Noosfero configuration

There are still a few TODO's

Noosfero configuration
There are still a few TODO's
Antonio Terceiro
1 parent 33df6d4c
Showing 14 changed files with 173 additions and 1 deletions Show diff stats
Rakefile
config/roles/database_server.rb
config/roles/social_server.rb
cookbooks/colab/templates/01-apps.yaml.erb
cookbooks/noosfero/files/noosfero-default
cookbooks/noosfero/recipes/default.rb
cookbooks/noosfero/templates/database.yml.erb
cookbooks/noosfero/templates/nginx.conf.erb
cookbooks/noosfero/templates/thin.yml.erb
cookbooks/postgresql/recipes/noosfero.rb
cookbooks/postgresql/templates/centos/pg_hba.conf.erb
test/colab_test.sh
test/noosfero_test.sh
test/postgresql_test.sh
@@ -33,4 +33,5 @@ task :bootstrap_common =&gt; &#39;.ssh_config&#39;
 unless ENV['nodeps']
   task 'converge:integration' => 'converge:database'
+  task 'converge:social'      => 'converge:database'
 end
@@ -5,4 +5,5 @@ run_list *[
   'recipe[redis]',
   'recipe[postgresql::colab]',
   'recipe[postgresql::gitlab]',
+  'recipe[postgresql::noosfero]',
 ]
 name 'database_server'
 description 'Social networking server'
-#run_list 'recipe[noosfero]'
+run_list *[
+  'recipe[basics::nginx]',
+  'recipe[noosfero]'
+]
@@ -2,3 +2,5 @@
 PROXIED_APPS:
   gitlab:
     upstream: 'http://<%= node['peers']['integration'] %>:8081/gitlab/'
+  noosfero:
+    upstream: 'http://<%= node['peers']['social'] %>:8080/social/'
@@ -0,0 +1,7 @@
+# MANAGED WITH CHEF; DO NOT MAKE MANUAL CHANGES
+
+export RAILS_RELATIVE_URL_ROOT=/social
+
+NOOSFERO_DIR="/usr/lib/noosfero"
+NOOSFERO_USER="noosfero"
+NOOSFERO_DATA_DIR="/var/lib/noosfero"
@@ -0,0 +1,52 @@
+if node['platform'] == 'centos'
+  cookbook_file '/etc/yum.repos.d/noosfero.repo' do
+    owner 'root'
+    mode 0644
+  end
+end
+
+package 'noosfero'
+
+template '/etc/noosfero/database.yml' do
+  owner 'noosfero'
+  group 'noosfero'
+  mode '0600'
+  notifies :restart, 'service[noosfero]'
+end
+
+# create DB schema
+execute 'noosfero:schema' do
+  command 'RAILS_ENV=production bundle exec rake db:schema:load && RAILS_ENV=production bundle exec rake db:data:minimal'
+  cwd '/usr/lib/noosfero'
+  user 'noosfero'
+  not_if do
+    # if the profiles table already exists, the schema was already loaded
+    system("psql -h database -U noosfero --no-align --tuples-only -q -c 'select count(*) from profiles'")
+  end
+  notifies :restart, 'service[noosfero]'
+end
+
+# TODO remote user auth
+# TODO spb plugin
+# TODO theme
+
+template '/etc/noosfero/thin.yml' do
+  owner 'root'; group 'root'; mode 0644
+  notifies :restart, 'service[noosfero]'
+end
+
+cookbook_file '/etc/default/noosfero' do
+  owner 'root'; group 'root'; mode 0644
+  source 'noosfero-default'
+  notifies :restart, 'service[noosfero]'
+end
+
+service 'noosfero' do
+  action [:enable, :start]
+end
+
+template '/etc/nginx/conf.d/noosfero.conf' do
+  owner 'root'; group 'root'; mode 0644
+  source 'nginx.conf.erb'
+  notifies :reload, 'service[nginx]'
+end
@@ -0,0 +1,7 @@
+# MANAGED WITH CHEF. DO NOT MAKE MANUAL CHANGES
