X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/d7debc3ad43930a1ec8392f9d31a6084503813bb..29b8151b8011f934785f3434e3826eee78e61943:/cookbooks/civicrm/recipes/default.rb diff --git a/cookbooks/civicrm/recipes/default.rb b/cookbooks/civicrm/recipes/default.rb index dce923a06..89ba93a42 100644 --- a/cookbooks/civicrm/recipes/default.rb +++ b/cookbooks/civicrm/recipes/default.rb @@ -1,14 +1,14 @@ # -# Cookbook Name:: civicrm +# Cookbook:: civicrm # Recipe:: default # -# Copyright 2011, OpenStreetMap Foundation +# Copyright:: 2011, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # -# http://www.apache.org/licenses/LICENSE-2.0 +# https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, @@ -20,11 +20,23 @@ include_recipe "wordpress" include_recipe "mysql" +package %w[ + php-xml + php-curl + rsync + wkhtmltopdf + php-bcmath + php-intl +] + +cache_dir = Chef::Config[:file_cache_path] + passwords = data_bag_item("civicrm", "passwords") database_password = passwords["database"] -admin_password = passwords["admin"] -site_key = passwords["key"] +site_key = passwords["site_key"] +cred_keys = passwords["cred_keys"] +sign_keys = passwords["sign_keys"] mysql_user "civicrm@localhost" do password database_password @@ -34,56 +46,74 @@ mysql_database "civicrm" do permissions "civicrm@localhost" => :all end -wordpress_site "crm.osmfoundation.org" do - ssl_enabled false +wordpress_site "join.osmfoundation.org" do + aliases "crm.osmfoundation.org" database_name "civicrm" database_user "civicrm" database_password database_password + fpm_prometheus_port 11301 +end + +wordpress_theme "osmblog-wp-theme" do + site "join.osmfoundation.org" + repository "https://github.com/osmfoundation/osmblog-wp-theme.git" +end + +wordpress_plugin "registration-honeypot" do + site "join.osmfoundation.org" +end + +wordpress_plugin "contact-form-7" do + site "join.osmfoundation.org" +end + +wordpress_plugin "civicrm-admin-utilities" do + site "join.osmfoundation.org" end civicrm_version = node[:civicrm][:version] -civicrm_directory = "/srv/crm.osmfoundation.org/wp-content/plugins/civicrm" +civicrm_directory = "/srv/join.osmfoundation.org/wp-content/plugins/civicrm" directory "/opt/civicrm-#{civicrm_version}" do owner "wordpress" group "wordpress" - mode 0755 + mode "755" end -remote_file "/var/cache/chef/civicrm-#{civicrm_version}-wordpress.zip" do +remote_file "#{cache_dir}/civicrm-#{civicrm_version}-wordpress.zip" do action :create_if_missing - source "http://downloads.sourceforge.net/project/civicrm/civicrm-stable/#{civicrm_version}/civicrm-#{civicrm_version}-wordpress.zip" + source "https://download.civicrm.org/civicrm-#{civicrm_version}-wordpress.zip" owner "wordpress" group "wordpress" - mode 0644 + mode "644" backup false end -remote_file "/var/cache/chef/civicrm-#{civicrm_version}-l10n.tar.gz" do +remote_file "#{cache_dir}/civicrm-#{civicrm_version}-l10n.tar.gz" do action :create_if_missing - source "http://downloads.sourceforge.net/project/civicrm/civicrm-stable/#{civicrm_version}/civicrm-#{civicrm_version}-l10n.tar.gz" + source "https://download.civicrm.org/civicrm-#{civicrm_version}-l10n.tar.gz" owner "wordpress" group "wordpress" - mode 0644 + mode "644" backup false end -execute "/var/cache/chef/civicrm-#{civicrm_version}-wordpress.zip" do +archive_file "#{cache_dir}/civicrm-#{civicrm_version}-wordpress.zip" do action :nothing - command "unzip -qq /var/cache/chef/civicrm-#{civicrm_version}-wordpress.zip" - cwd "/opt/civicrm-#{civicrm_version}" - user "wordpress" + destination "/opt/civicrm-#{civicrm_version}" + overwrite true + owner "wordpress" group "wordpress" - subscribes :run, "remote_file[/var/cache/chef/civicrm-#{civicrm_version}-wordpress.zip]", :immediately + subscribes :extract, "remote_file[#{cache_dir}/civicrm-#{civicrm_version}-wordpress.zip]", :immediately end -execute "/var/cache/chef/civicrm-#{civicrm_version}-l10n.tar.gz" do +archive_file "#{cache_dir}/civicrm-#{civicrm_version}-l10n.tar.gz" do action :nothing - command "tar -zxf /var/cache/chef/civicrm-#{civicrm_version}-l10n.tar.gz" - cwd "/opt/civicrm-#{civicrm_version}/civicrm" - user "wordpress" + destination "/opt/civicrm-#{civicrm_version}/civicrm" + overwrite true + owner "wordpress" group "wordpress" - subscribes :run, "remote_file[/var/cache/chef/civicrm-#{civicrm_version}-l10n.tar.gz]", :immediately + subscribes :extract, "remote_file[#{cache_dir}/civicrm-#{civicrm_version}-l10n.tar.gz]", :immediately end execute "/opt/civicrm-#{civicrm_version}/civicrm" do @@ -91,14 +121,32 @@ execute "/opt/civicrm-#{civicrm_version}/civicrm" do command "rsync --archive --delete /opt/civicrm-#{civicrm_version}/civicrm/ #{civicrm_directory}" user "wordpress" group "wordpress" - subscribes :run, "execute[/var/cache/chef/civicrm-#{civicrm_version}-wordpress.zip]", :immediately - subscribes :run, "execute[/var/cache/chef/civicrm-#{civicrm_version}-l10n.tar.gz]", :immediately + subscribes :run, "archive_file[#{cache_dir}/civicrm-#{civicrm_version}-wordpress.zip]", :immediately + subscribes :run, "archive_file[#{cache_dir}/civicrm-#{civicrm_version}-l10n.tar.gz]", :immediately end -directory "/srv/crm.osmfoundation.org/wp-content/plugins/files" do +directory "/srv/join.osmfoundation.org/wp-content/uploads" do owner "www-data" group "www-data" - mode 0755 + mode "755" +end + +extensions_directory = "/srv/join.osmfoundation.org/wp-content/plugins/civicrm-extensions" + +directory extensions_directory do + owner "wordpress" + group "wordpress" + mode "755" +end + +node[:civicrm][:extensions].each_value do |details| + git "#{extensions_directory}/#{details[:name]}" do + action :sync + repository details[:repository] + revision details[:revision] + user "wordpress" + group "wordpress" + end end settings = edit_file "#{civicrm_directory}/civicrm/templates/CRM/common/civicrm.settings.php.template" do |line| @@ -112,9 +160,12 @@ settings = edit_file "#{civicrm_directory}/civicrm/templates/CRM/common/civicrm. line.gsub!(/%%dbHost%%/, "localhost") line.gsub!(/%%dbName%%/, "civicrm") line.gsub!(/%%crmRoot%%/, "#{civicrm_directory}/civicrm/") - line.gsub!(/%%templateCompileDir%%/, "/srv/crm.osmfoundation.org/wp-content/plugins/files/civicrm/templates_c/") - line.gsub!(/%%baseURL%%/, "http://crm.osmfoundation.org/") + line.gsub!(/%%templateCompileDir%%/, "/srv/join.osmfoundation.org/wp-content/uploads/civicrm/templates_c/") + line.gsub!(/%%baseURL%%/, "http://join.osmfoundation.org/") line.gsub!(/%%siteKey%%/, site_key) + line.gsub!(/%%credKeys%%/, cred_keys) + line.gsub!(/%%signKeys%%/, sign_keys) + line.gsub!(%r{// *define\('CIVICRM_CMSDIR', '/path/to/install/root/'\);}, "define('CIVICRM_CMSDIR', '/srv/join.osmfoundation.org');") line end @@ -122,22 +173,34 @@ end file "#{civicrm_directory}/civicrm.settings.php" do owner "wordpress" group "wordpress" - mode 0644 + mode "644" content settings end -template "/etc/cron.d/osmf-crm" do - source "cron.erb" - owner "root" - group "root" - mode 0644 - variables :directory => civicrm_directory, :passwords => passwords +systemd_service "osmf-crm-jobs" do + description "Run CRM jobs" + exec_start "/usr/bin/php #{civicrm_directory}/civicrm/bin/cli.php -s join.osmfoundation.org -u batch -p \"#{passwords['batch']}\" -e Job -a execute" + user "www-data" + sandbox :enable_network => true + memory_deny_write_execute false + restrict_address_families "AF_UNIX" + read_write_paths "/srv/join.osmfoundation.org/wp-content/uploads/civicrm" +end + +systemd_timer "osmf-crm-jobs" do + description "Run CRM jobs" + on_boot_sec "15m" + on_unit_inactive_sec "15m" +end + +service "osmf-crm-jobs.timer" do + action [:enable, :start] end template "/etc/cron.daily/osmf-crm-backup" do source "backup.cron.erb" owner "root" group "root" - mode 0750 + mode "750" variables :passwords => passwords end