X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/9f13c244211f5683f232f7cc32fac53be8d0b3ec..7b1b204f12857077361bdaf729c97414c45daa98:/cookbooks/imagery/resources/layer.rb diff --git a/cookbooks/imagery/resources/layer.rb b/cookbooks/imagery/resources/layer.rb index 22509eb57..2868c7f7b 100644 --- a/cookbooks/imagery/resources/layer.rb +++ b/cookbooks/imagery/resources/layer.rb @@ -17,13 +17,15 @@ # limitations under the License. # +require "yaml" + default_action :create property :layer, String, :name_property => true property :site, String, :required => true property :source, String, :required => true property :root_layer, [TrueClass, FalseClass], :default => false -property :text, String +property :title, String property :copyright, String, :default => "Copyright" property :projection, String, :default => "EPSG:3857" property :palette, String @@ -31,76 +33,105 @@ property :extent, String property :background_colour, String property :resample, String, :default => "average" property :imagemode, String -property :extension, String, - :is => %w(png png8 jpeg), - :default => "png" -property :max_zoom, Fixnum, :default => 23 +property :extension, String, :default => "png" +property :max_zoom, Integer, :default => 18 property :url_aliases, [String, Array], :default => [] +property :revision, Integer, :default => 0 +property :overlay, [TrueClass, FalseClass], :default => false +property :default_layer, [TrueClass, FalseClass], :default => false action :create do - template "/srv/imagery/mapserver/layer-#{layer}.map" do + file "/srv/imagery/layers/#{new_resource.site}/#{new_resource.layer}.yml" do + owner "root" + group "root" + mode 0o644 + content YAML.dump(:name => new_resource.layer, + :title => new_resource.title || new_resource.layer, + :url => "//{s}.#{new_resource.site}/layer/#{new_resource.layer}/{z}/{x}/{y}.png", + :attribution => new_resource.copyright, + :default => new_resource.default_layer, + :maxZoom => new_resource.max_zoom, + :overlay => new_resource.overlay) + end + + template "/srv/imagery/mapserver/layer-#{new_resource.layer}.map" do cookbook "imagery" source "mapserver.map.erb" owner "root" group "root" - mode 0644 + mode 0o644 variables new_resource.to_hash end - systemd_service "mapserv-fcgi-#{layer}" do - description "Map server for #{layer} layer" - limit_nofile 16384 - environment "MS_MAPFILE" => "/srv/imagery/mapserver/layer-#{layer}.map", + systemd_service "mapserv-fcgi-#{new_resource.layer}" do + description "Map server for #{new_resource.layer} layer" + environment "MS_MAPFILE" => "/srv/imagery/mapserver/layer-#{new_resource.layer}.map", "MS_MAP_PATTERN" => "^/srv/imagery/mapserver/", - "MS_ERRORFILE" => "/tmp/mapserver-layer-#{layer}.log", - "MS_DEBUGLEVEL" => "5" + "MS_DEBUGLEVEL" => "0", + "MS_ERRORFILE" => "stderr" + limit_nofile 16384 user "imagery" group "imagery" - exec_start "/usr/bin/spawn-fcgi -n -s /run/mapserver-fastcgi/layer-#{layer}.socket -M 0666 -f /usr/lib/cgi-bin/mapserv" - restart "on-failure" + exec_start_pre "/bin/rm -f /run/mapserver-fastcgi/layer-#{new_resource.layer}.socket" + exec_start "/usr/bin/spawn-fcgi -n -s /run/mapserver-fastcgi/layer-#{new_resource.layer}.socket -M 0666 -P /run/mapserver-fastcgi/layer-#{new_resource.layer}.pid -- /usr/bin/multiwatch -f 6 --signal=TERM -- /usr/lib/cgi-bin/mapserv" + private_tmp true + private_devices true + private_network true + protect_system "full" + protect_home true + no_new_privileges true + restart "always" + pid_file "/run/mapserver-fastcgi/layer-#{new_resource.layer}.pid" end - service "mapserv-fcgi-#{layer}" do + service "mapserv-fcgi-#{new_resource.layer}" do + provider Chef::Provider::Service::Systemd action [:enable, :start] - subscribes :restart, "template[/srv/imagery/mapserver/layer-#{layer}.map]" - subscribes :restart, "systemd_service[mapserv-fcgi]" + supports :status => true, :restart => true, :reload => false + subscribes :restart, "template[/srv/imagery/mapserver/layer-#{new_resource.layer}.map]" + subscribes :restart, "systemd_service[mapserv-fcgi-#{new_resource.layer}]" end - directory "/srv/imagery/nginx/#{site}" do + directory "/srv/imagery/nginx/#{new_resource.site}" do owner "root" group "root" - mode 0755 + mode 0o755 recursive true end - template "/srv/imagery/nginx/#{site}/layer-#{layer}.conf" do + template "/srv/imagery/nginx/#{new_resource.site}/layer-#{new_resource.layer}.conf" do cookbook "imagery" source "nginx_imagery_layer_fragment.conf.erb" owner "root" group "root" - mode 0644 + mode 0o644 variables new_resource.to_hash end end action :delete do - service "mapserv-fcgi-layer-#{layer}" do + file "/srv/imagery/layers/#{new_resource.site}/#{new_resource.layer}.yml" do + action :delete + end + + service "mapserv-fcgi-layer-#{new_resource.layer}" do action [:stop, :disable] end - file "/srv/imagery/mapserver/layer-#{layer}.map" do + file "/srv/imagery/mapserver/layer-#{new_resource.layer}.map" do action :delete end - systemd_service "mapserv-fcgi-#{layer}" do + systemd_service "mapserv-fcgi-#{new_resource.layer}" do action :delete end - file "/srv/imagery/nginx/#{site}/layer-#{layer}.conf" do + file "/srv/imagery/nginx/#{new_resource.site}/layer-#{new_resource.layer}.conf" do action :delete end end def after_created - notifies :restart, "service[nginx]" + notifies :create, "imagery_site[#{site}]" + notifies :reload, "service[nginx]" end