Respond with 429 to abusive "ping" requests

[chef.git] / cookbooks / switch2osm / recipes / default.rb

diff --git a/cookbooks/switch2osm/recipes/default.rb b/cookbooks/switch2osm/recipes/default.rb
index 8aba12af0cb80559177e4f1c69643a7d894799cb..c0a3da3cbf87aa9165c268e93b7b0c876f9a6a84 100644 (file)
--- a/cookbooks/switch2osm/recipes/default.rb
+++ b/cookbooks/switch2osm/recipes/default.rb
@@ -1,14 +1,14 @@
 #
 #

-# Cookbook Name:: switch2osm
+# Cookbook:: switch2osm

 # Recipe:: default
 #
 # Recipe:: default
 #

-# Copyright 2013, OpenStreetMap Foundation
+# Copyright:: 2013, OpenStreetMap Foundation

 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #

-#     http://www.apache.org/licenses/LICENSE-2.0
+#     https://www.apache.org/licenses/LICENSE-2.0

 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,


@@ -17,33 +17,74 @@
 # limitations under the License.
 #
 
 # limitations under the License.
 #
 

-include_recipe "wordpress"
+include_recipe "apache"
+include_recipe "git"

 
 

-passwords = data_bag_item("switch2osm", "passwords")
+package %w[
+  gcc
+  g++
+  make
+  ruby
+  ruby-dev
+  libssl-dev
+  zlib1g-dev
+  pkg-config
+]

 
 

-wordpress_site "switch2osm.org" do
-  aliases "www.switch2osm.org", "switch2osm.com", "www.switch2osm.com"
-  directory "/srv/switch2osm.org"
-  database_name "switch2osm-blog"
-  database_user "switch2osm-user"
-  database_password passwords["switch2osm-user"]
+apache_module "expires"
+apache_module "rewrite"
+
+gem_package "bundler" do
+  version "1.17.3"

 end
 
 end
 

-wordpress_theme "picolight" do
-  site "switch2osm.org"
-  repository "git://github.com/Firefishy/picolight-s2o.git"
-  revision "master"
+git "/srv/switch2osm.org" do
+  action :sync
+  repository "https://github.com/switch2osm/switch2osm.github.io.git"
+  depth 1
+  user "root"
+  group "root"
+  notifies :run, "execute[/srv/switch2osm.org/Gemfile]"

 end
 
 end
 

-wordpress_plugin "sitepress-multilingual-cms" do
-  site "switch2osm.org"
-  repository "git://chef.openstreetmap.org/sitepress-multilingual-cms.git"
+directory "/srv/switch2osm.org/_site" do
+  mode "755"
+  owner "nobody"
+  group "nogroup"

 end
 
 end
 

-template "/etc/cron.daily/switch2osm-backup" do
-  source "backup.cron.erb"
-  owner "root"
+# Workaround https://github.com/jekyll/jekyll/issues/7804
+# by creating a .jekyll-cache folder
+directory "/srv/switch2osm.org/.jekyll-cache" do
+  mode "755"
+  owner "nobody"
+  group "nogroup"
+end
+
+execute "/srv/switch2osm.org/Gemfile" do
+  action :nothing
+  command "bundle install --deployment"
+  cwd "/srv/switch2osm.org"
+  user "root"

   group "root"
   group "root"

-  mode 0750
-  variables :passwords => passwords
+  notifies :run, "execute[/srv/switch2osm.org]"
+end
+
+execute "/srv/switch2osm.org" do
+  action :nothing
+  command "bundle exec jekyll build --trace --config _config.yml,_config_osm.yml"
+  cwd "/srv/switch2osm.org"
+  user "nobody"
+  group "nogroup"
+end
+
+ssl_certificate "switch2osm.org" do
+  domains ["switch2osm.org",
+           "www.switch2osm.org", "switch2osm.com", "www.switch2osm.com"]
+  notifies :reload, "service[apache2]"
+end
+
+apache_site "switch2osm.org" do
+  template "apache.erb"
+  directory "/srv/switch2osm.org/_site"

 end
 end