2015-04-07 16:34:02 +00:00
|
|
|
module Propellor.Property.SiteSpecific.IABak where
|
|
|
|
|
|
|
|
|
|
import Propellor
|
|
|
|
|
import qualified Propellor.Property.Apt as Apt
|
|
|
|
|
import qualified Propellor.Property.Git as Git
|
|
|
|
|
import qualified Propellor.Property.Cron as Cron
|
|
|
|
|
import qualified Propellor.Property.File as File
|
2015-04-07 16:46:26 +00:00
|
|
|
import qualified Propellor.Property.Apache as Apache
|
2015-04-22 02:23:29 +00:00
|
|
|
import qualified Propellor.Property.User as User
|
|
|
|
|
import qualified Propellor.Property.Ssh as Ssh
|
|
|
|
|
|
|
|
|
|
repo :: String
|
|
|
|
|
repo = "https://github.com/ArchiveTeam/IA.BAK/"
|
|
|
|
|
|
|
|
|
|
userrepo :: String
|
|
|
|
|
userrepo = "git@gitlab.com:archiveteam/IA.bak.users.git"
|
2015-04-07 16:34:02 +00:00
|
|
|
|
2015-04-22 02:39:35 +00:00
|
|
|
gitServer :: [Host] -> Property HasInfo
|
|
|
|
|
gitServer knownhosts = propertyList "iabak git server" $ props
|
2015-04-07 16:34:02 +00:00
|
|
|
& Git.cloned "root" repo "/usr/local/IA.BAK" (Just "server")
|
|
|
|
|
& Git.cloned "root" repo "/usr/local/IA.BAK/client" (Just "master")
|
2015-04-22 02:23:29 +00:00
|
|
|
& Ssh.keyImported SshRsa "root" (Context "IA.bak.users.git")
|
2015-04-22 02:39:35 +00:00
|
|
|
& Ssh.knownHost knownhosts "gitlab.com" "root"
|
2015-04-22 02:43:31 +00:00
|
|
|
& Git.cloned "root" userrepo "/usr/local/IA.BAK/pubkeys" (Just "master")
|
2015-04-07 16:34:02 +00:00
|
|
|
& Apt.serviceInstalledRunning "apache2"
|
|
|
|
|
& cmdProperty "ln" ["-sf", "/usr/local/IA.BAK/pushme.cgi", "/usr/lib/cgi-bin/pushme.cgi"]
|
|
|
|
|
& File.containsLine "/etc/sudoers" "www-data ALL=NOPASSWD:/usr/local/IA.BAK/pushed.sh"
|
|
|
|
|
& Cron.niceJob "shardstats" (Cron.Times "*/30 * * * *") "root" "/"
|
|
|
|
|
"/usr/local/IA.BAK/shardstats-all"
|
2015-04-12 19:10:03 +00:00
|
|
|
& Cron.niceJob "shardmaint" Cron.Daily "root" "/"
|
|
|
|
|
"/usr/local/IA.BAK/shardmaint"
|
2015-04-22 02:23:29 +00:00
|
|
|
|
2015-04-22 02:39:35 +00:00
|
|
|
registrationServer :: [Host] -> Property HasInfo
|
|
|
|
|
registrationServer knownhosts = propertyList "iabak registration server" $ props
|
2015-04-22 02:23:29 +00:00
|
|
|
& User.accountFor "registrar"
|
|
|
|
|
& Ssh.keyImported SshRsa "registrar" (Context "IA.bak.users.git")
|
2015-04-22 02:39:35 +00:00
|
|
|
& Ssh.knownHost knownhosts "gitlab.com" "registrar"
|
2015-04-22 02:23:29 +00:00
|
|
|
& Git.cloned "registrar" repo "/home/registrar/IA.BAK" (Just "server")
|
|
|
|
|
& Git.cloned "registrar" userrepo "/home/registrar/users" (Just "master")
|
|
|
|
|
& Apt.serviceInstalledRunning "apache2"
|
|
|
|
|
& Apt.installed ["perl", "perl-modules"]
|
|
|
|
|
& cmdProperty "ln" ["-sf", "/home/registrar/IA.BAK/registrar/register.cgi", "/usr/lib/cgi-bin/register.cgi"]
|
|
|
|
|
& File.containsLine "/etc/sudoers" "www-data ALL=registrar:/home/registrar/IA.BAK/registrar/register.pl"
|
2015-04-07 16:34:02 +00:00
|
|
|
|
|
|
|
|
graphiteServer :: Property HasInfo
|
|
|
|
|
graphiteServer = propertyList "iabak graphite server" $ props
|
|
|
|
|
& Apt.serviceInstalledRunning "apache2"
|
|
|
|
|
& Apt.installed ["libapache2-mod-wsgi", "graphite-carbon", "graphite-web"]
|
|
|
|
|
& File.hasContent "/etc/carbon/storage-schemas.conf"
|
|
|
|
|
[ "[carbon]"
|
|
|
|
|
, "pattern = ^carbon\\."
