vagrant-managed-servers 0.1.0

data/cookbooks/apache2/metadata.rb

@@ -0,0 +1,207 @@
+maintainer        "Opscode, Inc."
+maintainer_email  "cookbooks@opscode.com"
+license           "Apache 2.0"
+description       "Installs and configures all aspects of apache2 using Debian style symlinks with helper definitions"
+long_description  IO.read(File.join(File.dirname(__FILE__), 'README.md'))
+version           "1.2.0"
+recipe            "apache2", "Main Apache configuration"
+recipe            "apache2::logrotate", "Rotate apache2 logs. Requires logrotate cookbook"
+recipe            "apache2::mod_alias", "Apache module 'alias' with config file"
+recipe            "apache2::mod_apreq2", "Apache module 'apreq'"
+recipe            "apache2::mod_auth_basic", "Apache module 'auth_basic'"
+recipe            "apache2::mod_auth_digest", "Apache module 'auth_digest'"
+recipe            "apache2::mod_auth_openid", "Apache module 'authopenid'"
+recipe            "apache2::mod_authn_file", "Apache module 'authn_file'"
+recipe            "apache2::mod_authnz_ldap", "Apache module 'authnz_ldap'"
+recipe            "apache2::mod_authz_default", "Apache module 'authz_default'"
+recipe            "apache2::mod_authz_groupfile", "Apache module 'authz_groupfile'"
+recipe            "apache2::mod_authz_host", "Apache module 'authz_host'"
+recipe            "apache2::mod_authz_user", "Apache module 'authz_user'"
+recipe            "apache2::mod_autoindex", "Apache module 'autoindex' with config file"
+recipe            "apache2::mod_cgi", "Apache module 'cgi'"
+recipe            "apache2::mod_dav", "Apache module 'dav'"
+recipe            "apache2::mod_dav_svn", "Apache module 'dav_svn'"
+recipe            "apache2::mod_deflate", "Apache module 'deflate' with config file"
+recipe            "apache2::mod_dir", "Apache module 'dir' with config file"
+recipe            "apache2::mod_env", "Apache module 'env'"
+recipe            "apache2::mod_expires", "Apache module 'expires'"
+recipe            "apache2::mod_fcgid", "Apache module 'fcgid', package on ubuntu/debian, rhel/centos, compile source on suse; with config file"
+recipe            "apache2::mod_headers", "Apache module 'headers'"
+recipe            "apache2::mod_include", "Apache module 'include'"
+recipe            "apache2::mod_ldap", "Apache module 'ldap'"
+recipe            "apache2::mod_log_config", "Apache module 'log_config'"
+recipe            "apache2::mod_mime", "Apache module 'mime' with config file"
+recipe            "apache2::mod_negotiation", "Apache module 'negotiation' with config file"
+recipe            "apache2::mod_perl", "Apache module 'perl'"
+recipe            "apache2::mod_php5", "Apache module 'php5'"
+recipe            "apache2::mod_proxy", "Apache module 'proxy' with config file"
+recipe            "apache2::mod_proxy_ajp", "Apache module 'proxy_ajp'"
+recipe            "apache2::mod_proxy_balancer", "Apache module 'proxy_balancer'"
+recipe            "apache2::mod_proxy_connect", "Apache module 'proxy_connect'"
+recipe            "apache2::mod_proxy_http", "Apache module 'proxy_http'"
+recipe            "apache2::mod_python", "Apache module 'python'"
+recipe            "apache2::mod_rewrite", "Apache module 'rewrite'"
+recipe            "apache2::mod_setenvif", "Apache module 'setenvif' with config file"
+recipe            "apache2::mod_ssl", "Apache module 'ssl' with config file, adds port 443 to listen_ports"
+recipe            "apache2::mod_status", "Apache module 'status' with config file"
+recipe            "apache2::mod_xsendfile", "Apache module 'xsendfile'"
+
+%w{redhat centos scientific fedora debian ubuntu arch freebsd amazon}.each do |os|
+  supports os
+end
+
+attribute "apache",
+  :display_name => "Apache Hash",
