queries to the front controller.
-          RewriteRule ^ %{ENV:BASE}/app_dev.php [L]
-        </IfModule>
+        # Rewrite all other queries to the front controller.
+        RewriteRule ^ %{ENV:BASE}/app_dev.php [L]
+      </IfModule>
 
-      </Directory>
-      '' else ''
-      Use Stats connexionswing.com
+    </Directory>
+    '' else ''
+    Use Stats connexionswing.com
 
-      <Directory ${root}>
-        Options Indexes FollowSymLinks MultiViews Includes
-        AllowOverride All
-        Require all granted
-      </Directory>
-      ''}
-      '';
-    };
-    activationScript = {
-      deps = [ "wrappers" ];
-      text = ''
-      install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir} \
-        ${varDir}/medias \
-        ${varDir}/uploads \
-        ${varDir}/var
-      install -m 0750 -o ${apache.user} -g ${apache.group} -d ${varDir}/phpSessions
-      '';
-    };
-    webappDir = composerEnv.buildPackage (
-      import ./php-packages.nix { inherit composerEnv fetchurl fetchgit; } //
-      fetchedGitPrivate ./connexionswing.json //
-      rec {
-        noDev = (environment == "prod");
-        preInstall = ''
-          export SYMFONY_ENV="${environment}"
-          '';
-        postInstall = ''
-          cd $out
-          ${if environment == "prod" then "php ./bin/console assetic:dump --env=prod --no-debug" else ""}
-          rm app/config/parameters.yml
-          ln -sf /var/secrets/webapps/${environment}-connexionswing app/config/parameters.yml
-          rm -rf var/{logs,cache}
-          ln -sf ${varDir}/var/{logs,cache} var/
-          ln -sf ${varDir}/{medias,uploads} web/images/
-          '';
-      });
-    webRoot = "${webappDir}/web";
+    <Directory ${root}>
+      Options Indexes FollowSymLinks MultiViews Includes
+      AllowOverride All
+      Require all granted
+    </Directory>
+    ''}
+    '';
+  };
+  activationScript = {
+    deps = [ "wrappers" ];
+    text = ''
+    install -m 0755 -o ${apache.user} -g ${apache.group} -d ${app.varDir} \
+      ${app.varDir}/medias \
+      ${app.varDir}/uploads \
+      ${app.varDir}/var
+    install -m 0750 -o ${apache.user} -g ${apache.group} -d ${app.varDir}/phpSessions
+    '';
   };
-in
-  connexionswing
+}
diff --git a/nixops/modules/websites/connexionswing/default.nix b/nixops/modules/websites/connexionswing/default.nix
index 773c8de..2f82428 100644
--- a/nixops/modules/websites/connexionswing/default.nix
+++ b/nixops/modules/websites/connexionswing/default.nix
@@ -1,14 +1,15 @@
 { lib, pkgs, config, mylibs, myconfig, ... }:
 let
-    connexionswing = pkgs.callPackage ./connexionswing.nix { inherit (mylibs) fetchedGitPrivate; };
-    connexionswing_dev  = connexionswing {
-      config = myconfig.env.websites.connexionswing.integration;
-    };
-    connexionswing_prod = connexionswing {
-      config = myconfig.env.websites.connexionswing.production;
-    };
+  connexionswing_dev  = pkgs.callPackage ./connexionswing.nix {
+    inherit (pkgs.private.webapps) connexionswing;
+    config = myconfig.env.websites.connexionswing.integration;
+  };
+  connexionswing_prod = pkgs.callPackage ./connexionswing.nix {
+    inherit (pkgs.private.webapps) connexionswing;
+    config = myconfig.env.websites.connexionswing.production;
+  };
 
-    cfg = config.services.myWebsites.Connexionswing;
+  cfg = config.services.myWebsites.Connexionswing;
 in {
   options.services.myWebsites.Connexionswing = {
     production = {
@@ -40,7 +41,7 @@ in {
       system.activationScripts.connexionswing_prod = connexionswing_prod.activationScript;
       system.extraSystemBuilderCmds = ''
         mkdir -p $out/webapps
-        ln -s ${connexionswing_prod.webRoot} $out/webapps/${connexionswing_prod.apache.webappName}
+        ln -s ${connexionswing_prod.app.webRoot} $out/webapps/${connexionswing_prod.apache.webappName}
         '';
       services.myWebsites.production.modules = connexionswing_prod.apache.modules;
       services.myWebsites.production.vhostConfs.connexionswing = {
@@ -61,7 +62,7 @@ in {
       system.activationScripts.connexionswing_dev = connexionswing_dev.activationScript;
       system.extraSystemBuilderCmds = ''
         mkdir -p $out/webapps
-        ln -s ${connexionswing_dev.webRoot} $out/webapps/${connexionswing_dev.apache.webappName}
+        ln -s ${connexionswing_dev.app.webRoot} $out/webapps/${connexionswing_dev.apache.webappName}
         '';
       services.myWebsites.integration.modules = connexionswing_dev.apache.modules;
       services.myWebsites.integration.vhostConfs.connexionswing = {
diff --git a/nixops/modules/websites/connexionswing/connexionswing.json b/pkgs/private/webapps/connexionswing/connexionswing.json
index 44d9f0e..44d9f0e 100644
--- a/nixops/modules/websites/connexionswing/connexionswing.json
+++ b/pkgs/private/webapps/connexionswing/connexionswing.json
diff --git a/pkgs/private/webapps/connexionswing/default.nix b/pkgs/private/webapps/connexionswing/default.nix
new file mode 100644
index 0000000..04e296b
--- /dev/null
+++ b/pkgs/private/webapps/connexionswing/default.nix
@@ -0,0 +1,27 @@
+{ environment ? "prod"
+, varDir ? "/var/lib/connexionswing_${environment}"
+, composerEnv, fetchurl, fetchgit, mylibs }:
+let
+  app = composerEnv.buildPackage (
+    import ./php-packages.nix { inherit composerEnv fetchurl fetchgit; } //
+    mylibs.fetchedGitPrivate ./connexionswing.json //
+    rec {
+      noDev = (environment == "prod");
+      preInstall = ''
+          export SYMFONY_ENV="${environment}"
+      '';
+      postInstall = ''
+          cd $out
+          ${if environment == "prod" then "php ./bin/console assetic:dump --env=prod --no-debug" else ""}
+          rm app/config/parameters.yml
+          ln -sf /var/secrets/webapps/${environment}-connexionswing app/config/parameters.yml
+          rm -rf var/{logs,cache}
+          ln -sf ${varDir}/var/{logs,cache} var/
+          ln -sf ${varDir}/{medias,uploads} web/images/
+      '';
+      passthru = {
+        inherit varDir environment;
+        webRoot = "${app}/web";
+      };
+    });
+in app
diff --git a/nixops/modules/websites/connexionswing/php-packages.nix b/pkgs/private/webapps/connexionswing/php-packages.nix
index 581b437..581b437 100644
--- a/nixops/modules/websites/connexionswing/php-packages.nix
+++ b/pkgs/private/webapps/connexionswing/php-packages.nix
diff --git a/pkgs/private/webapps/default.nix b/pkgs/private/webapps/default.nix
index 8c45b89..d11fe92 100644
--- a/pkgs/private/webapps/default.nix
+++ b/pkgs/private/webapps/default.nix
@@ -1,4 +1,5 @@
 { callPackage, mylibs, composerEnv, lib }:
 rec {
   aten = callPackage ./aten {};
+  connexionswing = callPackage ./connexionswing {};
 }