%global srcname indico-mpp
%global srcnamenu indico-mpp

Name:           indico-mpp
Version:        3.2
Release:        6%{?dist}
Summary:        MPP Indico configuration
License:        MIT
URL:            https://mpp.mpg.de
Source:         indico-mpp-3.2.tar.gz


BuildArch:      noarch
BuildRequires: npm
BuildRequires: redis
BuildRequires: firewalld
BuildRequires: python3-pip python3-wheel
BuildRequires: httpd
BuildRequires: openssl-devel openssl-libs openssl
BuildRequires: policycoreutils

Requires: openssl-devel openssl-libs openssl
Requires: httpd mod_proxy_uwsgi mod_ssl mod_xsendfile
Requires: policycoreutils
Requires: postgresql postgresql-server postgresql-contrib
Requires: redis firewalld
Requires: /usr/bin/xelatex
Requires: postfix
Requires: python-certbot-apache

 
Requires: python3-nbconvert 
Requires: python3-rpm-macros 
Requires: python-srpm-macros 
Requires: python3-devel
Requires: pyproject-rpm-macros

BuildRequires: python3-nbconvert 
BuildRequires: python3-rpm-macros 
BuildRequires: python-srpm-macros 
BuildRequires: python3-devel
BuildRequires: python3-setuptools
BuildRequires: pyproject-rpm-macros
BuildRequires: python3-ldap

Conflicts: python3-indico-dummy

 
%global _description %{expand:
A python module which provides a convenient example. This is the
rest of the description that provides more details.}

%description -n %{srcname} %_description

%pre
mkdir -p /opt/indico
adduser  -rm -g apache -m -d /opt/indico -s /bin/bash indico
chown -R indico /opt/indico
systemctl stop postgresql.service


%prep
%setup -q  -c

%build

%install
THISHOSTNAME=indico01.mpp.mpg.de
sed -i 's/YOURHOSTNAME/'"$THISHOSTNAME"'/g' *.*
sed -i 's,PYTHONSITELIB,'%{python3_sitelib}'/indico,g'   indico.conf 

mkdir -p %{buildroot}/etc
install -m 0755 uwsgi-indico.ini %{buildroot}/etc/uwsgi-indico.ini
mkdir -p %{buildroot}/etc/systemd/system/
install -m 0755 indico-uwsgi.service %{buildroot}/etc/systemd/system/indico-uwsgi.service
mkdir -p %{buildroot}/etc/httpd/conf.d/
install -m 0755 indico.conf %{buildroot}/etc/httpd/conf.d/indico.conf
mkdir -p %{buildroot}/etc/systemd/system/
install -m 0755 indico-celery.service %{buildroot}/etc/systemd/system/indico-celery.service
mkdir -p %{buildroot}/etc/httpd/conf.d/
install -m 0755 indico-sslredir.conf %{buildroot}/etc/httpd/conf.d/indico-sslredir.conf
mkdir  -p %{buildroot}/etc/ssl/indico
#chown root:root %{buildroot}/etc/ssl/indico/
#chmod 700 %{buildroot}/etc/ssl/indico
install -m 0700 ffdhe2048 %{buildroot}//etc/ssl/indico/ffdhe2048

install -m 0700 indico.cil %{buildroot}//etc/ssl/indico/indico.cil

mkdir -p %{buildroot}/opt/indico/etc/

install -m 755  etcindico.conf %{buildroot}//opt/indico/etc/indico.conf

mkdir -p %{buildroot}/%{python3_sitelib}/indico/web/static/images/
install -m 755 scaledglobe.png %{buildroot}/%{python3_sitelib}/indico/web/static/images/globe.png
install -m 755 logo_indico_bw.png %{buildroot}/%{python3_sitelib}/indico/web/static/images/logo_indico_bw.png
install -m 755 robots.txt %{buildroot}/%{python3_sitelib}/indico/web/static/robots.txt



mkdir -p %{buildroot}/%{python3_sitelib}/indico/modules/auth/templates/
install -m 755 login_page.html %{buildroot}/%{python3_sitelib}/indico/modules/auth/templates/login_page.html
install -m 755 register.html   %{buildroot}/%{python3_sitelib}/indico/modules/auth/templates/register.html
install -m 755 forms.py        %{buildroot}/%{python3_sitelib}/indico/modules/auth/forms.py

mkdir -p %{buildroot}/etc/systemd/system/postgresql.service.d/
install -m 755  indicopostgresql.conf %{buildroot}/etc/systemd/system/postgresql.service.d/indicopostgresql.conf

%post

#sudo /usr/sbin/useradd -rm -g apache -d /opt/indico -s /bin/bash indico
mkdir -p /opt/indico
chown -R indico /opt/indico

echo 'LoadModule proxy_uwsgi_module modules/mod_proxy_uwsgi.so' > /etc/httpd/conf.modules.d/proxy_uwsgi.conf


systemctl daemon-reload
sudo mkdir -p /opt/pgsql/data
sudo chown -R postgres:postgres /opt/pgsql

postgresql-setup initdb
systemctl start postgresql.service redis.service
systemctl enable postgresql.service redis.service
su - postgres -c 'createuser indico'
su - postgres -c 'createdb -O indico indico'
su - postgres -c 'psql indico -c "CREATE EXTENSION unaccent; CREATE EXTENSION pg_trgm;"'
##systemctl start postgresql.service redis.service
systemctl enable postfix.service
systemctl start postfix.service

systemctl enable httpd.service postgresql.service redis.service indico-celery.service indico-uwsgi.service

firewall-cmd --permanent --add-port 443/tcp --add-port 80/tcp
firewall-cmd --reload

semodule -i /etc/ssl/indico/indico.cil


openssl req -x509 -nodes -newkey rsa:4096 -subj /CN=$THISHOSTNAME -keyout /etc/ssl/indico/indico.key -out /etc/ssl/indico/indico.crt


cat >> /opt/indico/.bashrc <<'EOF'
export PATH="/opt/indico/.pyenv/bin:$PATH"
eval "$(pyenv init --path)"
eval "$(pyenv init -)"
EOF

sudo -u indico ln -s  /opt/indico/etc/indico.conf /opt/indico/.indico.conf

sudo -u indico mkdir -p /opt/indico/tmp
sudo -u indico mkdir -p  /opt/indico/log
sudo -u indico mkdir -p /opt/indico/cache
sudo -u indico mkdir -p /opt/indico/archive
sudo -u indico mkdir -p /opt/indico/web
sudo -u indico mkdir -p /opt/indico/etc/

