from-scratch 0.3.0 → 0.5.0

data/cookbooks/nginx/recipes/package.rb

@@ -0,0 +1,52 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: package
+# Author:: AJ Christensen <aj@junglist.gen.nz>
+#
+# Copyright 2008-2013, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe 'nginx::ohai_plugin'
+
+if platform_family?('rhel')
+  if node['nginx']['repo_source'] == 'epel'
+    include_recipe 'yum-epel'
+  elsif node['nginx']['repo_source'] == 'nginx'
+    include_recipe 'nginx::repo'
+    package_install_opts = '--disablerepo=* --enablerepo=nginx'
+  elsif node['nginx']['repo_source'].to_s.empty?
+    log "node['nginx']['repo_source'] was not set, no additional yum repositories will be installed." do
+      level :debug
+    end
+  else
+    fail ArgumentError, "Unknown value '#{node['nginx']['repo_source']}' was passed to the nginx cookbook."
+  end
+elsif platform_family?('debian')
+  include_recipe 'nginx::repo_passenger' if node['nginx']['repo_source'] == 'passenger'
+  include_recipe 'nginx::repo'           if node['nginx']['repo_source'] == 'nginx'
+end
+
+package node['nginx']['package_name'] do
+  options package_install_opts
+  notifies :reload, 'ohai[reload_nginx]', :immediately
+  not_if 'which nginx'
+end
+
+service 'nginx' do
+  supports :status => true, :restart => true, :reload => true
+  action   :enable
+end
+
+include_recipe 'nginx::commons'

data/cookbooks/nginx/recipes/pagespeed_module.rb

@@ -0,0 +1,62 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: pagespeed_module
+#
+
+src_filename = ::File.basename(node['nginx']['pagespeed']['url'])
+src_filepath = "#{Chef::Config['file_cache_path']}/#{src_filename}"
+extract_path = "#{Chef::Config['file_cache_path']}/nginx_pagespeed-#{node['nginx']['pagespeed']['version']}"
+
+remote_file src_filepath do
+  source   node['nginx']['pagespeed']['url']
+  owner    'root'
+  group    node['root_group']
+  mode     '0644'
+  not_if { ::File.exist?(src_filepath) }
+end
+
+psol_src_filename = "psol-#{::File.basename(node['nginx']['psol']['url'])}"
+psol_src_filepath = "#{Chef::Config['file_cache_path']}/#{psol_src_filename}"
+psol_extract_path = "#{Chef::Config['file_cache_path']}/nginx_pagespeed-#{node['nginx']['pagespeed']['version']}/psol"
+
+remote_file psol_src_filepath do
+  source   node['nginx']['psol']['url']
+  owner    'root'
+  group    node['root_group']
+  mode     '0644'
+  not_if { ::File.exist?(psol_src_filepath) }
+end
+
+packages = value_for_platform_family(
+    %w(rhel)   => node['nginx']['pagespeed']['packages']['rhel'],
+    %w(debian) => node['nginx']['pagespeed']['packages']['debian']
+)
+
+unless packages.empty?
+  packages.each do |name|
+    package name
+  end
+end
+
+bash 'extract_pagespeed' do
+  cwd  ::File.dirname(src_filepath)
+  code <<-EOH
+    mkdir -p #{extract_path}
+    tar xzf #{src_filename} -C #{extract_path}
+    mv #{extract_path}/*/* #{extract_path}/
+  EOH
+  not_if { ::File.exist?(extract_path) }
+end
+
+bash 'extract_psol' do
+  cwd  ::File.dirname(psol_src_filepath)
+  code <<-EOH
+    mkdir -p #{psol_extract_path}
+    tar xzf #{psol_src_filename} -C #{psol_extract_path}
+    mv #{psol_extract_path}/*/* #{psol_extract_path}/
+  EOH
+  not_if { ::File.exist?(psol_extract_path) }
+end
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ["--add-module=#{extract_path}"]

