X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/de8cb84f053060182672c34d7bd2fb90fa1d3d2a..f5734d116938710a374d40876136f7f3dd4ac746:/cookbooks/otrs/recipes/default.rb diff --git a/cookbooks/otrs/recipes/default.rb b/cookbooks/otrs/recipes/default.rb index c0f9c33e7..a42e22eb0 100644 --- a/cookbooks/otrs/recipes/default.rb +++ b/cookbooks/otrs/recipes/default.rb @@ -1,14 +1,14 @@ # -# Cookbook Name:: otrs +# Cookbook:: otrs # Recipe:: default # -# Copyright 2012, OpenStreetMap Foundation +# Copyright:: 2012, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # -# http://www.apache.org/licenses/LICENSE-2.0 +# https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, @@ -17,70 +17,87 @@ # limitations under the License. # +include_recipe "accounts" +include_recipe "apache" +include_recipe "exim" +include_recipe "postgresql" include_recipe "tools" -include_recipe "apache::ssl" passwords = data_bag_item("otrs", "passwords") package "libapache2-mod-perl2" package "libapache2-reload-perl" -package "libgd-gd2-perl" -package "libgd-graph-perl" -package "libgd-text-perl" -package "libjson-xs-perl" -package "libmail-imapclient-perl" -package "libnet-ldap-perl" -package "libpdf-api2-perl" -package "libsoap-lite-perl" +package %w[ + tar + bzip2 + libcrypt-eksblowfish-perl + libdatetime-perl + libgd-gd2-perl + libgd-graph-perl + libgd-text-perl + libjson-xs-perl + libmail-imapclient-perl + libmoo-perl + libnet-ldap-perl + libpdf-api2-perl + libsoap-lite-perl + libtemplate-perl + libyaml-libyaml-perl +] apache_module "headers" version = node[:otrs][:version] user = node[:otrs][:user] -group = node[:otrs][:group] database_cluster = node[:otrs][:database_cluster] database_name = node[:otrs][:database_name] database_user = node[:otrs][:database_user] database_password = passwords[node[:otrs][:database_password]] site = node[:otrs][:site] +site_aliases = node[:otrs][:site_aliases] || [] -remote_file "/tmp/otrs-#{version}.tar.bz2" do - source "http://ftp.otrs.org/pub/otrs/otrs-#{version}.tar.bz2" - not_if { File.exist?("/opt/otrs-#{version}") } +postgresql_user database_user do + cluster database_cluster + password database_password +end + +postgresql_database database_name do + cluster database_cluster + owner database_user +end + +remote_file "#{Chef::Config[:file_cache_path]}/otrs-#{version}.tar.bz2" do + source "https://download.znuny.org/releases/otrs-#{version}.tar.bz2" + not_if { ::File.exist?("/opt/otrs-#{version}") } end execute "untar-otrs-#{version}" do - command "tar jxf /tmp/otrs-#{version}.tar.bz2" + command "tar jxf #{Chef::Config[:file_cache_path]}/otrs-#{version}.tar.bz2" cwd "/opt" user "root" group "root" - not_if { File.exist?("/opt/otrs-#{version}") } + not_if { ::File.exist?("/opt/otrs-#{version}") } end -file "/opt/otrs-#{version}/Kernel/Config.pm" do - owner user - group "www-data" - mode 0664 - content_from_file "/opt/otrs-#{version}/Kernel/Config.pm.dist" do |line| - line.gsub!(/^( *)\$Self->{Database} = 'otrs'/, "\\1$Self->{Database} = '#{database_name}'") - line.gsub!(/^( *)\$Self->{DatabaseUser} = 'otrs'/, "\\1$Self->{DatabaseUser} = '#{database_user}'") - line.gsub!(/^( *)\$Self->{DatabasePw} = 'some-pass'/, "\\1$Self->{DatabasePw} = '#{database_password}'") - line.gsub!(/^( *)\$Self->{Database} = 'otrs'/, "\\1$Self->{Database} = '#{database_name}'") - line.gsub!