fast_food 0.1.0

data/chef/cookbooks/apache2/metadata.rb

@@ -0,0 +1,205 @@
+maintainer        "Opscode, Inc."
+maintainer_email  "cookbooks@opscode.com"
+license           "Apache 2.0"
+description       "Installs and configures all aspects of apache2 using Debian style symlinks with helper definitions"
+long_description  IO.read(File.join(File.dirname(__FILE__), 'README.md'))
+version           "1.1.12"
+recipe            "apache2", "Main Apache configuration"
+recipe            "apache2::mod_alias", "Apache module 'alias' with config file"
+recipe            "apache2::mod_apreq2", "Apache module 'apreq'"
+recipe            "apache2::mod_auth_basic", "Apache module 'auth_basic'"
+recipe            "apache2::mod_auth_digest", "Apache module 'auth_digest'"
+recipe            "apache2::mod_auth_openid", "Apache module 'authopenid'"
+recipe            "apache2::mod_authn_file", "Apache module 'authn_file'"
+recipe            "apache2::mod_authnz_ldap", "Apache module 'authnz_ldap'"
+recipe            "apache2::mod_authz_default", "Apache module 'authz_default'"
+recipe            "apache2::mod_authz_groupfile", "Apache module 'authz_groupfile'"
+recipe            "apache2::mod_authz_host", "Apache module 'authz_host'"
+recipe            "apache2::mod_authz_user", "Apache module 'authz_user'"
+recipe            "apache2::mod_autoindex", "Apache module 'autoindex' with config file"
+recipe            "apache2::mod_cgi", "Apache module 'cgi'"
+recipe            "apache2::mod_dav", "Apache module 'dav'"
+recipe            "apache2::mod_dav_svn", "Apache module 'dav_svn'"
+recipe            "apache2::mod_deflate", "Apache module 'deflate' with config file"
+recipe            "apache2::mod_dir", "Apache module 'dir' with config file"
+recipe            "apache2::mod_env", "Apache module 'env'"
+recipe            "apache2::mod_expires", "Apache module 'expires'"
+recipe            "apache2::mod_fcgid", "Apache module 'fcgid', package on ubuntu/debian, rhel/centos, compile source on suse; with config file"
+recipe            "apache2::mod_headers", "Apache module 'headers'"
+recipe            "apache2::mod_ldap", "Apache module 'ldap'"
+recipe            "apache2::mod_log_config", "Apache module 'log_config'"
+recipe            "apache2::mod_mime", "Apache module 'mime' with config file"
+recipe            "apache2::mod_negotiation", "Apache module 'negotiation' with config file"
+recipe            "apache2::mod_perl", "Apache module 'perl'"
+recipe            "apache2::mod_php5", "Apache module 'php5'"
+recipe            "apache2::mod_proxy", "Apache module 'proxy' with config file"
+recipe            "apache2::mod_proxy_ajp", "Apache module 'proxy_ajp'"
+recipe            "apache2::mod_proxy_balancer", "Apache module 'proxy_balancer'"
+recipe            "apache2::mod_proxy_connect", "Apache module 'proxy_connect'"
+recipe            "apache2::mod_proxy_http", "Apache module 'proxy_http'"
+recipe            "apache2::mod_python", "Apache module 'python'"
+recipe            "apache2::mod_rewrite", "Apache module 'rewrite'"
+recipe            "apache2::mod_setenvif", "Apache module 'setenvif' with config file"
+recipe            "apache2::mod_ssl", "Apache module 'ssl' with config file, adds port 443 to listen_ports"
+recipe            "apache2::mod_status", "Apache module 'status' with config file"
+recipe            "apache2::mod_xsendfile", "Apache module 'xsendfile'"
+
+%w{redhat centos scientific fedora debian ubuntu arch freebsd amazon}.each do |os|
+  supports os
+end
+
+attribute "apache",
+  :display_name => "Apache Hash",
+  :description => "Hash of Apache attributes",
+  :type => "hash"
+
+attribute "apache/dir",
+  :display_name => "Apache Directory",
+  :description => "Location for Apache configuration",
+  :default => "/etc/apache2"
+
+attribute "apache/log_dir",
+  :display_name => "Apache Log Directory",
+  :description => "Location for Apache logs",
+  :default => "/etc/apache2"
+
+attribute "apache/user",
+  :display_name => "Apache User",
+  :description => "User Apache runs as",
+  :default => "www-data"
+
+attribute "apache/binary",
+  :display_name => "Apache Binary",
+  :description => "Apache server daemon program",
+  :default => "/usr/sbin/apache2"
+
+attribute "apache/icondir",
+  :display_name => "Apache Icondir",
+  :description => "Directory location for icons",
+  :default => "/usr/share/apache2/icons"
+
+attribute "apache/listen_ports",
