---
# Configuration for the Module Build Service (MBS) frontend webapp.

- name: disable the scheduler on the frontend
  copy: >
    src={{ item }} dest=/etc/fedmsg.d/{{ item }}
    owner=fedmsg group=fedmsg mode=0644
  with_items:
  - mbs-scheduler.py
  notify:
  - restart apache
  tags:
  - mbs
  - mbs/frontend

- name: Make sure fedmsg-hub isn't running on the frontend.
  service:
    name: fedmsg-hub
    state: stopped
    enabled: false
  tags:
  - mbs
  - mbs/frontend

- name: copy mbs httpd config
  template: >
    src=mbs.conf dest=/etc/httpd/conf.d/mbs.conf
    owner=apache group=apache mode=0644
  notify:
  - restart apache
  tags:
  - mbs
  - mbs/frontend

- file: path=/usr/share/mbs/ state=directory
  tags:
  - mbs
  - mbs/frontend

- name: copy custom wsgi file
  copy: src=mbs.wsgi dest=/usr/share/mbs/mbs.wsgi mode=0644
  notify:
  - restart apache
  tags:
  - mbs
  - mbs/frontend

- name: ensure selinux lets httpd talk to postgres, memcached, and mail
  seboolean: name={{item}} state=yes persistent=yes
  with_items:
  - httpd_can_network_connect_db
  - httpd_can_network_memcache
  - httpd_can_network_connect
  - httpd_can_sendmail
  tags:
  - mbs
  - mbs/frontend
  - selinux

- name: make httpd logs world readable
  file:
    name: /var/log/httpd
    state: directory
    mode: 0755
  tags:
  - mbs
  - mbs/frontend

