forked from benhoskings/babushka-deps
-
Notifications
You must be signed in to change notification settings - Fork 0
/
apache2.rb
275 lines (243 loc) · 7.37 KB
/
apache2.rb
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
# taken from http://github.com/tricycle/babushka-deps and adapted for my needs (same for apache2/*)
# hard works been done by them ;)
meta :apache2 do
template {
def apachectl_command(command)
"/usr/sbin/apache2ctl #{command}"
end
def apachectl(command)
sudo apachectl_command(command)
end
def config_path
'/etc/apache2'
end
def apache2_running?
shell "netstat -an | grep -E '^tcp.*[.:]80 +.*LISTEN'"
end
def restart_gracefully
if apache2_running?
log_shell "Restarting apache2", apachectl_command("graceful"), :sudo => true
end
end
def vhost_config_path(domain)
config_path / "sites-available/#{domain}"
end
def site_available?(domain)
shell "[ -e #{vhost_config_path(domain)} ]"
end
def site_enabled?(domain)
shell "[ -e #{config_path}/sites-enabled/*#{domain} ]"
end
def site_disabled?(domain)
not site_enabled?(domain)
end
def enable_site(domain)
sudo "a2ensite #{domain}"
end
def disable_site(domain)
sudo "a2dissite #{domain}"
end
def mod_enabled?(mod)
shell "[ -e #{config_path}/mods-enabled/#{mod}.load ]"
end
def mod_disabled?(mod)
not mod_enabled?(mod)
end
def enable_mod(mod)
sudo "a2enmod #{mod}"
end
def disable_mod(mod)
sudo "a2dismod #{mod}"
end
}
end
dep 'apache2', :template => 'managed' do
installs %w[apache2 apache2-mpm-prefork]
end
dep 'apache2 dev packages', :template => 'managed' do
installs %w[apache2-prefork-dev libapr1-dev libaprutil1-dev]
provides %w[apxs2 apr-config]
end
dep 'configured.apache2' do
requires 'apache2'
met? {
[
config_path / "mods-available/status.conf",
config_path / "conf.d/types.conf",
config_path / "conf.d/virtualhost.conf",
"/etc/logrotate.d/apache2"
].all? { |file|
babushka_config? file
}
}
meet {
# stub out the default status location
render_erb 'apache2/status.conf.erb', :to => config_path / 'mods-available/status.conf', :sudo => true
# include custom types
render_erb 'apache2/types.conf.erb', :to => config_path / 'conf.d/types.conf', :sudo => true
# configure the virtualhost conf
render_erb 'apache2/virtualhost.conf.erb', :to => config_path / 'conf.d/virtualhost.conf', :sudo => true
# configure logrotate
render_erb 'apache2/logrotate.erb', :to => '/etc/logrotate.d/apache2', :sudo => true
}
after { restart_gracefully }
end
dep 'default site disabled.apache2' do
met? { site_disabled? 'default' }
meet { disable_site 'default' }
after { restart_gracefully }
end
dep 'running.apache2' do
requires 'configured.apache2'
met? { apache2_running? }
meet {
apachectl "start"
}
end
dep 'mod_rewrite enabled.apache2' do
setup { set :module_name, 'rewrite' }
requires 'module enabled.apache2'
end
dep 'proxy enabled.apache2' do
setup { set :module_name, 'proxy' }
requires 'module enabled.apache2'
end
dep 'proxy_http enabled.apache2' do
setup { set :module_name, 'proxy_http' }
requires 'module enabled.apache2'
end
dep 'proxy_connect enabled.apache2' do
setup { set :module_name, 'proxy_connect' }
requires 'module enabled.apache2'
end
dep 'ssl enabled.apache2' do
setup { set :module_name, 'ssl' }
requires 'module enabled.apache2'
end
dep 'headers enabled.apache2' do
setup { set :module_name, 'headers' }
requires 'module enabled.apache2'
end
dep 'include enabled.apache2' do
setup { set :module_name, 'include' }
requires 'module enabled.apache2'
end
dep 'dav enabled.apache2' do
setup { set :module_name, 'dav' }