data/cookbooks/nginx/recipes/passenger.rb

@@ -0,0 +1,56 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: Passenger
+#
+# Copyright 2013, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+packages = value_for_platform_family(
+  %w(rhel)   => node['nginx']['passenger']['packages']['rhel'],
+  %w(fedora)   => node['nginx']['passenger']['packages']['fedora'],
+  %w(debian) => node['nginx']['passenger']['packages']['debian']
+)
+
+unless packages.empty?
+  packages.each do |name|
+    package name
+  end
+end
+
+gem_package 'rake' if node['nginx']['passenger']['install_rake']
+
+if node['nginx']['passenger']['install_method'] == 'package'
+  package node['nginx']['package_name']
+  package 'passenger'
+elsif node['nginx']['passenger']['install_method'] == 'source'
+
+  gem_package 'passenger' do
+    action     :install
+    version    node['nginx']['passenger']['version']
+    gem_binary node['nginx']['passenger']['gem_binary'] if node['nginx']['passenger']['gem_binary']
+  end
+
+  node.run_state['nginx_configure_flags'] =
+    node.run_state['nginx_configure_flags'] | ["--add-module=#{node['nginx']['passenger']['root']}/ext/nginx"]
+
+end
+
+template "#{node['nginx']['dir']}/conf.d/passenger.conf" do
+  source 'modules/passenger.conf.erb'
+  owner  'root'
+  group  node['root_group']
+  mode   '0644'
+  notifies :reload, 'service[nginx]', :delayed
+end

data/cookbooks/nginx/recipes/repo.rb

@@ -0,0 +1,41 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: repo
+# Author:: Nick Rycar <nrycar@bluebox.net>
+#
+# Copyright 2008-2013, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+case node['platform_family']
+when 'rhel', 'fedora'
+
+  yum_repository 'nginx' do
+    description 'Nginx.org Repository'
+    baseurl         node['nginx']['upstream_repository']
+    gpgkey      'http://nginx.org/keys/nginx_signing.key'
+    action :create
+  end
+
+when 'debian'
+  include_recipe 'apt::default'
+
+  apt_repository 'nginx' do
+    uri          node['nginx']['upstream_repository']
+    distribution node['lsb']['codename']
+    components   %w(nginx)
+    deb_src      true
+    key          'http://nginx.org/keys/nginx_signing.key'
+  end
+end

data/cookbooks/nginx/recipes/repo_passenger.rb

@@ -0,0 +1,39 @@
+# Cookbook Name:: nginx
+# Recipe:: repo_passenger
+# Author:: Jose Alberto Suarez Lopez <ja@josealberto.org>
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+case node['platform_family']
+when 'rhel', 'fedora'
+
+  log 'There is not official phusion passenger repo for redhat based systems.' do
+    level :info
+  end
+
+when 'debian'
+  include_recipe 'apt::default'
+  package 'apt-transport-https'
+
+  apt_repository 'phusionpassenger' do
+    uri 'https://oss-binaries.phusionpassenger.com/apt/passenger'
+    distribution node['lsb']['codename']
+    components %w(main)
+    deb_src true
+    keyserver 'keyserver.ubuntu.com'
+    key '561F9B9CAC40B2F7'
+  end
+
+  include_recipe 'nginx::passenger'
+end

data/cookbooks/nginx/recipes/set_misc.rb

@@ -0,0 +1,30 @@
+#
+# Cookbook Name:: nginx
+# Recipes:: set_misc
+#
+
+set_misc_src_filename = ::File.basename(node['nginx']['set_misc']['url'])
+set_misc_src_filepath = "#{Chef::Config['file_cache_path']}/#{set_misc_src_filename}"
+set_misc_extract_path = "#{Chef::Config['file_cache_path']}/nginx-set_misc-#{node['nginx']['set_misc']['version']}"
+
+remote_file set_misc_src_filepath do
+  source   node['nginx']['set_misc']['url']
+  checksum node['nginx']['set_misc']['checksum']
+  owner    'root'
+  group    'root'
+  mode     '0644'
+end
+
+bash 'extract_set_misc_module' do
+  cwd  ::File.dirname(set_misc_src_filepath)
+  code <<-EOH
+    mkdir -p #{set_misc_extract_path}
+    tar xzf #{set_misc_src_filename} -C #{set_misc_extract_path}
+  EOH
+  not_if { ::File.exist?(set_misc_extract_path) }
+end
+
+node.run_state['nginx_configure_flags'] =
+  node.run_state['nginx_configure_flags'] | ["--add-module=#{set_misc_extract_path}/set-misc-nginx-module-#{node['nginx']['set_misc']['version']}"]
+
+include_recipe 'nginx::ngx_devel_module'

