8 files changed, 197 insertions, 10 deletions

diff --git a/modules/archive b/modules/archive
new file mode 160000
+Subproject 9af5cad2bbaafe0498032c38a37835e4ccba7d2
diff --git a/modules/aur/manifests/aura.pp b/modules/aur/manifests/aura.pp
index 1683cf8..3e06f0a 100644
--- a/modules/aur/manifests/aura.pp
+++ b/modules/aur/manifests/aura.pp
@@ -6,6 +6,10 @@ class aur::aura(
     ensure => "present"
   }
 
+  sudo::conf { 'aur-builder':
+    content => "aur-builder ALL=(root) NOPASSWD: /usr/bin/aura *"
+  }
+
   ensure_packages(['base-devel'], { 'install_options'  => '--needed' })
   ensure_packages(['gmp', 'pcre'], { 'install_options' => '--asdeps' })
 
diff --git a/modules/aur/manifests/package.pp b/modules/aur/manifests/package.pp
index 2fd346e..5b55f24 100644
--- a/modules/aur/manifests/package.pp
+++ b/modules/aur/manifests/package.pp
@@ -7,7 +7,7 @@ define aur::package (
       exec { "pacman::aur::install::${name}":
         cwd       => "/tmp",
         require   => Class[aur::aura],
-        command   => "/usr/bin/aura -A ${name}",
+        command   => "/usr/bin/sudo /usr/bin/aura --noconfirm -A ${name}",
         user      => "aur-builder",
         unless    => "/usr/bin/aura -Qk ${name}",
         logoutput => 'on_failure',
@@ -18,7 +18,7 @@ define aur::package (
       exec { "pacman::aur::remove::${name}":
         cwd       => "/tmp",
         require   => Class[aur::aura],
-        command   => "/usr/bin/aura -Rs ${name}",
+        command   => "/usr/bin/sudo /usr/bin/aura --noconfirm -Rs ${name}",
         user      => "aur-builder",
         onlyif    => "/usr/bin/aura -Qi ${name}",
         logoutput => 'on_failure',
diff --git a/modules/nginx b/modules/nginx
new file mode 160000
+Subproject a7f40a8893e394cc57695ff81ea53254bcf1ff3
diff --git a/modules/role/manifests/cryptoportfolio.pp b/modules/role/manifests/cryptoportfolio.pp
index 4b03e16..0f26527 100644
--- a/modules/role/manifests/cryptoportfolio.pp
+++ b/modules/role/manifests/cryptoportfolio.pp
@@ -5,26 +5,175 @@ class role::cryptoportfolio {
 
   $password_seed = lookup("base_installation::puppet_pass_seed") |$key| { {} }
 
-  postgresql::server::db { 'cryptoportfolio':
-    user =>  'cryptoportfolio',
-    password =>  postgresql_password('cryptoportfolio', generate_password(24, $password_seed, "postgres_cryptoportfolio")),
+  $cf_pg_user = "cryptoportfolio"
+  $cf_pg_db = "cryptoportfolio"
+  $cf_pg_password = generate_password(24, $password_seed, "postgres_cryptoportfolio")
+  $cf_pg_host = "localhost:5432"
+
+  $cf_user = "cryptoportfolio"
+  $cf_group = "cryptoportfolio"
+  $cf_home = "/opt/cryptoportfolio"
+  $cf_env = "prod"
+  $cf_front_app_host = "cryptoportfolio.immae.eu"
+  $cf_front_app_port = ""
+  $cf_front_app_ssl = "false"
+  $cf_front_app = "${cf_home}/go/src/immae.eu/Immae/Projets/Cryptomonnaies/Cryptoportfolio/Front"
+  $cf_front_app_api_workdir = "${cf_front_app}/cmd/app"
+  $cf_front_app_api_bin = "${cf_front_app_api_workdir}/cryptoportfolio-app"
+  $cf_front_app_api_conf = "${cf_home}/conf.toml"
+  $cf_front_app_api_secret = generate_password(24, $password_seed, "cryptoportfolio_api_secret")
+
+  $cf_front_app_static_conf = "${cf_front_app}/cmd/web/env/prod.env"
+
+  postgresql::server::db { $cf_pg_db:
+    user     =>  $cf_pg_user,
+    password =>  postgresql_password($cf_pg_user, $cf_pg_password)
   }
 