+  :description => "Hash of Apache attributes",
+  :type => "hash"
+
+attribute "apache/dir",
+  :display_name => "Apache Directory",
+  :description => "Location for Apache configuration",
+  :default => "/etc/apache2"
+
+attribute "apache/log_dir",
+  :display_name => "Apache Log Directory",
+  :description => "Location for Apache logs",
+  :default => "/etc/apache2"
+
+attribute "apache/user",
+  :display_name => "Apache User",
+  :description => "User Apache runs as",
+  :default => "www-data"
+
+attribute "apache/binary",
+  :display_name => "Apache Binary",
+  :description => "Apache server daemon program",
+  :default => "/usr/sbin/apache2"
+
+attribute "apache/icondir",
+  :display_name => "Apache Icondir",
+  :description => "Directory location for icons",
+  :default => "/usr/share/apache2/icons"
+
+attribute "apache/listen_ports",
+  :display_name => "Apache Listen Ports",
+  :description => "Ports that Apache should listen on",
+  :type => "array",
+  :default => [ "80", "443" ]
+
+attribute "apache/contact",
+  :display_name => "Apache Contact",
+  :description => "Email address of webmaster",
+  :default => "ops@example.com"
+
+attribute "apache/timeout",
+  :display_name => "Apache Timeout",
+  :description => "Connection timeout value",
+  :default => "300"
+
+attribute "apache/keepalive",
+  :display_name => "Apache Keepalive",
+  :description => "HTTP persistent connections",
+  :default => "On"
+
+attribute "apache/keepaliverequests",
+  :display_name => "Apache Keepalive Requests",
+  :description => "Number of requests allowed on a persistent connection",
+  :default => "100"
+
+attribute "apache/keepalivetimeout",
+  :display_name => "Apache Keepalive Timeout",
+  :description => "Time to wait for requests on persistent connection",
+  :default => "5"
+
+attribute "apache/servertokens",
+  :display_name => "Apache Server Tokens",
+  :description => "Server response header",
+  :default => "Prod"
+
+attribute "apache/serversignature",
+  :display_name => "Apache Server Signature",
+  :description => "Configure footer on server-generated documents",
+  :default => "On"
+
+attribute "apache/traceenable",
+  :display_name => "Apache Trace Enable",
+  :description => "Determine behavior of TRACE requests",
+  :default => "On"
+
+attribute "apache/allowed_openids",
+  :display_name => "Apache Allowed OpenIDs",
+  :description => "Array of OpenIDs allowed to authenticate",
+  :default => ""
+
+attribute "apache/prefork",
+  :display_name => "Apache Prefork",
+  :description => "Hash of Apache prefork tuning attributes.",
+  :type => "hash"
+
+attribute "apache/prefork/startservers",
+  :display_name => "Apache Prefork MPM StartServers",
+  :description => "Number of MPM servers to start",
+  :default => "16"
+
+attribute "apache/prefork/minspareservers",
+  :display_name => "Apache Prefork MPM MinSpareServers",
+  :description => "Minimum number of spare server processes",
+  :default => "16"
+
+attribute "apache/prefork/maxspareservers",
+  :display_name => "Apache Prefork MPM MaxSpareServers",
+  :description => "Maximum number of spare server processes",
+  :default => "32"
+
+attribute "apache/prefork/serverlimit",
+  :display_name => "Apache Prefork MPM ServerLimit",
+  :description => "Upper limit on configurable server processes",
+  :default => "400"
+
+attribute "apache/prefork/maxclients",
+  :display_name => "Apache Prefork MPM MaxClients",
+  :description => "Maximum number of simultaneous connections",
+  :default => "400"
+
+attribute "apache/prefork/maxrequestsperchild",
+  :display_name => "Apache Prefork MPM MaxRequestsPerChild",
+  :description => "Maximum number of request a child process will handle",
+  :default => "10000"
+
+attribute "apache/worker",
+  :display_name => "Apache Worker",
