X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/c8eafee4c795a7dfb70a60360b0691c53a5dde6f..9a6fabc89f05283c96e6eaff97935cc10e788c62:/cookbooks/community/recipes/default.rb diff --git a/cookbooks/community/recipes/default.rb b/cookbooks/community/recipes/default.rb index 69b1406c5..000a57a7e 100644 --- a/cookbooks/community/recipes/default.rb +++ b/cookbooks/community/recipes/default.rb @@ -17,13 +17,22 @@ # limitations under the License. # +include_recipe "accounts" include_recipe "docker" include_recipe "git" include_recipe "ssl" -include_recipe "geoipupdate" passwords = data_bag_item("community", "passwords") -license_keys = data_bag_item("geoipupdate", "license-keys") +license_keys = data_bag_item("geoipupdate", "license-keys") unless kitchen? + +prometheus_servers = search(:node, "recipes:prometheus\\:\\:server").map do |server| + server.ipaddresses(:role => :external) +end.flatten + +# Disable any default installed apache2 service. Web server is embedded within the discourse docker container +service "apache2" do + action [:disable, :stop] +end directory "/srv/community.openstreetmap.org" do owner "root" @@ -37,62 +46,115 @@ directory "/srv/community.openstreetmap.org/shared" do mode "755" end +directory "/srv/community.openstreetmap.org/files" do + owner "community" + group "community" + mode "755" +end + +template "/srv/community.openstreetmap.org/files/update-feeds.atom" do + source "update-feeds.atom.erb" + owner "community" + group "community" + mode "644" +end + git "/srv/community.openstreetmap.org/docker" do action :sync repository "https://github.com/discourse/discourse_docker.git" + # Revision pin not possible as launch wrapper automatically updates git repo. revision "main" depth 1 user "root" group "root" - notifies :run, "execute[discourse_container_data_rebuild]" - notifies :run, "execute[discourse_container_web_only_bootstrap]" - notifies :run, "execute[discourse_container_mail_receiver_rebuild]" + notifies :run, "notify_group[discourse_container_new_data]" + notifies :run, "notify_group[discourse_container_new_web_only]" + notifies :run, "notify_group[discourse_container_new_mail_receiver]" end template "/srv/community.openstreetmap.org/docker/containers/data.yml" do source "data.yml.erb" owner "root" group "root" - mode "644" + mode "640" variables :passwords => passwords - notifies :run, "execute[discourse_container_data_rebuild]" + notifies :run, "notify_group[discourse_container_new_data]" +end + +resolvers = node[:networking][:nameservers].map do |resolver| + resolver =~ /:/ ? "[#{resolver}]" : resolver end template "/srv/community.openstreetmap.org/docker/containers/web_only.yml" do source "web_only.yml.erb" owner "root" group "root" + mode "640" + variables :license_keys => license_keys, :passwords => passwords, + :prometheus_servers => prometheus_servers, :resolvers => resolvers + notifies :run, "notify_group[discourse_container_new_web_only]" +end + +template "/srv/community.openstreetmap.org/files/policyd-spf.conf" do + source "policyd-spf.conf.erb" + owner "community" + group "community" mode "644" - variables :license_keys => license_keys, :passwords => passwords - notifies :run, "execute[discourse_container_web_only_bootstrap]" + notifies :run, "notify_group[discourse_container_new_mail_receiver]" end template "/srv/community.openstreetmap.org/docker/containers/mail-receiver.yml" do source "mail-receiver.yml.erb" owner "root" group "root" - mode "644" + mode "640" variables :passwords => passwords - notifies :run, "execute[discourse_container_mail_receiver_rebuild]" + notifies :run, "notify_group[discourse_container_new_mail_receiver]" end -# Destroy Bootstap Start -execute "discourse_container_data_rebuild" do +ssl_certificate "community.openstreetmap.org" do + domains ["community.openstreetmap.org", "community.osm.org", "communities.openstreetmap.org", "communities.osm.org", "c.openstreetmap.org", "c.osm.org", "forum.openstreetmap.org", "forum.osm.org"] + notifies :run, "notify_group[discourse_container_new_web_only]" + notifies :run, "notify_group[discourse_container_new_mail_receiver]" +end + +notify_group "discourse_container_new_web_only" do + notifies :run, "execute[discourse_container_data_start]", :immediately # noop if site up + notifies :run, "execute[discourse_container_web_only_bootstrap]", :immediately # site up but runs in parallel. Slow + notifies :run, "execute[discourse_container_web_only_destroy]", :immediately # site down + notifies :run, "execute[discourse_container_data_rebuild]", :immediately # site down + notifies :run, "execute[discourse_container_web_only_start]", :immediately # site restore +end + +notify_group "discourse_container_new_data" do + notifies :run, "execute[discourse_container_web_only_destroy]", :immediately # site down + notifies :run, "execute[discourse_container_data_rebuild]", :immediately # site down + notifies :run, "execute[discourse_container_web_only_start]", :immediately # site restore +end + +notify_group "discourse_container_new_mail_receiver" do + notifies :run, "execute[discourse_container_mail_receiver_rebuild]", :immediately +end + +# Attempt at a failsafe to ensure all containers are running +notify_group "discourse_container_ensure_all_running" do + action :run + notifies :run, "execute[discourse_container_data_start]", :delayed + notifies :run, "execute[discourse_container_web_only_start]", :delayed + notifies :run, "execute[discourse_container_mail_receiver_start]", :delayed +end + +execute "discourse_container_data_start" do action :nothing - command "./launcher rebuild data" + command "./launcher start data" cwd "/srv/community.openstreetmap.org/docker/" user "root" group "root" end -ssl_certificate "community.openstreetmap.org" do - domains ["community.openstreetmap.org", "community.osm.org", "communities.openstreetmap.org", "communities.osm.org"] - notifies :run, "execute[discourse_container_web_only_bootstrap]" -end - -execute "discourse_container_data_start" do - action :run - command "./launcher rebuild start" +execute "discourse_container_data_rebuild" do + action :nothing + command "./launcher rebuild data" cwd "/srv/community.openstreetmap.org/docker/" user "root" group "root" @@ -104,7 +166,6 @@ execute "discourse_container_web_only_bootstrap" do cwd "/srv/community.openstreetmap.org/docker/" user "root" group "root" - notifies :run, "execute[discourse_container_web_only_destroy]", :immediately end execute "discourse_container_web_only_destroy" do @@ -113,7 +174,6 @@ execute "discourse_container_web_only_destroy" do cwd "/srv/community.openstreetmap.org/docker/" user "root" group "root" - notifies :run, "execute[discourse_container_web_only_start]", :immediately end execute "discourse_container_web_only_start" do @@ -122,10 +182,9 @@ execute "discourse_container_web_only_start" do cwd "/srv/community.openstreetmap.org/docker/" user "root" group "root" - notifies :run, "execute[discourse_container_data_start]", :before end -# Destroy Bootstap Start +# Rebuild: Stop Destroy Bootstap Start execute "discourse_container_mail_receiver_rebuild" do action :nothing command "./launcher rebuild mail-receiver" @@ -134,6 +193,14 @@ execute "discourse_container_mail_receiver_rebuild" do group "root" end +execute "discourse_container_mail_receiver_start" do + action :nothing + command "./launcher start mail-receiver" + cwd "/srv/community.openstreetmap.org/docker/" + user "root" + group "root" +end + template "/etc/cron.daily/community-backup" do source "backup.cron.erb" owner "root"