from-scratch 0.3.0 → 0.5.0

data/cookbooks/nginx/recipes/authorized_ips.rb

@@ -0,0 +1,32 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: authorized_ips
+#
+# Author:: Jamie Winsor (<jamie@vialstudios.com>)
+#
+# Copyright 2012-2013, Riot Games
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+node.default['nginx']['remote_ip_var']  = 'remote_addr'
+node.default['nginx']['authorized_ips'] = ['127.0.0.1/32']
+
+template 'authorized_ip' do
+  path   "#{node['nginx']['dir']}/authorized_ip"
+  source 'modules/authorized_ip.erb'
+  owner  'root'
+  group  node['root_group']
+  mode   '0644'
+  notifies :reload, 'service[nginx]', :delayed
+end

data/cookbooks/nginx/recipes/commons.rb

@@ -0,0 +1,24 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: commons
+#
+# Author:: AJ Christensen <aj@junglist.gen.nz>
+#
+# Copyright 2008-2013, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe 'nginx::commons_dir'
+include_recipe 'nginx::commons_script'
+include_recipe 'nginx::commons_conf'

data/cookbooks/nginx/recipes/commons_conf.rb

@@ -0,0 +1,42 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: common/conf
+#
+# Author:: AJ Christensen <aj@junglist.gen.nz>
+#
+# Copyright 2008-2013, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+template 'nginx.conf' do
+  path   "#{node['nginx']['dir']}/nginx.conf"
+  source node['nginx']['conf_template']
+  cookbook node['nginx']['conf_cookbook']
+  owner  'root'
+  group  node['root_group']
+  mode   '0644'
+  notifies :reload, 'service[nginx]', :delayed
+end
+
+template "#{node['nginx']['dir']}/sites-available/default" do
+  source 'default-site.erb'
+  owner  'root'
+  group  node['root_group']
+  mode   '0644'
+  notifies :reload, 'service[nginx]', :delayed
+end
+
+nginx_site 'default' do
+  enable node['nginx']['default_site_enabled']
+end

data/cookbooks/nginx/recipes/commons_dir.rb

@@ -0,0 +1,57 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: common/dir
+#
+# Author:: AJ Christensen <aj@junglist.gen.nz>
+#
+# Copyright 2008-2013, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+directory node['nginx']['dir'] do
+  owner     'root'
+  group     node['root_group']
+  mode      '0755'
+  recursive true
+end
+
+directory node['nginx']['log_dir'] do
+  mode      node['nginx']['log_dir_perm']
+  owner     node['nginx']['user']
+  action    :create
+  recursive true
+end
+
+directory File.dirname(node['nginx']['pid']) do
+  owner     'root'
+  group     node['root_group']
+  mode      '0755'
+  recursive true
+end
+
+%w(sites-available sites-enabled conf.d).each do |leaf|
+  directory File.join(node['nginx']['dir'], leaf) do
+    owner 'root'
+    group node['root_group']
+    mode  '0755'
+  end
+end
+
+if !node['nginx']['default_site_enabled'] && (node['platform_family'] == 'rhel' || node['platform_family'] == 'fedora')
+  %w(default.conf example_ssl.conf).each do |config|
+    file "/etc/nginx/conf.d/#{config}" do
+      action :delete
+    end
+  end
+end

data/cookbooks/nginx/recipes/commons_script.rb

@@ -0,0 +1,29 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: common/script
+#
+# Author:: AJ Christensen <aj@junglist.gen.nz>
+#
+# Copyright 2008-2013, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+%w(nxensite nxdissite).each do |nxscript|
+  template "#{node['nginx']['script_dir']}/#{nxscript}" do
+    source "#{nxscript}.erb"
+    mode   '0755'
+    owner  'root'
+    group  node['root_group']
+  end
+end

data/cookbooks/nginx/recipes/default.rb

@@ -0,0 +1,31 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: default
+#
+# Author:: AJ Christensen <aj@junglist.gen.nz>
+#
+# Copyright 2008-2013, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe "nginx::#{node['nginx']['install_method']}"
+
+service 'nginx' do
+  supports :status => true, :restart => true, :reload => true
+  action   :start
+end
+
+node['nginx']['default']['modules'].each do |ngx_module|
+  include_recipe "nginx::#{ngx_module}"
+end