+  :description => "Hash of Apache prefork tuning attributes.",
+  :type => "hash"
+
+attribute "apache/worker/startservers",
+  :display_name => "Apache Worker MPM StartServers",
+  :description => "Initial number of server processes to start",
+  :default => "4"
+
+attribute "apache/worker/maxclients",
+  :display_name => "Apache Worker MPM MaxClients",
+  :description => "Maximum number of simultaneous connections",
+  :default => "1024"
+
+attribute "apache/worker/minsparethreads",
+  :display_name => "Apache Worker MPM MinSpareThreads",
+  :description => "Minimum number of spare worker threads",
+  :default => "64"
+
+attribute "apache/worker/maxsparethreads",
+  :display_name => "Apache Worker MPM MaxSpareThreads",
+  :description => "Maximum number of spare worker threads",
+  :default => "192"
+
+attribute "apache/worker/threadsperchild",
+  :display_name => "Apache Worker MPM ThreadsPerChild",
+  :description => "Constant number of worker threads in each server process",
+  :default => "64"
+
+attribute "apache/worker/maxrequestsperchild",
+  :display_name => "Apache Worker MPM MaxRequestsPerChild",
+  :description => "Maximum number of request a child process will handle",
+  :default => "0"
+
+attribute "apache/default_modules",
+  :display_name => "Apache Default Modules",
+  :description => "Default modules to enable via recipes",
+  :default => "status alias auth_basic authn_file authz_default authz_groupfile authz_host authz_user autoindex dir env mime negotiation setenvif"

data/cookbooks/apache2/recipes/default.rb

@@ -0,0 +1,208 @@
+#
+# Cookbook Name:: apache2
+# Recipe:: default
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+package "apache2" do
+  package_name node['apache']['package']
+end
+
+service "apache2" do
+  case node['platform_family']
+  when "rhel", "fedora", "suse"
+    service_name "httpd"
+    # If restarted/reloaded too quickly httpd has a habit of failing.
+    # This may happen with multiple recipes notifying apache to restart - like
+    # during the initial bootstrap.
+    restart_command "/sbin/service httpd restart && sleep 1"
+    reload_command "/sbin/service httpd reload && sleep 1"
+  when "debian"
+    service_name "apache2"
+    restart_command "/usr/sbin/invoke-rc.d apache2 restart && sleep 1"
+    reload_command "/usr/sbin/invoke-rc.d apache2 reload && sleep 1"
+  when "arch"
+    service_name "httpd"
+  when "freebsd"
+    service_name "apache22"
+  end
+  supports [:restart, :reload, :status]
+  action :enable
+end
+
+if platform_family?("rhel", "fedora", "arch", "suse", "freebsd")
+  directory node['apache']['log_dir'] do
+    mode 00755
+  end
+
+  package "perl"
+
+  cookbook_file "/usr/local/bin/apache2_module_conf_generate.pl" do
+    source "apache2_module_conf_generate.pl"
+    mode 00755
+    owner "root"
+    group node['apache']['root_group']
+  end
+
+  %w{sites-available sites-enabled mods-available mods-enabled}.each do |dir|
+    directory "#{node['apache']['dir']}/#{dir}" do
+      mode 00755
+      owner "root"
+      group node['apache']['root_group']
+    end
+  end
+
+  execute "generate-module-list" do
+    command "/usr/local/bin/apache2_module_conf_generate.pl #{node['apache']['lib_dir']} #{node['apache']['dir']}/mods-available"
+  end
+
+  %w{a2ensite a2dissite a2enmod a2dismod}.each do |modscript|
+    template "/usr/sbin/#{modscript}" do
+      source "#{modscript}.erb"
+      mode 00700
+      owner "root"
+      group node['apache']['root_group']
+    end
+  end
+
+  # installed by default on centos/rhel, remove in favour of mods-enabled
+  %w{ proxy_ajp auth_pam authz_ldap webalizer ssl welcome }.each do |f|
+    file "#{node['apache']['dir']}/conf.d/#{f}.conf" do
+      action :delete
+      backup false