#NEW
sudo -u indico mkdir -p /opt/indico/assets

sudo -u indico mkdir -p /opt/indico/tmp/

sudo -u indico cp /usr/lib/python%{python3_version}/site-packages/indico/logging.yaml.sample  /opt/indico/etc/logging.yaml
sudo -u indico ln -s    /usr/lib/python%{python3_version}/site-packages/indico/web/static /opt/indico/web/static
sudo -u indico ln -s /opt/indico/etc/indico.conf /opt/indico/.indico.conf 

python3 -m venv --system-site-packages --prompt indico /opt/indico/.venv
sudo -u indico mkdir -p /opt/indico/log/apache
sudo -u indico chmod go-rwx /opt/indico/* /opt/indico/.[^.]*
sudo -u indico chmod 710 /opt/indico/ /opt/indico//archive /opt/indico/cache /opt/indico//log /opt/indico//tmp
sudo -u indico chmod 750 /opt/indico/web /opt/indico//.venv
sudo -u indico chmod g+w /opt/indico/log/apache

sudo -u indico mkdir -p /opt/indico/etc/
restorecon -R /opt/indico/

####  WARNING! Commenting the line below will reduce performance, but might be useful for debug.
echo -e "\nSTATIC_FILE_METHOD = 'xsendfile'" >> /opt/indico/etc/indico.conf

chown -R indico /opt/indico/
chown -R indico /opt/indico/.bashrc
chgrp -R apache /opt/indico
chgrp -R apache /opt/indico/cache
chgrp  apache /opt/indico/.bashrc

#NEW
chgrp -R apache /opt/indico/assets
sudo -u indico indico db prepare

sudo /usr/sbin/setsebool -P httpd_can_network_connect 1
sudo -u indico cp /usr/lib/python%{python3_version}/site-packages/indico/web/indico.wsgi  /opt/indico/web/indico.wsgi




%files -n %{srcname}
/etc/uwsgi-indico.ini
/etc/systemd/system/indico-uwsgi.service
/etc/httpd/conf.d/indico.conf
/etc/systemd/system/indico-celery.service
/etc/ssl/indico/ffdhe2048
/etc/httpd/conf.d/indico-sslredir.conf
/etc/ssl/indico/indico.cil
%config(noreplace) /opt/indico/etc/indico.conf
%{python3_sitelib}/indico/web/static/images/logo_indico_bw.png
%{python3_sitelib}/indico/web/static/images/globe.png
%{python3_sitelib}/indico/web/static/robots.txt
%{python3_sitelib}/indico/modules/auth/templates/login_page.html
%{python3_sitelib}/indico/modules/auth/templates/register.html
%{python3_sitelib}/indico/modules/auth/forms.py
%{python3_sitelib}/indico/modules/auth/__pycache__/forms*pyc
/etc/systemd/system/postgresql.service.d/indicopostgresql.conf

%changelog
* Wed Sep 28 2022 Andrii Verbytskyi andrii.verbytskyi@mpp.mpg.de> - 3.2
- Version 3.2. Removed duplicated packages in dependencies.

# Plan for the upgrade: 
# 1) Install everything
#  dnf -y copr enable averbyts/IR
#  dnf -y install  indico-mpp
# 2) Edit configs /etc/indico.conf to setup passwords
#    systemctl restart httpd.service indico-celery.service indico-uwsgi.service

# 3) Copy the information
#DB treatment
# stop redis.
# drop db
# create db
# import dump
# indico db upgrade


# export OLD=
# export NEW=

#@ OLD  pg_dump indico > indico_dump.txt
#@ OLD scp /mnt/home/indico/indico/indico_dump.txt $NEW:

#systemctl stop redis.service
#systemctl stop httpd.service indico-celery.service indico-uwsgi.service
#su - postgres  psql -c "drop database indico;"
#su - postgres  createdb -O indico indico
#su - postgres  psql indico < indico_dump.txt
#su - indico    indico db upgrade
#systemctl start redis.service

#scp -r $OLD:/mnt/home/indico/indico/archive ./A
#mv ./A/* /opt/indico/archive/
#chown indico -R /opt/indico/archive/ 
#chgrp apache -R /opt/indico/archive/
#mkdir -p /opt/indico/indico-legacy/

#scp -r $OLD:/mnt/home/indico/indico-legacy/archive  ./B
#mv ./B/* /opt/indico/indico-legacy/
#chown indico -R /opt/indico/indico-legacy/
#chgrp apache -R /opt/indico/indico-legacy/

#PACEMAKER:
#systemctl stop pacemaker
#rm -rf  /opt/pgsql* /opt/indico
#rpm -e $(rpm -qa | grep postgresql) indico-mpp python3-indico --nodeps
#yum install  postgresql-server -y postgresql
#yum -y install python3-indico
#yum -y install indico-mpp
#edit /etc/httpd/conf/httpd.conf!!!!!