]> git.openstreetmap.org Git - chef.git/blob - cookbooks/stateofthemap/recipes/jekyll.rb
sotm: Do not install Gems as root
[chef.git] / cookbooks / stateofthemap / recipes / jekyll.rb
1 #
2 # Cookbook:: stateofthemap
3 # Recipe:: jekyll
4 #
5 # Copyright:: 2022, OpenStreetMap Foundation
6 #
7 # Licensed under the Apache License, Version 2.0 (the "License");
8 # you may not use this file except in compliance with the License.
9 # You may obtain a copy of the License at
10 #
11 #     https://www.apache.org/licenses/LICENSE-2.0
12 #
13 # Unless required by applicable law or agreed to in writing, software
14 # distributed under the License is distributed on an "AS IS" BASIS,
15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 # See the License for the specific language governing permissions and
17 # limitations under the License.
18 #
19
20 include_recipe "stateofthemap"
21 include_recipe "ruby"
22
23 package %w[
24   gcc
25   g++
26   make
27   libssl-dev
28   zlib1g-dev
29   pkg-config
30 ]
31
32 apache_module "expires"
33 apache_module "rewrite"
34
35 %w[2016 2017 2018 2019 2020 2021 2022].each do |year|
36   git "/srv/#{year}.stateofthemap.org" do
37     action :sync
38     repository "https://github.com/openstreetmap/stateofthemap-#{year}.git"
39     depth 1
40     user "root"
41     group "root"
42     notifies :run, "bundle_install[/srv/#{year}.stateofthemap.org]"
43   end
44
45   directory "/srv/#{year}.stateofthemap.org/_site" do
46     mode "755"
47     owner "nobody"
48     group "nogroup"
49   end
50
51   # FIXME: fix the the vendor directory permissions from prior root installs
52   directory "/srv/#{year}.stateofthemap.org/vendor" do
53     action :create
54     recursive true
55     owner "nobody"
56     group "nogroup"
57   end
58
59   bundle_install "/srv/#{year}.stateofthemap.org" do
60     action :nothing
61     user "nobody"
62     group "nogroup"
63     environment "BUNDLE_FROZEN" => "true",
64                 "BUNDLE_WITHOUT" => "development:test",
65                 "BUNDLE_PATH" => "vendor/bundle",
66                 "BUNDLE_DEPLOYMENT" => "1",
67                 "BUNDLE_JOBS" => node.cpu_cores.to_s
68     notifies :run, "bundle_exec[/srv/#{year}.stateofthemap.org]"
69     only_if { ::File.exist?("/srv/#{year}.stateofthemap.org/Gemfile") }
70   end
71
72   bundle_exec "/srv/#{year}.stateofthemap.org" do
73     action :nothing
74     command "jekyll build --trace --disable-disk-cache --baseurl=https://#{year}.stateofthemap.org"
75     user "nobody"
76     group "nogroup"
77     environment "LANG" => "C.UTF-8",
78                 "BUNDLE_PATH" => "vendor/bundle",
79                 "BUNDLE_DEPLOYMENT" => "1"
80   end
81
82   ssl_certificate "#{year}.stateofthemap.org" do
83     domains ["#{year}.stateofthemap.org", "#{year}.stateofthemap.com", "#{year}.sotm.org"]
84     notifies :reload, "service[apache2]"
85   end
86
87   apache_site "#{year}.stateofthemap.org" do
88     template "apache.jekyll.erb"
89     directory "/srv/#{year}.stateofthemap.org/_site"
90     variables :year => year
91   end
92 end