#
# Author:: Earth U (<sysadmin@chromedia.com>)
# Cookbook Name:: cfe-nginx-php-fpm
# Attribute:: default
#
# Copyright 2016, Chromedia Far East, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

# The socket used PHP-FPM. If false, fastcgi is not used.
# Examples:
#   '127.0.0.1:9000'
#   '/var/run/php-fpm.sock'
#   false
default['cfe-nginx-php-fpm']['php_fastcgi_socket'] = '127.0.0.1:9000'

# Setting 'update_cacert' to true will get the latest cacert from
# http://curl.haxx.se/ca/cacert.pem and use that as CAFile for postfix.
default['cfe-nginx-php-fpm']['postfix']['update_cacert'] = true
default['cfe-nginx-php-fpm']['postfix']['email_domain']  = 'example.com'

# If your php-fpm pool is not named 'www', then delete
# the default one ('www'), which is automatically installed by php-fpm
default['cfe-nginx-php-fpm']['php-fpm']['delete_pool_www'] = true

# Uncomment to set custom locations
#default['cfe-nginx-php-fpm']['nginx']['inc_dir'] =
#  "#{node['nginx']['dir']}/sites-available/include"
#default['cfe-nginx-php-fpm']['nginx']['priv_dir'] =
#  "#{node['nginx']['dir']}/private"

default['cfe-nginx-php-fpm']['nginx']['restriction_file']['log_robots']   = false
default['cfe-nginx-php-fpm']['nginx']['restriction_file']['log_hidden']   = true
default['cfe-nginx-php-fpm']['nginx']['restriction_file']['log_static']   = false
default['cfe-nginx-php-fpm']['nginx']['restriction_file']['static_types'] = %w{
  js css ogg ogv svg svgz eot otf woff mp4 ttf rss atom
  jpg jpeg gif png ico zip tgz gz rar bz2
  doc xls exe ppt tar mid midi wav bmp rtf
}

default['cfe-nginx-php-fpm']['nginx']['sites'] = [
  {
    :server_name => 'example.com',
    :aliases => ['www.example.com'],
    :doc_root => '/var/www/example.com',
    :index => 'index.php',

    # Access log options as one long string. Default: false
    #:access_log_options => '<some options>'

    # Whether to include a default virtual server named '_' or not.
    # If there is more than one server given in this 'sites' array,
    # 'catch_all' value will always be overriden to 'false'.
    # Default: true
    #:catch_all => true

    # Necessary values for SSL/TLS setup. Default: :ssl => false
    #:ssl => {
    #  :cert => '[contents of chain cert here]',
    #  :key => '[contents of cert private key here]',
    #  :dh_modulus => 2048,
    #  :self_signed => false,
    #  :hsts_max_age => '15758000',
    #  :hsts_include_subdomains => true
    #}

    # Necessary values for Basic Auth setup. Default: :auth => false
    #:auth => {
    #  :msg => 'Restricted Area. Please authenticate.',
    #  :users => {
    #    'example_user' => 'secretpassword123'
    #  }
    #}

    # An array of strings that will be included as statements in the main
    # nginx config file for this server. Default: []
    #:custom_statements => []

    # Enumerates the different site types this server supports.
    # Possible elements of :types are (only :type is mandatory):
    #   {
    #     :type => 'basic',
    #     :subpath => ''
    #   }
    #   {
    #     :type => 'wordpress',
    #     :subpath => '',
    #     :fastcgi_intercept_errors => false,
    #     :loginpage_statements => [] # An array of strings to be 
    #                                 # written on the config for the
    #                                 # /wp-login.php and /wp-admin pages.
    #   }
    :types => [ { :type => 'basic' } ]
  }
]

#
# php-fpm cookbook
#
# PHP-FPM user should be the same as the Nginx user by default.
# To provide custom values, use override, instead of default.
#override['php-fpm']['user']  = node['nginx']['user']
#override['php-fpm']['group'] = node['nginx']['group']

default['php-fpm']['skip_repository_install'] = true
default['php-fpm']['pools'] = [
  # Most likely, just use one pool for all PHP needs.
  # (But there are exceptions, of course)
  {
    :name   => 'example_pool',
    :enable => true,

    # Default value is: node['cfe-nginx-php-fpm']['php_fastcgi_socket']
    #:listen => node['cfe-nginx-php-fpm']['php_fastcgi_socket'],

    # Default is same as Nginx user and group
    #:user   => node['nginx']['user'],
    #:group  => node['nginx']['group'],

    :max_requests => 500,
    :max_children => 50,

    :access_log           => false,
    :catch_workers_output => 'no',

    :process_manager => value_for_platform(
      'ubuntu' => {
        '10.04' => 'dynamic'
      },
      'default' => 'ondemand'
    ),

    # Only used if process_manager is 'dynamic':
    :start_servers     => 5,
    :min_spare_servers => 5,
    :max_spare_servers => 35,

    :php_options => {
      'php_admin_value[cgi.fix_pathinfo]' => '0',
      'php_admin_value[expose_php]'       => 'Off',
      'php_value[upload_max_filesize]'    => '5M',
      'php_value[post_max_size]'          => '10M'
    }
  }
]

#
# mariadb cookbook
#
default['mariadb']['install']['type']    = 'package'
default['mariadb']['install']['version'] = '5.5'

#
# postfix cookbook
#
default['postfix']['main']['myorigin'] = '$mydomain'
default['postfix']['main']['mydestination'] =
  ['localhost.localdomain', 'localhost']
# Defaults for both myhostname and mydomain is:
#   node['cfe-nginx-php-fpm']['postfix']['email_domain']
# To provide custom values, use override, instead of default.
#override['postfix']['main']['myhostname'] =
#  node['cfe-nginx-php-fpm']['postfix']['email_domain']
#override['postfix']['main']['mydomain'] =
#  node['cfe-nginx-php-fpm']['postfix']['email_domain']

#
# nginx cookbook
#
default['nginx']['version']              = '1.9.14'
default['nginx']['install_method']       = 'package'
default['nginx']['package_name']         = 'nginx'
default['nginx']['repo_source']          = 'nginx'
default['nginx']['upstream_repository']  =
  'http://nginx.org/packages/mainline/ubuntu'
# Set pid file initially in accordance with Ubuntu 14.04 
# nginx package's pid file. Otherwise, it fails to restart.
default['nginx']['pid']                  = '/var/run/nginx.pid'
default['nginx']['default_site_enabled'] = false
default['nginx']['client_max_body_size'] = '10m'
default['nginx']['event']                = 'epoll'
default['nginx']['worker_processes']     = 'auto'
default['nginx']['worker_connections']   = 1_024
default['nginx']['keepalive_timeout']    = 15
default['nginx']['keepalive_requests']   = 200
default['nginx']['disable_access_log']   = false
default['nginx']['server_tokens']        = 'off'
default['nginx']['gzip_comp_level']      = '5'
default['nginx']['extra_configs']        = {
  'reset_timedout_connection' => 'on'
}
# Increase this to 128 if using super long server names
default['nginx']['server_names_hash_bucket_size'] = 64