from-scratch 0.3.0 → 0.5.0

data/cookbooks/nginx/recipes/http_gzip_static_module.rb

@@ -0,0 +1,30 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: http_gzip_static_module
+#
+# Author:: Jamie Winsor (<jamie@vialstudios.com>)
+#
+# Copyright 2012-2013, Riot Games
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+template "#{node['nginx']['dir']}/conf.d/http_gzip_static.conf" do
+  source 'modules/http_gzip_static.conf.erb'
+  owner 'root'
+  group node['root_group']
+  mode '0644'
+end
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ['--with-http_gzip_static_module']

data/cookbooks/nginx/recipes/http_mp4_module.rb

@@ -0,0 +1,2 @@
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ['--with-http_mp4_module']

data/cookbooks/nginx/recipes/http_perl_module.rb

@@ -0,0 +1,23 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: http_perl_module
+#
+# Author:: Akzhan Abdulin (<akzhan.abdulin@gmail.com>)
+#
+# Copyright 2012-2013, REG.RU
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ['--with-http_perl_module']

data/cookbooks/nginx/recipes/http_realip_module.rb

@@ -0,0 +1,38 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: http_realip_module
+#
+# Author:: Jamie Winsor (<jamie@vialstudios.com>)
+#
+# Copyright 2012-2013, Riot Games
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# Documentation: http://wiki.nginx.org/HttpRealIpModule
+
+# Currently only accepts X-Forwarded-For or X-Real-IP
+node.default['nginx']['realip']['header']            = 'X-Forwarded-For'
+node.default['nginx']['realip']['addresses']         = ['127.0.0.1']
+node.default['nginx']['realip']['real_ip_recursive'] = 'off'
+
+template "#{node['nginx']['dir']}/conf.d/http_realip.conf" do
+  source 'modules/http_realip.conf.erb'
+  owner  'root'
+  group  node['root_group']
+  mode   '0644'
+  notifies :reload, 'service[nginx]', :delayed
+end
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ['--with-http_realip_module']

data/cookbooks/nginx/recipes/http_spdy_module.rb

@@ -0,0 +1,23 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: http_spdy_module
+#
+# Author:: Christoph Buente (<christoph@meinekleinefarm.org>)
+#
+# Copyright 2013, MeinekleineFarm.org
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ['--with-http_spdy_module']

data/cookbooks/nginx/recipes/http_ssl_module.rb

@@ -0,0 +1,23 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: http_ssl_module
+#
+# Author:: Jamie Winsor (<jamie@vialstudios.com>)
+#
+# Copyright 2012-2013, Riot Games
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ['--with-http_ssl_module']

data/cookbooks/nginx/recipes/http_stub_status_module.rb

@@ -0,0 +1,36 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: http_stub_status_module
+#
+# Author:: Jamie Winsor (<jamie@vialstudios.com>)
+#
+# Copyright 2012-2013, Riot Games
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe 'nginx::authorized_ips'
+
+template 'nginx_status' do
+  path "#{node['nginx']['dir']}/sites-available/nginx_status"
+  source 'modules/nginx_status.erb'
+  owner  'root'
+  group  node['root_group']
+  mode   '0644'
+  notifies :reload, 'service[nginx]', :delayed
+end
+
+nginx_site 'nginx_status'
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ['--with-http_stub_status_module']

data/cookbooks/nginx/recipes/ipv6.rb

@@ -0,0 +1,23 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: ipv6
+#
+# Author:: Alan Harper (alan@sct.com.au)
+#
+# Copyright 2013 Alan Harper
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ['--with-ipv6']

data/cookbooks/nginx/recipes/lua.rb

@@ -0,0 +1,47 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: default
+#
+# Copyright 2013, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+luajit_src_filename = ::File.basename(node['nginx']['luajit']['url'])
+luajit_src_filepath = "#{Chef::Config['file_cache_path']}/#{luajit_src_filename}"
+luajit_extract_path = "#{Chef::Config['file_cache_path']}/luajit-#{node['nginx']['luajit']['version']}"
+
+remote_file luajit_src_filepath do
+  source   node['nginx']['luajit']['url']
+  checksum node['nginx']['luajit']['checksum']
+  owner    'root'
+  group    node['root_group']
+  mode     '0644'
+end
+
+bash 'extract_luajit' do
+  cwd  ::File.dirname(luajit_src_filepath)
+  code <<-EOH
+    mkdir -p #{luajit_extract_path}
+    tar xzf #{luajit_src_filename} -C #{luajit_extract_path}
+    cd luajit-#{node['nginx']['luajit']['version']}/LuaJIT-#{node['nginx']['luajit']['version']}
+    make && make install
+    export LUAJIT_INC="/usr/local/include/luajit-2.0"
+    export LUAJIT_LIB="usr/local/lib"
+  EOH
+  not_if { ::File.exist?(luajit_extract_path) }
+end
+
+package 'lua-devel' do
+  action :install
+end

