nominatim: remove firewall http rate limiting

[chef.git] / cookbooks / stateofthemap / recipes / default.rb

diff --git a/cookbooks/stateofthemap/recipes/default.rb b/cookbooks/stateofthemap/recipes/default.rb
index fae6b442d44d74680a1d6d9d590574e917712373..c9eb827d5c56c5962a3063158eabdecb61b61993 100644 (file)
--- a/cookbooks/stateofthemap/recipes/default.rb
+++ b/cookbooks/stateofthemap/recipes/default.rb
@@ -1,14 +1,14 @@
 #
 #

-# Cookbook Name:: stateofthemap
+# Cookbook:: stateofthemap

 # Recipe:: default
 #
 # Recipe:: default
 #

-# Copyright 2013, OpenStreetMap Foundation
+# Copyright:: 2013, OpenStreetMap Foundation

 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #

-#     http://www.apache.org/licenses/LICENSE-2.0
+#     https://www.apache.org/licenses/LICENSE-2.0

 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,


@@ -21,72 +21,89 @@ include_recipe "wordpress"
 
 passwords = data_bag_item("stateofthemap", "passwords")
 
 
 passwords = data_bag_item("stateofthemap", "passwords")
 

+git "/srv/stateofthemap.org" do
+  action :sync
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"
+  revision "chooser"
+  user "root"
+  group "root"
+end
+
+ssl_certificate "stateofthemap.org" do
+  domains ["stateofthemap.org", "www.stateofthemap.org",
+           "stateofthemap.com", "www.stateofthemap.com",
+           "sotm.org", "www.sotm.org"]
+  notifies :reload, "service[apache2]"
+end
+
+apache_site "stateofthemap.org" do
+  template "apache.erb"
+  directory "/srv/stateofthemap.org"
+end
+

 directory "/srv/2007.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"
 directory "/srv/2007.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"

-  mode 0755
+  mode 0o755

 end
 
 wordpress_site "2007.stateofthemap.org" do
   aliases "2007.stateofthemap.com"
   directory "/srv/2007.stateofthemap.org/wp"
 end
 
 wordpress_site "2007.stateofthemap.org" do
   aliases "2007.stateofthemap.com"
   directory "/srv/2007.stateofthemap.org/wp"

-  ssl_enabled true

   database_name "sotm2007"
   database_user "sotm2007"
   database_password passwords["sotm2007"]
   database_prefix "wp_sotm_"
 end
 
   database_name "sotm2007"
   database_user "sotm2007"
   database_password passwords["sotm2007"]
   database_prefix "wp_sotm_"
 end
 

-wordpress_theme "refreshwp-11" do
+wordpress_theme "2007.stateofthemap.org-refreshwp-11" do
+  theme "refreshwp-11"

   site "2007.stateofthemap.org"
   site "2007.stateofthemap.org"

-  repository "git://git.openstreetmap.org/stateofthemap.git"
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"

   revision "theme-2007"
 end
 
   revision "theme-2007"
 end
 

-wordpress_plugin "geopress" do
-  site "2007.stateofthemap.org"
-end
-
-wordpress_plugin "sem-static-front" do
+wordpress_plugin "2007.stateofthemap.org-geopress" do
+  plugin "geopress"

   site "2007.stateofthemap.org"
   site "2007.stateofthemap.org"

-  repository "git://chef.openstreetmap.org/sem-static-front.git"

 end
 
 directory "/srv/2008.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"
 end
 
 directory "/srv/2008.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"

-  mode 0755
+  mode 0o755

 end
 
 wordpress_site "2008.stateofthemap.org" do
   aliases "2008.stateofthemap.com"
   directory "/srv/2008.stateofthemap.org/wp"
 end
 
 wordpress_site "2008.stateofthemap.org" do
   aliases "2008.stateofthemap.com"
   directory "/srv/2008.stateofthemap.org/wp"

-  ssl_enabled true

   database_name "sotm2008"
   database_user "sotm2008"
   database_password passwords["sotm2008"]
   database_prefix "wp_sotm08_"
 end
 
   database_name "sotm2008"
   database_user "sotm2008"
   database_password passwords["sotm2008"]
   database_prefix "wp_sotm08_"
 end
 

-wordpress_theme "refreshwp-11" do
+wordpress_theme "2008.stateofthemap.org-refreshwp-11" do
+  theme "refreshwp-11"

   site "2008.stateofthemap.org"
   site "2008.stateofthemap.org"

-  repository "git://git.openstreetmap.org/stateofthemap.git"
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"

   revision "theme-2008"
 end
 
   revision "theme-2008"
 end
 

-wordpress_plugin "geopress" do
+wordpress_plugin "2008.stateofthemap.org-geopress" do
+  plugin "geopress"

   site "2008.stateofthemap.org"
 end
 
 directory "/srv/2009.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"
   site "2008.stateofthemap.org"
 end
 
 directory "/srv/2009.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"

