X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/ee603acb6bce130b494f41fd79da3a36f79de017..524a7ce279b8975ebe0dfb61f8f9f637e5f04b0f:/cookbooks/web/recipes/frontend.rb diff --git a/cookbooks/web/recipes/frontend.rb b/cookbooks/web/recipes/frontend.rb index 4c50df668..7ec03754a 100644 --- a/cookbooks/web/recipes/frontend.rb +++ b/cookbooks/web/recipes/frontend.rb @@ -8,7 +8,7 @@ # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # -# http://www.apache.org/licenses/LICENSE-2.0 +# https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, @@ -17,23 +17,20 @@ # limitations under the License. # -include_recipe "memcached" -include_recipe "apache::ssl" +include_recipe "apache" include_recipe "web::rails" -include_recipe "web::cgimap" web_passwords = data_bag_item("web", "passwords") apache_module "alias" -apache_module "deflate" apache_module "expires" apache_module "headers" -apache_module "proxy_fcgi" apache_module "proxy_http" apache_module "proxy_balancer" apache_module "lbmethod_byrequests" apache_module "lbmethod_bybusyness" apache_module "rewrite" +apache_module "unique_id" apache_site "default" do action [:disable] @@ -44,47 +41,9 @@ apache_site "www.openstreetmap.org" do variables :secret_key_base => web_passwords["secret_key_base"] end -gem_package "hpricot" -gem_package "home_run" -gem_package "apachelogregex" - template "/etc/logrotate.d/apache2" do source "logrotate.apache.erb" owner "root" group "root" - mode 0644 -end - -munin_plugin "api_calls_num" do - action :delete -end - -munin_plugin "api_calls_#{node[:hostname]}" do - target "api_calls_" -end - -munin_plugin "api_waits_#{node[:hostname]}" do - target "api_waits_" -end - -node.set[:memcached][:ip_address] = node.external_ipaddress - -firewall_rule "accept-memcache-tcp" do - action :accept - family "inet" - source "ic" - dest "fw" - proto "tcp" - dest_ports "11211" - source_ports "1024:" -end - -firewall_rule "accept-memcache-udp" do - action :accept - family "inet" - source "ic" - dest "fw" - proto "udp" - dest_ports "11211" - source_ports "1024:" + mode 0o644 end