data/cookbooks/nginx/recipes/naxsi_module.rb

@@ -0,0 +1,52 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: naxsi_module
+#
+# Author:: Artiom Lunev (<artiom.lunev@gmail.com>)
+#
+# Copyright 2012-2013, Artiom Lunev
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+cookbook_file "#{node['nginx']['dir']}/naxsi_core.rules" do
+  source 'naxsi_core.rules'
+  owner  'root'
+  group  node['root_group']
+  mode   '0644'
+  notifies :reload, 'service[nginx]', :delayed
+end
+
+naxsi_src_filename = ::File.basename(node['nginx']['naxsi']['url'])
+naxsi_src_filepath = "#{Chef::Config['file_cache_path']}/#{naxsi_src_filename}"
+naxsi_extract_path = "#{Chef::Config['file_cache_path']}/nginx-naxsi-#{node['nginx']['naxsi']['version']}"
+
+remote_file naxsi_src_filepath do
+  source   node['nginx']['naxsi']['url']
+  checksum node['nginx']['naxsi']['checksum']
+  owner    'root'
+  group    node['root_group']
+  mode     '0644'
+end
+
+bash 'extract_naxsi_module' do
+  cwd  ::File.dirname(naxsi_src_filepath)
+  code <<-EOH
+    mkdir -p #{naxsi_extract_path}
+    tar xzf #{naxsi_src_filename} -C #{naxsi_extract_path}
+  EOH
+  not_if { ::File.exist?(naxsi_extract_path) }
+end
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ["--add-module=#{naxsi_extract_path}/naxsi-#{node['nginx']['naxsi']['version']}/naxsi_src"]

data/cookbooks/nginx/recipes/ngx_devel_module.rb

@@ -0,0 +1,44 @@
+#
+# Cookbook Name:: nginx
+# Recipes:: devel
+#
+# Author:: Arthur Freyman (<afreyman@riotgames.com>)
+#
+# Copyright 2013, Riot Games
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+devel_src_filename = ::File.basename(node['nginx']['devel']['url'])
+devel_src_filepath = "#{Chef::Config['file_cache_path']}/#{devel_src_filename}"
+devel_extract_path = "#{Chef::Config['file_cache_path']}/nginx-devel-#{node['nginx']['devel']['version']}"
+
+remote_file devel_src_filepath do
+  source   node['nginx']['devel']['url']
+  checksum node['nginx']['devel']['checksum']
+  owner    'root'
+  group    node['root_group']
+  mode     '0644'
+end
+
+bash 'extract_devel_module' do
+  cwd  ::File.dirname(devel_src_filepath)
+  code <<-EOH
+    mkdir -p #{devel_extract_path}
+    tar xzf #{devel_src_filename} -C #{devel_extract_path}
+  EOH
+  not_if { ::File.exist?(devel_extract_path) }
+end
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ["--add-module=#{devel_extract_path}/ngx_devel_kit-#{node['nginx']['devel']['version']}"]

data/cookbooks/nginx/recipes/ngx_lua_module.rb

@@ -0,0 +1,47 @@
+#
+# Cookbook Name:: nginx
+# Recipes:: lua
+#
+# Author:: Arthur Freyman (<afreyman@riotgames.com>)
+#
+# Copyright 2013, Riot Games
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+lua_src_filename = ::File.basename(node['nginx']['lua']['url'])
+lua_src_filepath = "#{Chef::Config['file_cache_path']}/#{lua_src_filename}"
+lua_extract_path = "#{Chef::Config['file_cache_path']}/nginx-lua-#{node['nginx']['lua']['version']}"
+
+remote_file lua_src_filepath do
+  source   node['nginx']['lua']['url']
+  checksum node['nginx']['lua']['checksum']
+  owner    'root'
+  group    node['root_group']
+  mode     '0644'
+end
+
+bash 'extract_lua_module' do
+  cwd  ::File.dirname(lua_src_filepath)
+  code <<-EOH
+    mkdir -p #{lua_extract_path}
+    tar xzf #{lua_src_filename} -C #{lua_extract_path}
+  EOH
+  not_if { ::File.exist?(lua_extract_path) }
+end
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ["--add-module=#{lua_extract_path}/lua-nginx-module-#{node['nginx']['lua']['version']}"]
+
+include_recipe 'nginx::lua'
+include_recipe 'nginx::ngx_devel_module'

data/cookbooks/nginx/recipes/ohai_plugin.rb

@@ -0,0 +1,35 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: ohai_plugin
+#
+# Author:: Jamie Winsor (<jamie@vialstudios.com>)
+#
+# Copyright 2012-2013, Riot Games
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+ohai 'reload_nginx' do
+  plugin 'nginx'
+  action :nothing
+end
+
+template "#{node['ohai']['plugin_path']}/nginx.rb" do
+  source 'plugins/nginx.rb.erb'
+  owner  'root'
+  group  node['root_group']
+  mode   '0755'
+  notifies :reload, 'ohai[reload_nginx]', :immediately
+end
+
+include_recipe 'ohai::default'

data/cookbooks/nginx/recipes/openssl_source.rb

@@ -0,0 +1,45 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: openssl_source
+#
+# Author:: David Radcliffe (<radcliffe.david@gmail.com>)
+#
+# Copyright 2013, David Radcliffe
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+src_filename = ::File.basename(node['nginx']['openssl_source']['url'])
+src_filepath = "#{Chef::Config['file_cache_path']}/#{src_filename}"
+extract_path = "#{Chef::Config['file_cache_path']}/openssl-#{node['nginx']['openssl_source']['version']}"
+
+remote_file src_filepath do
+  source node['nginx']['openssl_source']['url']
+  owner  'root'
+  group  node['root_group']
+  mode   '0644'
+  not_if { ::File.exist?(src_filepath) }
+end
+
+bash 'extract_openssl' do
+  cwd  ::File.dirname(src_filepath)
+  code <<-EOH
+    mkdir -p #{extract_path}
+    tar xzf #{src_filename} -C #{extract_path}
+    mv #{extract_path}/*/* #{extract_path}/
+  EOH
+  not_if { ::File.exist?(extract_path) }
+end
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ["--with-openssl=#{extract_path}"]