|
|
|
|
|
, "retentions = 60:90d"
|
|
|
|
|
, "[iabak]"
|
|
|
|
|
, "pattern = ^iabak\\."
|
|
|
|
|
, "retentions = 10m:30d,1h:1y,3h,10y"
|
|
|
|
|
, "[default_1min_for_1day]"
|
|
|
|
|
, "pattern = .*"
|
|
|
|
|
, "retentions = 60s:1d"
|
|
|
|
|
]
|
|
|
|
|
& graphiteCSRF
|
|
|
|
|
& cmdProperty "graphite-manage" ["syncdb", "--noinput"] `flagFile` "/etc/flagFiles/graphite-syncdb"
|
2015-04-07 16:36:52 +00:00
|
|
|
& cmdProperty "graphite-manage" ["createsuperuser", "--noinput", "--username=joey", "--email=joey@localhost"] `flagFile` "/etc/flagFiles/graphite-user-joey"
|
2015-04-07 16:42:54 +00:00
|
|
|
`flagFile` "/etc/graphite-superuser-joey"
|
2015-04-07 16:36:52 +00:00
|
|
|
& cmdProperty "graphite-manage" ["createsuperuser", "--noinput", "--username=db48x", "--email=db48x@localhost"] `flagFile` "/etc/flagFiles/graphite-user-db48x"
|
2015-04-07 16:42:54 +00:00
|
|
|
`flagFile` "/etc/graphite-superuser-db48x"
|
2015-04-07 16:34:02 +00:00
|
|
|
-- TODO: deal with passwords somehow
|
|
|
|
|
& File.ownerGroup "/var/lib/graphite/graphite.db" "_graphite" "_graphite"
|
2015-04-07 16:51:40 +00:00
|
|
|
& "/etc/apache2/ports.conf" `File.containsLine` "Listen 8080"
|
|
|
|
|
`onChange` Apache.restarted
|
2015-04-07 16:46:26 +00:00
|
|
|
& Apache.siteEnabled "iabak-graphite-web"
|
2015-04-07 16:34:02 +00:00
|
|
|
[ "<VirtualHost *:8080>"
|
|
|
|
|
, " WSGIDaemonProcess _graphite processes=5 threads=5 display-name='%{GROUP}' inactivity-timeout=120 user=_graphite group=_graphite"
|
|
|
|
|
, " WSGIProcessGroup _graphite"
|
|
|
|
|
, " WSGIImportScript /usr/share/graphite-web/graphite.wsgi process-group=_graphite application-group=%{GLOBAL}"
|
|
|
|
|
, " WSGIScriptAlias / /usr/share/graphite-web/graphite.wsgi"
|
|
|
|
|
, " Alias /content/ /usr/share/graphite-web/static/"
|
|
|
|
|
, " <Location \"/content/\">"
|
|
|
|
|
, " SetHandler None"
|
|
|
|
|
, " </Location>"
|
|
|
|
|
, " ErrorLog ${APACHE_LOG_DIR}/graphite-web_error.log"
|
|
|
|
|
, " LogLevel warn"
|
|
|
|
|
, " CustomLog ${APACHE_LOG_DIR}/graphite-web_access.log combined"
|
|
|
|
|
, "</VirtualHost>"
|
|
|
|
|
]
|
|
|
|
|
where
|
|
|
|
|
graphiteCSRF = withPrivData (Password "csrf-token") (Context "iabak.archiveteam.org") $
|
|
|
|
|
\gettoken -> property "graphite-web CSRF token" $
|
|
|
|
|
gettoken $ \token -> ensureProperty $ File.containsLine
|
|
|
|
|
"/etc/graphite/local_settings.py" ("SECRET_KEY = '"++ token ++"'")
|