   postgresql::server::pg_hba_rule { 'allow localhost TCP access to cryptoportfolio user':
     type        => 'host',
-    database    => 'cryptoportfolio',
-    user        => 'cryptoportfolio',
+    database    => $cf_pg_db,
+    user        => $cf_pg_user,
     address     => '127.0.0.1/32',
     auth_method => 'md5',
     order       => "b0",
   }
   postgresql::server::pg_hba_rule { 'allow localhost ip6 TCP access to cryptoportfolio user':
     type        => 'host',
-    database    => 'cryptoportfolio',
-    user        => 'cryptoportfolio',
+    database    => $cf_pg_db,
+    user        => $cf_pg_user,
     address     => '::1/128',
     auth_method => 'md5',
     order       => "b0",
   }
-  ensure_packages("go")
+
+  class { 'nginx': }
+
+  nginx::resource::server { $cf_front_app_host:
+    listen_port => 80,
+    proxy       => 'http://localhost:8000',
+  }
+
+  user { $cf_user:
+    name       => $cf_user,
+    ensure     => "present",
+    managehome => true,
+    home       => $cf_home,
+    system     => true,
+    password   => '!!',
+  }
+
+  $front_version = lookup("cryptoportfolio::front_version") |$key| { {} }
+  $front_sha256 = lookup("cryptoportfolio::front_sha256") |$key| { {} }
+
+  unless empty($front_version) {
+    ensure_packages(["go", "npm", "nodejs", "yarn"])
+
+    file { [
+        "${cf_home}/go/",
+        "${cf_home}/go/src",
+        "${cf_home}/go/src/immae.eu",
+        "${cf_home}/go/src/immae.eu/Immae",
+        "${cf_home}/go/src/immae.eu/Immae/Projets",
+        "${cf_home}/go/src/immae.eu/Immae/Projets/Cryptomonnaies",
+        "${cf_home}/go/src/immae.eu/Immae/Projets/Cryptomonnaies/Cryptoportfolio",
+        $cf_front_app]:
+      ensure  => "directory",
+      mode    => "0700",
+      owner   => $cf_user,
+      group   => $cf_group,
+      require => User[$cf_user],
+    }
+
+    archive { "${cf_home}/${front_version}.tar.gz":
+      path          => "${cf_home}/${front_version}.tar.gz",
+      source        => "https://git.immae.eu/releases/cryptoportfolio/front/front_${front_version}.tar.gz",
+      checksum_type => "sha256",
+      checksum      => $front_sha256,
+      cleanup       => false,
+      extract       => true,
+      user          => "cryptoportfolio",
+      extract_path  => $cf_front_app,
+      require       => [User[$cf_user], File[$cf_front_app]],
+    }
+
+    file { "${cf_home}/front":
+      ensure  => "link",
+      target  => $cf_front_app,
+      require => Archive["/opt/cryptoportfolio/${front_version}.tar.gz"]
+    }
+
+    exec { "go-get-dep":
+      user        => $cf_user,
+      environment => ["HOME=${cf_home}"],
+      creates     => "${cf_home}/go/bin/dep",
+      command     => "/usr/bin/go get -u github.com/golang/dep/cmd/dep",
+      require     => User[$cf_user],
+    }
+
+    exec { "go-cryptoportfolio-dependencies":
+      cwd         => $cf_front_app,
+      user        => $cf_user,
+      environment => ["HOME=${cf_home}"],
+      creates     => "${cf_front_app}/vendor",
+      command     => "${cf_home}/go/bin/dep ensure",
+      require     => [Exec["go-get-dep"], Archive["${cf_home}/${front_version}.tar.gz"]],
+    }
+
+    exec { "go-cryptoportfolio-app":
+      cwd         => $cf_front_app_api_workdir,
+      user        => $cf_user,
+      environment => ["HOME=${cf_home}"],
