#
# Cookbook Name:: kosmos_strfry
# Recipe:: policies
#

include_recipe "deno"

#
# config
#

ldap_credentials = Chef::EncryptedDataBagItem.load('credentials', 'dirsrv')

env = {
  ldap_url: 'ldap://ldap.kosmos.local:389', # requires "ldap_client" role
  ldap_bind_dn: ldap_credentials["service_dn"],
  ldap_password: ldap_credentials["service_password"],
  ldap_search_dn: node["strfry"]["ldap_search_dn"],
  whitelist_pubkeys: node["strfry"]["whitelist_pubkeys"].join(",")
}

template "/opt/.env" do
  source 'env.erb'
  owner node["strfry"]["user"]
  group node["strfry"]["group"]
  mode 0600
  sensitive true
  variables config: env
  notifies :restart, "service[strfry]", :delayed
end

#
# strfry deno scripts
#

base_url = "https://gitea.kosmos.org/kosmos/akkounts/raw/branch/live/extras/strfry"

remote_file "/opt/deno.json" do
  source "#{base_url}/deno.json"
  owner node["strfry"]["user"]
  group node["strfry"]["group"]
  mode "0644"
  notifies :restart, "service[strfry]", :delayed
end

remote_file "/opt/strfry-policy.ts" do
  source "#{base_url}/strfry-policy.ts"
  owner node["strfry"]["user"]
  group node["strfry"]["group"]
  mode "0755"
  notifies :restart, "service[strfry]", :delayed
end

remote_file "/opt/ldap-policy.ts" do
  source "#{base_url}/ldap-policy.ts"
  owner node["strfry"]["user"]
  group node["strfry"]["group"]
  mode "0644"
  notifies :restart, "service[strfry]", :delayed
end

remote_file "/opt/strfry-sync.ts" do
  source "#{base_url}/strfry-sync.ts"
  owner node["strfry"]["user"]
  group node["strfry"]["group"]
  mode "0644"
end

# service "strfry" do
#   action :nothing
# end