76 lines
1.8 KiB
Ruby
76 lines
1.8 KiB
Ruby
# apt_repository 'open resty repo' do
|
|
# uri 'http://openresty.org/package/ubuntu'
|
|
# key 'https://openresty.org/package/pubkey.gpg'
|
|
# components ['main']
|
|
# end
|
|
|
|
apt_package 'software-properties-common'
|
|
|
|
execute 'add key' do
|
|
command 'wget -qO - https://openresty.org/package/pubkey.gpg | sudo apt-key add -'
|
|
end
|
|
|
|
execute 'add repo' do
|
|
command 'add-apt-repository -y "deb http://openresty.org/package/ubuntu $(lsb_release -sc) main"; apt update'
|
|
end
|
|
|
|
apt_package 'openresty'
|
|
|
|
if node['web']['do_ssl']
|
|
apt_package 'luarocks'
|
|
|
|
execute 'install lua-resty-auto-ssl' do
|
|
command 'luarocks install lua-resty-auto-ssl'
|
|
end
|
|
|
|
directory '/etc/ssl' do
|
|
mode '0755'
|
|
action :create
|
|
end
|
|
|
|
execute 'defualt ssl' do
|
|
command "openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 -subj '/CN=sni-support-required-for-valid-ssl' -keyout /etc/ssl/resty-auto-ssl-fallback.key -out /etc/ssl/resty-auto-ssl-fallback.crt"
|
|
end
|
|
|
|
execute 'defualt ssl' do
|
|
command "openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 -subj '/CN=sni-support-required-for-valid-ssl' -keyout /etc/ssl/resty-auto-ssl-fallback.key -out /etc/ssl/resty-auto-ssl-fallback.crt"
|
|
end
|
|
|
|
# execute 'dhparam.pem 4096' do
|
|
# command "openssl dhparam -out /etc/nginx/dhparam.pem 4096"
|
|
# end
|
|
|
|
|
|
template '/etc/openresty/autossl.conf' do
|
|
source 'openresty/autossl.conf.erb'
|
|
end
|
|
end
|
|
|
|
template '/etc/openresty/nginx.conf' do
|
|
source 'openresty/nginx.conf.erb'
|
|
end
|
|
|
|
directory '/etc/openresty/sites-enabled' do
|
|
mode '0755'
|
|
action :create
|
|
end
|
|
|
|
directory '/var/log/nginx/' do
|
|
mode '0775'
|
|
action :create
|
|
end
|
|
|
|
if node['web']['t42-proxy']
|
|
template '/etc/openresty/sites-enabled/proxy.conf' do
|
|
source 'openresty/010-proxy.conf.erb'
|
|
end
|
|
else
|
|
template '/etc/openresty/sites-enabled/host.conf' do
|
|
source 'openresty/simple-proxy.conf.erb'
|
|
end
|
|
end
|
|
|
|
systemd_unit 'openresty' do
|
|
action :reload
|
|
end
|