# cookbooks/haproxy/default.rb

ha = node['haproxy']

package 'haproxy' do
  action :install
end

directory '/etc/haproxy' do
  owner 'root'
  group 'root'
  mode '0755'
end

directory '/var/lib/haproxy' do
  owner 'haproxy'
  group 'haproxy'
  mode '0750'
end

directory '/var/log/haproxy' do
  owner 'haproxy'
  group 'haproxy'
  mode '0750'
end

# Kernel tuning for high connection counts
execute 'sysctl-haproxy-somaxconn' do
  command 'sysctl -w net.core.somaxconn=4096'
  not_if 'sysctl net.core.somaxconn | grep -q 4096'
end

file '/etc/sysctl.d/99-haproxy.conf' do
  content "net.core.somaxconn = #{ha['max_connections']}\nnet.ipv4.ip_nonlocal_bind = 1\n"
  owner 'root'
  group 'root'
  mode '0644'
end

template '/etc/haproxy/haproxy.cfg' do
  source 'templates/haproxy.cfg.erb'
  owner 'root'
  group 'root'
  mode '0644'
  variables(
    stats_port: ha['stats_port'],
    stats_user: ha['stats_user'],
    stats_password: ha['stats_password'],
    frontend_port: ha['frontend_port'],
    frontend_http_port: ha['frontend_http_port'],
    ssl_cert_path: ha['ssl_cert_path'],
    backend_port: ha['backend_port'],
    backend_servers: ha['backend_servers'],
    health_check_path: ha['health_check_path'],
    health_check_interval: ha['health_check_interval'],
    max_connections: ha['max_connections'],
    timeout_connect: ha['timeout_connect'],
    timeout_client: ha['timeout_client'],
    timeout_server: ha['timeout_server']
  )
  notifies :reload, 'service[haproxy]'
end

# Validate config before restart
execute 'haproxy-check-config' do
  command 'haproxy -c -f /etc/haproxy/haproxy.cfg'
  only_if 'test -f /etc/haproxy/haproxy.cfg'
end

service 'haproxy' do
  action [:enable, :start]
end