# # Cookbook Name:: kosmos-hubot # Recipe:: botka_irc-libera-chat # app_name = "botka_irc-libera-chat" app_path = "/opt/#{app_name}" app_user = "hubot" app_group = "hubot" build_essential app_name do compile_time true end include_recipe 'redisio::default' include_recipe 'redisio::enable' include_recipe "kosmos-hubot::_user" include_recipe "kosmos-hubot::_nodejs" include_recipe "kosmos-base::firewall" application app_path do credentials = Chef::EncryptedDataBagItem.load('credentials', app_name) owner app_user group app_group git do user app_user group app_group repository "https://gitea.kosmos.org/kosmos/botka.git" revision "master" end file "#{app_path}/external-scripts.json" do mode "0640" owner app_user group app_group content [ "hubot-help", "hubot-redis-brain", "hubot-remotestorage-logger", "hubot-web-push-notifications", ].to_json end npm_install do user app_user end execute "systemctl daemon-reload" do command "systemctl daemon-reload" action :nothing end template "/lib/systemd/system/#{app_name}.service" do source 'nodejs.systemd.service.erb' owner 'root' group 'root' mode '0644' variables( user: app_user, group: app_group, app_dir: app_path, entry: "#{app_path}/bin/hubot -a irc", environment: { "HUBOT_LOG_LEVEL" => node.chef_environment == "development" ? "debug" : "info", "HUBOT_IRC_USESSL" => "true", "HUBOT_IRC_SERVER" => credentials["znc_host"], "HUBOT_IRC_PORT" => credentials["znc_port"], "HUBOT_IRC_NICK" => "botka", "HUBOT_IRC_USERNAME" => credentials['znc_user'], "HUBOT_IRC_PASSWORD" => credentials['znc_password'], "HUBOT_IRC_REALNAME" => "botka (kosmos)", "HUBOT_IRC_ROOMS" => "#kosmos,#kosmos-dev,#kosmos-random,#remotestorage,#hackerbeach,#unhosted,#sockethub,#mastodon", "HUBOT_IRC_UNFLOOD" => "100", "HUBOT_RSS_PRINTSUMMARY" => "false", "HUBOT_RSS_PRINTERROR" => "false", "HUBOT_RSS_IRCCOLORS" => "true", "REDIS_URL" => "redis://localhost:6379/botka", "EXPRESS_PORT" => node[app_name]['http_port'], "HUBOT_AUTH_ADMIN" => "bkero,raucao", "HUBOT_HELP_REPLY_IN_PRIVATE" => "true", "RS_LOGGER_USER" => "kosmos@5apps.com", "RS_LOGGER_TOKEN" => credentials['rs_logger_token'], "RS_LOGGER_SERVER_NAME" => "irc.libera.chat", "RS_LOGGER_PUBLIC" => "true", "GCM_API_KEY" => credentials['gcm_api_key'], "VAPID_SUBJECT" => "https://kosmos.org", "VAPID_PUBLIC_KEY" => credentials['vapid_public_key'], "VAPID_PRIVATE_KEY" => credentials['vapid_private_key'] } ) notifies :run, "execute[systemctl daemon-reload]", :delayed notifies :restart, "service[#{app_name}]", :delayed end service app_name do action [:enable, :start] end end firewall_rule app_name do port node[app_name]['http_port'] source "10.1.1.0/24" protocol :tcp command :allow end