Remove the kosmos-wordpress cookbook
This commit is contained in:
parent
777b85c2ab
commit
4693b15826
@ -1,6 +0,0 @@
|
|||||||
kosmos-wordpress CHANGELOG
|
|
||||||
==========================
|
|
||||||
|
|
||||||
0.1.0
|
|
||||||
-----
|
|
||||||
- [Greg Karékinian] - Initial release of kosmos-wordpress
|
|
@ -1,68 +0,0 @@
|
|||||||
kosmos-wordpress Cookbook
|
|
||||||
=========================
|
|
||||||
TODO: Enter the cookbook description here.
|
|
||||||
|
|
||||||
e.g.
|
|
||||||
This cookbook makes your favorite breakfast sandwich.
|
|
||||||
|
|
||||||
Requirements
|
|
||||||
------------
|
|
||||||
TODO: List your cookbook requirements. Be sure to include any requirements this cookbook has on platforms, libraries, other cookbooks, packages, operating systems, etc.
|
|
||||||
|
|
||||||
e.g.
|
|
||||||
#### packages
|
|
||||||
- `toaster` - kosmos-wordpress needs toaster to brown your bagel.
|
|
||||||
|
|
||||||
Attributes
|
|
||||||
----------
|
|
||||||
TODO: List your cookbook attributes here.
|
|
||||||
|
|
||||||
e.g.
|
|
||||||
#### kosmos-wordpress::default
|
|
||||||
<table>
|
|
||||||
<tr>
|
|
||||||
<th>Key</th>
|
|
||||||
<th>Type</th>
|
|
||||||
<th>Description</th>
|
|
||||||
<th>Default</th>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td><tt>['kosmos-wordpress']['bacon']</tt></td>
|
|
||||||
<td>Boolean</td>
|
|
||||||
<td>whether to include bacon</td>
|
|
||||||
<td><tt>true</tt></td>
|
|
||||||
</tr>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
Usage
|
|
||||||
-----
|
|
||||||
#### kosmos-wordpress::default
|
|
||||||
TODO: Write usage instructions for each cookbook.
|
|
||||||
|
|
||||||
e.g.
|
|
||||||
Just include `kosmos-wordpress` in your node's `run_list`:
|
|
||||||
|
|
||||||
```json
|
|
||||||
{
|
|
||||||
"name":"my_node",
|
|
||||||
"run_list": [
|
|
||||||
"recipe[kosmos-wordpress]"
|
|
||||||
]
|
|
||||||
}
|
|
||||||
```
|
|
||||||
|
|
||||||
Contributing
|
|
||||||
------------
|
|
||||||
TODO: (optional) If this is a public cookbook, detail the process for contributing. If this is a private cookbook, remove this section.
|
|
||||||
|
|
||||||
e.g.
|
|
||||||
1. Fork the repository on Github
|
|
||||||
2. Create a named feature branch (like `add_component_x`)
|
|
||||||
3. Write your change
|
|
||||||
4. Write tests for your change (if applicable)
|
|
||||||
5. Run the tests, ensuring they all pass
|
|
||||||
6. Submit a Pull Request using Github
|
|
||||||
|
|
||||||
License and Authors
|
|
||||||
-------------------
|
|
||||||
Authors: TODO: List authors
|
|
@ -1 +0,0 @@
|
|||||||
node.default["kosmos-wordpress"]["nginx"]["domain"] = "blog.kosmos.org"
|
|
@ -1,13 +0,0 @@
|
|||||||
name 'kosmos-wordpress'
|
|
||||||
maintainer 'Kosmos'
|
|
||||||
maintainer_email 'mail@kosmos.org'
|
|
||||||
license 'All rights reserved'
|
|
||||||
description 'Installs/Configures kosmos-wordpress'
|
|
||||||
long_description IO.read(File.join(File.dirname(__FILE__), 'README.md'))
|
|
||||||
version '0.1.0'
|
|
||||||
|
|
||||||
