Publish documentation at /doc/

Antonio Terceiro
1 parent dd99f71d
Showing 5 changed files with 36 additions and 1 deletions Show diff stats
Rakefile
cookbooks/reverse_proxy/files/default/spbdoc.te
cookbooks/reverse_proxy/recipes/documentation.rb
cookbooks/reverse_proxy/templates/reverse_proxy.conf.erb
roles/reverse_proxy_server.rb
@@ -139,6 +139,7 @@ unless ENV[&#39;nodeps&#39;]
   task 'converge:integration' => 'converge:database'
   task 'converge:integration' => 'converge:social'
   task 'converge:social'      => 'converge:database'
+  task 'upload:reverseproxy'  => 'doc'
 end
  
 $ALT_SSH_PORT = config.fetch('alt_ssh_port', 2222)
@@ -0,0 +1,12 @@
+module spbdoc 1.0;
+
+require {
+  type httpd_t;
+  type var_t;
+  class file { read getattr open };
+}
+
+#============= httpd_t ==============
+allow httpd_t var_t:file getattr;
+allow httpd_t var_t:file read;
+allow httpd_t var_t:file open;
@@ -0,0 +1,17 @@
+docs = File.expand_path('../../../docs/_build/html', File.dirname(__FILE__))
+
+execute 'rsync::docs' do
+  command "rsync -avp --delete #{docs}/ /srv/doc/"
+end
+
+
+####################################################
+#  SELinux: allow nginx to to read doc files
+####################################################
+cookbook_file '/etc/selinux/local/spbdoc.te' do
+  notifies :run, 'execute[selinux-spbdoc]'
+end
+execute 'selinux-spbdoc' do
+  command 'selinux-install-module /etc/selinux/local/spbdoc.te'
+  action :nothing
+end
@@ -41,4 +41,9 @@ server {
     proxy_set_header        Remote-User '';
     proxy_set_header        REMOTE_USER '';
   }
+
+  location /doc/ {
+    root /srv;
+  }
+
 }
 name 'database_server'
 description 'Reverse proxy server'
-run_list 'recipe[basics::nginx]', 'recipe[reverse_proxy]', 'recipe[reverse_proxy::mailman]'
+run_list 'recipe[basics::nginx]', 'recipe[reverse_proxy]', 'recipe[reverse_proxy::mailman]', 'recipe[reverse_proxy::documentation]'
...	...	@@ -139,6 +139,7 @@ unless ENV['nodeps']
139	139	task 'converge:integration' => 'converge:database'
140	140	task 'converge:integration' => 'converge:social'
141	141	task 'converge:social' => 'converge:database'
	142	+ task 'upload:reverseproxy' => 'doc'
142	143	end
143	144
144	145	$ALT_SSH_PORT = config.fetch('alt_ssh_port', 2222)
...	...
...	...	@@ -0,0 +1,12 @@
	1	+module spbdoc 1.0;
	2	+
	3	+require {
	4	+ type httpd_t;
	5	+ type var_t;
	6	+ class file { read getattr open };
	7	+}
	8	+
	9	+#============= httpd_t ==============
	10	+allow httpd_t var_t:file getattr;
	11	+allow httpd_t var_t:file read;
	12	+allow httpd_t var_t:file open;
...	...
...	...	@@ -0,0 +1,17 @@
	1	+docs = File.expand_path('../../../docs/_build/html', File.dirname(__FILE__))
	2	+
	3	+execute 'rsync::docs' do
	4	+ command "rsync -avp --delete #{docs}/ /srv/doc/"
	5	+end
	6	+
	7	+
	8	+####################################################
	9	+# SELinux: allow nginx to to read doc files
	10	+####################################################
	11	+cookbook_file '/etc/selinux/local/spbdoc.te' do
	12	+ notifies :run, 'execute[selinux-spbdoc]'
	13	+end
	14	+execute 'selinux-spbdoc' do
	15	+ command 'selinux-install-module /etc/selinux/local/spbdoc.te'
	16	+ action :nothing
	17	+end
...	...
...	...	@@ -41,4 +41,9 @@ server {
41	41	proxy_set_header Remote-User '';
42	42	proxy_set_header REMOTE_USER '';
43	43	}
	44	+
	45	+ location /doc/ {
	46	+ root /srv;
	47	+ }
	48	+
44	49	}
...	...
1	1	name 'database_server'
2	2	description 'Reverse proxy server'
3		-run_list 'recipe[basics::nginx]', 'recipe[reverse_proxy]', 'recipe[reverse_proxy::mailman]'
	3	+run_list 'recipe[basics::nginx]', 'recipe[reverse_proxy]', 'recipe[reverse_proxy::mailman]', 'recipe[reverse_proxy::documentation]'
...	...