Initial kosmos_drone cookbook

Closes #235

site-cookbooks/kosmos_drone/recipes/default.rb

@@ -0,0 +1,85 @@
+#
+# Cookbook:: kosmos_drone
+# Recipe:: default
+#
+# The MIT License (MIT)
+#
+# Copyright:: 2020, Kosmos Developers
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+# THE SOFTWARE.
+
+package "docker-compose"
+domain = "drone.kosmos.org"
+deploy_path = "/opt/drone"
+upstream_port = 3002
+credentials = data_bag_item("credentials", "drone")
+
+directory deploy_path do
+  action :create
+end
+
+template "#{deploy_path}/docker-compose.yml" do
+  source "docker-compose.yml.erb"
+  sensitive true
+  mode 0640
+  variables upstream_port: upstream_port,
+            domain: domain,
+            gitea_server: "https://#{node["kosmos_gitea"]["nginx"]["domain"]}",
+            client_id: credentials['client_id'],
+            client_secret: credentials['client_secret'],
+            rpc_secret: credentials['rpc_secret'],
+            max_procs: 4
+end
+
+systemd_unit "drone.service" do
+  content({Unit: {
+             Description: "drone service with docker compose",
+             Requires: "docker.service",
+             After: "docker.service",
+           },
+           Service: {
+             Restart: "always",
+             WorkingDirectory: deploy_path,
+             ExecStart: "/usr/bin/docker-compose up",
+             ExecStartPre: "/usr/bin/docker-compose rm -f",
+             ExecStop: "/usr/bin/docker-compose down",
+           },
+           Install: {
+             WantedBy: "multi-user.target",
+           }})
+  action [:create, :enable, :start]
+end
+
+template "#{node['nginx']['dir']}/sites-available/#{domain}" do
+  source "nginx_conf.erb"
+  owner 'www-data'
+  mode 0640
+  variables server_name:   domain,
+            ssl_cert:      "/etc/letsencrypt/live/#{domain}/fullchain.pem",
+            ssl_key:       "/etc/letsencrypt/live/#{domain}/privkey.pem",
+            upstream_port: upstream_port
+
+  notifies :reload, 'service[nginx]', :delayed
+end
+
+nginx_site domain do
+  action :enable
+end
+
+nginx_certbot_site domain