put dulcy in production mode and enable backups

[chef.git] / cookbooks / apache / recipes / ssl.rb

diff --git a/cookbooks/apache/recipes/ssl.rb b/cookbooks/apache/recipes/ssl.rb
index c857704025fe45a652ed63be398bf5a6836ea50d..f87971157c0e6e25f3bff3a4c845045d1d191b21 100644 (file)
--- a/cookbooks/apache/recipes/ssl.rb
+++ b/cookbooks/apache/recipes/ssl.rb
@@ -18,27 +18,23 @@
 #
 
 certificate = node[:apache][:ssl][:certificate]
 #
 
 certificate = node[:apache][:ssl][:certificate]

+certificate_chain = node[:apache][:ssl][:certificate_chain]

 
 node.default[:ssl][:certificates] = node[:ssl][:certificates] | [certificate]
 
 include_recipe "apache"
 include_recipe "ssl"
 
 
 node.default[:ssl][:certificates] = node[:ssl][:certificates] | [certificate]
 
 include_recipe "apache"
 include_recipe "ssl"
 

-apache_module "socache_shmcb" do
-  only_if { node[:lsb][:release].to_f >= 14.04 }
-end
-

 apache_module "ssl"
 
 apache_conf "ssl" do
   template "ssl.erb"
 apache_module "ssl"
 
 apache_conf "ssl" do
   template "ssl.erb"

-  variables :certificate => certificate
+  variables :certificate => certificate, :certificate_chain => certificate_chain

   notifies :reload, "service[apache2]"
 end
 
   notifies :reload, "service[apache2]"
 end
 

-service "apache2" do
-  action :nothing
-  subscribes :restart, "cookbook_file[/etc/ssl/certs/rapidssl.pem]"
-  subscribes :restart, "cookbook_file[/etc/ssl/certs/#{certificate}.pem]"
-  subscribes :restart, "file[/etc/ssl/private/#{certificate}.key]"
-end
+apache = resources("service[apache2]")
+
+apache.subscribes(:restart, "cookbook_file[/etc/ssl/certs/#{certificate_chain}.pem]")
+apache.subscribes(:restart, "cookbook_file[/etc/ssl/certs/#{certificate}.pem]")
+apache.subscribes(:restart, "file[/etc/ssl/private/#{certificate}.key]")