# limitations under the License.
#
+if node[:squid][:version] >= 3
+ apt_package "squid" do
+ action :unlock
+ end
+
+ apt_package "squid-common" do
+ action :unlock
+ end
+
+ apt_package "squid" do
+ action :purge
+ only_if "dpkg-query -W squid | fgrep -q 2."
+ end
+
+ apt_package "squid-common" do
+ action :purge
+ only_if "dpkg-query -W squid-common | fgrep -q 2."
+ end
+
+ file "/store/squid/coss-01" do
+ action :delete
+ backup false
+ end
+
+ package "squidclient" do
+ action :upgrade
+ end
+end
+
package "squid"
package "squidclient"
mode 0o644
end
-template "/etc/default/squid" do
- source "squid.erb"
- owner "root"
- group "root"
- mode 0o644
-end
-
directory "/etc/squid/squid.conf.d" do
owner "root"
group "root"
mode 0o755
end
+Array(node[:squid][:cache_dir]).each do |cache_dir|
+ if cache_dir =~ /^coss (\S+) /
+ cache_dir = File.dirname(Regexp.last_match(1))
+ elsif cache_dir =~ /^\S+ (\S+) /
+ cache_dir = Regexp.last_match(1)
+ end
+
+ directory cache_dir do
+ owner "proxy"
+ group "proxy"
+ mode 0o750
+ recursive true
+ notifies :restart, "service[squid]"
+ end
+end
+
+systemd_tmpfile "/var/run/squid" do
+ type "d"
+ owner "proxy"
+ group "proxy"
+ mode "0755"
+end
+
systemd_service "squid" do
description "Squid caching proxy"
after ["network.target", "nss-lookup.target"]
- limit_nofile 65536
- environment "SQUID_ARGS" => "-D"
- environment_file "/etc/default/squid"
- exec_start_pre "/usr/sbin/squid $SQUID_ARGS -z"
- exec_start "/usr/sbin/squid -N $SQUID_ARGS"
+ type "forking"
+ limit_nofile 98304
+ exec_start_pre "/usr/sbin/squid -N -z"
+ exec_start "/usr/sbin/squid -Y"
exec_reload "/usr/sbin/squid -k reconfigure"
exec_stop "/usr/sbin/squid -k shutdown"
private_tmp true
private_devices true
protect_system "full"
protect_home true
- no_new_privileges true
restart "on-failure"
timeout_sec 0
end
action [:enable, :start]
subscribes :restart, "systemd_service[squid]"
subscribes :reload, "template[/etc/squid/squid.conf]"
- subscribes :restart, "template[/etc/default/squid]"
subscribes :reload, "template[/etc/resolv.conf]"
end
end
munin_plugin "squid_cache"
-munin_plugin "squid_delay_pools"
-munin_plugin "squid_delay_pools_noreferer"
munin_plugin "squid_times"
munin_plugin "squid_icp"
munin_plugin "squid_objectsize"
munin_plugin "squid_requests"
munin_plugin "squid_traffic"
-Dir.glob("/var/log/squid/zere.log*") do |log|
- File.unlink(log)
+munin_plugin "squid_delay_pools" do
+ action :delete
+end
+
+munin_plugin "squid_delay_pools_noreferer" do
+ action :delete
end