requires 'module enabled.apache2'
end
dep 'dav_fs enabled.apache2' do
setup { set :module_name, 'dav_fs' }
requires 'module enabled.apache2'
end
dep 'authnz_external enabled.apache2' do
setup { set :module_name, 'authnz_external' }
requires 'module enabled.apache2'
end
dep 'vhost enabled.apache2' do
requires 'apache2'
met? { site_enabled? var(:domain) }
meet { enable_site var(:domain) }
after { restart_gracefully }
end
dep 'module enabled.apache2' do
requires 'apache2'
met? { mod_enabled? var(:module_name) }
meet { enable_mod var(:module_name) }
after { restart_gracefully }
end
dep 'libapache2-mod-authz-unixgroup.managed' do
provides []
end
dep "pwauth.managed"
dep "pwauth unixgroup" do
met? { which("unixgroup") }
meet {
cd("/tmp") do
log_shell "cleaning ", "rm -f pwauth-2.3.10.tar.gz; rm -rf pwauth-2.3.10"
log_shell "downloading", "wget -O pwauth-2.3.10.tar.gz 'http://pwauth.googlecode.com/files/pwauth-2.3.10.tar.gz'"
if File.exists?("pwauth-2.3.10.tar.gz")
log_shell "unpacking ", "tar xzf pwauth-2.3.10.tar.gz"
log_shell "moving ", "sudo mv pwauth-2.3.10/unixgroup /usr/local/bin/"
end
end
}
end
dep 'webdav authorization tools' do
requires "libapache2-mod-authz-unixgroup.managed", "pwauth.managed", "pwauth unixgroup", "authnz_external enabled.apache2"
end
dep 'apache2 runs on boot' do
requires 'apache2'
requires 'rcconf'
met? { shell("rcconf --list").val_for('apache2') == 'on' }
meet { sudo "update-rc.d apache2 defaults" }
end
dep 'passenger vhost configured.apache2' do
requires 'apache2 passenger mods configured'
met? {
site_available?(var(:domain)) && babushka_config?(vhost_config_path(var(:domain)))
}
meet {
if(var(:domain) == "admin")
render_erb 'apache2/passenger_vhost_admin.conf.erb', :to => vhost_config_path(var(:domain)), :sudo => true
else
render_erb 'apache2/passenger_vhost.conf.erb', :to => vhost_config_path(var(:domain)), :sudo => true
end
}
end
dep 'apache2-prefork-dev.managed' do
provides ["apxs2"]
end
dep 'xsendfile.apache2' do
requires 'apache2-prefork-dev.managed'
met? {
!!sudo("a2enmod xsendfile")
}
meet {
cd "/tmp" do
log_shell "cleaning ", "rm -rf mod_xsendfile.c"
log_shell "downloading", "wget --no-check-certificate -O mod_xsendfile.c https://tn123.org/mod_xsendfile/mod_xsendfile.c"
log_shell "installing", "sudo apxs2 -cia mod_xsendfile.c"
end
}
after { restart_gracefully }
end
dep 'websocket_proxy.apache2' do
requires 'apache2-prefork-dev.managed'
met? {
["websocket_tcp_proxy", "websocket", "websocket_draft76"].all? {|name| sudo("a2enmod #{name}") }
}
meet {
cd "/tmp" do
log_shell "cleaning ", "sudo rm -rf apache-websocket"
log_shell "cloning ", "git clone git://github.com/protonet/apache-websocket.git"
cd "apache-websocket" do
["mod_websocket_draft76.c", "mod_websocket.c"].each do |c_file|
log_shell "installing ", "sudo apxs2 -cia #{c_file}"
end
cd "examples" do
log_shell "installing ", "sudo apxs2 -cia -I.. mod_websocket_tcp_proxy.c"
end
end
end
}
after { restart_gracefully }
end
dep 'websocket_read_timeouts.apache2' do
requires 'apache2-prefork-dev.managed'
met? {
grep "RequestReadTimeout body=30,MinRate=1", '/etc/apache2/mods-available/reqtimeout.conf'
}
meet {
change_line "RequestReadTimeout body=10,minrate=500", "RequestReadTimeout body=30,MinRate=1", "/etc/apache2/mods-available/reqtimeout.conf"
}
after { restart_gracefully }
end
dep 'up_maxclient.apache2' do
met? {
!!grep(/MaxClients 256/, "/etc/apache2/apache2.conf")
}
meet {
sudo("ruby -pi -e \"gsub(/MaxClients\s.*[0-9]*/, 'MaxClients 256')\" /etc/apache2/apache2.conf")
}
end