-  mode 0755
+  mode 0o755

 end
 
 git "/srv/2009.stateofthemap.org" do
   action :sync
 end
 
 git "/srv/2009.stateofthemap.org" do
   action :sync

-  repository "git://git.openstreetmap.org/stateofthemap.git"
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"

   revision "resources-2009"
   user "wordpress"
   group "wordpress"
   revision "resources-2009"
   user "wordpress"
   group "wordpress"


@@ -95,7 +112,6 @@ end
 wordpress_site "2009.stateofthemap.org" do
   aliases "2009.stateofthemap.com"
   directory "/srv/2009.stateofthemap.org/wp"
 wordpress_site "2009.stateofthemap.org" do
   aliases "2009.stateofthemap.com"
   directory "/srv/2009.stateofthemap.org/wp"

-  ssl_enabled true

   database_name "sotm2009"
   database_user "sotm2009"
   database_password passwords["sotm2009"]
   database_name "sotm2009"
   database_user "sotm2009"
   database_password passwords["sotm2009"]


@@ -104,25 +120,27 @@ wordpress_site "2009.stateofthemap.org" do
        "/podcasts" => "/srv/2009.stateofthemap.org/podcasts"
 end
 
        "/podcasts" => "/srv/2009.stateofthemap.org/podcasts"
 end
 

-wordpress_theme "aerodrome" do
+wordpress_theme "2009.stateofthemap.org-aerodrome" do
+  theme "aerodrome"

   site "2009.stateofthemap.org"
   site "2009.stateofthemap.org"

-  repository "git://git.openstreetmap.org/stateofthemap.git"
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"

   revision "theme-2009"
 end
 
   revision "theme-2009"
 end
 

-wordpress_plugin "wp-sticky" do
+wordpress_plugin "2009.stateofthemap.org-wp-sticky" do
+  plugin "wp-sticky"

   site "2009.stateofthemap.org"
 end
 
 directory "/srv/2010.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"
   site "2009.stateofthemap.org"
 end
 
 directory "/srv/2010.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"

-  mode 0755
+  mode 0o755

 end
 
 git "/srv/2010.stateofthemap.org" do
   action :sync
 end
 
 git "/srv/2010.stateofthemap.org" do
   action :sync

-  repository "git://git.openstreetmap.org/stateofthemap.git"
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"

   revision "resources-2010"
   user "wordpress"
   group "wordpress"
   revision "resources-2010"
   user "wordpress"
   group "wordpress"


@@ -131,37 +149,39 @@ end
 wordpress_site "2010.stateofthemap.org" do
   aliases "2010.stateofthemap.com"
   directory "/srv/2010.stateofthemap.org/wp"
 wordpress_site "2010.stateofthemap.org" do
   aliases "2010.stateofthemap.com"
   directory "/srv/2010.stateofthemap.org/wp"

-  ssl_enabled true

   database_name "sotm2010"
   database_user "sotm2010"
   database_password passwords["sotm2010"]
   urls "/register" => "/srv/2010.stateofthemap.org/register"
 end
 
   database_name "sotm2010"
   database_user "sotm2010"
   database_password passwords["sotm2010"]
   urls "/register" => "/srv/2010.stateofthemap.org/register"
 end
 

-wordpress_theme "aerodrome" do
+wordpress_theme "2010.stateofthemap.org-aerodrome" do
+  theme "aerodrome"

   site "2010.stateofthemap.org"
   site "2010.stateofthemap.org"

-  repository "git://git.openstreetmap.org/stateofthemap.git"
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"

   revision "theme-2010"
 end
 
   revision "theme-2010"
 end
 

-wordpress_plugin "sitepress-multilingual-cms" do
+wordpress_plugin "2010.stateofthemap.org-sitepress-multilingual-cms" do
+  plugin "sitepress-multilingual-cms"

   site "2010.stateofthemap.org"
   site "2010.stateofthemap.org"

-  repository "git://chef.openstreetmap.org/sitepress-multilingual-cms.git"
+  repository "https://git.openstreetmap.org/private/sitepress-multilingual-cms.git"

 end
 
 end
 

-wordpress_plugin "wp-sticky" do
+wordpress_plugin "2010.stateofthemap.org-wp-sticky" do
+  plugin "wp-sticky"

   site "2010.stateofthemap.org"
 end
 
 directory "/srv/2011.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"
   site "2010.stateofthemap.org"
 end
 
 directory "/srv/2011.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"

