]> git.openstreetmap.org Git - chef.git/blob - cookbooks/civicrm/recipes/default.rb
dc320eb8a3b55d765490b17b63481f3a5eb4b103
[chef.git] / cookbooks / civicrm / recipes / default.rb
1 #
2 # Cookbook:: civicrm
3 # Recipe:: default
4 #
5 # Copyright:: 2011, OpenStreetMap Foundation
6 #
7 # Licensed under the Apache License, Version 2.0 (the "License");
8 # you may not use this file except in compliance with the License.
9 # You may obtain a copy of the License at
10 #
11 #     https://www.apache.org/licenses/LICENSE-2.0
12 #
13 # Unless required by applicable law or agreed to in writing, software
14 # distributed under the License is distributed on an "AS IS" BASIS,
15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 # See the License for the specific language governing permissions and
17 # limitations under the License.
18 #
19
20 include_recipe "wordpress"
21 include_recipe "mysql"
22
23 package %w[
24   php-xml
25   php-curl
26   rsync
27   wkhtmltopdf
28   php-bcmath
29   php-intl
30 ]
31
32 apache_module "rewrite"
33
34 cache_dir = Chef::Config[:file_cache_path]
35
36 passwords = data_bag_item("civicrm", "passwords")
37 wp2fa_encrypt_keys = data_bag_item("civicrm", "wp2fa_encrypt_keys")
38
39 database_password = passwords["database"]
40 site_key = passwords["site_key"]
41 cred_keys = passwords["cred_keys"]
42 sign_keys = passwords["sign_keys"]
43
44 mysql_user "civicrm@localhost" do
45   password database_password
46 end
47
48 mysql_database "civicrm" do
49   permissions "civicrm@localhost" => :all
50 end
51
52 wordpress_site "supporting.openstreetmap.org" do
53   aliases %w[
54     crm.osmfoundation.org
55     donate.openstreetmap.org
56     donate.openstreetmap.com
57     donate.openstreetmap.net
58     donate.osm.org
59     join.osmfoundation.org
60     supporting.osmfoundation.org
61     support.osmfoundation.org
62     support.openstreetmap.org
63     supporting.osm.org
64     support.osm.org
65   ]
66   database_name "civicrm"
67   database_user "civicrm"
68   database_password database_password
69   wp2fa_encrypt_key wp2fa_encrypt_keys["key"]
70   fpm_prometheus_port 11301
71 end
72
73 wordpress_theme "osmblog-wp-theme" do
74   site "supporting.openstreetmap.org"
75   repository "https://github.com/osmfoundation/osmblog-wp-theme.git"
76 end
77
78 wordpress_plugin "civicrm-wp-piwik" do
79   plugin "wp-piwik"
80   site "supporting.openstreetmap.org"
81 end
82
83 wordpress_plugin "registration-honeypot" do
84   site "supporting.openstreetmap.org"
85 end
86
87 wordpress_plugin "contact-form-7" do
88   site "supporting.openstreetmap.org"
89 end
90
91 wordpress_plugin "civicrm-admin-utilities" do
92   site "supporting.openstreetmap.org"
93 end
94
95 civicrm_version = node[:civicrm][:version]
96 civicrm_directory = "/srv/supporting.openstreetmap.org/wp-content/plugins/civicrm"
97
98 directory "/opt/civicrm-#{civicrm_version}" do
99   owner "wordpress"
100   group "wordpress"
101   mode "755"
102 end
103
104 remote_file "#{cache_dir}/civicrm-#{civicrm_version}-wordpress.zip" do
105   action :create_if_missing
106   source "https://download.civicrm.org/civicrm-#{civicrm_version}-wordpress.zip"
107   owner "wordpress"
108   group "wordpress"
109   mode "644"
110   backup false
111 end
112
113 remote_file "#{cache_dir}/civicrm-#{civicrm_version}-l10n.tar.gz" do
114   action :create_if_missing
115   source "https://download.civicrm.org/civicrm-#{civicrm_version}-l10n.tar.gz"
116   owner "wordpress"
117   group "wordpress"
118   mode "644"
119   backup false
120 end
121
122 archive_file "#{cache_dir}/civicrm-#{civicrm_version}-wordpress.zip" do
123   action :nothing
124   destination "/opt/civicrm-#{civicrm_version}"
125   overwrite true
126   owner "wordpress"