+  :display_name => "Apache Listen Ports",
+  :description => "Ports that Apache should listen on",
+  :type => "array",
+  :default => [ "80", "443" ]
+
+attribute "apache/contact",
+  :display_name => "Apache Contact",
+  :description => "Email address of webmaster",
+  :default => "ops@example.com"
+
+attribute "apache/timeout",
+  :display_name => "Apache Timeout",
+  :description => "Connection timeout value",
+  :default => "300"
+
+attribute "apache/keepalive",
+  :display_name => "Apache Keepalive",
+  :description => "HTTP persistent connections",
+  :default => "On"
+
+attribute "apache/keepaliverequests",
+  :display_name => "Apache Keepalive Requests",
+  :description => "Number of requests allowed on a persistent connection",
+  :default => "100"
+
+attribute "apache/keepalivetimeout",
+  :display_name => "Apache Keepalive Timeout",
+  :description => "Time to wait for requests on persistent connection",
+  :default => "5"
+
+attribute "apache/servertokens",
+  :display_name => "Apache Server Tokens",
+  :description => "Server response header",
+  :default => "Prod"
+
+attribute "apache/serversignature",
+  :display_name => "Apache Server Signature",
+  :description => "Configure footer on server-generated documents",
+  :default => "On"
+
+attribute "apache/traceenable",
+  :display_name => "Apache Trace Enable",
+  :description => "Determine behavior of TRACE requests",
+  :default => "On"
+
+attribute "apache/allowed_openids",
+  :display_name => "Apache Allowed OpenIDs",
+  :description => "Array of OpenIDs allowed to authenticate",
+  :default => ""
+
+attribute "apache/prefork",
+  :display_name => "Apache Prefork",
+  :description => "Hash of Apache prefork tuning attributes.",
+  :type => "hash"
+
+attribute "apache/prefork/startservers",
+  :display_name => "Apache Prefork MPM StartServers",
+  :description => "Number of MPM servers to start",
+  :default => "16"
+
+attribute "apache/prefork/minspareservers",
+  :display_name => "Apache Prefork MPM MinSpareServers",
+  :description => "Minimum number of spare server processes",
+  :default => "16"
+
+attribute "apache/prefork/maxspareservers",
+  :display_name => "Apache Prefork MPM MaxSpareServers",
+  :description => "Maximum number of spare server processes",
+  :default => "32"
+
+attribute "apache/prefork/serverlimit",
+  :display_name => "Apache Prefork MPM ServerLimit",
+  :description => "Upper limit on configurable server processes",
+  :default => "400"
+
+attribute "apache/prefork/maxclients",
+  :display_name => "Apache Prefork MPM MaxClients",
+  :description => "Maximum number of simultaneous connections",
+  :default => "400"
+
+attribute "apache/prefork/maxrequestsperchild",
+  :display_name => "Apache Prefork MPM MaxRequestsPerChild",
+  :description => "Maximum number of request a child process will handle",
+  :default => "10000"
+
+attribute "apache/worker",
+  :display_name => "Apache Worker",
+  :description => "Hash of Apache prefork tuning attributes.",
+  :type => "hash"
+
+attribute "apache/worker/startservers",
+  :display_name => "Apache Worker MPM StartServers",
+  :description => "Initial number of server processes to start",
+  :default => "4"
+
+attribute "apache/worker/maxclients",
+  :display_name => "Apache Worker MPM MaxClients",
+  :description => "Maximum number of simultaneous connections",
+  :default => "1024"
+
+attribute "apache/worker/minsparethreads",
+  :display_name => "Apache Worker MPM MinSpareThreads",
+  :description => "Minimum number of spare worker threads",
+  :default => "64"
+
+attribute "apache/worker/maxsparethreads",
+  :display_name => "Apache Worker MPM MaxSpareThreads",
+  :description => "Maximum number of spare worker threads",
+  :default => "192"
+
+attribute "apache/worker/threadsperchild",
+  :display_name => "Apache Worker MPM ThreadsPerChild",
+  :description => "Constant number of worker threads in each server process",
+  :default => "64"
+
+attribute "apache/worker/maxrequestsperchild",
+  :display_name => "Apache Worker MPM MaxRequestsPerChild",
+  :description => "Maximum number of request a child process will handle",
+  :default => "0"
+
+attribute "apache/default_modules",
+  :display_name => "Apache Default Modules",
+  :description => "Default modules to enable via recipes",
+  :default => "status alias auth_basic authn_file authz_default authz_groupfile authz_host authz_user autoindex dir env mime negotiation setenvif"