depends 'wordpress'
|
|
||||||
depends 'php-fpm'
|
|
||||||
depends 'backup'
|
|
||||||
depends 'kosmos-base'
|
|
||||||
depends 'kosmos-nginx'
|
|
@ -1,38 +0,0 @@
|
|||||||
#
|
|
||||||
# Cookbook Name:: kosmos-wordpress
|
|
||||||
# Recipe:: default
|
|
||||||
#
|
|
||||||
# Copyright 2016, Kosmos
|
|
||||||
#
|
|
||||||
# All rights reserved - Do Not Redistribute
|
|
||||||
#
|
|
||||||
|
|
||||||
mysql_credentials = Chef::EncryptedDataBagItem.load('credentials', 'mysql')
|
|
||||||
|
|
||||||
node.override['wordpress']['db']['root_password'] = mysql_credentials["root_password"]
|
|
||||||
node.override['wordpress']['server_name'] = "blog.kosmos.org"
|
|
||||||
node.override['wordpress']['server_aliases'] = ["blog.kosmos.org"]
|
|
||||||
node.override['wordpress']['server_port'] = "443"
|
|
||||||
credentials = Chef::EncryptedDataBagItem.load('credentials', 'wordpress')
|
|
||||||
node.set['wordpress']['db']['pass'] = credentials["db_pass"]
|
|
||||||
node.set['wordpress']['keys']['auth'] = credentials["keys_auth"]
|
|
||||||
node.set['wordpress']['keys']['secure_auth'] = credentials["keys_secure_auth"]
|
|
||||||
node.set['wordpress']['keys']['logged_in'] = credentials["keys_logged_in"]
|
|
||||||
node.set['wordpress']['keys']['nonce'] = credentials["keys_nonce"]
|
|
||||||
node.set['wordpress']['salt']['auth'] = credentials["keys_auth"]
|
|
||||||
node.set['wordpress']['salt']['secure_auth'] = credentials["saltsecure_auth"]
|
|
||||||
node.set['wordpress']['salt']['logged_in'] = credentials["salt_logged_in"]
|
|
||||||
node.set['wordpress']['salt']['nonce'] = credentials["salt_nonce"]
|
|
||||||
|
|
||||||
include_recipe 'kosmos-wordpress::nginx'
|
|
||||||
|
|
||||||
unless node.chef_environment == "development"
|
|
||||||
node.override["backup"]["mysql"]["host"] = "localhost"
|
|
||||||
node.override["backup"]["mysql"]["username"] = "root"
|
|
||||||
node.override["backup"]["mysql"]["password"] = node["wordpress"]["db"]["root_password"]
|
|
||||||
unless node["backup"]["mysql"]["databases"].include? "wordpressdb"
|
|
||||||
node.override["backup"]["mysql"]["databases"] =
|
|
||||||
node["backup"]["mysql"]["databases"].to_a << "wordpressdb"
|
|
||||||
end
|
|
||||||
include_recipe "backup"
|
|
||||||
end
|
|
@ -1,59 +0,0 @@
|
|||||||
#
|
|
||||||
# Cookbook Name:: kosmos-wordpress
|
|
||||||
# Recipe:: nginx
|
|
||||||
#
|
|
||||||
# Copyright 2016, Kosmos
|
|
||||||
#
|
|
||||||
# All rights reserved - Do Not Redistribute
|
|
||||||
#
|
|
||||||
|
|
||||||
node.set_unless['php-fpm']['pools'] = []
|
|
||||||
|
|
||||||
include_recipe "php-fpm"
|
|
||||||
include_recipe 'php-fpm::repository' unless node['php-fpm']['skip_repository_install']
|
|
||||||
include_recipe "php-fpm::install"
|
|
||||||
|
|
||||||
php_fpm_pool "www" do
|
|
||||||
enable false
|
|
||||||
end
|
|
||||||
|
|
||||||
php_fpm_pool "wordpress" do
|
|
||||||
listen "127.0.0.1:9001"
|
|
||||||
user node['wordpress']['install']['user']
|
|
||||||
group node['wordpress']['install']['group']
|
|
||||||