+production:
+  adapter: postgresql
+  encoding: unicode
+  database: noosfero
+  host: <%= node['peers']['database'] %>
+  user: noosfero
@@ -0,0 +1,31 @@
+upstream noosfero {
+<% (1..(`nproc`.strip.to_i)).each do |p| %>
+  server 127.0.0.1:<%= 9000 + p - 1 %> fail_timeout=10s;
+<% end %>
+}
+
+server {
+  listen *:8080;
+  server_name <%= node['config']['external_hostname'] %>;
+
+  access_log            /var/log/nginx/noosfero.access.log;
+  error_log             /var/log/nginx/noosfero.error.log;
+
+  root /usr/lib/noosfero/public;
+  location /social/ {
+    alias /usr/lib/noosfero/public/;
+    try_files $uri @noosfero_proxy;
+  }
+  try_files $uri @noosfero_proxy;
+
+  location @noosfero_proxy {
+    proxy_pass              http://noosfero;
+    proxy_read_timeout      90;
+    proxy_connect_timeout   90;
+    proxy_redirect          off;
+    proxy_set_header        Host $host;
+    proxy_set_header        X-Real-IP $remote_addr;
+    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
+  }
+
+}
@@ -0,0 +1,15 @@
+---
+chdir: /usr/lib/noosfero
+environment: production
+address: 127.0.0.1
+port: 9000
+timeout: 30
+log: log/thin.log
+pid: tmp/pids/thin.pid
+max_conns: 1024
+max_persistent_conns: 512
+require: []
+wait: 30
+daemonize: true
+servers: <%= `nproc`.strip %>
+prefix: /social
@@ -0,0 +1,17 @@
+execute 'createuser:noosfero' do
+  command 'createuser noosfero'
+  user 'postgres'
+  only_if do
+    `sudo -u postgres -i psql --quiet --tuples-only -c "select count(*) from pg_user where usename = 'noosfero';"`.strip.to_i == 0
+  end
+end
+
+execute 'createdb:noosfero' do
+  command 'createdb --owner=noosfero noosfero'
+  user 'postgres'
+  only_if do
+    `sudo -u postgres -i psql --quiet --tuples-only -c "select count(1) from pg_database where datname = 'noosfero';"`.strip.to_i == 0
+  end
+end
+
+
@@ -9,3 +9,4 @@ host    all             all             ::1/128                 ident
 # TYPE  DATABASE  USER        ADDRESS                                 METHOD
 host    colab     colab       <%= node['peers']['integration'] %>/32  trust
 host    gitlab    gitlab      <%= node['peers']['integration'] %>/32  trust
+host    noosfero  noosfero    <%= node['peers']['social'] %>/32       trust
@@ -29,4 +29,8 @@ test_reverse_proxy_gitlab() {
   assertTrue 'Reverse proxy for gitlab' "curl --header 'Host: softwarepublico.dev' http://$integration/gitlab/public/projects | grep -i '<meta.*gitlab.*>'"
 }
+test_reverse_proxy_noosfero() {
+  assertTrue 'Reverse proxy for noosfero' "curl --header 'Host: softwarepublico.dev' http://$integration/social/search/people | grep -i '<meta.*noosfero.*>'"
+}
+
 load_shunit2
@@ -0,0 +1,27 @@
+. $(dirname $0)/test_helper.sh
+
+test_database_connectivity() {
+  assertTrue 'noosfero database connectivity' 'run_on social psql -h database -U noosfero < /dev/null'
+}
+
+test_noosfero_running() {
+  assertTrue 'Noosfero running' 'run_on social pgrep -u noosfero -f thin'
+}
+
+test_noosfero_on_subdir() {