data/chef/cookbooks/apache2/recipes/default.rb

@@ -0,0 +1,221 @@
+#
+# Cookbook Name:: apache2
+# Recipe:: default
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+package "apache2" do
+  package_name node['apache']['package']
+  action :install
+end
+
+service "apache2" do
+  case node['platform']
+  when "redhat","centos","scientific","fedora","suse","amazon"
+    service_name "httpd"
+    # If restarted/reloaded too quickly httpd has a habit of failing.
+    # This may happen with multiple recipes notifying apache to restart - like
+    # during the initial bootstrap.
+    restart_command "/sbin/service httpd restart && sleep 1"
+    reload_command "/sbin/service httpd reload && sleep 1"
+  when "debian","ubuntu"
+    service_name "apache2"
+    restart_command "/usr/sbin/invoke-rc.d apache2 restart && sleep 1"
+    reload_command "/usr/sbin/invoke-rc.d apache2 reload && sleep 1"
+  when "arch"
+    service_name "httpd"
+  when "freebsd"
+    service_name "apache22"
+  end
+  supports value_for_platform(
+    "debian" => { "4.0" => [ :restart, :reload ], "default" => [ :restart, :reload, :status ] },
+    "ubuntu" => { "default" => [ :restart, :reload, :status ] },
+    "redhat" => { "default" => [ :restart, :reload, :status ] },
+    "centos" => { "default" => [ :restart, :reload, :status ] },
+    "scientific" => { "default" => [ :restart, :reload, :status ] },
+    "fedora" => { "default" => [ :restart, :reload, :status ] },
+    "arch" => { "default" => [ :restart, :reload, :status ] },
+    "suse" => { "default" => [ :restart, :reload, :status ] },
+    "freebsd" => { "default" => [ :restart, :reload, :status ] },
+    "amazon" => { "default" => [ :restart, :reload, :status ] },
+    "default" => { "default" => [:restart, :reload ] }
+  )
+  action :enable
+end
+
+if platform?("redhat", "centos", "scientific", "fedora", "arch", "suse", "freebsd", "amazon")
+  directory node['apache']['log_dir'] do
+    mode 0755
+    action :create
+  end
+
+  package "perl"
+
+  cookbook_file "/usr/local/bin/apache2_module_conf_generate.pl" do
+    source "apache2_module_conf_generate.pl"
+    mode 0755
+    owner "root"
+    group node['apache']['root_group']
+  end
+
+  %w{sites-available sites-enabled mods-available mods-enabled}.each do |dir|
+    directory "#{node['apache']['dir']}/#{dir}" do
+      mode 0755
+      owner "root"
+      group node['apache']['root_group']
+      action :create
+    end
+  end
+
+  execute "generate-module-list" do
+    command "/usr/local/bin/apache2_module_conf_generate.pl #{node['apache']['lib_dir']} #{node['apache']['dir']}/mods-available"
+    action :run
+  end
+
+  %w{a2ensite a2dissite a2enmod a2dismod}.each do |modscript|
+    template "/usr/sbin/#{modscript}" do
+      source "#{modscript}.erb"
+      mode 0700
+      owner "root"
+      group node['apache']['root_group']
+    end
+  end
+
+  # installed by default on centos/rhel, remove in favour of mods-enabled
+  %w{ proxy_ajp auth_pam authz_ldap webalizer ssl welcome }.each do |f|
+    file "#{node['apache']['dir']}/conf.d/#{f}.conf" do
+      action :delete
+      backup false
+    end
+  end
+
+  # installed by default on centos/rhel, remove in favour of mods-enabled
+  file "#{node['apache']['dir']}/conf.d/README" do
+    action :delete
+    backup false
+  end
+
+  # enable mod_deflate for consistency across distributions
+  include_recipe "apache2::mod_deflate"
+end
+
+if platform?("freebsd")
+  file "#{node['apache']['dir']}/Includes/no-accf.conf" do
+    action :delete
+    backup false
+  end
+  directory "#{node['apache']['dir']}/Includes" do
+    action :delete
+  end
+
+  %w{httpd-autoindex.conf httpd-dav.conf httpd-default.conf httpd-info.conf
+     httpd-languages.conf httpd-manual.conf httpd-mpm.conf
+     httpd-multilang-errordoc.conf httpd-ssl.conf httpd-userdir.conf
+     httpd-vhosts.conf}.each do |f|
+    file "#{node['apache']['dir']}/extra/#{f}" do
+      action :delete
+      backup false
+    end
+  end
+  directory "#{node['apache']['dir']}/extra" do
+    action :delete
+  end
+end
+
+directory "#{node['apache']['dir']}/ssl" do
+  action :create
+  mode 0755
+  owner "root"
+  group node['apache']['root_group']
+end
+
+directory "#{node['apache']['dir']}/conf.d" do
+  action :create
+  mode 0755
+  owner "root"
+  group node['apache']['root_group']
+end
+
+directory node['apache']['cache_dir'] do
+  action :create
+  mode 0755
+  owner "root"
+  group node['apache']['root_group']
+end
+
+template "apache2.conf" do
+  case node['platform']
+  when "redhat", "centos", "scientific", "fedora", "arch", "amazon"
+    path "#{node['apache']['dir']}/conf/httpd.conf"
+  when "debian","ubuntu"
+    path "#{node['apache']['dir']}/apache2.conf"
+  when "freebsd"
+    path "#{node['apache']['dir']}/httpd.conf"
+  end
+  source "apache2.conf.erb"
+  owner "root"
+  group node['apache']['root_group']
+  mode 0644
+  notifies :restart, resources(:service => "apache2")
+end
+
+template "security" do
+  path "#{node['apache']['dir']}/conf.d/security"
+  source "security.erb"
+  owner "root"
+  group node['apache']['root_group']
+  mode 0644
+  backup false
+  notifies :restart, resources(:service => "apache2")
+end
+
+template "charset" do
+  path "#{node['apache']['dir']}/conf.d/charset"
+  source "charset.erb"
+  owner "root"
+  group node['apache']['root_group']
+  mode 0644
+  backup false
+  notifies :restart, resources(:service => "apache2")
+end
+
+template "#{node['apache']['dir']}/ports.conf" do
+  source "ports.conf.erb"
+  owner "root"
+  group node['apache']['root_group']
+  variables :apache_listen_ports => node['apache']['listen_ports'].map{|p| p.to_i}.uniq
+  mode 0644
+  notifies :restart, resources(:service => "apache2")
+end
+
+template "#{node['apache']['dir']}/sites-available/default" do
+  source "default-site.erb"
+  owner "root"
+  group node['apache']['root_group']
+  mode 0644
+  notifies :restart, resources(:service => "apache2")
+end
+
+node['apache']['default_modules'].each do |mod|
+  recipe_name = mod =~ /^mod_/ ? mod : "mod_#{mod}"
+  include_recipe "apache2::#{recipe_name}"
+end
+
+apache_site "default" if node['apache']['default_site_enabled']
+
+service "apache2" do
+  action :start
+end

