Add initial kosmos-wordpress cookbook

data_bags/credentials/wordpress.json

@@ -0,0 +1,57 @@
+{
+  "id": "wordpress",
+  "db_pass": {
+    "encrypted_data": "bpszQO9HAgC6lfk214wKkLiJyZ/Y8iSPLHd5FR8F6Kf7x3ugqpFOorXd7f0h\njGp5\n",
+    "iv": "HTICQA9MkU+bl3HVZdrKjw==\n",
+    "version": 1,
+    "cipher": "aes-256-cbc"
+  },
+  "keys_auth": {
+    "encrypted_data": "orIiLz4Uthxjs9M0o5DKvAFjRIx3dk25p6AUtSQEYaRQnJSrqGnVkLmQ10zA\nzfZV\n",
+    "iv": "GHNQ1ofsBC34T7ZV1IGTxQ==\n",
+    "version": 1,
+    "cipher": "aes-256-cbc"
+  },
+  "keys_secure_auth": {
+    "encrypted_data": "w124spSuSCptIBvei02PyN69odutZbrSlljD1W+u7r52dfdu8TwG8pL7JA3d\nJ4Gc\n",
+    "iv": "ztacTkIbpzvUSTptCBGIAw==\n",
+    "version": 1,
+    "cipher": "aes-256-cbc"
+  },
+  "keys_logged_in": {
+    "encrypted_data": "JDeGlPZy5e33As1TcNa9s5hmpcWXHhbTZk2KBH/20600KHGGfWG7S6fBmfeh\n1za+\n",
+    "iv": "mT514WoiD1Xyu9DhoZ9Bag==\n",
+    "version": 1,
+    "cipher": "aes-256-cbc"
+  },
+  "keys_nonce": {
+    "encrypted_data": "LhuZPVXrnNcxZvIQ2WwKZ1Lm1NvlU41hzQQktmA6hmUJWcXaQ4P5XT2Jwmj3\n7edv\n",
+    "iv": "cqaNp+I6msqyr3APdLegIQ==\n",
+    "version": 1,
+    "cipher": "aes-256-cbc"
+  },
+  "salt_auth": {
+    "encrypted_data": "50InhVfWXUHNvYZVAtx40fG53iSLHV9C/4iPS8aM8z02zYjiGavENMyCgCcn\n4Tax\n",
+    "iv": "vYREm/XU2Te4mV3pRAVbhQ==\n",
+    "version": 1,
+    "cipher": "aes-256-cbc"
+  },
+  "salt_secure_auth": {
+    "encrypted_data": "oR12kgaLPmk7nFpodVvbbpYug8VrBUOU4e9i/wPvy334ydsuqjfzBbApPtws\n4o5U\n",
+    "iv": "0Z8031pUpdHh6ANI6kXn4w==\n",
+    "version": 1,
+    "cipher": "aes-256-cbc"
+  },
+  "salt_logged_in": {
+    "encrypted_data": "lqmy1xN518e/ZatohTFjCvaaGWiV0LTfnbcpbSjiInHffTCLqRlrtszf1Vcn\nWdSJ\n",
+    "iv": "7Vvyo58AUTFWV3ucmGeyIw==\n",
+    "version": 1,
+    "cipher": "aes-256-cbc"
+  },
+  "salt_nonce": {
+    "encrypted_data": "FUGPwfxe03CgoVvXgsAOyU2sdEX7L2+ApnJ+3JdYi2JLZOwr7V0O2rmwT6Lm\nu5sm\n",
+    "iv": "79hV7Gq9itQmJyLNrCPSSw==\n",
+    "version": 1,
+    "cipher": "aes-256-cbc"
+  }
+}

site-cookbooks/kosmos-wordpress/CHANGELOG.md

@@ -0,0 +1,13 @@
+kosmos-wordpress CHANGELOG
+==========================
+
+This file is used to list changes made in each version of the kosmos-wordpress cookbook.
+
+0.1.0
+-----
+- [your_name] - Initial release of kosmos-wordpress
+
+- - -
+Check the [Markdown Syntax Guide](http://daringfireball.net/projects/markdown/syntax) for help with Markdown.
+
+The [Github Flavored Markdown page](http://github.github.com/github-flavored-markdown/) describes the differences between markdown on github and standard markdown.

