X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/e9d337c2a49d120a8dcb508879d74f6bab5b84d9..cc6b107e2e4aa6d7b882d4fb626a1a80a41104c8:/cookbooks/tilecache/recipes/default.rb diff --git a/cookbooks/tilecache/recipes/default.rb b/cookbooks/tilecache/recipes/default.rb index 1aad4b9ff..86c7d0250 100644 --- a/cookbooks/tilecache/recipes/default.rb +++ b/cookbooks/tilecache/recipes/default.rb @@ -20,7 +20,7 @@ require "ipaddr" certificate = node[:tilecache][:ssl][:certificate] -node.default[:ssl][:certificates] = node[:ssl][:certificates] | [ certificate ] +node.default[:ssl][:certificates] = node[:ssl][:certificates] | [certificate] include_recipe "ssl" include_recipe "squid" @@ -31,6 +31,7 @@ package "apache2" do end package "xz-utils" +package "openssl" tilecaches = search(:node, "roles:tilecache").sort_by { |n| n[:hostname] } tilerenders = search(:node, "roles:tile").sort_by { |n| n[:hostname] } @@ -80,16 +81,16 @@ template "/etc/logrotate.d/squid" do end nginx_site "default" do - action [ :delete ] + action [:delete] end resolvers = node[:networking][:nameservers].map do |resolver| - IPAddr.new(resolver).ipv6? ? "[#{resolver}]" : "#{resolver}" + IPAddr.new(resolver).ipv6? ? "[#{resolver}]" : resolver end nginx_site "tile-ssl" do template "nginx_tile_ssl.conf.erb" - variables :certificate => certificate, :resolvers => resolvers + variables :certificate => certificate, :resolvers => resolvers, :caches => tilecaches end service "nginx-certificate-restart" do @@ -100,6 +101,13 @@ service "nginx-certificate-restart" do subscribes :restart, "file[/etc/ssl/private/#{certificate}.key]" end +template "/etc/logrotate.d/nginx" do + source "logrotate.nginx.erb" + owner "root" + group "root" + mode 0644 +end + tilerenders.each do |render| munin_plugin "ping_#{render[:fqdn]}" do target "ping_"