data/chef/cookbooks/apache2/recipes/god_monitor.rb

@@ -0,0 +1,33 @@
+#
+# Cookbook Name:: apache2
+# Recipe:: god_monitor
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+apache_service = service "apache2" do
+  action :nothing
+end
+
+start_command = apache_service.start_command
+stop_command = apache_service.stop_command
+restart_command = apache_service.restart_command
+
+god_monitor "apache2" do
+  config "apache2.god.erb"
+  start (start_command)?start_command : "/etc/init.d/#{apache_service.service_name} start"
+  restart (restart_command)?restart_command : "/etc/init.d/#{apache_service.service_name} restart"
+  stop (stop_command)?stop_command : "/etc/init.d/#{apache_service.service_name} stop"
+end

data/chef/cookbooks/apache2/recipes/mod_alias.rb

@@ -0,0 +1,22 @@
+#
+# Cookbook Name:: apache2
+# Recipe:: alias 
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+apache_module "alias" do
+  conf true
+end

data/chef/cookbooks/apache2/recipes/mod_apreq2.rb

@@ -0,0 +1,45 @@
+#
+# Cookbook Name:: apache2
+# Recipe:: apreq2
+#
+# modified from the python recipe by Jeremy Bingham
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+case node['platform']
+  when "debian", "ubuntu"
+    package "libapache2-mod-apreq2" do
+      action :install
+    end
+  when "centos", "redhat", "fedora", "amazon", "scientific"
+    package "libapreq2" do
+      action :install
+      notifies :run, resources(:execute => "generate-module-list"), :immediately
+    end
+    # seems that the apreq lib is weirdly broken or something - it needs to be
+    # loaded as "apreq", but on RHEL & derivitatives the file needs a symbolic
+    # link to mod_apreq.so.
+    link "/usr/lib64/httpd/modules/mod_apreq.so" do
+      to "/usr/lib64/httpd/modules/mod_apreq2.so"
+      only_if "test -f /usr/lib64/httpd/modules/mod_apreq2.so"
+    end
+    link "/usr/lib/httpd/modules/mod_apreq.so" do
+      to "/usr/lib/httpd/modules/mod_apreq2.so"
+      only_if "test -f /usr/lib/httpd/modules/mod_apreq2.so"
+    end
+end
+
+apache_module "apreq"