listen_owner node['wordpress']['install']['user']
|
|
||||||
listen_group node['wordpress']['install']['group']
|
|
||||||
php_options node['wordpress']['php_options']
|
|
||||||
start_servers 5
|
|
||||||
enable true
|
|
||||||
end
|
|
||||||
|
|
||||||
include_recipe "php::module_mysql"
|
|
||||||
|
|
||||||
include_recipe "kosmos-nginx"
|
|
||||||
|
|
||||||
include_recipe "wordpress::app"
|
|
||||||
|
|
||||||
server_name = node['wordpress']['server_name']
|
|
||||||
|
|
||||||
ssl_cert = "/etc/letsencrypt/live/#{server_name}/fullchain.pem"
|
|
||||||
ssl_key = "/etc/letsencrypt/live/#{server_name}/privkey.pem"
|
|
||||||
template "#{node['nginx']['dir']}/sites-available/#{server_name}" do
|
|
||||||
source "nginx.conf.erb"
|
|
||||||
variables(
|
|
||||||
docroot: node['wordpress']['dir'],
|
|
||||||
server_name: server_name,
|
|
||||||
server_aliases: node['wordpress']['server_aliases'],
|
|
||||||
server_port: node['wordpress']['server_port'],
|
|
||||||
ssl_cert: ssl_cert,
|
|
||||||
ssl_key: ssl_key
|
|
||||||
)
|
|
||||||
action :create
|
|
||||||
notifies :reload, "service[nginx]", :delayed
|
|
||||||
end
|
|
||||||
|
|
||||||
nginx_site server_name do
|
|
||||||
action :enable
|
|
||||||
end
|
|
||||||
|
|
||||||
nginx_certbot_site server_name
|
|
@ -1,44 +0,0 @@
|
|||||||
server {
|
|
||||||
listen 80;
|
|
||||||
<% if File.exist?(@ssl_cert) && File.exist?(@ssl_key) -%>
|
|
||||||
listen <%= @server_port %> ssl http2;
|
|
||||||
<% end -%>
|
|
||||||
server_name <%= @server_name %> <%= @server_aliases.join(" ") %>;
|
|
||||||
|
|
||||||
access_log /var/log/nginx/<%= @server_name %>.access.log;
|
|
||||||
error_log /var/log/nginx/<%= @server_name %>.error.log;
|
|
||||||
|
|
||||||
client_max_body_size 20m;
|
|
||||||
|
|
||||||
root <%= @docroot %>;
|
|
||||||
index index.php;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
try_files $uri $uri/ /index.php?$args;
|
|
||||||
<% if File.exist?(@ssl_cert) && File.exist?(@ssl_key) -%>
|
|
||||||
set $redirect_to_ssl "no";
|
|
||||||
if ($ssl_protocol = "") {
|
|
||||||
set $redirect_to_ssl "yes";
|
|
||||||
}
|
|
||||||
if ($redirect_to_ssl = yes) {
|
|
||||||
rewrite ^(.*) https://$host$1 permanent;
|
|
||||||
}
|
|
||||||
<% end -%>
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ \.php$ {
|
|
||||||
try_files $uri =404;
|
|
||||||
include fastcgi_params;
|
|
||||||
fastcgi_pass 127.0.0.1:9001;
|
|
||||||
fastcgi_param SCRIPT_FILENAME <%= @docroot %>$fastcgi_script_name;
|
|
||||||
# Remove the HTTP_PROXY parameter, protect from the HTTPoxy vulnerability
|
|
||||||
# https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx/
|
|
||||||
fastcgi_param HTTP_PROXY "";
|
|
||||||
}
|
|
||||||
|
|
||||||
<% if File.exist?(@ssl_cert) && File.exist?(@ssl_key) -%>
|
|
||||||
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains";
|
|
||||||
ssl_certificate <%= @ssl_cert %>;
|
|
||||||
ssl_certificate_key <%= @ssl_key %>;
|
|
||||||
<% end -%>
|
|
||||||
}
|
|
Loading…
x
Reference in New Issue
Block a user