Snu Nginx FIPS Cookbook README

A cookbook to manage installation and configuration of the Socrata-managed set
of Omnibus packages of Nginx with OpenSSL built and running in FIPS mode.

WARNING: This cookbook currently manages the package and service. Ownership
of Nginx's config files should be coming in a future version. In the meantime,
separate template/cookbook_file/etc. resources are needed.

Requirements

This cookbook requires at least Chef 12. It is tested against the two most
recent major Chef versions (currently 13.x and 12.x) and the two most recent
Ubuntu LTSes (currently 16.04 and 14.04).

Usage

Add one or more of the included recipes to your run list and/or declare
instances of the included resources in your own recipes.

Recipes

default

Uses the included custom resources to install and enable Nginx in an
attribute-driven manner.

Attributes

default

A version attribute can be overridden to install a specific version of the
custom Nginx package instead of the latest.

default['snu_nginx_fips']['version'] = '1.2.3-4'

A custom path to the main nginx.conf can be set.

default['snu_nginx_fips']['config_file'] = '/path/to/nginx.conf'

A custom file descriptor limit can be set.

default['snu_nginx_fips']['file_limit'] = 100_000

Resources

snu_nginx_fips_app

A custom resource for managing the custom Nginx repository and package.

Syntax:

snu_nginx_fips_app 'default' do
  version '1.2.3-4'
  action :install
end

Actions:

Properties:

snu_nginx_fips_service

A custom resource for managing Nginx's init config and service.

Syntax:

snu_nginx_fips_service 'default' do
  config_file '/etc/nginx/nginx.conf'
  file_limit 12_345
  action %i[create enable start]
end

Actions:

Properties:

Maintainers

• Jonathan Hartman jonathan.hartman@socrata.com