data/cookbooks/nginx/recipes/socketproxy.rb

@@ -0,0 +1,26 @@
+include_recipe 'nginx::commons_dir'
+
+directory node['nginx']['socketproxy']['root'] do
+  owner node['nginx']['socketproxy']['app_owner']
+  group node['nginx']['socketproxy']['app_owner']
+  mode 00755
+  action :create
+end
+
+context_names = node['nginx']['socketproxy']['apps'].map do |_app, app_conf|
+  app_conf['context_name']
+end
+
+fail 'More than one app has the same context_name configured.' if context_names.uniq.length != context_names.length
+
+template node['nginx']['dir'] + '/sites-available/socketproxy.conf' do
+  source 'modules/socketproxy.conf.erb'
+  owner 'root'
+  group 'root'
+  mode 00644
+  notifies :reload, 'service[nginx]', :delayed
+end
+
+link node['nginx']['dir'] + '/sites-enabled/socketproxy.conf' do
+  to node['nginx']['dir'] + '/sites-available/socketproxy.conf'
+end

data/cookbooks/nginx/recipes/source.rb

@@ -0,0 +1,205 @@
+#
+# Cookbook Name:: nginx
+# Recipe:: source
+#
+# Author:: Adam Jacob (<adam@chef.io>)
+# Author:: Joshua Timberman (<joshua@chef.io>)
+# Author:: Jamie Winsor (<jamie@vialstudios.com>)
+#
+# Copyright 2009-2013, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+# This is for Chef 10 and earlier where attributes aren't loaded
+# deterministically (resolved in Chef 11).
+node.load_attribute_by_short_filename('source', 'nginx') if node.respond_to?(:load_attribute_by_short_filename)
+
+nginx_url = node['nginx']['source']['url'] ||
+            "http://nginx.org/download/nginx-#{node['nginx']['source']['version']}.tar.gz"
+
+node.set['nginx']['binary']          = node['nginx']['source']['sbin_path']
+node.set['nginx']['daemon_disable']  = true
+
+unless node['nginx']['source']['use_existing_user']
+  user node['nginx']['user'] do
+    system true
+    shell  '/bin/false'
+    home   '/var/www'
+  end
+end
+
+include_recipe 'nginx::ohai_plugin'
+include_recipe 'nginx::commons_dir'
+include_recipe 'nginx::commons_script'
+include_recipe 'build-essential::default'
+
+src_filepath  = "#{Chef::Config['file_cache_path'] || '/tmp'}/nginx-#{node['nginx']['source']['version']}.tar.gz"
+packages = value_for_platform_family(
+  %w(rhel fedora suse) => %w(pcre-devel openssl-devel),
+  %w(gentoo)      => [],
+  %w(default)     => %w(libpcre3 libpcre3-dev libssl-dev)
+)
+
+packages.each do |name|
+  package name
+end
+
+remote_file nginx_url do
+  source   nginx_url
+  checksum node['nginx']['source']['checksum']
+  path     src_filepath
+  backup   false
+end
+
+node.run_state['nginx_force_recompile'] = false
+node.run_state['nginx_configure_flags'] =
+  node['nginx']['source']['default_configure_flags'] | node['nginx']['configure_flags']
+
+include_recipe 'nginx::commons_conf'
+
+cookbook_file "#{node['nginx']['dir']}/mime.types" do
+  source 'mime.types'
+  owner  'root'
+  group  node['root_group']
+  mode   '0644'
+  notifies :reload, 'service[nginx]', :delayed
+end
+
+# source install depends on the existence of the `tar` package
+package 'tar'
+
+# Unpack downloaded source so we could apply nginx patches
+# in custom modules - example http://yaoweibin.github.io/nginx_tcp_proxy_module/
+# patch -p1 < /path/to/nginx_tcp_proxy_module/tcp.patch
+bash 'unarchive_source' do
+  cwd  ::File.dirname(src_filepath)
+  code <<-EOH
+    tar zxf #{::File.basename(src_filepath)} -C #{::File.dirname(src_filepath)}
