#
# Cookbook:: otrs
# Recipe:: default
#
# Copyright:: 2012, OpenStreetMap Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

include_recipe "accounts"
include_recipe "apache"
include_recipe "postgresql"
include_recipe "tools"

passwords = data_bag_item("otrs", "passwords")

package "libapache2-mod-perl2"
package "libapache2-reload-perl"

package %w[
  libcrypt-eksblowfish-perl
  libdatetime-perl
  libgd-gd2-perl
  libgd-graph-perl
  libgd-text-perl
  libjson-xs-perl
  libmail-imapclient-perl
  libnet-ldap-perl
  libpdf-api2-perl
  libsoap-lite-perl
  libtemplate-perl
  libyaml-libyaml-perl
]

apache_module "headers"

version = node[:otrs][:version]
user = node[:otrs][:user]
database_cluster = node[:otrs][:database_cluster]
database_name = node[:otrs][:database_name]
database_user = node[:otrs][:database_user]
database_password = passwords[node[:otrs][:database_password]]
site = node[:otrs][:site]
site_aliases = node[:otrs][:site_aliases] || []

postgresql_user database_user do
  cluster database_cluster
  password database_password
end

postgresql_database database_name do
  cluster database_cluster
  owner database_user
end

remote_file "#{Chef::Config[:file_cache_path]}/otrs-#{version}.tar.bz2" do
  source "https://ftp.otrs.org/pub/otrs/otrs-#{version}.tar.bz2"
  not_if { ::File.exist?("/opt/otrs-#{version}") }
end

execute "untar-otrs-#{version}" do
  command "tar jxf #{Chef::Config[:file_cache_path]}/otrs-#{version}.tar.bz2"
  cwd "/opt"
  user "root"
  group "root"
  not_if { ::File.exist?("/opt/otrs-#{version}") }
end

config = edit_file "/opt/otrs-#{version}/Kernel/Config.pm.dist" do |line|
  line.gsub!(/^( *)\$Self->{Database} = 'otrs'/, "\\1$Self->{Database} = '#{database_name}'")
  line.gsub!(/^( *)\$Self->{DatabaseUser} = 'otrs'/, "\\1$Self->{DatabaseUser} = '#{database_user}'")
  line.gsub!(/^( *)\$Self->{DatabasePw} = 'some-pass'/, "\\1$Self->{DatabasePw} = '#{database_password}'")
  line.gsub!(/^( *)\$Self->{Database} = 'otrs'/, "\\1$Self->{Database} = '#{database_name}'")
  line.gsub!(/^( *\$Self->{DatabaseDSN} = "DBI:mysql:)/, "#\\1")
  line.gsub!(/^#( *\$Self->{DatabaseDSN} = "DBI:Pg:.*;host=)/, "\\1")
  line.gsub!(/^( *)# (\$Self->{CheckMXRecord} = 0)/, "\\1\\2")
  line.gsub!(/^( *)# \$Self->{SessionUseCookie} = 0/, "\\1$Self->{SessionCheckRemoteIP} = 0")

  line
end

file "/opt/otrs-#{version}/Kernel/Config.pm" do
  owner user
  group "www-data"
  mode "664"
  content config
end

link "/opt/otrs" do
  to "/opt/otrs-#{version}"
end

execute "/opt/otrs/bin/otrs.SetPermissions.pl" do
  action :run
  command "/opt/otrs/bin/otrs.SetPermissions.pl --otrs-user=#{user} --web-group=www-data /opt/otrs-#{version}"
  user "root"
  group "root"
  only_if { File.stat("/opt/otrs/README.md").uid != Etc.getpwnam("otrs").uid }
end

execute "/opt/otrs/bin/Cron.sh" do
  action :nothing
  command "/opt/otrs/bin/Cron.sh restart"
  user "otrs"
  group "otrs"
end

Dir.glob("/opt/otrs/var/cron/*.dist") do |distname|
  name = distname.sub(".dist", "")

  file name do
    owner "otrs"
    group "www-data"
    mode "664"
    content IO.read(distname)
    notifies :run, "execute[/opt/otrs/bin/Cron.sh]"
  end
end

ssl_certificate site do
  domains [site] + site_aliases
  notifies :reload, "service[apache2]"
end

apache_site site do
  template "apache.erb"
  variables :aliases => site_aliases
end

template "/etc/sudoers.d/otrs" do
  source "sudoers.erb"
  owner "root"
  group "root"
  mode "440"
end

template "/etc/cron.daily/otrs-backup" do
  source "backup.cron.erb"
  owner "root"
  group "root"
  mode "755"
end