X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/388687b7120815bc61f49de6c5dd0ea793dad67b..9c48ae6b9154acb9aeb57cb94fb2fae5a88b9c8d:/cookbooks/dmca/recipes/default.rb?ds=inline diff --git a/cookbooks/dmca/recipes/default.rb b/cookbooks/dmca/recipes/default.rb index b91fdc9c0..eafadd787 100644 --- a/cookbooks/dmca/recipes/default.rb +++ b/cookbooks/dmca/recipes/default.rb @@ -1,8 +1,8 @@ # -# Cookbook Name:: dmca +# Cookbook:: dmca # Recipe:: default # -# Copyright 2018, OpenStreetMap Foundation +# Copyright:: 2018, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. @@ -18,23 +18,26 @@ # include_recipe "apache" +include_recipe "php::fpm" -apache_module "php7.2" +apache_module "proxy" +apache_module "proxy_fcgi" -directory "/srv/dmca.openstreetmap.org" do - owner "root" - group "root" - mode 0o755 +package "composer" + +git "/srv/dmca.openstreetmap.org" do + action :sync + repository "https://github.com/openstreetmap/dmca-website.git" + revision "main" + depth 1 + notifies :run, "execute[/srv/dmca.openstreetmap.org/composer.json]", :immediately end -remote_directory "/srv/dmca.openstreetmap.org/html" do - source "html" - owner "root" - group "root" - mode 0o755 - files_owner "root" - files_group "root" - files_mode 0o644 +execute "/srv/dmca.openstreetmap.org/composer.json" do + action :nothing + command "composer install --no-dev" + cwd "/srv/dmca.openstreetmap.org/" + environment "COMPOSER_HOME" => "/srv/dmca.openstreetmap.org/" end ssl_certificate "dmca.openstreetmap.org" do @@ -42,6 +45,12 @@ ssl_certificate "dmca.openstreetmap.org" do notifies :reload, "service[apache2]" end +php_fpm "dmca.openstreetmap.org" do + php_admin_values "open_basedir" => "/srv/dmca.openstreetmap.org/:/usr/share/php/:/tmp/", + "disable_functions" => "exec,shell_exec,system,passthru,popen,proc_open" + prometheus_port 11201 +end + apache_site "dmca.openstreetmap.org" do template "apache.erb" directory "/srv/dmca.openstreetmap.org"