X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/e821c9820fc411af063495f1fa77230212c19059..c2e56f41e0fe2d9e1c0f034365cfc9998b8b734a:/cookbooks/squid/recipes/default.rb diff --git a/cookbooks/squid/recipes/default.rb b/cookbooks/squid/recipes/default.rb index dae04ddeb..ff2a6a425 100644 --- a/cookbooks/squid/recipes/default.rb +++ b/cookbooks/squid/recipes/default.rb @@ -17,6 +17,9 @@ # limitations under the License. # +include_recipe "apt" +include_recipe "munin" + if node[:squid][:version] >= 3 apt_package "squid" do action :unlock @@ -87,34 +90,36 @@ end address_families = %w[AF_UNIX AF_INET AF_INET6] +file "/etc/systemd/system/squid.service" do + action :delete +end + systemd_service "squid" do - description "Squid caching proxy" - after ["network.target", "nss-lookup.target"] - type "forking" + dropin "chef" limit_nofile 98304 - exec_start_pre "/usr/sbin/squid -N -z" - exec_start "/usr/sbin/squid -Y" - exec_reload "/usr/sbin/squid -k reconfigure" - exec_stop "/usr/sbin/squid -k shutdown" private_tmp true private_devices true protect_system "full" protect_home true restrict_address_families address_families - restart "on-failure" - timeout_sec 0 + restart "always" end service "squid" do - action [:enable, :start] + action :enable subscribes :restart, "systemd_service[squid]" subscribes :restart, "template[/etc/squid/squid.conf]" subscribes :reload, "template[/etc/resolv.conf]" end -log "squid-restart" do - message "Restarting squid due to counter wraparound" - notifies :restart, "service[squid]" +notify_group "squid-start" do + action :run + notifies :start, "service[squid]" +end + +service "squid-restart" do + service_name "squid" + action :restart only_if do IO.popen(["squidclient", "--host=127.0.0.1", "--port=3128", "mgr:counters"]) do |io| io.each.grep(/^[a-z][a-z_.]+ = -[0-9]+$/).count.positive?