X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/c29f6f4ec43659a62418e3f6ec7b77e56e7fedc7..ba65c5618d3113373c0f3306ce993917fc2af23a:/cookbooks/dev/recipes/default.rb diff --git a/cookbooks/dev/recipes/default.rb b/cookbooks/dev/recipes/default.rb index a5ceee940..693abecf2 100644 --- a/cookbooks/dev/recipes/default.rb +++ b/cookbooks/dev/recipes/default.rb @@ -1,8 +1,8 @@ # -# Cookbook Name:: dev +# Cookbook:: dev # Recipe:: default # -# Copyright 2011, OpenStreetMap Foundation +# Copyright:: 2011, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. @@ -22,8 +22,10 @@ require "securerandom" include_recipe "apache" include_recipe "passenger" +include_recipe "geoipupdate" include_recipe "git" include_recipe "memcached" +include_recipe "munin" include_recipe "mysql" include_recipe "nodejs" include_recipe "postgresql" @@ -37,19 +39,12 @@ package %w[ php-db php-fpm php-imagick - php-mcrypt php-mysql php-pear php-pgsql php-sqlite3 -] - -package %w[ pngcrush pngquant -] - -package %w[ python python-argparse python-beautifulsoup @@ -58,6 +53,25 @@ package %w[ python-magic python-psycopg2 python-gdal + g++ + gcc + make + autoconf + automake + libtool + libfcgi-dev + libxml2-dev + libmemcached-dev + libboost-regex-dev + libboost-system-dev + libboost-program-options-dev + libboost-date-time-dev + libboost-filesystem-dev + libboost-locale-dev + libpqxx-dev + libcrypto++-dev + libyajl-dev + zlib1g-dev ] nodejs_package "svgo" @@ -191,10 +205,47 @@ if node[:postgresql][:clusters][:"9.5/main"] mode 0o755 end + ruby_version = node[:passenger][:ruby_version] + + systemd_service "rails-jobs@" do + description "Rails job queue runner" + type "simple" + user "apis" + working_directory "/srv/%i.apis.dev.openstreetmap.org/rails" + exec_start "/usr/local/bin/bundle#{ruby_version} exec rake jobs:work" + restart "on-failure" + private_tmp true + private_devices true + protect_system "full" + protect_home true + no_new_privileges true + end + + systemd_service "cgimap@" do + description "OpenStreetMap API Server" + type "forking" + environment_file "/etc/default/cgimap-%i" + user "apis" + exec_start "/srv/%i.apis.dev.openstreetmap.org/cgimap/openstreetmap-cgimap --daemon --port $CGIMAP_PORT --instances 5" + exec_reload "/bin/kill -HUP $MAINPID" + private_tmp true + private_devices true + protect_system "full" + protect_home true + no_new_privileges true + restart "on-failure" + end + + cgimap_port = 9000 + node[:dev][:rails].each do |name, details| database_name = details[:database] || "apis_#{name}" site_name = "#{name}.apis.dev.openstreetmap.org" - rails_directory = "/srv/#{name}.apis.dev.openstreetmap.org" + site_directory = "/srv/#{name}.apis.dev.openstreetmap.org" + log_directory = "#{site_directory}/logs" + rails_directory = "#{site_directory}/rails" + cgimap_directory = "#{site_directory}/cgimap" + gpx_directory = "#{site_directory}/gpx" if details[:repository] site_aliases = details[:aliases] || [] @@ -213,8 +264,38 @@ if node[:postgresql][:clusters][:"9.5/main"] extension "btree_gist" end + directory site_directory do + owner "apis" + group "apis" + mode 0o755 + end + + directory log_directory do + owner "apis" + group "apis" + mode 0o755 + end + + directory gpx_directory do + owner "apis" + group "apis" + mode 0o755 + end + + directory "#{gpx_directory}/traces" do + owner "apis" + group "apis" + mode 0o755 + end + + directory "#{gpx_directory}/images" do + owner "apis" + group "apis" + mode 0o755 + end + rails_port site_name do - ruby node[:passenger][:ruby_version] + ruby ruby_version directory rails_directory user "apis" group "apis" @@ -223,9 +304,12 @@ if node[:postgresql][:clusters][:"9.5/main"] database_port node[:postgresql][:clusters][:"9.5/main"][:port] database_name database_name database_username "apis" + gpx_dir gpx_directory + log_path "#{log_directory}/rails.log" memcache_servers ["127.0.0.1"] csp_enforce true run_migrations true + trace_use_job_queue true end template "#{rails_directory}/config/initializers/setup.rb" do @@ -237,6 +321,68 @@ if node[:postgresql][:clusters][:"9.5/main"] notifies :restart, "rails_port[#{site_name}]" end + service "rails-jobs@#{name}" do + action [:enable, :start] + supports :restart => true + subscribes :restart, "rails_port[#{site_name}]" + subscribes :restart, "systemd_service[#{name}]" + only_if "fgrep -q delayed_job #{rails_directory}/Gemfile.lock" + end + + if details[:cgimap_repository] + git cgimap_directory do + action :sync + repository details[:cgimap_repository] + revision details[:cgimap_revision] + user "apis" + group "apis" + end + + execute "#{cgimap_directory}/autogen.sh" do + action :nothing + command "./autogen.sh" + cwd cgimap_directory + user "apis" + group "apis" + subscribes :run, "git[#{cgimap_directory}]", :immediate + end + + execute "#{cgimap_directory}/configure" do + action :nothing + command "./configure --with-fcgi=/usr --with-boost-libdir=/usr/lib/x86_64-linux-gnu --enable-yajl" + cwd cgimap_directory + user "apis" + group "apis" + subscribes :run, "execute[#{cgimap_directory}/autogen.sh]", :immediate + end + + execute "#{cgimap_directory}/Makefile" do + action :nothing + command "make -j" + cwd cgimap_directory + user "apis" + group "apis" + subscribes :run, "execute[#{cgimap_directory}/configure]", :immediate + notifies :restart, "service[cgimap@#{name}]" + end + + template "/etc/default/cgimap-#{name}" do + source "cgimap.environment.erb" + owner "root" + group "root" + mode 0o640 + variables :cgimap_port => cgimap_port, + :database_port => node[:postgresql][:clusters][:"9.5/main"][:port], + :database_name => database_name, + :log_directory => log_directory + notifies :restart, "service[cgimap@#{name}]" + end + + service "cgimap@#{name}" do + action [:start, :enable] + end + end + ssl_certificate site_name do domains [site_name] + site_aliases notifies :reload, "service[apache2]" @@ -244,14 +390,42 @@ if node[:postgresql][:clusters][:"9.5/main"] apache_site site_name do template "apache.rails.erb" - variables :name => site_name, :aliases => site_aliases, :secret_key_base => secret_key_base + variables :application_name => name, + :aliases => site_aliases, + :secret_key_base => secret_key_base, + :cgimap_enabled => details.key?(:cgimap_repository), + :cgimap_port => cgimap_port end + + template "/etc/logrotate.d/apis-#{name}" do + source "logrotate.apis.erb" + owner "root" + group "root" + mode 0o644 + variables :name => name, + :log_directory => log_directory, + :rails_directory => rails_directory + end + + cgimap_port += 1 else + file "/etc/logrotate.d/apis-#{name}" do + action :delete + end + apache_site site_name do action [:delete] end - directory rails_directory do + service "cgimap@#{name}" do + action [:stop, :disable] + end + + file "/etc/default/cgimap-#{name}" do + action :delete + end + + directory site_directory do action :delete recursive true end