+  EOH
+  not_if { ::File.directory?("#{Chef::Config['file_cache_path'] || '/tmp'}/nginx-#{node['nginx']['source']['version']}") }
+end
+
+node['nginx']['source']['modules'].each do |ngx_module|
+  include_recipe ngx_module
+end
+
+configure_flags       = node.run_state['nginx_configure_flags']
+nginx_force_recompile = node.run_state['nginx_force_recompile']
+
+bash 'compile_nginx_source' do
+  cwd  ::File.dirname(src_filepath)
+  code <<-EOH
+    cd nginx-#{node['nginx']['source']['version']} &&
+    ./configure #{node.run_state['nginx_configure_flags'].join(' ')} &&
+    make && make install
+  EOH
+
+  not_if do
+    nginx_force_recompile == false &&
+      node.automatic_attrs['nginx'] &&
+      node.automatic_attrs['nginx']['version'] == node['nginx']['source']['version'] &&
+      node.automatic_attrs['nginx']['configure_arguments'].sort == configure_flags.sort
+  end
+
+  notifies :restart, 'service[nginx]'
+  notifies :reload,  'ohai[reload_nginx]', :immediately
+end
+
+case node['nginx']['init_style']
+when 'runit'
+  node.set['nginx']['src_binary'] = node['nginx']['binary']
+  include_recipe 'runit::default'
+
+  runit_service 'nginx'
+
+  service 'nginx' do
+    supports       :status => true, :restart => true, :reload => true
+    reload_command "#{node['runit']['sv_bin']} hup #{node['runit']['service_dir']}/nginx"
+  end
+when 'bluepill'
+  include_recipe 'bluepill::default'
+
+  template "#{node['bluepill']['conf_dir']}/nginx.pill" do
+    source 'nginx.pill.erb'
+    mode   '0644'
+  end
+
+  bluepill_service 'nginx' do
+    action [:enable, :load]
+  end
+
+  service 'nginx' do
+    supports       :status => true, :restart => true, :reload => true
+    reload_command "[[ -f #{node['nginx']['pid']} ]] && kill -HUP `cat #{node['nginx']['pid']}` || true"
+    action         :nothing
+  end
+when 'upstart'
+  # we rely on this to set up nginx.conf with daemon disable instead of doing
+  # it in the upstart init script.
+  node.set['nginx']['daemon_disable']  = node['nginx']['upstart']['foreground']
+
+  template '/etc/init/nginx.conf' do
+    source 'nginx-upstart.conf.erb'
+    owner  'root'
+    group  node['root_group']
+    mode   '0644'
+  end
+
+  service 'nginx' do
+    provider Chef::Provider::Service::Upstart
+    supports :status => true, :restart => true, :reload => true
+    action   :nothing
+  end
+else
+  node.set['nginx']['daemon_disable'] = false
+
+  generate_init = true
+
+  case node['platform']
+  when 'gentoo'
+    generate_template = false
+  when 'debian', 'ubuntu'
+    generate_template = true
+    defaults_path    = '/etc/default/nginx'
+  when 'freebsd'
+    generate_init    = false
+  else
+    generate_template = true
+    defaults_path    = '/etc/sysconfig/nginx'
+  end
+
+  template '/etc/init.d/nginx' do
+    source 'nginx.init.erb'
+    owner  'root'
+    group  node['root_group']
+    mode   '0755'
+  end if generate_init
+
+  if generate_template
+    template defaults_path do
+      source 'nginx.sysconfig.erb'
+      owner  'root'
+      group  node['root_group']
+      mode   '0644'
+    end
+  end
+
+  service 'nginx' do
+    supports :status => true, :restart => true, :reload => true
+    action   :enable
+  end
+end
+
+node.run_state.delete('nginx_configure_flags')
+node.run_state.delete('nginx_force_recompile')