+  local meta="$(run_on social curl --fail http://localhost:9000/social | sed -e '/noosfero:root/ !d; s/^\s*//')"
+  assertEquals '<meta property="noosfero:root" content="/social"/>' "$meta"
+}
+
+test_reverse_proxy_noosfero() {
+  local meta="$(run_on social curl-host softwarepublico.dev http://localhost:8080/social | sed -e '/noosfero:root/ !d; s/^\s*//')"
+  assertEquals '<meta property="noosfero:root" content="/social"/>' "$meta"
+}
+
+test_reverse_proxy_static_files() {
+  local content_type="$(curl-host softwarepublico.dev --head http://$social:8080/social/images/noosfero-network.png | grep-header Content-Type)"
+  assertEquals "Content-Type: image/png" "$content_type"
+}
+
+
+load_shunit2
@@ -12,5 +12,9 @@ test_gitlab_database_created() {
   assertTrue 'gitlab database created in PostgreSQL' 'run_on database sudo -u postgres -i psql gitlab < /dev/null'
 }
+test_noosfero_database_created() {
+  assertTrue 'noosfero database created in PostgreSQL' 'run_on database sudo -u postgres -i psql noosfero < /dev/null'
+}
+
 load_shunit2
	@@ -33,4 +33,5 @@ task :bootstrap_common => '.ssh_config'		@@ -33,4 +33,5 @@ task :bootstrap_common => '.ssh_config'
33		33
34	unless ENV['nodeps']	34	unless ENV['nodeps']
35	task 'converge:integration' => 'converge:database'	35	task 'converge:integration' => 'converge:database'
		36	+ task 'converge:social' => 'converge:database'
36	end	37	end
	@@ -5,4 +5,5 @@ run_list *[		@@ -5,4 +5,5 @@ run_list *[
5	'recipe[redis]',	5	'recipe[redis]',
6	'recipe[postgresql::colab]',	6	'recipe[postgresql::colab]',
7	'recipe[postgresql::gitlab]',	7	'recipe[postgresql::gitlab]',
		8	+ 'recipe[postgresql::noosfero]',
8	]	9	]
1	name 'database_server'	1	name 'database_server'
2	description 'Social networking server'	2	description 'Social networking server'
3	-#run_list 'recipe[noosfero]'	3	+run_list *[
		4	+ 'recipe[basics::nginx]',
		5	+ 'recipe[noosfero]'
		6	+]
	@@ -2,3 +2,5 @@		@@ -2,3 +2,5 @@
2	PROXIED_APPS:	2	PROXIED_APPS:
3	gitlab:	3	gitlab:
4	upstream: 'http://<%= node['peers']['integration'] %>:8081/gitlab/'	4	upstream: 'http://<%= node['peers']['integration'] %>:8081/gitlab/'
		5	+ noosfero:
		6	+ upstream: 'http://<%= node['peers']['social'] %>:8080/social/'
@@ -0,0 +1,7 @@		@@ -0,0 +1,7 @@
	1	+# MANAGED WITH CHEF; DO NOT MAKE MANUAL CHANGES
	2	+
	3	+export RAILS_RELATIVE_URL_ROOT=/social
	4	+
	5	+NOOSFERO_DIR="/usr/lib/noosfero"
	6	+NOOSFERO_USER="noosfero"
	7	+NOOSFERO_DATA_DIR="/var/lib/noosfero"
@@ -0,0 +1,52 @@		@@ -0,0 +1,52 @@
	1	+if node['platform'] == 'centos'
	2	+ cookbook_file '/etc/yum.repos.d/noosfero.repo' do
	3	+ owner 'root'
	4	+ mode 0644
	5	+ end
	6	+end
	7	+
	8	+package 'noosfero'
	9	+
	10	+template '/etc/noosfero/database.yml' do
	11	+ owner 'noosfero'
	12	+ group 'noosfero'
	13	+ mode '0600'
	14	+ notifies :restart, 'service[noosfero]'
	15	+end
	16	+
	17	+# create DB schema
	18	+execute 'noosfero:schema' do
	19	+ command 'RAILS_ENV=production bundle exec rake db:schema:load && RAILS_ENV=production bundle exec rake db:data:minimal'
	20	+ cwd '/usr/lib/noosfero'
	21	+ user 'noosfero'