+      creates     => $cf_front_app_api_bin,
+      command     => "/usr/bin/make build",
+      require     => Exec["go-cryptoportfolio-dependencies"],
+    }
+
+    file { "/etc/systemd/system/cryptoportfolio-app.service":
+      mode    => "0644",
+      owner   => "root",
+      group   => "root",
+      content => template("role/cryptoportfolio/cryptoportfolio-app.service.erb"),
+    } ~> exec { 'systemctl deamon-reload':
+      command     => '/usr/bin/systemctl daemon-reload',
+      refreshonly => true
+    }
+
+    service { 'cryptoportfolio-app':
+      enable  => true,
+      ensure  => "running",
+      require => [File["/etc/systemd/system/cryptoportfolio-app.service"]],
+    }
+
+    file { $cf_front_app_api_conf:
+      owner   => $cf_user,
+      group   => $cf_group,
+      mode    => "0600",
+      content => template("role/cryptoportfolio/api_conf.toml.erb"),
+    }
+
+    file { $cf_front_app_static_conf:
+      owner   => $cf_user,
+      group   => $cf_group,
+      mode    => "0600",
+      content => template("role/cryptoportfolio/static_conf.env.erb"),
+    }
+
+    exec { "web-cryptoportfolio-dependencies":
+      cwd         => "${cf_front_app}/cmd/web",
+      environment => ["HOME=${cf_home}"],
+      command     => "/usr/bin/make install",
+      creates     => "${cf_front_app}/cmd/web/node_modules",
+      require     => [Package["npm"], Package["nodejs"], Package["yarn"]]
+    }
+
+    exec { "web-cryptoportfolio-build":
+      cwd         => "${cf_front_app}/cmd/web",
+      environment => ["HOME=${cf_home}"],
+      command     => "/usr/bin/make static ENV=${cf_env}",
+      creates     => "${cf_front_app}/cmd/web/build/static",
+      require     => [File[$cf_front_app_static_conf], Exec["web-cryptoportfolio-dependencies"]]
+    }
+  }
+
 }
diff --git a/modules/role/templates/cryptoportfolio/api_conf.toml.erb b/modules/role/templates/cryptoportfolio/api_conf.toml.erb
new file mode 100644
index 0000000..13550c9
--- /dev/null
+++ b/modules/role/templates/cryptoportfolio/api_conf.toml.erb
@@ -0,0 +1,16 @@
+log_level="info"
+mode="<%= @cf_env %>"
+log_out="stdout"
+
+[db]
+user="<%= @cf_pg_user %>"
+password="<%= @cf_pg_password %>"
+database="<%= @cf_pg_db %>"
+address="<%= @cf_pg_host %>"
+
+[api]
+domain="<%= @cf_front_app_host %>"
+jwt_secret="<%= @cf_front_app_api_secret %>"
+
+[app]
+public_dir="../web/build/static"
diff --git a/modules/role/templates/cryptoportfolio/cryptoportfolio-app.service.erb b/modules/role/templates/cryptoportfolio/cryptoportfolio-app.service.erb
new file mode 100644
index 0000000..a521c0e
--- /dev/null
+++ b/modules/role/templates/cryptoportfolio/cryptoportfolio-app.service.erb
@@ -0,0 +1,14 @@
+[Unit]
+Description=Cryptoportfolio app
+ 
+[Service]
+Type=simple
+  
+WorkingDirectory=<%= @cf_front_app_api_workdir %>
+User=<%= @cf_user %>
+Group=<%= @cf_group %>
+UMask=007
+  
+ExecStart=<%= @cf_front_app_api_bin %> -conf <%= @cf_front_app_api_conf %>
+ 
+Restart=on-failure
diff --git a/modules/role/templates/cryptoportfolio/static_conf.env.erb b/modules/role/templates/cryptoportfolio/static_conf.env.erb
new file mode 100644
index 0000000..db9759d
--- /dev/null
+++ b/modules/role/templates/cryptoportfolio/static_conf.env.erb
@@ -0,0 +1,4 @@
+API_HOST="<%= @cf_front_app_host %>"
+API_PORT="<%= @cf_front_app_port %>"
+API_HTTPS="<%= @cf_front_app_ssl %>"
+