1
current_dir = File.dirname(__FILE__)
2
log_level                :info
3
log_location             STDOUT
4
node_name                'dev_user'
5
client_key               "#{current_dir}/dev_user.pem"
6
validation_client_name   'chef-validator'
7
validation_key           "#{current_dir}/chef-validator.pem"
8
chef_server_url          'https://chef.example.com/organizations/myorg'
9
cookbook_path            ["#{current_dir}/../cookbooks"]

1
log_level :info
2
log_location "/var/log/chef-client.log"
3
chef_server_url "https://chef.example.com/organizations/myorg"
4
validation_client_name "chef-validator"
5
node_name Socket.gethostname

1
file '/etc/app/config.txt' do
2
  content 'application configuration'
3
  owner 'root'
4
  group 'root'
5
  mode '0644'
6
  action :create
7
end

1
file '/var/log/app.log' do
2
  content "#{Time.now} - Application Started\n"
3
  owner 'app_user'
4
  group 'app_group'
5
  mode '0666'
6
end

1
file '/etc/old-config.conf' do
2
  action :delete
3
end

1
package 'nginx' do
2
  action :install
3
end

1
package ['curl', 'wget', 'git', 'htop'] do
2
  action :install
3
end

1
package 'nginx' do
2
  version '1.18.0-0ubuntu1'
3
  action :install
4
end

1
service 'nginx' do
2
  supports status: true, restart: true, reload: true
3
  action [:enable, :start]
4
end

1
file '/etc/nginx/nginx.conf' do
2
  content node['nginx']['config']
3
  notifies :restart, 'service[nginx]', :immediately
4
end
5

6
service 'nginx' do
7
  supports status: true, restart: true
8
  action :nothing
9
end

1
service 'old-service' do
2
  action [:stop, :disable]
3
end

1
package 'mysql-server' do
2
  action :install
3
  only_if { node['install_database'] == true }
4
end
5

6
execute 'initialize-db' do
7
  command 'mysql_install_db'
8
  not_if 'test -d /var/lib/mysql/mysql'
9
end

1
name 'apache2'
2
maintainer 'Chef Community'
3
maintainer_email 'cookbooks@example.com'
4
description 'Installs and configures Apache web server'
5
version '14.0.0'
6
license 'Apache-2.0'
7
chef_version '>= 16.0'
8

9
depends 'openssl'
10
depends 'httpd'
11

12
supports 'ubuntu', '>= 18.04'
13
supports 'centos', '>= 7.0'

1
remote_file '/opt/app/binary' do
2
  source 'https://downloads.example.com/app-1.0.tar.gz'
3
  checksum 'abcd1234ef567890'
4
  mode '0755'
5
  action :create_if_missing
6
end

1
package node['packages']['webserver']
2

3
service node['services']['webserver'] do
4
  action [:enable, :start]
5
end
6

7
node.override['app']['installed'] = true

1
template '/etc/app/config.conf' do
2
  source 'config.conf.erb'
3
  owner 'app'
4
  group 'app'
5
  mode '0644'
6
  variables(
7
    app_name: 'MyApp',
8
    port: 8080,
9
    environment: node.chef_environment
10
  )
11
  notifies :restart, 'service[app]'
12
end

1
# Configuration for <%= @app_name %>
2
server {
3
  listen <%= @port %>;
4
  server_name _;
5

6
  # Environment: <%= @environment %>
7
  <% if @environment == 'production' %>
8
    access_log /var/log/nginx/access.log combined;
9
  <% else %>
10
    access_log /var/log/nginx/dev-access.log;
11
  <% end %>
12
}

1
template '/etc/mysql/my.cnf' do
2
  source 'my.cnf.erb'
3
  variables lazy {
4
    {
5
      max_connections: node['mysql']['max_connections'],
6
      port: node['mysql']['port']
7
    }
8
  }
9
  action :create
10
end

1
execute 'bash /usr/local/bin/install-app.sh' do
2
  not_if 'test -d /opt/app'
3
end