site-cookbooks/kosmos-wordpress/README.md

@@ -0,0 +1,68 @@
+kosmos-wordpress Cookbook
+=========================
+TODO: Enter the cookbook description here.
+
+e.g.
+This cookbook makes your favorite breakfast sandwich.
+
+Requirements
+------------
+TODO: List your cookbook requirements. Be sure to include any requirements this cookbook has on platforms, libraries, other cookbooks, packages, operating systems, etc.
+
+e.g.
+#### packages
+- `toaster` - kosmos-wordpress needs toaster to brown your bagel.
+
+Attributes
+----------
+TODO: List your cookbook attributes here.
+
+e.g.
+#### kosmos-wordpress::default
+<table>
+  <tr>
+    <th>Key</th>
+    <th>Type</th>
+    <th>Description</th>
+    <th>Default</th>
+  </tr>
+  <tr>
+    <td><tt>['kosmos-wordpress']['bacon']</tt></td>
+    <td>Boolean</td>
+    <td>whether to include bacon</td>
+    <td><tt>true</tt></td>
+  </tr>
+</table>
+
+Usage
+-----
+#### kosmos-wordpress::default
+TODO: Write usage instructions for each cookbook.
+
+e.g.
+Just include `kosmos-wordpress` in your node's `run_list`:
+
+```json
+{
+  "name":"my_node",
+  "run_list": [
+    "recipe[kosmos-wordpress]"
+  ]
+}
+```
+
+Contributing
+------------
+TODO: (optional) If this is a public cookbook, detail the process for contributing. If this is a private cookbook, remove this section.
+
+e.g.
+1. Fork the repository on Github
+2. Create a named feature branch (like `add_component_x`)
+3. Write your change
+4. Write tests for your change (if applicable)
+5. Run the tests, ensuring they all pass
+6. Submit a Pull Request using Github
+
+License and Authors
+-------------------
+Authors: TODO: List authors

site-cookbooks/kosmos-wordpress/metadata.rb

@@ -0,0 +1,10 @@
+name             'kosmos-wordpress'
+maintainer       'Kosmos'
+maintainer_email 'ops@kosmos.org'
+license          'All rights reserved'
+description      'Installs/Configures kosmos-wordpress'
+long_description IO.read(File.join(File.dirname(__FILE__), 'README.md'))
+version          '0.1.0'
+
+depends 'wordpress'
+depends 'php-fpm'

site-cookbooks/kosmos-wordpress/recipes/default.rb

@@ -0,0 +1,26 @@
+#
+# Cookbook Name:: kosmos-wordpress
+# Recipe:: default
+#
+# Copyright 2016, Kosmos
+#
+# All rights reserved - Do Not Redistribute
+#
+
+node.override['wordpress']['db']['root_password'] = "eiSi9aegebietheoBaogh8ay"
+node.override['wordpress']['server_name']         = "blog.kosmos.org"
+node.override['wordpress']['server_aliases']      = ["blog.kosmos.org"]
+node.override['wordpress']['db']['mysql_version'] = "5.6"
+node.override['wordpress']['server_port']         = "443"
+credentials = Chef::EncryptedDataBagItem.load('credentials', 'wordpress')
+node.set['wordpress']['db']['pass']               = credentials["db_pass"]
+node.set['wordpress']['keys']['auth']             = credentials["keys_auth"]
+node.set['wordpress']['keys']['secure_auth']      = credentials["keys_secure_auth"]
+node.set['wordpress']['keys']['logged_in']        = credentials["keys_logged_in"]
+node.set['wordpress']['keys']['nonce']            = credentials["keys_nonce"]
+node.set['wordpress']['salt']['auth']             = credentials["keys_auth"]
+node.set['wordpress']['salt']['secure_auth']      = credentials["saltsecure_auth"]
+node.set['wordpress']['salt']['logged_in']        = credentials["salt_logged_in"]
+node.set['wordpress']['salt']['nonce']            = credentials["salt_nonce"]
+
+include_recipe 'kosmos-wordpress::nginx'