-  mode 0755
+  mode 0o755

 end
 
 git "/srv/2011.stateofthemap.org" do
   action :sync
 end
 
 git "/srv/2011.stateofthemap.org" do
   action :sync

-  repository "git://git.openstreetmap.org/stateofthemap.git"
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"

   revision "resources-2011"
   user "wordpress"
   group "wordpress"
   revision "resources-2011"
   user "wordpress"
   group "wordpress"


@@ -170,37 +190,39 @@ end
 wordpress_site "2011.stateofthemap.org" do
   aliases "2011.stateofthemap.com"
   directory "/srv/2011.stateofthemap.org/wp"
 wordpress_site "2011.stateofthemap.org" do
   aliases "2011.stateofthemap.com"
   directory "/srv/2011.stateofthemap.org/wp"

-  ssl_enabled true

   database_name "sotm2011"
   database_user "sotm2011"
   database_password passwords["sotm2011"]
   urls "/register" => "/srv/2011.stateofthemap.org/register"
 end
 
   database_name "sotm2011"
   database_user "sotm2011"
   database_password passwords["sotm2011"]
   urls "/register" => "/srv/2011.stateofthemap.org/register"
 end
 

-wordpress_theme "aerodrome" do
+wordpress_theme "2011.stateofthemap.org-aerodrome" do
+  theme "aerodrome"

   site "2011.stateofthemap.org"
   site "2011.stateofthemap.org"

-  repository "git://git.openstreetmap.org/stateofthemap.git"
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"

   revision "theme-2011"
 end
 
   revision "theme-2011"
 end
 

-wordpress_plugin "sitepress-multilingual-cms" do
+wordpress_plugin "2011.stateofthemap.org-sitepress-multilingual-cms" do
+  plugin "sitepress-multilingual-cms"

   site "2011.stateofthemap.org"
   site "2011.stateofthemap.org"

-  repository "git://chef.openstreetmap.org/sitepress-multilingual-cms.git"
+  repository "https://git.openstreetmap.org/private/sitepress-multilingual-cms.git"

 end
 
 end
 

-wordpress_plugin "wp-sticky" do
+wordpress_plugin "2011.stateofthemap.org-wp-sticky" do
+  plugin "wp-sticky"

   site "2011.stateofthemap.org"
 end
 
 directory "/srv/2012.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"
   site "2011.stateofthemap.org"
 end
 
 directory "/srv/2012.stateofthemap.org" do
   owner "wordpress"
   group "wordpress"

-  mode 0755
+  mode 0o755

 end
 
 git "/srv/2012.stateofthemap.org" do
   action :sync
 end
 
 git "/srv/2012.stateofthemap.org" do
   action :sync

-  repository "git://git.openstreetmap.org/stateofthemap.git"
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"

   revision "resources-2012"
   user "wordpress"
   group "wordpress"
   revision "resources-2012"
   user "wordpress"
   group "wordpress"


@@ -209,72 +231,124 @@ end
 wordpress_site "2012.stateofthemap.org" do
   aliases "2012.stateofthemap.com"
   directory "/srv/2012.stateofthemap.org/wp"
 wordpress_site "2012.stateofthemap.org" do
   aliases "2012.stateofthemap.com"
   directory "/srv/2012.stateofthemap.org/wp"

-  ssl_enabled true

   database_name "sotm2012"
   database_user "sotm2012"
   database_password passwords["sotm2012"]
   urls "/register" => "/srv/2012.stateofthemap.org/register"
 end
 
   database_name "sotm2012"
   database_user "sotm2012"
   database_password passwords["sotm2012"]
   urls "/register" => "/srv/2012.stateofthemap.org/register"
 end
 

-wordpress_theme "aerodrome" do
+wordpress_theme "2012.stateofthemap.org-aerodrome" do
+  theme "aerodrome"

   site "2012.stateofthemap.org"
   site "2012.stateofthemap.org"

-  repository "git://git.openstreetmap.org/stateofthemap.git"
+  repository "https://git.openstreetmap.org/public/stateofthemap.git"

   revision "theme-2012"
 end
 
   revision "theme-2012"
 end
 

-wordpress_plugin "leaflet-maps-marker" do
+wordpress_plugin "2012.stateofthemap.org-leaflet-maps-marker" do
+  plugin "leaflet-maps-marker"

   site "2012.stateofthemap.org"
 end
 
   site "2012.stateofthemap.org"
 end
 

-wordpress_plugin "sitepress-multilingual-cms" do
+wordpress_plugin "2012.stateofthemap.org-sitepress-multilingual-cms" do
+  plugin "sitepress-multilingual-cms"

   site "2012.stateofthemap.org"
   site "2012.stateofthemap.org"