data/cookbooks/nginx/recipes/headers_more_module.rb

@@ -0,0 +1,50 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: headers_more_module
+#
+# Author:: Lucas Jandrew (<ljandrew@riotgames.com>)
+#
+# Copyright 2012-2013, Riot Games
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+tar_location = "#{Chef::Config['file_cache_path']}/headers_more.tar.gz"
+module_location = "#{Chef::Config['file_cache_path']}/headers_more/#{node['nginx']['headers_more']['source_checksum']}"
+
+remote_file tar_location do
+  source   node['nginx']['headers_more']['source_url']
+  checksum node['nginx']['headers_more']['source_checksum']
+  owner    'root'
+  group    node['root_group']
+  mode     '0644'
+end
+
+directory module_location do
+  owner     'root'
+  group     node['root_group']
+  mode      '0755'
+  recursive true
+  action    :create
+end
+
+bash 'extract_headers_more' do
+  cwd  ::File.dirname(tar_location)
+  user 'root'
+  code <<-EOH
+    tar -zxf #{tar_location} -C #{module_location}
+  EOH
+  not_if { ::File.exist?("#{module_location}/headers-more-nginx-module-#{node['nginx']['headers_more']['version']}/config") }
+end
+
+node.run_state['nginx_configure_flags'] =
+    node.run_state['nginx_configure_flags'] | ["--add-module=#{module_location}/headers-more-nginx-module-#{node['nginx']['headers_more']['version']}/"]

data/cookbooks/nginx/recipes/http_auth_request_module.rb

@@ -0,0 +1,52 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: http_auth_request_module
+#
+# Author:: David Radcliffe (<radcliffe.david@gmail.com>)
+#
+# Copyright 2013, David Radcliffe
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# Documentation:
+#   http://nginx.org/en/docs/http/ngx_http_auth_request_module.html
+if node['nginx']['source']['version'] >= '1.5.4'
+  node.run_state['nginx_configure_flags'] =
+    node.run_state['nginx_configure_flags'] | ['--with-http_auth_request_module']
+else
+  arm_src_filename = ::File.basename(node['nginx']['auth_request']['url'])
+  arm_src_filepath = "#{Chef::Config['file_cache_path']}/#{arm_src_filename}"
+  arm_extract_path = "#{Chef::Config['file_cache_path']}/nginx_auth_request/#{node['nginx']['auth_request']['checksum']}"
+
+  remote_file arm_src_filepath do
+    source   node['nginx']['auth_request']['url']
+    checksum node['nginx']['auth_request']['checksum']
+    owner    'root'
+    group    node['root_group']
+    mode     '0644'
+  end
+
+  bash 'extract_auth_request_module' do
+    cwd ::File.dirname(arm_src_filepath)
+    code <<-EOH
+      mkdir -p #{arm_extract_path}
+      tar xzf #{arm_src_filename} -C #{arm_extract_path}
+      mv #{arm_extract_path}/*/* #{arm_extract_path}/
+    EOH
+    not_if { ::File.exist?(arm_extract_path) }
+  end
+
+  node.run_state['nginx_configure_flags'] =
+    node.run_state['nginx_configure_flags'] | ["--add-module=#{arm_extract_path}"]
+end

data/cookbooks/nginx/recipes/http_echo_module.rb

@@ -0,0 +1,46 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: http_echo_module
+#
+# Author:: Danial Pearce (<danial@cushycms.com>)
+#
+# Copyright 2012-2013, CushyCMS
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+echo_src_filename = "echo-nginx-module-v#{node['nginx']['echo']['version']}.tar.gz"
+echo_src_filepath = "#{Chef::Config['file_cache_path']}/#{echo_src_filename}"
+echo_extract_path = "#{Chef::Config['file_cache_path']}/nginx_echo_module/#{node['nginx']['echo']['checksum']}"
+
+remote_file echo_src_filepath do
+  source   node['nginx']['echo']['url']
+  checksum node['nginx']['echo']['checksum']
+  owner    'root'
+  group    node['root_group']
+  mode     '0644'
+end
+
+bash 'extract_http_echo_module' do
+  cwd ::File.dirname(echo_src_filepath)
+  code <<-EOH
+    mkdir -p #{echo_extract_path}
+    tar xzf #{echo_src_filename} -C #{echo_extract_path}
+    mv #{echo_extract_path}/*/* #{echo_extract_path}/
+  EOH
+
+  not_if { ::File.exist?(echo_extract_path) }
+end
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ["--add-module=#{echo_extract_path}"]