site-cookbooks/kosmos-wordpress/recipes/nginx.rb

@@ -0,0 +1,98 @@
+#
+# Cookbook Name:: kosmos-wordpress
+# Recipe:: nginx
+#
+# Copyright 2016, Kosmos
+#
+# All rights reserved - Do Not Redistribute
+#
+
+node.set_unless['php-fpm']['pools'] = []
+
+include_recipe "php-fpm::configure"
+include_recipe 'php-fpm::repository' unless node['php-fpm']['skip_repository_install']
+
+if node['php-fpm']['package_name'].nil?
+  if platform_family?("rhel")
+    php_fpm_package_name = "php-fpm"
+  else
+    php_fpm_package_name = "php5-fpm"
+  end
+else
+  php_fpm_package_name = node['php-fpm']['package_name']
+end
+
+package php_fpm_package_name do
+  action :upgrade
+end
+
+if node['php-fpm']['service_name'].nil?
+  php_fpm_service_name = php_fpm_package_name
+else
+  php_fpm_service_name = node['php-fpm']['service_name']
+end
+
+service "php-fpm" do
+  service_name php_fpm_service_name
+  supports :start => true, :stop => true, :restart => true, :reload => true
+  action [ :enable, :start ]
+end
+
+php_fpm_pool "www" do
+  enable false
+end
+
+php_fpm_pool "wordpress" do
+  listen "127.0.0.1:9001"
+  user node['wordpress']['install']['user']
+  group node['wordpress']['install']['group']
+  if node['platform'] == 'ubuntu' and node['platform_version'] == '10.04'
+    process_manager 'dynamic'
+  end
+  listen_owner node['wordpress']['install']['user']
+  listen_group node['wordpress']['install']['group']
+  php_options node['wordpress']['php_options']
+  start_servers 5
+  enable true
+end
+
+include_recipe "php::module_mysql"
+
+include_recipe "kosmos-nginx"
+
+include_recipe "wordpress::app"
+
+data_bag_item = Chef::EncryptedDataBagItem.load('certificates', 'wildcard_kosmos_org')
+
+ssl_cert_path = "/etc/ssl/private/wildcard.kosmos.org.crt"
+file ssl_cert_path do
+  content   data_bag_item['ssl_cert']
+  mode      0600
+  owner     'www-data'
+  sensitive true
+end
+
+ssl_key_path = "/etc/ssl/private/wildcard.kosmos.org.key"
+file ssl_key_path do
+  content   data_bag_item['ssl_key']
+  mode      0600
+  owner     'www-data'
+  sensitive true
+end
+
+template "#{node['nginx']['dir']}/sites-available/wordpress" do
+  source "nginx.conf.erb"
+  variables(
+    docroot:        node['wordpress']['dir'],
+    server_name:    node['wordpress']['server_name'],
+    server_aliases: node['wordpress']['server_aliases'],
+    server_port:    node['wordpress']['server_port'],
+    ssl_cert:       ssl_cert_path,
+    ssl_key:        ssl_key_path
+  )
+  action :create
+end
+
+nginx_site 'wordpress' do
+  enable true
+end

site-cookbooks/kosmos-wordpress/templates/default/nginx.conf.erb

@@ -0,0 +1,32 @@
+server {
+        listen 80;
+        listen <%= @server_port %> ssl;
+        server_name <%= @server_name %> <%= @server_aliases.join(" ") %>;
+
+        access_log   /var/log/nginx/<%= @server_name %>.access.log;
+        error_log    /var/log/nginx/<%= @server_name %>.error.log;
+
+        root <%= @docroot %>;
+        index index.php;
+
+        location / {
+                try_files $uri $uri/ /index.php?$args;
+                set $redirect_to_ssl "no";
+                if ($ssl_protocol = "") {
+                        set $redirect_to_ssl "yes";
+                }
+                if ($redirect_to_ssl = yes) {
+                        rewrite ^(.*) https://$host$1 permanent;
+                }
+        }
+
+        location ~ \.php$ {
+                try_files $uri =404;
+                include fastcgi_params;
+                fastcgi_pass 127.0.0.1:9001;
+                fastcgi_param  SCRIPT_FILENAME  <%= @docroot %>$fastcgi_script_name;
+        }
+
+        ssl_certificate <%= @ssl_cert %>;
+        ssl_certificate_key <%= @ssl_key %>;
+}