# nginx config to generate a Let's Encrypt cert

root_directory = "/var/www/xmpp.5apps.com"

directory root_directory do
  owner node["nginx"]["user"]
  group node["nginx"]["group"]
  action :create
end

template "#{node['nginx']['dir']}/sites-available/xmpp.5apps.com" do
  source 'nginx_conf_xmpp.5apps.com.erb'
  owner 'www-data'
  mode 0640
  variables server_name:    'xmpp.5apps.com',
            root_directory: root_directory,
            ssl_cert:       "/etc/letsencrypt/live/xmpp.5apps.com/fullchain.pem",
            ssl_key:        "/etc/letsencrypt/live/xmpp.5apps.com/privkey.pem"
  notifies :reload, 'service[nginx]', :delayed
end

execute "letsencrypt cert for xmpp.5apps.com" do
  command "./certbot-auto certonly --webroot --agree-tos --email ops@5apps.com --webroot-path #{root_directory} -d xmpp.5apps.com -n"
  cwd "/usr/local/certbot"
  not_if { File.exist? "/etc/letsencrypt/live/xmpp.5apps.com/fullchain.pem" }
  notifies :reload, "service[nginx]", :delayed
  notifies :run, "execute[copy the tls cert to prosody folder]", :delayed
end

execute "copy the tls cert to prosody folder" do
  action :nothing
  command <<-EOF
cp /etc/letsencrypt/live/xmpp.5apps.com/fullchain.pem /var/lib/prosody/xmpp.5apps.com.crt
cp /etc/letsencrypt/live/xmpp.5apps.com/privkey.pem /var/lib/prosody/xmpp.5apps.com.key
  EOF
  notifies :restart, "service[prosody]", :delayed
end

nginx_site 'xmpp.5apps.com' do
  enable true
end