-  repository "git://chef.openstreetmap.org/sitepress-multilingual-cms.git"
+  repository "https://git.openstreetmap.org/private/sitepress-multilingual-cms.git"

 end
 
 end
 

-wordpress_plugin "wp-sticky" do
+wordpress_plugin "2012.stateofthemap.org-wp-sticky" do
+  plugin "wp-sticky"

   site "2012.stateofthemap.org"
 end
 
   site "2012.stateofthemap.org"
 end
 

-directory "/srv/2016.stateofthemap.org" do
-  owner "wordpress"
-  group "wordpress"
-  mode 0755
-end
-
-wordpress_site "2016.stateofthemap.org" do
-  aliases ["2016.stateofthemap.com",
-           "www.stateofthemap.org", "stateofthemap.org",
-           "www.stateofthemap.com", "stateofthemap.com"]
-  directory "/srv/2016.stateofthemap.org/wp"
-  ssl_enabled true
-  database_name "sotm2016"
-  database_user "sotm2016"
-  database_password passwords["sotm2016"]
-end
-
-wordpress_theme "aerodrome" do
-  site "2016.stateofthemap.org"
-  repository "git://git.openstreetmap.org/stateofthemap.git"
-  revision "theme-2012"
-end
-
-wordpress_plugin "leaflet-maps-marker" do
-  site "2016.stateofthemap.org"
-end
-
-wordpress_plugin "sitepress-multilingual-cms" do
-  site "2016.stateofthemap.org"
-  repository "git://chef.openstreetmap.org/sitepress-multilingual-cms.git"
-end
-
-wordpress_plugin "wp-sticky" do
-  site "2016.stateofthemap.org"
+%w[2013].each do |year|
+  git "/srv/#{year}.stateofthemap.org" do
+    action :sync
+    repository "https://git.openstreetmap.org/public/stateofthemap.git"
+    revision "site-#{year}"
+    user "root"
+    group "root"
+  end
+
+  ssl_certificate "#{year}.stateofthemap.org" do
+    domains ["#{year}.stateofthemap.org", "#{year}.stateofthemap.com"]
+    notifies :reload, "service[apache2]"
+  end
+
+  apache_site "#{year}.stateofthemap.org" do
+    template "apache.static.erb"
+    directory "/srv/#{year}.stateofthemap.org"
+    variables :year => year
+  end
+end
+
+package %w[
+  ruby
+  ruby-dev
+  zlib1g-dev
+]
+
+gem_package "bundler" do
+  version "1.17.3"
+end
+
+%w[2016 2017 2018 2019 2020].each do |year|
+  git "/srv/#{year}.stateofthemap.org" do
+    action :sync
+    repository "git://github.com/openstreetmap/stateofthemap-#{year}.git"
+    user "root"
+    group "root"
+    notifies :run, "execute[/srv/#{year}.stateofthemap.org/Gemfile]"
+  end
+
+  directory "/srv/#{year}.stateofthemap.org/_site" do
+    mode 0o755
+    owner "nobody"
+    group "nogroup"
+  end
+
+  # Workaround https://github.com/jekyll/jekyll/issues/7804
+  # by creating a .jekyll-cache folder
+  directory "/srv/#{year}.stateofthemap.org/.jekyll-cache" do
+    mode 0o755
+    owner "nobody"
+    group "nogroup"
+  end
+
+  execute "/srv/#{year}.stateofthemap.org/Gemfile" do
+    action :nothing
+    command "bundle install --deployment"
+    cwd "/srv/#{year}.stateofthemap.org"
+    user "root"
+    group "root"
+    notifies :run, "execute[/srv/#{year}.stateofthemap.org]"
+    # Workaround until 2019 until merged https://github.com/openstreetmap/stateofthemap-2019/pull/46
+    only_if { ::File.exist?("/srv/#{year}.stateofthemap.org/Gemfile") }
+  end
+
+  execute "/srv/#{year}.stateofthemap.org" do
+    action :nothing
+    command "bundle exec jekyll build --trace --baseurl=https://#{year}.stateofthemap.org"
+    cwd "/srv/#{year}.stateofthemap.org"
+    user "nobody"
+    group "nogroup"
+  end
+
+  ssl_certificate "#{year}.stateofthemap.org" do
+    domains ["#{year}.stateofthemap.org", "#{year}.stateofthemap.com"]
+    notifies :reload, "service[apache2]"
+  end
+
+  apache_site "#{year}.stateofthemap.org" do
+    template "apache.jekyll.erb"
+    directory "/srv/#{year}.stateofthemap.org/_site"
+    variables :year => year
+  end

 end
 
 template "/etc/cron.daily/sotm-backup" do
   source "backup.cron.erb"
   owner "root"
   group "root"
 end
 
 template "/etc/cron.daily/sotm-backup" do
   source "backup.cron.erb"
   owner "root"
   group "root"

-  mode 0750
+  mode 0o750

   variables :passwords => passwords
 end
   variables :passwords => passwords
 end