X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/e821c9820fc411af063495f1fa77230212c19059..HEAD:/cookbooks/squid/recipes/default.rb diff --git a/cookbooks/squid/recipes/default.rb b/cookbooks/squid/recipes/default.rb deleted file mode 100644 index dae04ddeb..000000000 --- a/cookbooks/squid/recipes/default.rb +++ /dev/null @@ -1,138 +0,0 @@ -# -# Cookbook:: squid -# Recipe:: default -# -# Copyright:: 2011, OpenStreetMap Foundation -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# https://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -# - -if node[:squid][:version] >= 3 - apt_package "squid" do - action :unlock - end - - apt_package "squid-common" do - action :unlock - end - - apt_package "squid" do - action :purge - only_if "dpkg-query -W squid | fgrep -q 2." - end - - apt_package "squid-common" do - action :purge - only_if "dpkg-query -W squid-common | fgrep -q 2." - end - - file "/store/squid/coss-01" do - action :delete - backup false - end - - package "squidclient" do - action :upgrade - end -end - -package "squid" -package "squidclient" - -template "/etc/squid/squid.conf" do - source "squid.conf.erb" - owner "root" - group "root" - mode 0o644 -end - -directory "/etc/squid/squid.conf.d" do - owner "root" - group "root" - mode 0o755 -end - -Array(node[:squid][:cache_dir]).each do |cache_dir| - if cache_dir =~ /^coss (\S+) / - cache_dir = File.dirname(Regexp.last_match(1)) - elsif cache_dir =~ /^\S+ (\S+) / - cache_dir = Regexp.last_match(1) - end - - directory cache_dir do - owner "proxy" - group "proxy" - mode 0o750 - recursive true - notifies :restart, "service[squid]" - end -end - -systemd_tmpfile "/var/run/squid" do - type "d" - owner "proxy" - group "proxy" - mode "0755" -end - -address_families = %w[AF_UNIX AF_INET AF_INET6] - -systemd_service "squid" do - description "Squid caching proxy" - after ["network.target", "nss-lookup.target"] - type "forking" - limit_nofile 98304 - exec_start_pre "/usr/sbin/squid -N -z" - exec_start "/usr/sbin/squid -Y" - exec_reload "/usr/sbin/squid -k reconfigure" - exec_stop "/usr/sbin/squid -k shutdown" - private_tmp true - private_devices true - protect_system "full" - protect_home true - restrict_address_families address_families - restart "on-failure" - timeout_sec 0 -end - -service "squid" do - action [:enable, :start] - subscribes :restart, "systemd_service[squid]" - subscribes :restart, "template[/etc/squid/squid.conf]" - subscribes :reload, "template[/etc/resolv.conf]" -end - -log "squid-restart" do - message "Restarting squid due to counter wraparound" - notifies :restart, "service[squid]" - only_if do - IO.popen(["squidclient", "--host=127.0.0.1", "--port=3128", "mgr:counters"]) do |io| - io.each.grep(/^[a-z][a-z_.]+ = -[0-9]+$/).count.positive? - end - end -end - -munin_plugin "squid_cache" -munin_plugin "squid_times" -munin_plugin "squid_icp" -munin_plugin "squid_objectsize" -munin_plugin "squid_requests" -munin_plugin "squid_traffic" - -munin_plugin "squid_delay_pools" do - action :delete -end - -munin_plugin "squid_delay_pools_noreferer" do - action :delete -end