Enable CSP in report only mode for the main web site

[chef.git] / cookbooks / blogs / recipes / default.rb

diff --git a/cookbooks/blogs/recipes/default.rb b/cookbooks/blogs/recipes/default.rb
index f90c3ce5d4d07395308162aa7bc13feca4b995f8..e6771663864d4403002e27af52e403bb6b67387e 100644 (file)
--- a/cookbooks/blogs/recipes/default.rb
+++ b/cookbooks/blogs/recipes/default.rb
@@ -17,14 +17,16 @@
 # limitations under the License.
 #
 
-include_recipe "apache::ssl"
+include_recipe "apache"
 include_recipe "git"
 
-package "ruby"
-package "ruby-dev"
-package "make"
-package "gcc"
-package "libsqlite3-dev"
+package %w[
+  ruby
+  ruby-dev
+  make
+  gcc
+  libsqlite3-dev
+]
 
 gem_package "bundler"
 
@@ -59,6 +61,11 @@ execute "/srv/blogs.openstreetmap.org" do
   group "blogs"
 end
 
+ssl_certificate "blogs.openstreetmap.org" do
+  domains "blogs.openstreetmap.org"
+  notifies :reload, "service[apache2]"
+end
+
 apache_site "blogs.openstreetmap.org" do
   template "apache.erb"
   directory "/srv/blogs.openstreetmap.org/build"