1
execute 'initialize-database' do
2
  command '/usr/bin/mysql_install_db'
3
  user 'mysql'
4
  group 'mysql'
5
  only_if { !::File.exist?('/var/lib/mysql/mysql') }
6
end

1
execute 'build-application' do
2
  command 'make build && make test'
3
  cwd '/opt/src'
4
  timeout 600
5
  user 'ubuntu'
6
end

1
ruby_block 'create_application_user' do
2
  block do
3
    shell_out!('useradd -m -s /bin/bash appuser')
4
  end
5
  not_if { ::File.exist?('/home/appuser') }
6
end

1
ruby_block 'generate-api-key' do
2
  block do
3
    key = SecureRandom.hex(32)
4
    node.override['app']['api_key'] = key
5
    Chef::Log.info("Generated API key: #{key}")
6
  end
7
  action :run
8
end

1
package 'apache2'
2

3
template '/etc/apache2/apache2.conf' do
4
  variables(
5
    port: node['apache2']['port'],
6
    workers: node['apache2']['workers'],
7
    modules: node['apache2']['modules']
8
  )
9
end

1
{
2
  "id": "db_user",
3
  "username": "appdb",
4
  "password": "encrypted_password",
5
  "host": "database.example.com"
6
}

1
db_config = data_bag_item('database', 'db_user')
2

3
template '/etc/app/database.yml' do
4
  variables(
5
    host: db_config['host'],
6
    username: db_config['username'],
7
    password: db_config['password']
8
  )
9
end

1
name 'production'
2
description 'Production environment'
3

4
cookbook_versions(
5
  'apache2' => '= 14.0.0',
6
  'mysql' => '= 8.4.0'
7
)
8

9
override_attributes(
10
  apache2: { port: 80 },
11
  mysql: { max_connections: 1000 }
12
)

1
if node.chef_environment == 'production'
2
  Chef::Log.warn("Running in PRODUCTION")
3
  node.override['app']['debug'] = false
4
else
5
  node.override['app']['debug'] = true
6
end

1
name 'web_server'
2
description 'Web server role for application'
3

4
run_list(
5
  'recipe[apache2]',
6
  'recipe[php]',
7
  'recipe[ssl]'
8
)
9

10
override_attributes(
11
  apache2: {
12
    port: 80,
13
    max_clients: 256
14
  }
15
)

1
name 'database_server'
2
description 'Primary database server'
3

4
run_list(
5
  'recipe[mysql::server]',
6
  'recipe[mysql::replication]'
7
)
8

9
override_attributes(
10
  mysql: {
11
    server_id: 1,
12
    max_connections: 500
13
  }
14
)

1
require 'spec_helper'
2

3
describe 'apache2::default' do
4
  let(:chef_run) do
5
    ChefSpec::SoloRunner.new(platform: 'ubuntu', version: '22.04').converge(described_recipe)
6
  end
7

8
  it 'converges successfully' do
9
    expect { chef_run }.not_to raise_error
10
  end
11

12
  it 'installs apache2 package' do
13
    expect(chef_run).to install_package('apache2')
14
  end
15

16
  it 'enables and starts service' do
17
    expect(chef_run).to enable_service('apache2')
18
    expect(chef_run).to start_service('apache2')
19
  end
20
end

1
control 'apache-package-1' do
2
  title 'Apache2 package is installed'
3
  desc 'Verify Apache web server package is installed'
4
  impact 1.0
5
  describe package('apache2') do
6
    it { should be_installed }
7
  end
8
end
9

10
control 'apache-service-1' do
11
  title 'Apache2 service is enabled'
12
  desc 'Verify Apache web server is enabled and active'
13
  impact 1.0
14
  describe service('apache2') do
15
    it { should be_installed }
16
    it { should be_enabled }
17
    it { should be_running }
18
  end
19
end

1
# recipe using helper
2
file '/etc/apache2/config' do
3
  owner Apache2Helper.apache_user
4
  group Apache2Helper.apache_group
5
end