	22	+ not_if do
	23	+ # if the profiles table already exists, the schema was already loaded
	24	+ system("psql -h database -U noosfero --no-align --tuples-only -q -c 'select count(*) from profiles'")
	25	+ end
	26	+ notifies :restart, 'service[noosfero]'
	27	+end
	28	+
	29	+# TODO remote user auth
	30	+# TODO spb plugin
	31	+# TODO theme
	32	+
	33	+template '/etc/noosfero/thin.yml' do
	34	+ owner 'root'; group 'root'; mode 0644
	35	+ notifies :restart, 'service[noosfero]'
	36	+end
	37	+
	38	+cookbook_file '/etc/default/noosfero' do
	39	+ owner 'root'; group 'root'; mode 0644
	40	+ source 'noosfero-default'
	41	+ notifies :restart, 'service[noosfero]'
	42	+end
	43	+
	44	+service 'noosfero' do
	45	+ action [:enable, :start]
	46	+end
	47	+
	48	+template '/etc/nginx/conf.d/noosfero.conf' do
	49	+ owner 'root'; group 'root'; mode 0644
	50	+ source 'nginx.conf.erb'
	51	+ notifies :reload, 'service[nginx]'
	52	+end
@@ -0,0 +1,7 @@		@@ -0,0 +1,7 @@
	1	+# MANAGED WITH CHEF. DO NOT MAKE MANUAL CHANGES
	2	+production:
	3	+ adapter: postgresql
	4	+ encoding: unicode
	5	+ database: noosfero
	6	+ host: <%= node['peers']['database'] %>
	7	+ user: noosfero
@@ -0,0 +1,31 @@		@@ -0,0 +1,31 @@
	1	+upstream noosfero {
	2	+<% (1..(`nproc`.strip.to_i)).each do \|p\| %>
	3	+ server 127.0.0.1:<%= 9000 + p - 1 %> fail_timeout=10s;
	4	+<% end %>
	5	+}
	6	+
	7	+server {
	8	+ listen *:8080;
	9	+ server_name <%= node['config']['external_hostname'] %>;
	10	+
	11	+ access_log /var/log/nginx/noosfero.access.log;
	12	+ error_log /var/log/nginx/noosfero.error.log;
	13	+
	14	+ root /usr/lib/noosfero/public;
	15	+ location /social/ {
	16	+ alias /usr/lib/noosfero/public/;
	17	+ try_files $uri @noosfero_proxy;
	18	+ }
	19	+ try_files $uri @noosfero_proxy;
	20	+
	21	+ location @noosfero_proxy {
	22	+ proxy_pass http://noosfero;
	23	+ proxy_read_timeout 90;
	24	+ proxy_connect_timeout 90;
	25	+ proxy_redirect off;
	26	+ proxy_set_header Host $host;
	27	+ proxy_set_header X-Real-IP $remote_addr;
	28	+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	29	+ }
	30	+
	31	+}
@@ -0,0 +1,15 @@		@@ -0,0 +1,15 @@
	1	+---
	2	+chdir: /usr/lib/noosfero
	3	+environment: production
	4	+address: 127.0.0.1
	5	+port: 9000
	6	+timeout: 30
	7	+log: log/thin.log
	8	+pid: tmp/pids/thin.pid
	9	+max_conns: 1024
	10	+max_persistent_conns: 512
	11	+require: []
	12	+wait: 30
	13	+daemonize: true
	14	+servers: <%= `nproc`.strip %>
	15	+prefix: /social
@@ -0,0 +1,17 @@		@@ -0,0 +1,17 @@
	1	+execute 'createuser:noosfero' do
	2	+ command 'createuser noosfero'
	3	+ user 'postgres'
	4	+ only_if do
	5	+ `sudo -u postgres -i psql --quiet --tuples-only -c "select count(*) from pg_user where usename = 'noosfero';"`.strip.to_i == 0
	6	+ end
	7	+end
	8	+
	9	+execute 'createdb:noosfero' do
	10	+ command 'createdb --owner=noosfero noosfero'
	11	+ user 'postgres'
	12	+ only_if do
	13	+ `sudo -u postgres -i psql --quiet --tuples-only -c "select count(1) from pg_database where datname = 'noosfero';"`.strip.to_i == 0
	14	+ end
	15	+end
	16	+
	17	+