---
# Configuration for the tahrir webapp

- name: install needed packages
  yum: pkg={{ item }} state=present
  with_items:
  - python-tahrir
  - python-psycopg2
  - python-memcached
  - python-rdflib
  - libsemanage-python
  tags:
  - packages
  - badges
  - badges/frontend

- name: copy tahrir app configuration
  template: >
    src={{ item }} dest="/etc/tahrir/{{ item }}"
    owner=tahrir group=tahrir mode=0600
  with_items:
  - tahrir.ini
  tags:
  - config
  - badges
  - badges/frontend
  notify:
  - restart apache

- name: copy tahrir wsgi script
  copy: >
    src={{ item }} dest="/usr/share/tahrir/{{ item }}"
    owner=apache group=apache mode=0644
  with_items:
  - tahrir.wsgi
  tags:
  - config
  - badges
  - badges/frontend
  notify:
  - restart apache

- name: copy tahrir httpd config
  copy: >
    src={{ item }} dest="/etc/httpd/conf.d/{{ item }}"
    owner=apache group=apache mode=0644
  with_items:
  - tahrir.conf
  tags:
  - config
  - badges
  - badges/frontend
  notify:
  - restart apache

- name: hotfix - allow velruse to do stateless openid
  copy: >
    src=openid.py
    dest=/usr/lib/python2.7/site-packages/velruse/providers/openid.py
    owner=root group=root mode=0644
  tags:
  - hotfix
  - badges
  - badges/frontend
  notify:
  - restart apache

- name: make badge rst directory
  file: >
    path=/usr/share/badges/sitedocs
    state=directory
    owner=root group=root mode=0755
  tags:
  - config
  - assets
  - badges
  - badges/frontend

- name: copy over all our .rst site docs
  copy: >
    src={{ item }}
    dest=/usr/share/badges/sitedocs
    owner=root group=root mode=0644
  with_fileglob:
  - fedora-sitedocs/*.rst
  tags:
  - config
  - assets
  - badges
  - badges/frontend

- name: make badge png directory
  file: >
    path=/usr/share/badges/pngs
    state=directory
    owner=root group=root mode=0755
  tags:
  - assets

- name: copy over all our badge images
  copy: >
    src={{ item }}
    dest=/usr/share/badges/pngs/
    owner=root group=root mode=0644
  with_fileglob:
  - /srv/web/infra/badges/pngs/*.png
  tags:
  - assets

- name: make badge stl directory
  file: >
    path=/usr/share/badges/stls
    state=directory
    owner=root group=root mode=0755
  tags:
  - assets

- name: copy over all our badge images
  copy: >
    src={{ item }}
    dest=/usr/share/badges/stls/
    owner=root group=root mode=0644
  with_fileglob:
  - /srv/web/infra/badges/stls/*.stl
  tags:
  - assets

- name: ensure selinux lets httpd talk to postgres, memcached, and fedmsg
  seboolean: name={{item}} persistent=yes state=yes
  with_items:
  - httpd_can_network_connect_db
  - httpd_can_network_memcache
  - httpd_can_network_connect
  tags:
  - selinux
  - badges
  - badges/frontend
