Issue 2782 - Establish cron-job to clean up Trac sessions

manifests/issuesserver.pp

 node 'issues1' {
 
   include private::trac
 
   class {'trac':
     domain => 'issues.adblockplus.org',
     certificate => 'issues.adblockplus.org_sslcert.pem',
     private_key => 'issues.adblockplus.org_sslcert.key',
     is_default => true,
   }
@@ skipping 26 matching lines @@
       CREATE VIEW auth_cookie AS SELECT * FROM trac.auth_cookie;'",
     unless => "mysql -utrac -p'${private::trac::database_password}' trac_orders --execute '
       SHOW CREATE VIEW auth_cookie'",
     path => "/usr/bin:/usr/sbin:/bin:/usr/local/bin",
     require => [
       Exec["deploy_issues"],
       Exec["deploy_orders"],
     ],
   }
 
+  $mysql = "mysql -utrac -p'${private::trac::database_password}'"
+
   # Synchronizing e-mail and password information between the project
   # allows for logging in from any entry point - whilst maintaining a
   # registration form (and process) in one project only.
   cron {'trac_session_attribute_sync':
     ensure => present,
     user => trac,
     minute => '*/30',
-    command => "mysql -utrac -p'${private::trac::database_password}' trac_orders --execute ' \
+    command => "$mysql trac_orders --execute ' \
       INSERT INTO session_attribute (sid, authenticated, name, value) SELECT sid, authenticated, name, value \
       FROM trac.session_attribute WHERE authenticated = 1 AND name IN (\"email\", \"password\") \
       ON DUPLICATE KEY UPDATE value=VALUES(value) ' >/dev/null
     ",
     require => Exec['trac_auth_cookie_view'],
   }
 
+  cron {'trac_session_cleanup':
+    command => "$mysql trac --execute ' \
+      DELETE session, session_attribute FROM session \
+      JOIN session_attribute ON session.sid = session_attribute.sid \
+      AND session.authenticated = session_attribute.authenticated \
+      WHERE session.authenticated = 0 AND \
+      session.last_visit < UNIX_TIMESTAMP(NOW() - INTERVAL 10 DAY)' >/dev/null",
+    ensure => present,
+    hour => 1,
+    minute => 0,
+    require => Trac::Instance['issues'],
+    user => trac,
+  }
 }