data/chef/cookbooks/apache2/recipes/mod_auth_basic.rb

@@ -0,0 +1,20 @@
+#
+# Cookbook Name:: apache2
+# Recipe:: auth_basic 
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+apache_module "auth_basic"

data/chef/cookbooks/apache2/recipes/mod_auth_digest.rb

@@ -0,0 +1,20 @@
+#
+# Cookbook Name:: apache2
+# Recipe:: auth_digest 
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+apache_module "auth_digest"

data/chef/cookbooks/apache2/recipes/mod_auth_openid.rb

@@ -0,0 +1,113 @@
+#
+# Cookbook Name:: apache2
+# Recipe:: mod_auth_openid
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+openid_dev_pkgs = value_for_platform(
+  ["ubuntu","debian"] => { "default" => %w{ g++ apache2-prefork-dev libopkele-dev libopkele3 } },
+  ["centos","redhat","scientific","fedora","amazon"] => {
+    "default" => %w{ gcc-c++ httpd-devel curl-devel libtidy libtidy-devel sqlite-devel pcre-devel openssl-devel make }
+  },
+  "arch" => { "default" => ["libopkele"] },
+  "freebsd" => { "default" => %w{libopkele pcre sqlite3} }
+)
+
+make_cmd = value_for_platform(
+  "freebsd" => { "default" => "gmake" },
+  "default" => "make"
+)
+
+case node['platform']
+when "arch"
+  include_recipe "pacman"
+  package "tidyhtml"
+end
+
+openid_dev_pkgs.each do |pkg|
+  case node['platform']
+  when "arch"
+    pacman_aur pkg do
+      action [:build, :install]
+    end
+  else
+    package pkg
+  end
+end
+
+case node['platform']
+when "redhat", "centos", "scientific", "fedora", "amazon"
+  remote_file "#{Chef::Config['file_cache_path']}/libopkele-2.0.4.tar.gz" do
+    source "http://kin.klever.net/dist/libopkele-2.0.4.tar.gz"
+    mode 0644
+  end
+
+  bash "install libopkele" do
+    cwd Chef::Config['file_cache_path']
+    # Ruby 1.8.6 does not have rpartition, unfortunately
+    syslibdir = node['apache']['lib_dir'][0..node['apache']['lib_dir'].rindex("/")]
+    code <<-EOH
+    tar zxvf libopkele-2.0.4.tar.gz
+    cd libopkele-2.0.4 && ./configure --prefix=/usr --libdir=#{syslibdir}
+    #{make_cmd} && #{make_cmd} install
+    EOH
+    not_if { File.exists?("#{syslibdir}/libopkele.a") }
+  end
+end
+
+_checksum = node['apache']['mod_auth_openid']['checksum']
+version = node['apache']['mod_auth_openid']['version']
+configure_flags = node['apache']['mod_auth_openid']['configure_flags']
+
+remote_file "#{Chef::Config['file_cache_path']}/mod_auth_openid-#{version}.tar.gz" do
+  source "http://butterfat.net/releases/mod_auth_openid/mod_auth_openid-#{version}.tar.gz"
+  mode 0644
+  checksum _checksum
+end
+
+bash "install mod_auth_openid" do
+  cwd Chef::Config['file_cache_path']
+  code <<-EOH
+  tar zxvf mod_auth_openid-#{version}.tar.gz
+  cd mod_auth_openid-#{version} && ./configure #{configure_flags.join(' ')}
+  perl -pi -e "s/-i -a -n 'authopenid'/-i -n 'authopenid'/g" Makefile
+  #{make_cmd} && #{make_cmd} install
+  EOH
+  not_if { ::File.exists?("#{node['apache']['libexecdir']}/mod_auth_openid.so") }
+end
+
+directory node['apache']['mod_auth_openid']['cache_dir'] do
+  owner node['apache']['user']
+  group node['apache']['group']
+  mode 0700
+end
+
+file node['apache']['mod_auth_openid']['dblocation'] do
+  owner node['apache']['user']
+  group node['apache']['group']
+  mode 0644
+end
+
+template "#{node['apache']['dir']}/mods-available/authopenid.load" do
+  source "mods/authopenid.load.erb"
+  owner "root"
+  group node['apache']['root_group']
+  mode 0644
+end
+
+apache_module "authopenid" do
+  filename "mod_auth_openid.so"
+end