require "ipaddr"
-include_recipe "ssl"
-include_recipe "squid"
-include_recipe "nginx"
include_recipe "fail2ban"
+include_recipe "munin"
+include_recipe "nginx"
+include_recipe "squid"
+include_recipe "ssl"
package "apache2" do
action :remove
end
package %w[
+ curl
xz-utils
openssl
]
source "logrotate.squid.erb"
owner "root"
group "root"
- mode 0o644
+ mode "644"
end
nginx_site "default" do
source "nginx_generate_tilecache_qos_map.erb"
owner "root"
group "root"
- mode 0o750
+ mode "750"
variables :totp_key => web_passwords["totp_key"]
end
-template "/etc/cron.d/tilecache" do
- source "cron.erb"
- owner "root"
- group "root"
- mode 0o644
+cron_d "tilecache" do
+ action :delete
+end
+
+cron_d "tilecache-generate-qos-map" do
+ minute "0"
+ user "root"
+ command "/usr/local/bin/nginx_generate_tilecache_qos_map"
+end
+
+cron_d "tilecache-curl-time" do
+ user "www-data"
+ command "/srv/tilecache/tilecache-curl-time"
+end
+
+cron_d "tilecache-curl-time-cleanup" do
+ minute "15"
+ hour "0"
+ user "www-data"
+ command "/srv/tilecache/tilecache-curl-time-cleanup"
end
execute "execute_nginx_generate_tilecache_qos_map" do
source "logrotate.nginx.erb"
owner "root"
group "root"
- mode 0o644
+ mode "644"
end
fail2ban_jail "squid" do
conf_variables :host => render[:fqdn]
end
end
+
+directory "/srv/tilecache" do
+ owner "root"
+ group "root"
+ mode "755"
+end
+
+directory "/srv/tilecache/data" do
+ owner "www-data"
+ group "www-data"
+ mode "755"
+end
+
+cookbook_file "/srv/tilecache/tilecache-curl-time.txt" do
+ source "tilecache-curl-time.txt"
+ owner "root"
+ group "root"
+ mode "755"
+end
+
+template "/srv/tilecache/tilecache-curl-time" do
+ source "tilecache-curl-time.erb"
+ owner "root"
+ group "root"
+ mode "755"
+ variables :caches => tilecaches, :renders => tilerenders
+end
+
+template "/srv/tilecache/tilecache-curl-time-cleanup" do
+ source "tilecache-curl-time-cleanup.erb"
+ owner "root"
+ group "root"
+ mode "755"
+end
+
+ohai_plugin "tilecache" do
+ template "ohai.rb.erb"
+end