diff --git a/site-cookbooks/kosmos-wordpress/CHANGELOG.md b/site-cookbooks/kosmos-wordpress/CHANGELOG.md deleted file mode 100644 index a253528..0000000 --- a/site-cookbooks/kosmos-wordpress/CHANGELOG.md +++ /dev/null @@ -1,6 +0,0 @@ -kosmos-wordpress CHANGELOG -========================== - -0.1.0 ------ -- [Greg Karékinian] - Initial release of kosmos-wordpress diff --git a/site-cookbooks/kosmos-wordpress/README.md b/site-cookbooks/kosmos-wordpress/README.md deleted file mode 100644 index 2756eb0..0000000 --- a/site-cookbooks/kosmos-wordpress/README.md +++ /dev/null @@ -1,68 +0,0 @@ -kosmos-wordpress Cookbook -========================= -TODO: Enter the cookbook description here. - -e.g. -This cookbook makes your favorite breakfast sandwich. - -Requirements ------------- -TODO: List your cookbook requirements. Be sure to include any requirements this cookbook has on platforms, libraries, other cookbooks, packages, operating systems, etc. - -e.g. -#### packages -- `toaster` - kosmos-wordpress needs toaster to brown your bagel. - -Attributes ----------- -TODO: List your cookbook attributes here. - -e.g. -#### kosmos-wordpress::default - - - - - - - - - - - - - -
KeyTypeDescriptionDefault
['kosmos-wordpress']['bacon']Booleanwhether to include bacontrue
- -Usage ------ -#### kosmos-wordpress::default -TODO: Write usage instructions for each cookbook. - -e.g. -Just include `kosmos-wordpress` in your node's `run_list`: - -```json -{ - "name":"my_node", - "run_list": [ - "recipe[kosmos-wordpress]" - ] -} -``` - -Contributing ------------- -TODO: (optional) If this is a public cookbook, detail the process for contributing. If this is a private cookbook, remove this section. - -e.g. -1. Fork the repository on Github -2. Create a named feature branch (like `add_component_x`) -3. Write your change -4. Write tests for your change (if applicable) -5. Run the tests, ensuring they all pass -6. Submit a Pull Request using Github - -License and Authors -------------------- -Authors: TODO: List authors diff --git a/site-cookbooks/kosmos-wordpress/attributes/default.rb b/site-cookbooks/kosmos-wordpress/attributes/default.rb deleted file mode 100644 index 766f826..0000000 --- a/site-cookbooks/kosmos-wordpress/attributes/default.rb +++ /dev/null @@ -1 +0,0 @@ -node.default["kosmos-wordpress"]["nginx"]["domain"] = "blog.kosmos.org" diff --git a/site-cookbooks/kosmos-wordpress/metadata.rb b/site-cookbooks/kosmos-wordpress/metadata.rb deleted file mode 100644 index ea82bfd..0000000 --- a/site-cookbooks/kosmos-wordpress/metadata.rb +++ /dev/null @@ -1,13 +0,0 @@ -name 'kosmos-wordpress' -maintainer 'Kosmos' -maintainer_email 'mail@kosmos.org' -license 'All rights reserved' -description 'Installs/Configures kosmos-wordpress' -long_description IO.read(File.join(File.dirname(__FILE__), 'README.md')) -version '0.1.0' - -depends 'wordpress' -depends 'php-fpm' -depends 'backup' -depends 'kosmos-base' -depends 'kosmos-nginx' diff --git a/site-cookbooks/kosmos-wordpress/recipes/default.rb b/site-cookbooks/kosmos-wordpress/recipes/default.rb deleted file mode 100644 index ca0aaea..0000000 --- a/site-cookbooks/kosmos-wordpress/recipes/default.rb +++ /dev/null @@ -1,38 +0,0 @@ -# -# Cookbook Name:: kosmos-wordpress -# Recipe:: default -# -# Copyright 2016, Kosmos -# -# All rights reserved - Do Not Redistribute -# - -mysql_credentials = Chef::EncryptedDataBagItem.load('credentials', 'mysql') - -node.override['wordpress']['db']['root_password'] = mysql_credentials["root_password"] -node.override['wordpress']['server_name'] = "blog.kosmos.org" -node.override['wordpress']['server_aliases'] = ["blog.kosmos.org"] -node.override['wordpress']['server_port'] = "443" -credentials = Chef::EncryptedDataBagItem.load('credentials', 'wordpress') -node.set['wordpress']['db']['pass'] = credentials["db_pass"] -node.set['wordpress']['keys']['auth'] = credentials["keys_auth"] -node.set['wordpress']['keys']['secure_auth'] = credentials["keys_secure_auth"] -node.set['wordpress']['keys']['logged_in'] = credentials["keys_logged_in"] -node.set['wordpress']['keys']['nonce'] = credentials["keys_nonce"] -node.set['wordpress']['salt']['auth'] = credentials["keys_auth"] -node.set['wordpress']['salt']['secure_auth'] = credentials["saltsecure_auth"] -node.set['wordpress']['salt']['logged_in'] = credentials["salt_logged_in"] -node.set['wordpress']['salt']['nonce'] = credentials["salt_nonce"] - -include_recipe 