X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/18e12b0e123fc3e5f344682f884feabc12da0f5a..4c6eb1a00882a578c1782b88fa5accd7bd2b2cf2:/cookbooks/blogs/recipes/default.rb diff --git a/cookbooks/blogs/recipes/default.rb b/cookbooks/blogs/recipes/default.rb index a83740e17..681118f95 100644 --- a/cookbooks/blogs/recipes/default.rb +++ b/cookbooks/blogs/recipes/default.rb @@ -1,8 +1,8 @@ # -# Cookbook Name:: blogs +# Cookbook:: blogs # Recipe:: default # -# Copyright 2016, OpenStreetMap Foundation +# Copyright:: 2016, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. @@ -17,63 +17,91 @@ # limitations under the License. # +include_recipe "accounts" include_recipe "apache" include_recipe "git" +include_recipe "ruby" -package %w[ - ruby - ruby-dev +package %W[ make gcc + g++ libsqlite3-dev + sqlite3 ] -gem_package "bundler" - directory "/srv/blogs.openstreetmap.org" do owner "blogs" group "blogs" - mode 0o755 + mode "755" end git "/srv/blogs.openstreetmap.org" do action :sync - repository "git://github.com/gravitystorm/blogs.osm.org.git" + repository "https://github.com/gravitystorm/blogs.osm.org.git" + depth 1 user "blogs" group "blogs" - notifies :run, "execute[/srv/blogs.openstreetmap.org/Gemfile]", :immediate + notifies :run, "bundle_install[/srv/blogs.openstreetmap.org]", :immediately end -execute "/srv/blogs.openstreetmap.org/Gemfile" do +bundle_install "/srv/blogs.openstreetmap.org" do action :nothing - command "bundle install" - cwd "/srv/blogs.openstreetmap.org" + options "--deployment" user "root" group "root" - notifies :run, "execute[/srv/blogs.openstreetmap.org]", :immediate + notifies :run, "bundle_exec[/srv/blogs.openstreetmap.org]", :immediately end -execute "/srv/blogs.openstreetmap.org" do +bundle_exec "/srv/blogs.openstreetmap.org" do action :nothing - command "/usr/local/bin/pluto build -t osm -o build" - cwd "/srv/blogs.openstreetmap.org" + command "pluto build -t osm -o build" user "blogs" group "blogs" end ssl_certificate "blogs.openstreetmap.org" do - domains "blogs.openstreetmap.org" + domains ["blogs.openstreetmap.org", "blogs.osm.org"] notifies :reload, "service[apache2]" end apache_site "blogs.openstreetmap.org" do template "apache.erb" directory "/srv/blogs.openstreetmap.org/build" + variables :aliases => ["blogs.osm.org"] +end + +template "/usr/local/bin/blogs-update" do + source "blogs-update.erb" + owner "root" + group "root" + mode "0755" +end + +systemd_service "blogs-update" do + description "Update blog aggregator" + exec_start "/usr/local/bin/blogs-update" + user "blogs" + private_tmp true + private_devices true + protect_system "strict" + protect_home true + read_write_paths "/srv/blogs.openstreetmap.org" +end + +systemd_timer "blogs-update" do + description "Update blog aggregator" + on_boot_sec "15m" + on_unit_inactive_sec "30m" +end + +service "blogs-update.timer" do + action [:enable, :start] end -template "/etc/cron.d/blogs" do - source "cron.erb" +template "/etc/cron.daily/blogs-backup" do + source "backup.cron.erb" owner "root" group "root" - mode "0644" + mode "0755" end