127   group "wordpress"
128   subscribes :extract, "remote_file[#{cache_dir}/civicrm-#{civicrm_version}-wordpress.zip]", :immediately
129 end
130
131 archive_file "#{cache_dir}/civicrm-#{civicrm_version}-l10n.tar.gz" do
132   action :nothing
133   destination "/opt/civicrm-#{civicrm_version}/civicrm"
134   overwrite true
135   owner "wordpress"
136   group "wordpress"
137   subscribes :extract, "remote_file[#{cache_dir}/civicrm-#{civicrm_version}-l10n.tar.gz]", :immediately
138 end
139
140 execute "/opt/civicrm-#{civicrm_version}/civicrm" do
141   action :nothing
142   command "rsync --archive --delete --delete-delay --delay-updates /opt/civicrm-#{civicrm_version}/civicrm/ #{civicrm_directory}"
143   user "wordpress"
144   group "wordpress"
145   subscribes :run, "archive_file[#{cache_dir}/civicrm-#{civicrm_version}-wordpress.zip]", :immediately
146   subscribes :run, "archive_file[#{cache_dir}/civicrm-#{civicrm_version}-l10n.tar.gz]", :immediately
147 end
148
149 directory "/srv/supporting.openstreetmap.org/wp-content/uploads" do
150   owner "www-data"
151   group "www-data"
152   mode "755"
153 end
154
155 extensions_directory = "/srv/supporting.openstreetmap.org/wp-content/plugins/civicrm-extensions"
156
157 directory extensions_directory do
158   owner "wordpress"
159   group "wordpress"
160   mode "755"
161 end
162
163 node[:civicrm][:extensions].each_value do |details|
164   git "#{extensions_directory}/#{details[:name]}" do
165     action :sync
166     repository details[:repository]
167     revision details[:revision]
168     user "wordpress"
169     group "wordpress"
170   end
171 end
172
173 settings = edit_file "#{civicrm_directory}/civicrm/templates/CRM/common/civicrm.settings.php.template" do |line|
174   line.gsub!(/%%cms%%/, "WordPress")
175   line.gsub!(/%%CMSdbUser%%/, "civicrm")
176   line.gsub!(/%%CMSdbPass%%/, database_password)
177   line.gsub!(/%%CMSdbHost%%/, "localhost")
178   line.gsub!(/%%CMSdbName%%/, "civicrm")
179   line.gsub!(/%%dbUser%%/, "civicrm")
180   line.gsub!(/%%dbPass%%/, database_password)
181   line.gsub!(/%%dbHost%%/, "localhost")
182   line.gsub!(/%%dbName%%/, "civicrm")
183   line.gsub!(/%%crmRoot%%/, "#{civicrm_directory}/civicrm/")
184   line.gsub!(/%%templateCompileDir%%/, "/srv/supporting.openstreetmap.org/wp-content/uploads/civicrm/templates_c/")
185   line.gsub!(/%%baseURL%%/, "http://supporting.openstreetmap.org/")
186   line.gsub!(/%%siteKey%%/, site_key)
187   line.gsub!(/%%credKeys%%/, cred_keys)
188   line.gsub!(/%%signKeys%%/, sign_keys)
189   line.gsub!(%r{// *define\('CIVICRM_CMSDIR', '/path/to/install/root/'\);}, "define('CIVICRM_CMSDIR', '/srv/supporting.openstreetmap.org');")
190
191   line
192 end
193
194 file "#{civicrm_directory}/civicrm.settings.php" do
195   owner "wordpress"
196   group "wordpress"
197   mode "644"
198   content settings
199 end
200
201 systemd_service "osmf-crm-jobs" do
202   description "Run CRM jobs"
203   exec_start "/usr/bin/php #{civicrm_directory}/civicrm/bin/cli.php -s supporting.openstreetmap.org -u batch -p \"#{passwords['batch']}\" -e Job -a execute"
204   user "www-data"
205   sandbox :enable_network => true
206   memory_deny_write_execute false
207   restrict_address_families "AF_UNIX"
208   read_write_paths "/srv/supporting.openstreetmap.org/wp-content/uploads/civicrm"
209 end
210
211 systemd_timer "osmf-crm-jobs" do
212   description "Run CRM jobs"
213   on_boot_sec "15m"
214   on_unit_inactive_sec "15m"
215 end
216
217 service "osmf-crm-jobs.timer" do
218   action [:enable, :start]
219 end
220
221 template "/etc/cron.daily/osmf-crm-backup" do
222   source "backup.cron.erb"
223   owner "root"
224   group "root"
225   mode "750"
226   variables :passwords => passwords
227 end