X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/d1b835abf6c54e768ead54dd0056011554ba0b71..47b636ac08ba7e76eecfbc77a399582d0f89dcb6:/cookbooks/dev/recipes/default.rb diff --git a/cookbooks/dev/recipes/default.rb b/cookbooks/dev/recipes/default.rb index be4e96c68..9ad37bfc9 100644 --- a/cookbooks/dev/recipes/default.rb +++ b/cookbooks/dev/recipes/default.rb @@ -31,35 +31,59 @@ include_recipe "nodejs" include_recipe "php::fpm" include_recipe "postgresql" include_recipe "python" +include_recipe "ruby" package %w[ + ant + default-jdk-headless + default-jre-headless + golang + composer + php-apcu php-cgi php-cli php-curl php-db + php-gd + php-igbinary php-imagick + php-intl + php-mbstring + php-memcache php-mysql php-pear php-pgsql php-sqlite3 + php-xml pngcrush pngquant python3 + python3-brotli python3-bs4 python3-cheetah python3-dateutil + python3-dev + python3-dotenv + python3-lxml + python3-lz4 python3-magic + python3-pil python3-psycopg2 + python3-pyproj python3-gdal + gdal-bin + proj-bin g++ gcc make autoconf automake libtool + libargon2-dev libfcgi-dev libxml2-dev libmemcached-dev + libboost-dev libboost-regex-dev libboost-system-dev libboost-program-options-dev @@ -69,9 +93,48 @@ package %w[ libpqxx-dev libcrypto++-dev libyajl-dev + libfmt-dev zlib1g-dev + nano + osm2pgsql + osmosis + at + awscli + mailutils + lua-any + luajit + fonts-dejavu + fonts-dejavu-core + fonts-dejavu-extra + fonts-droid-fallback + fonts-liberation + fonts-noto-mono + gnuplot-nox + graphviz + irssi + jq + lz4 + lzip + lzop + pbzip2 + pigz + unrar + unzip + zip + netcat + tmux + whois + redis + r-base + pandoc ] +# Add uk_os_OSTN15_NTv2_OSGBtoETRS.tif used for reprojecting OS data +execute "uk_os_OSTN15_NTv2_OSGBtoETRS.tif" do + command "projsync --file uk_os_OSTN15_NTv2_OSGBtoETRS.tif --system-directory" + not_if { ::File.exist?("/usr/share/proj/uk_os_OSTN15_NTv2_OSGBtoETRS.tif") } +end + nodejs_package "svgo" python_package "geojson" do @@ -94,7 +157,10 @@ end package "apache2-suexec-pristine" php_fpm "default" do - template "fpm-default.conf.erb" + pm_max_children 10 + pm_start_servers 4 + pm_min_spare_servers 2 + pm_max_spare_servers 6 end php_fpm "www" do @@ -155,11 +221,27 @@ search(:accounts, "*:*").each do |account| next unless File.directory?("#{user_home}/public_html") - port = 7000 + account["uid"].to_i - php_fpm name do - template "fpm.conf.erb" - variables :user => name, :port => port + user name + group name + pm_max_children 10 + pm_start_servers 4 + pm_min_spare_servers 2 + pm_max_spare_servers 6 + pm_max_requests 10000 + request_terminate_timeout 1800 + environment "HOSTNAME" => "$HOSTNAME", + "PATH" => "/usr/local/bin:/usr/bin:/bin", + "TMP" => "/tmp", + "TMPDIR" => "/tmp", + "TEMP" => "/tmp" + php_values "max_execution_time" => "300", + "memory_limit" => "128M", + "post_max_size" => "32M", + "upload_max_filesize" => "32M" + php_admin_values "sendmail_path" => "/usr/sbin/sendmail -t -i -f #{name}@errol.openstreetmap.org", + "open_basedir" => "/home/#{name}/:/tmp/:/usr/share/php/" + php_flags "display_errors" => "on" end ssl_certificate "#{name}.dev.openstreetmap.org" do @@ -170,7 +252,7 @@ search(:accounts, "*:*").each do |account| apache_site "#{name}.dev.openstreetmap.org" do template "apache.user.erb" directory "#{user_home}/public_html" - variables :user => name, :port => port + variables :user => name end template "/etc/sudoers.d/#{name}" do @@ -182,9 +264,13 @@ search(:accounts, "*:*").each do |account| end end -if node[:postgresql][:clusters][:"12/main"] +node[:postgresql][:versions].each do |version| + package "postgresql-#{version}-postgis-3" +end + +if node[:postgresql][:clusters][:"14/main"] postgresql_user "apis" do - cluster "12/main" + cluster "14/main" end template "/usr/local/bin/cleanup-rails-assets" do @@ -195,19 +281,20 @@ if node[:postgresql][:clusters][:"12/main"] mode "755" end - ruby_version = node[:passenger][:ruby_version] - systemd_service "rails-jobs@" do description "Rails job queue