diff --git a/data_bags/credentials/wormhole.json b/data_bags/credentials/wormhole.json deleted file mode 100644 index 61f469e..0000000 --- a/data_bags/credentials/wormhole.json +++ /dev/null @@ -1,17 +0,0 @@ -{ - "id": "wormhole", - "nickserv_password": { - "encrypted_data": "cFY94NjfcqeBFUpPhg9PRJpty1x2Z9mWG0YBzv/jvao=\n", - "iv": "9CAeYa4XnwXjOtiO\n", - "auth_tag": "rjY9GyetAOkqpCuiFBdkag==\n", - "version": 3, - "cipher": "aes-256-gcm" - }, - "xmpp_password": { - "encrypted_data": "d8H7G+ua0lYMIvAEMJ6FRAShsNsPqcfZd7TRfzaGSbg=\n", - "iv": "qYvOpTVigw4fZPA/\n", - "auth_tag": "/yYPrlS+n7ElYn7BC+5Fzg==\n", - "version": 3, - "cipher": "aes-256-gcm" - } -} \ No newline at end of file diff --git a/site-cookbooks/kosmos-hubot/recipes/wormhole.rb b/site-cookbooks/kosmos-hubot/recipes/wormhole.rb deleted file mode 100644 index f502ee6..0000000 --- a/site-cookbooks/kosmos-hubot/recipes/wormhole.rb +++ /dev/null @@ -1,86 +0,0 @@ -# -# Cookbook Name:: kosmos-hubot -# Recipe:: wormhole -# - -app_name = "wormhole" -app_user = "hubot" -app_group = "hubot" -app_path = "/opt/#{app_name}" -data_bag = Chef::EncryptedDataBagItem.load('credentials', app_name) - -app_env = { - "HUBOT_LOG_LEVEL" => node.chef_environment == "development" ? "debug" : "info", - "HUBOT_IRC_SERVER" => "irc.freenode.net", - "HUBOT_IRC_ROOMS" => "#kosmos,#kosmos-dev,#kosmos-random,#sockethub", - "HUBOT_IRC_NICK" => app_name, - "HUBOT_IRC_NICKSERV_USERNAME" => app_name, - "HUBOT_IRC_NICKSERV_PASSWORD" => data_bag['nickserv_password'], - "HUBOT_IRC_UNFLOOD" => "100", - "HUBOT_WORMHOLE_XMPP_JID" => "wormhole@kosmos.org", - "HUBOT_WORMHOLE_XMPP_PASSWORD" => data_bag['xmpp_password'], - "HUBOT_WORMHOLE_XMPP_HOST" => "xmpp.kosmos.org", - "HUBOT_WORMHOLE_XMPP_PORT" => "5222", - "HUBOT_WORMHOLE_XMPP_NICKNAME" => "wormhole", - "HUBOT_WORMHOLE_XMPP_ROOMS" => "kosmos@kosmos.chat,kosmos-dev@kosmos.chat,kosmos-random@kosmos.chat,sockethub@kosmos.chat", - "EXPRESS_PORT" => node['wormhole']['http_port'] -} - -build_essential -include_recipe "kosmos-nodejs" -include_recipe "kosmos-hubot::_user" -include_recipe "git" - -git app_path do - user app_user - group app_group - repository "https://gitea.kosmos.org/kosmos/wormhole.git" - revision "master" - action :sync - notifies :run, "bash[npm_install_#{app_name}]", :immediately - notifies :restart, "systemd_unit[#{app_name}.service]", :delayed -end - -bash "npm_install_#{app_name}" do - user app_user - cwd app_path - code 'npm install' - action :nothing -end - -file "#{app_path}/external-scripts.json" do - mode "0640" - owner app_user - group app_group - content [].to_json -end - -systemd_unit "#{app_name}.service" do - content({ - Unit: { - Description: "#{app_name} (node.js app)", - Documentation: ['https://gitea.kosmos.org/kosmos/wormhole'], - }, - Service: { - User: app_user, - Group: app_group, - ExecStart: "#{app_path}/bin/hubot -a irc --name #{app_name}", - WorkingDirectory: app_path, - Environment: app_env.map{|k, v| "'#{k}=#{v}'"}.join(' '), - Type: 'simple', - Restart: 'always', - RestartSec: '2', - TimeoutSec: '10', - PrivateTmp: true, - ProtectSystem: 'full', - NoNewPrivileges: true, - PrivateDevices: true - }, - Install: { - WantedBy: 'multi-user.target' - } - }) - verify false - triggers_reload true - action [:create, :enable, :start] -end