(/^( *\$Self->{DatabaseDSN} = "DBI:mysql:)/, "#\\1") - line.gsub!(/^#( *\$Self->{DatabaseDSN} = "DBI:Pg:.*;host=)/, "\\1") - - line - end +config = edit_file "/opt/otrs-#{version}/Kernel/Config.pm.dist" do |line| + line.gsub!(/^( *)\$Self->{Database} = 'otrs'/, "\\1$Self->{Database} = '#{database_name}'") + line.gsub!(/^( *)\$Self->{DatabaseUser} = 'otrs'/, "\\1$Self->{DatabaseUser} = '#{database_user}'") + line.gsub!(/^( *)\$Self->{DatabasePw} = 'some-pass'/, "\\1$Self->{DatabasePw} = '#{database_password}'") + line.gsub!(/^( *)\$Self->{Database} = 'otrs'/, "\\1$Self->{Database} = '#{database_name}'") + line.gsub!(/^( *\$Self->{DatabaseDSN} = "DBI:mysql:)/, "#\\1") + line.gsub!(/^#( *\$Self->{DatabaseDSN} = "DBI:Pg:.*;host=)/, "\\1") + line.gsub!(/^( *)# (\$Self->{CheckMXRecord} = 0)/, "\\1\\2") + line.gsub!(/^( *)# \$Self->{SessionUseCookie} = 0/, "\\1$Self->{SessionCheckRemoteIP} = 0") + + line end -file "/opt/otrs-#{version}/Kernel/Config/GenericAgent.pm" do +file "/opt/otrs-#{version}/Kernel/Config.pm" do owner user group "www-data" - mode 0664 - content_from_file "/opt/otrs-#{version}/Kernel/Config/GenericAgent.pm.dist" do |line| - line - end + mode "664" + content config end link "/opt/otrs" do @@ -89,65 +106,49 @@ end execute "/opt/otrs/bin/otrs.SetPermissions.pl" do action :run - command "/opt/otrs/bin/otrs.SetPermissions.pl --otrs-user=#{user} --web-user=www-data --otrs-group=www-data --web-group=www-data /opt/otrs-#{version}" + command "/opt/otrs/bin/otrs.SetPermissions.pl --otrs-user=#{user} --web-group=www-data /opt/otrs-#{version}" user "root" group "root" - not_if { File.stat("/opt/otrs/README").uid != Etc.getpwnam("otrs").uid } + only_if { File.stat("/opt/otrs/README.md").uid != Etc.getpwnam("otrs").uid } end -execute "/opt/otrs/bin/otrs.RebuildConfig.pl" do - action :run - command "/opt/otrs/bin/otrs.RebuildConfig.pl" - user "root" - group "root" - not_if { File.exist?("/opt/otrs/Kernel/Config/Files/ZZZAAuto.pm") } -end - -if node[:postgresql][:clusters][database_cluster] - postgresql_user database_user do - cluster database_cluster - password database_password - end - - postgresql_database database_name do - cluster database_cluster - owner database_user - end -end - -execute "/opt/otrs/bin/Cron.sh" do - action :nothing - command "/opt/otrs/bin/Cron.sh restart" +systemd_service "otrs" do + description "OTRS Daemon" + type "forking" user "otrs" group "otrs" + exec_start "/opt/otrs/bin/otrs.Daemon.pl start" + private_tmp true + protect_system "full" + protect_home true + read_write_paths "/var/log/exim4" end -Dir.glob("/opt/otrs/var/cron/*.dist") do |distname| - name = distname.sub(".dist", "") +service "otrs" do + action [:enable, :start] + subscribes :restart, "systemd_service[otrs]" +end - file name do - owner "otrs" - group "www-data" - mode 0664 - content IO.read(distname) - notifies :run, resources(:execute => "/opt/otrs/bin/Cron.sh") - end +ssl_certificate site do + domains [site] + site_aliases + notifies :reload, "service[apache2]" end apache_site site do template "apache.erb" + variables :aliases => site_aliases end template "/etc/sudoers.d/otrs" do source "sudoers.erb" owner "root" group "root" - mode 0440 + mode "440" end template "/etc/cron.daily/otrs-backup" do source "backup.cron.erb" owner "root" group "root" - mode 0755 + mode "755" end