+    end
+  end
+
+  # installed by default on centos/rhel, remove in favour of mods-enabled
+  file "#{node['apache']['dir']}/conf.d/README" do
+    action :delete
+    backup false
+  end
+
+  # enable mod_deflate for consistency across distributions
+  include_recipe "apache2::mod_deflate"
+end
+
+if platform_family?("freebsd")
+
+  file "#{node['apache']['dir']}/Includes/no-accf.conf" do
+    action :delete
+    backup false
+  end
+
+  directory "#{node['apache']['dir']}/Includes" do
+    action :delete
+  end
+
+  %w{httpd-autoindex.conf httpd-dav.conf httpd-default.conf httpd-info.conf
+     httpd-languages.conf httpd-manual.conf httpd-mpm.conf
+     httpd-multilang-errordoc.conf httpd-ssl.conf httpd-userdir.conf
+     httpd-vhosts.conf}.each do |f|
+
+    file "#{node['apache']['dir']}/extra/#{f}" do
+      action :delete
+      backup false
+    end
+
+  end
+
+  directory "#{node['apache']['dir']}/extra" do
+    action :delete
+  end
+
+end
+
+directory "#{node['apache']['dir']}/ssl" do
+  mode 00755
+  owner "root"
+  group node['apache']['root_group']
+end
+
+directory "#{node['apache']['dir']}/conf.d" do
+  mode 00755
+  owner "root"
+  group node['apache']['root_group']
+end
+
+directory node['apache']['cache_dir'] do
+  mode 00755
+  owner "root"
+  group node['apache']['root_group']
+end
+
+template "apache2.conf" do
+  case node['platform_family']
+  when "rhel", "fedora", "arch"
+    path "#{node['apache']['dir']}/conf/httpd.conf"
+  when "debian"
+    path "#{node['apache']['dir']}/apache2.conf"
+  when "freebsd"
+    path "#{node['apache']['dir']}/httpd.conf"
+  end
+  source "apache2.conf.erb"
+  owner "root"
+  group node['apache']['root_group']
+  mode 00644
+  notifies :restart, "service[apache2]"
+end
+
+template "apache2-conf-security" do
+  path "#{node['apache']['dir']}/conf.d/security"
+  source "security.erb"
+  owner "root"
+  group node['apache']['root_group']
+  mode 00644
+  backup false
+  notifies :restart, "service[apache2]"
+end
+
+template "apache2-conf-charset" do
+  path "#{node['apache']['dir']}/conf.d/charset"
+  source "charset.erb"
+  owner "root"
+  group node['apache']['root_group']
+  mode 00644
+  backup false
+  notifies :restart, "service[apache2]"
+end
+
+template "#{node['apache']['dir']}/ports.conf" do
+  source "ports.conf.erb"
+  owner "root"
+  group node['apache']['root_group']
+  variables :apache_listen_ports => node['apache']['listen_ports'].map{|p| p.to_i}.uniq
+  mode 00644
+  notifies :restart, "service[apache2]"
+end
+
+template "#{node['apache']['dir']}/sites-available/default" do
+  source "default-site.erb"
+  owner "root"
+  group node['apache']['root_group']
+  mode 00644
+  notifies :restart, "service[apache2]"
+end
+
+node['apache']['default_modules'].each do |mod|
+  module_recipe_name = mod =~ /^mod_/ ? mod : "mod_#{mod}"
+  include_recipe "apache2::#{module_recipe_name}"
+end
+
+apache_site "default" if node['apache']['default_site_enabled']
+
+service "apache2" do
+  action :start
+end

data/cookbooks/apache2/recipes/god_monitor.rb

@@ -0,0 +1,33 @@
+#
+# Cookbook Name:: apache2
+# Recipe:: god_monitor
+#
+# Copyright 2008-2009, Opscode, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+apache_service = service "apache2" do
+  action :nothing
+end
+
+start_command = apache_service.start_command
+stop_command = apache_service.stop_command
+restart_command = apache_service.restart_command
+
+god_monitor "apache2" do
+  config "apache2.god.erb"
+  start (start_command)?start_command : "/etc/init.d/#{apache_service.service_name} start"
+  restart (restart_command)?restart_command : "/etc/init.d/#{apache_service.service_name} restart"
+  stop (stop_command)?stop_command : "/etc/init.d/#{apache_service.service_name} stop"
+end