data/cookbooks/nginx/recipes/http_geoip_module.rb

@@ -0,0 +1,113 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: http_geoip_module
+#
+# Author:: Jamie Winsor (<jamie@vialstudios.com>)
+#
+# Copyright 2012-2013, Riot Games
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+country_dat          = "#{node['nginx']['geoip']['path']}/GeoIP.dat"
+country_src_filename = ::File.basename(node['nginx']['geoip']['country_dat_url'])
+country_src_filepath = "#{Chef::Config['file_cache_path']}/#{country_src_filename}"
+city_dat             = nil
+city_src_filename    = ::File.basename(node['nginx']['geoip']['city_dat_url'])
+city_src_filepath    = "#{Chef::Config['file_cache_path']}/#{city_src_filename}"
+geolib_filename      = ::File.basename(node['nginx']['geoip']['lib_url'])
+geolib_filepath      = "#{Chef::Config['file_cache_path']}/#{geolib_filename}"
+
+remote_file geolib_filepath do
+  source   node['nginx']['geoip']['lib_url']
+  checksum node['nginx']['geoip']['lib_checksum']
+  owner    'root'
+  group    node['root_group']
+  mode     '0644'
+end
+
+bash 'extract_geolib' do
+  cwd  ::File.dirname(geolib_filepath)
+  code <<-EOH
+    tar xzvf #{geolib_filepath} -C #{::File.dirname(geolib_filepath)}
+    cd GeoIP-#{node['nginx']['geoip']['lib_version']}
+    ./configure
+    make && make install
+  EOH
+  environment('echo' => 'echo') if node['platform_family'] == 'rhel' && node['platform_version'].to_f < 6
+  creates    "/usr/local/lib/libGeoIP.so.#{node['nginx']['geoip']['lib_version']}"
+  subscribes :run, "remote_file[#{geolib_filepath}]"
+end
+
+directory node['nginx']['geoip']['path'] do
+  owner     'root'
+  group     node['root_group']
+  mode      '0755'
+  recursive true
+end
+
+remote_file country_src_filepath do
+  not_if do
+    File.exist?(country_src_filepath) &&
+      File.mtime(country_src_filepath) > Time.now - 86_400
+  end
+  source   node['nginx']['geoip']['country_dat_url']
+  checksum node['nginx']['geoip']['country_dat_checksum']
+  owner    'root'
+  group    node['root_group']
+  mode     '0644'
+end
+
+bash 'gunzip_geo_lite_country_dat' do
+  code <<-EOH
+    gunzip -c "#{country_src_filepath}" > #{country_dat}
+  EOH
+  creates country_dat
+end
+
+if node['nginx']['geoip']['enable_city']
+  city_dat  = "#{node['nginx']['geoip']['path']}/GeoLiteCity.dat"
+
+  remote_file city_src_filepath do
+    not_if do
+      File.exist?(city_src_filepath) &&
+        File.mtime(city_src_filepath) > Time.now - 86_400
+    end
+    source   node['nginx']['geoip']['city_dat_url']
+    checksum node['nginx']['geoip']['city_dat_checksum']
+    owner    'root'
+    group    node['root_group']
+    mode     '0644'
+  end
+
+  bash 'gunzip_geo_lite_city_dat' do
+    code <<-EOH
+      gunzip -c "#{city_src_filepath}" > #{city_dat}
+    EOH
+    creates city_dat
+  end
+end
+
+template "#{node['nginx']['dir']}/conf.d/http_geoip.conf" do
+  source 'modules/http_geoip.conf.erb'
+  owner  'root'
+  group  node['root_group']
+  mode   '0644'
+  variables(
+    :country_dat => country_dat,
+    :city_dat => city_dat
+  )
+end
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ['--with-http_geoip_module', "--with-ld-opt='-Wl,-R,/usr/local/lib -L /usr/local/lib'"]