'kosmos-wordpress::nginx' - -unless node.chef_environment == "development" - node.override["backup"]["mysql"]["host"] = "localhost" - node.override["backup"]["mysql"]["username"] = "root" - node.override["backup"]["mysql"]["password"] = node["wordpress"]["db"]["root_password"] - unless node["backup"]["mysql"]["databases"].include? "wordpressdb" - node.override["backup"]["mysql"]["databases"] = - node["backup"]["mysql"]["databases"].to_a << "wordpressdb" - end - include_recipe "backup" -end diff --git a/site-cookbooks/kosmos-wordpress/recipes/nginx.rb b/site-cookbooks/kosmos-wordpress/recipes/nginx.rb deleted file mode 100644 index 039c296..0000000 --- a/site-cookbooks/kosmos-wordpress/recipes/nginx.rb +++ /dev/null @@ -1,59 +0,0 @@ -# -# Cookbook Name:: kosmos-wordpress -# Recipe:: nginx -# -# Copyright 2016, Kosmos -# -# All rights reserved - Do Not Redistribute -# - -node.set_unless['php-fpm']['pools'] = [] - -include_recipe "php-fpm" -include_recipe 'php-fpm::repository' unless node['php-fpm']['skip_repository_install'] -include_recipe "php-fpm::install" - -php_fpm_pool "www" do - enable false -end - -php_fpm_pool "wordpress" do - listen "127.0.0.1:9001" - user node['wordpress']['install']['user'] - group node['wordpress']['install']['group'] - listen_owner node['wordpress']['install']['user'] - listen_group node['wordpress']['install']['group'] - php_options node['wordpress']['php_options'] - start_servers 5 - enable true -end - -include_recipe "php::module_mysql" - -include_recipe "kosmos-nginx" - -include_recipe "wordpress::app" - -server_name = node['wordpress']['server_name'] - -ssl_cert = "/etc/letsencrypt/live/#{server_name}/fullchain.pem" -ssl_key = "/etc/letsencrypt/live/#{server_name}/privkey.pem" -template "#{node['nginx']['dir']}/sites-available/#{server_name}" do - source "nginx.conf.erb" - variables( - docroot: node['wordpress']['dir'], - server_name: server_name, - server_aliases: node['wordpress']['server_aliases'], - server_port: node['wordpress']['server_port'], - ssl_cert: ssl_cert, - ssl_key: ssl_key - ) - action :create - notifies :reload, "service[nginx]", :delayed -end - -nginx_site server_name do - action :enable -end - -nginx_certbot_site server_name diff --git a/site-cookbooks/kosmos-wordpress/templates/default/nginx.conf.erb b/site-cookbooks/kosmos-wordpress/templates/default/nginx.conf.erb deleted file mode 100644 index 930e05a..0000000 --- a/site-cookbooks/kosmos-wordpress/templates/default/nginx.conf.erb +++ /dev/null @@ -1,44 +0,0 @@ -server { - listen 80; - <% if File.exist?(@ssl_cert) && File.exist?(@ssl_key) -%> - listen <%= @server_port %> ssl http2; - <% end -%> - server_name <%= @server_name %> <%= @server_aliases.join(" ") %>; - - access_log /var/log/nginx/<%= @server_name %>.access.log; - error_log /var/log/nginx/<%= @server_name %>.error.log; - - client_max_body_size 20m; - - root <%= @docroot %>; - index index.php; - - location / { - try_files $uri $uri/ /index.php?$args; - <% if File.exist?(@ssl_cert) && File.exist?(@ssl_key) -%> - set $redirect_to_ssl "no"; - if ($ssl_protocol = "") { - set $redirect_to_ssl "yes"; - } - if ($redirect_to_ssl = yes) { - rewrite ^(.*) https://$host$1 permanent; - } - <% end -%> - } - - location ~ \.php$ { - try_files $uri =404; - include fastcgi_params; - fastcgi_pass 127.0.0.1:9001; - fastcgi_param SCRIPT_FILENAME <%= @docroot %>$fastcgi_script_name; - # Remove the HTTP_PROXY parameter, protect from the HTTPoxy vulnerability - # https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx/ - fastcgi_param HTTP_PROXY ""; - } - - <% if File.exist?(@ssl_cert) && File.exist?(@ssl_key) -%> - add_header Strict-Transport-Security "max-age=15768000; includeSubDomains"; - ssl_certificate <%= @ssl_cert %>; - ssl_certificate_key <%= @ssl_key %>; - <% end -%> -}