nginx.rb

# encoding: UTF-8
#
# Cookbook Name:: postfixadmin
# Recipe:: nginx
# Author:: Xabier de Zuazo (<xabier@zuazo.org>)
# Copyright:: Copyright (c) 2015 Onddo Labs, SL.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

def default_http_port
  node['postfixadmin']['ssl'] ? 443 : 80
end

http_port = node['postfixadmin']['port'] || default_http_port

include_recipe 'nginx'
include_recipe 'postfixadmin::php_fpm'

# Disable apache2, required for Debian 6
service 'apache2' do
  action [:stop, :disable]
  only_if { ::File.exist?('/etc/init.d/apache2') }
end

fastcgi_pass =
  "unix:/var/run/php-fpm-#{node['postfixadmin']['php-fpm']['pool']}.sock"

template_variables = {
  name: 'postfixadmin',
  server_name: node['postfixadmin']['server_name'],
  server_aliases: node['postfixadmin']['server_aliases'],
  docroot: "#{node['ark']['prefix_root']}/postfixadmin",
  port: http_port,
  fastcgi_pass: fastcgi_pass,
  headers: node['postfixadmin']['headers']
}

if node['postfixadmin']['ssl']
  cert = ssl_certificate 'postfixadmin' do
    namespace node['postfixadmin']
    notifies :restart, 'service[nginx]' # TODO: reload?
  end

  template_variables.merge!(
    ssl_key: cert.key_path,
    ssl_cert: cert.chain_combined_path,
    ssl: true
  )
end

# Create virtualhost
template File.join(node['nginx']['dir'], 'sites-available', 'postfixadmin') do
  source 'nginx_vhost.erb'
  mode 00644
  owner 'root'
  group 'root'
  variables(template_variables)
  notifies :reload, 'service[nginx]'
end

r = nginx_site 'postfixadmin' do
  enable true
end

# Requierd by the LWRP
if r.is_a?(::Chef::Resource) # Only works with Chef 12
  r.notifies(:restart, 'service[nginx]', :immediately)
  r.notifies(:restart, 'service[php-fpm]', :immediately)
end