NixOS configs for new Redbrick deployment
No puede seleccionar más de 25 temas Los temas deben comenzar con una letra o número, pueden incluir guiones ('-') y pueden tener hasta 35 caracteres de largo.
 
 
 
 
 
 
Cian Butler 5a4ff8d355 Update 'README.md' hace 1 año
common Change TLD to redbrick.dcu.ie hace 1 año
hosts Fix rainloop hace 1 año
packages/httpd-error-pages fix building error page hace 1 año
services trailing / are important and quote everything hace 1 año
.gitignore Add working phpfpm config for first few users hace 1 año
LICENSE Add license hace 1 año
README.md Update 'README.md' hace 1 año

README.md

NixOS Configurations

Repo Migration

This repo has been moved to https://github.com/redbrick/nix-configs so as to avoid circular dependecies

Used to deploy redbrick 2.0

Installation

cd /etc/nixos
tar -cjf ~/nixos_backup.tar.bz2 *
rm *
git clone $THIS_REPO .
ln -s hosts/$(hostname)/configuration.nix .
nixos-rebuild switch

Deploying Apache/httpd

users.nix needs to be generated before deploying Apache. Use this command:

cd services/httpd
ldapsearch -b o=redbrick -h ldap.internal -xLLL objectClass=posixAccount uid homeDirectory gidNumber | python3 ldap2nix.py /storage/webtree/ > users.nix

Then generate the preliminary certs for every domain so that httpd can start:

# List all acme-selfsigned-* services and put them in a txt file. Do this with `systemctl status acme-selfsigned-<tab>`
cat selfsigned-svcs.txt | xargs systemctl start

Now apache will start. Generate the real certs for each domain, one at a time as to not get rate limited

cd /var/lib/acme
for cert in *; do journalctl -fu acme-$cert.service & systemctl start acme-$cert.service && kill $!; done
systemctl reload httpd