5 # Copyright 2011, OpenStreetMap Foundation
7 # Licensed under the Apache License, Version 2.0 (the "License");
8 # you may not use this file except in compliance with the License.
9 # You may obtain a copy of the License at
11 # https://www.apache.org/licenses/LICENSE-2.0
13 # Unless required by applicable law or agreed to in writing, software
14 # distributed under the License is distributed on an "AS IS" BASIS,
15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 # See the License for the specific language governing permissions and
17 # limitations under the License.
21 require "securerandom"
23 include_recipe "apache"
24 include_recipe "passenger"
26 include_recipe "memcached"
27 include_recipe "mysql"
28 include_recipe "nodejs"
29 include_recipe "postgresql"
30 include_recipe "python"
65 libboost-program-options-dev
66 libboost-date-time-dev
67 libboost-filesystem-dev
77 python_package "geojson"
80 apache_module "expires"
81 apache_module "headers"
83 apache_module "proxy_fcgi"
84 apache_module "rewrite"
85 apache_module "suexec"
86 apache_module "userdir"
89 package "apache2-suexec-pristine"
91 service "php7.2-fpm" do
92 action [:enable, :start]
95 template "/etc/php/7.2/fpm/pool.d/default.conf" do
96 source "fpm-default.conf.erb"
100 notifies :reload, "service[php7.2-fpm]"
103 file "/etc/php/7.2/fpm/pool.d/www.conf" do
105 notifies :reload, "service[php7.2-fpm]"
108 directory "/srv/dev.openstreetmap.org" do
114 template "/srv/dev.openstreetmap.org/index.html" do
115 source "dev.html.erb"
121 ssl_certificate "dev.openstreetmap.org" do
122 domains "dev.openstreetmap.org"
123 notifies :reload, "service[apache2]"
126 apache_site "dev.openstreetmap.org" do
127 template "apache.dev.erb"
132 template "/etc/phppgadmin/config.inc.php" do
133 source "phppgadmin.conf.erb"
139 file "/etc/apache2/conf.d/phppgadmin" do
143 ssl_certificate "phppgadmin.dev.openstreetmap.org" do
144 domains "phppgadmin.dev.openstreetmap.org"
145 notifies :reload, "service[apache2]"
148 apache_site "phppgadmin.dev.openstreetmap.org" do
149 template "apache.phppgadmin.erb"
152 search(:accounts, "*:*").each do |account|
154 details = node[:accounts][:users][name] || {}
156 next unless %w[user administrator].include?(details[:status])
158 user_home = details[:home] || account["home"] || "#{node[:accounts][:home]}/#{name}"
160 next unless File.directory?("#{user_home}/public_html")
162 port = 7000 + account["uid"].to_i
164 template "/etc/php/7.2/fpm/pool.d/#{name}.conf" do
165 source "fpm.conf.erb"
169 variables :user => name, :port => port
170 notifies :reload, "service[php7.2-fpm]"
173 ssl_certificate "#{name}.dev.openstreetmap.org" do
174 domains ["#{name}.dev.openstreetmap.org", "#{name}.dev.osm.org"]
175 notifies :reload, "service[apache2]"
178 apache_site "#{name}.dev.openstreetmap.org" do
179 template "apache.user.erb"
180 directory "#{user_home}/public_html"
181 variables :user => name, :port => port
184 template "/etc/sudoers.d/#{name}" do
185 source "sudoers.user.erb"
189 variables :user => name
193 if node[:postgresql][:clusters][:"9.5/main"]
194 postgresql_user "apis" do
198 template "/usr/local/bin/cleanup-rails-assets" do
200 source "cleanup-assets.erb"
206 systemd_service "cgimap@" do
207 description "OpenStreetMap API Server"
209 environment_file "/etc/default/cgimap-%i"
211 exec_start "/srv/%i.apis.dev.openstreetmap.org/cgimap/openstreetmap-cgimap --daemon --port $CGIMAP_PORT --instances 5"
212 exec_reload "/bin/kill -HUP $MAINPID"
215 protect_system "full"
217 no_new_privileges true
223 node[:dev][:rails].each do |name, details|
224 database_name = details[:database] || "apis_#{name}"
