Enable LDAP on the XMPP 5apps.com vhost

Refactor the ejabberd config file to remove hardcoded values about the
vhosts

Refs #123

site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb

@@ -7,36 +7,38 @@ log_rotate_count: 1
 log_rate_limit: 100
 
 hosts:
-  - "kosmos.org"
-  - "5apps.com"
+<% @hosts.each do |host| -%>
+  - "<%= host[:name] %>"
+<% end -%>
 
 host_config:
-  "kosmos.org":
+<% @hosts.each do |host| -%>
+  "<%= host[:name] %>":
     sql_type: pgsql
     sql_server: "localhost"
-    sql_database: "ejabberd"
-    sql_username: "ejabberd"
-    sql_password: "<%= @pgsql_password %>"
-  "5apps.com":
-    sql_type: pgsql
-    sql_server: "localhost"
-    sql_database: "ejabberd_5apps"
+    sql_database: "<%= host[:sql_database] %>"
     sql_username: "ejabberd"
     sql_password: "<%= @pgsql_password %>"
+  <% if host[:ldap_enabled] -%>
+    auth_method: ldap
+    ldap_servers: ["<%= @ldap_server %>"]
+    ldap_rootdn: "cn=xmpp,ou=<%= host[:name] %>,<%= @ldap_base %>"
+    ldap_password: "<%= host[:ldap_password] %>"
+    ldap_encrypt: <%= @ldap_encryption_type %>
+    ldap_base: "ou=<%= host[:name] %>,<%= @ldap_base %>"
+    ldap_filter: "(nsRole=cn=xmpp_role,ou=<%= host[:name] %>,<%= @ldap_base %>)"
+  <% end -%>
+<% end -%>
 
-<% if (File.exist?("/opt/ejabberd/conf/kosmos.org.crt") && File.exist?("/opt/ejabberd/conf/kosmos.org.key")) ||
-    (File.exist?("/opt/ejabberd/conf/5apps.com.crt") && File.exist?("/opt/ejabberd/conf/5apps.com.key")) -%>
+<% if @hosts.any? { |host| File.exist?("/opt/ejabberd/conf/#{host[:name]}.crt") && File.exist?("/opt/ejabberd/conf/#{host[:name]}.key") } -%>
 certfiles:
-<% if File.exist?("/opt/ejabberd/conf/kosmos.org.crt") && File.exist?("/opt/ejabberd/conf/kosmos.org.key") -%>
-  - "/opt/ejabberd/conf/kosmos.org.crt"
-  - "/opt/ejabberd/conf/kosmos.org.key"
-<% end -%>
-<% if File.exist?("/opt/ejabberd/conf/5apps.com.crt") && File.exist?("/opt/ejabberd/conf/5apps.com.key") -%>
-  - "/opt/ejabberd/conf/5apps.com.crt"
-  - "/opt/ejabberd/conf/5apps.com.key"
+<% @hosts.each do |host| -%>
+  <% if File.exist?("/opt/ejabberd/conf/#{host[:name]}.crt") && File.exist?("/opt/ejabberd/conf/#{host[:name]}.key") -%>
+  - "/opt/ejabberd/conf/<%= host[:name] %>.crt"
+  - "/opt/ejabberd/conf/<%= host[:name] %>.key"
+  <% end -%>
 <% end -%>
 <% end -%>
-
 ca_file: "/opt/ejabberd/conf/cacert.pem"
 
 define_macro:
@@ -113,12 +115,9 @@ max_fsm_queue: 10000
 acl:
   admin:
     user:
-      - "greg@5apps.com"
-      - "sebastian@5apps.com"
-      - "garret@5apps.com"
-      - "raucao@kosmos.org"
-      - "greg@kosmos.org"
-      - "galfert@kosmos.org"
+    <% @admin_users.each do |admin| -%>
+      - "<%= admin %>"
+    <% end -%>
 
   local:
     user_regexp: ""
@@ -232,14 +231,9 @@ modules:
       - "pep" # pep requires mod_caps
   mod_push: {}
   mod_push_keepalive: {}
+  # Allow existing accounts to change their password
   mod_register:
-    welcome_message:
-      subject: "Welcome!"
-      body: |-
-        Hi.
-        Welcome to this XMPP server.
-    ip_access: trusted_network
-    access: register
+    access: none
   mod_roster:
     versioning: true
     store_current_id: true
@@ -254,37 +248,10 @@ modules:
   mod_http_api: {}
 
 append_host_config:
-  "5apps.com":
-    modules:
-      mod_muc:
-        host: "muc.@HOST@"
-        access:
-          - allow: local
-        access_admin:
-          - allow: admin
-        access_create: muc_create
-        access_persistent: muc_create
-        max_user_conferences: 1000
-        default_room_options:
-          anonymous: false
-          public: true
-          members_only: true
-          public_list: false
-          persistent: true
-          mam: true
-  "kosmos.org":
-    modules:
-      mod_muc:
-        host: "kosmos.chat"
-        access:
-          - allow
-        access_admin:
-          - allow: admin
-        access_create: muc_create
-        access_persistent: muc_create
-        max_user_conferences: 1000
-        default_room_options:
-          mam: true
+<% @hosts.each do |host| -%>
+  "<%= host[:name] %>":
+    <%= host[:append_host_config].chomp %>
+<% end -%>
 
 allow_contrib_modules: true