runner" type "simple" + environment "RAILS_ENV" => "production", "SLEEP_DELAY" => "60" user "apis" working_directory "/srv/%i.apis.dev.openstreetmap.org/rails" - exec_start "/usr/local/bin/bundle#{ruby_version} exec rake jobs:work" + exec_start "#{node[:ruby][:bundle]} exec rails jobs:work" restart "on-failure" + nice 10 private_tmp true private_devices true - protect_system "full" + protect_system "strict" protect_home true + read_write_paths "/srv/%i.apis.dev.openstreetmap.org/logs" no_new_privileges true end @@ -220,14 +307,19 @@ if node[:postgresql][:clusters][:"12/main"] exec_reload "/bin/kill -HUP $MAINPID" private_tmp true private_devices true - protect_system "full" + protect_system "strict" protect_home true + read_write_paths ["/srv/%i.apis.dev.openstreetmap.org/logs", "/srv/%i.apis.dev.openstreetmap.org/rails/tmp"] no_new_privileges true restart "on-failure" end cgimap_port = 9000 + Dir.glob("/srv/*.apis.dev.openstreetmap.org").each do |dir| + node.default_unless[:dev][:rails][File.basename(dir).split(".").first] = {} + end + node[:dev][:rails].each do |name, details| database_name = details[:database] || "apis_#{name}" site_name = "#{name}.apis.dev.openstreetmap.org" @@ -239,17 +331,15 @@ if node[:postgresql][:clusters][:"12/main"] if details[:repository] site_aliases = details[:aliases] || [] - secret_key_base = details[:secret_key_base] || SecureRandom.base64(96) - - node.normal[:dev][:rails][name][:secret_key_base] = secret_key_base + secret_key_base = persistent_token("dev", "rails", name, "secret_key_base") postgresql_database database_name do - cluster "12/main" + cluster "14/main" owner "apis" end postgresql_extension "#{database_name}_btree_gist" do - cluster "12/main" + cluster "14/main" database database_name extension "btree_gist" end @@ -285,15 +375,15 @@ if node[:postgresql][:clusters][:"12/main"] end rails_port site_name do - ruby ruby_version directory rails_directory user "apis" group "apis" repository details[:repository] revision details[:revision] - database_port node[:postgresql][:clusters][:"12/main"][:port] + database_port node[:postgresql][:clusters][:"14/main"][:port] database_name database_name database_username "apis" + email_from "OpenStreetMap " gpx_dir gpx_directory log_path "#{log_directory}/rails.log" memcache_servers ["127.0.0.1"] @@ -334,7 +424,7 @@ if node[:postgresql][:clusters][:"12/main"] cwd cgimap_directory user "apis" group "apis" - subscribes :run, "git[#{cgimap_directory}]", :immediate + subscribes :run, "git[#{cgimap_directory}]", :immediately end execute "#{cgimap_directory}/configure" do @@ -343,7 +433,7 @@ if node[:postgresql][:clusters][:"12/main"] cwd cgimap_directory user "apis" group "apis" - subscribes :run, "execute[#{cgimap_directory}/autogen.sh]", :immediate + subscribes :run, "execute[#{cgimap_directory}/autogen.sh]", :immediately end execute "#{cgimap_directory}/Makefile" do @@ -352,7 +442,7 @@ if node[:postgresql][:clusters][:"12/main"] cwd cgimap_directory user "apis" group "apis" - subscribes :run, "execute[#{cgimap_directory}/configure]", :immediate + subscribes :run, "execute[#{cgimap_directory}/configure]", :immediately notifies :restart, "service[cgimap@#{name}]" end @@ -362,7 +452,7 @@ if node[:postgresql][:clusters][:"12/main"] group "root" mode "640" variables :cgimap_port => cgimap_port, - :database_port => node[:postgresql][:clusters][:"12/main"][:port], + :database_port => node[:postgresql][:clusters][:"14/main"][:port], :database_name => database_name, :log_directory => log_directory notifies :restart, "service[cgimap@#{name}]" @@ -415,6 +505,10 @@ if node[:postgresql][:clusters][:"12/main"] action :delete end + service "rails-jobs@#{name}" do + action [:stop, :disable] + end + directory site_directory do action :delete recursive true @@ -426,10 +520,8 @@ if node[:postgresql][:clusters][:"12/main"] postgresql_database database_name do action :drop - cluster "12/main" + cluster "14/main" end - - node.normal[:dev][:rails].delete(name) end end