225 site_name = "#{name}.apis.dev.openstreetmap.org"
226 site_directory = "/srv/#{name}.apis.dev.openstreetmap.org"
227 rails_directory = "#{site_directory}/rails"
228 cgimap_directory = "#{site_directory}/cgimap"
230 if details[:repository]
231 site_aliases = details[:aliases] || []
232 secret_key_base = details[:secret_key_base] || SecureRandom.base64(96)
234 node.normal[:dev][:rails][name][:secret_key_base] = secret_key_base
236 postgresql_database database_name do
241 postgresql_extension "#{database_name}_btree_gist" do
243 database database_name
244 extension "btree_gist"
247 directory site_directory do
253 rails_port site_name do
254 ruby node[:passenger][:ruby_version]
255 directory rails_directory
258 repository details[:repository]
259 revision details[:revision]
260 database_port node[:postgresql][:clusters][:"9.5/main"][:port]
261 database_name database_name
262 database_username "apis"
263 memcache_servers ["127.0.0.1"]
268 template "#{rails_directory}/config/initializers/setup.rb" do
269 source "rails.setup.rb.erb"
273 variables :site => site_name
274 notifies :restart, "rails_port[#{site_name}]"
277 if details[:cgimap_repository]
278 git cgimap_directory do
280 repository details[:cgimap_repository]
281 revision details[:cgimap_revision]
286 execute "#{cgimap_directory}/autogen.sh" do
288 command "./autogen.sh"
292 subscribes :run, "git[#{cgimap_directory}]", :immediate
295 execute "#{cgimap_directory}/configure" do
297 command "./configure --with-fcgi=/usr --with-boost-libdir=/usr/lib/x86_64-linux-gnu"
301 subscribes :run, "execute[#{cgimap_directory}/autogen.sh]", :immediate
304 execute "#{cgimap_directory}/Makefile" do
310 subscribes :run, "execute[#{cgimap_directory}/configure]", :immediate
311 notifies :restart, "service[cgimap@#{name}]"
314 template "/etc/default/cgimap-#{name}" do
315 source "cgimap.environment.erb"
319 variables :cgimap_port => cgimap_port,
320 :database_port => node[:postgresql][:clusters][:"9.5/main"][:port],
321 :database_name => database_name,
322 :rails_directory => rails_directory
323 notifies :restart, "service[cgimap@#{name}]"
326 service "cgimap@#{name}" do
327 action [:start, :enable]
331 ssl_certificate site_name do
332 domains [site_name] + site_aliases
333 notifies :reload, "service[apache2]"
336 apache_site site_name do
337 template "apache.rails.erb"
338 variables :application_name => name,
339 :aliases => site_aliases,
340 :secret_key_base => secret_key_base,
341 :cgimap_enabled => details.key?(:cgimap_repository),
342 :cgimap_port => cgimap_port
347 apache_site site_name do
351 service "cgimap@#{name}" do
352 action [:stop, :disable]
355 file "/etc/default/cgimap-#{name}" do
359 directory site_directory do
364 file "/etc/cron.daily/rails-#{site_name.tr('.', '-')}" do
368 postgresql_database database_name do
373 node.normal[:dev][:rails].delete(name)
377 directory "/srv/apis.dev.openstreetmap.org" do
383 template "/srv/apis.dev.openstreetmap.org/index.html" do
384 source "apis.html.erb"
390 ssl_certificate "apis.dev.openstreetmap.org" do
391 domains "apis.dev.openstreetmap.org"
392 notifies :reload, "service[apache2]"
395 apache_site "apis.dev.openstreetmap.org" do
396 template "apache.apis.erb"
399 node[:postgresql][:clusters].each_key do |name|
400 postgresql_munin name do
407 directory "/srv/ooc.openstreetmap.org" do
413 remote_directory "/srv/ooc.openstreetmap.org/html" do
423 ssl_certificate "ooc.openstreetmap.org" do
424 domains ["ooc.openstreetmap.org",
425 "a.ooc.openstreetmap.org",
426 "b.ooc.openstreetmap.org",
427 "c.ooc.openstreetmap.org"]
428 notifies :reload, "service[apache2]"
431 apache_site "ooc.openstreetmap.org" do
432 template "apache.ooc.erb"