#3927 - Clear Nginx cache when notifications are updated

modules/notificationserver/manifests/init.pp

Index: modules/notificationserver/manifests/init.pp
diff --git a/modules/notificationserver/manifests/init.pp b/modules/notificationserver/manifests/init.pp
index 1d7eaf21f3a8602783bf6a8078647c6cd5a6cfa6..235d64a2cb80569b1eb5ed20da5be536d707676f 100644
--- a/modules/notificationserver/manifests/init.pp
+++ b/modules/notificationserver/manifests/init.pp
@@ -16,6 +16,25 @@ class notificationserver($is_default = false) {
     onlyif => 'test ! -d /opt/notifications'
   }
 
+  # http://hub.eyeo.com/issues/3927
+  $clear_cache = "find /var/cache/nginx/notification -type f -exec rm -rf {} +"
+
+  # https://linux.die.net/man/5/sudoers
+  file {"/etc/sudoers.d/notification-cache":
+    content => "nginx ALL=(www-data) NOPASSWD:/usr/bin/$clear_cache\n",

[f.nicolaisen, 2017/09/28 11:05:25]

Consider extracting 'www-data' here and below to make it obvious that they are
coupled.

[mathias, 2017/09/28 12:00:00]

Acknowledged.

+    ensure => 'present',
+    group => 'root',
+    mode => '0440',
+    owner => 'root',
+  }
+
+  # https://docs.puppet.com/puppet/latest/types/augeas.html
+  augeas {"files/opt/notifications/.hg/hgrc/hooks/cache":
+    changes => ["set hooks/changegroup.cache 'sudo -u www-data $clear_cache'"],
+    incl => '/opt/notifications/.hg/hgrc',

[f.nicolaisen, 2017/09/28 11:05:25]

No dependency on the notifications repo having been cloned already.

[mathias, 2017/09/28 12:00:00]

Acknowledged.

Interestingly we just recently learned that the behavior of Puppet changed here
somewhere in the late 3.x versions:

"The order of resources in a Puppet manifest does not matter. Puppet assumes
that most resources are not related to each other and will manage the resources
in whatever order is most efficient." (2.x)

vs.

"By default, Puppet applies resources in the order they’re declared in their
manifest. However, if a group of resources must always be managed in a specific
order, you should explicitly declare such relationships with relationship
metaparameters, chaining arrows, and the require function." (4.x)

Nonetheless I prefer explicit notation of relationships anyway.

+    lens => "Puppet.lns",
+  }
+
   cron {'update_notifications':
     command => 'hg pull -q -u -R /opt/notifications',
     environment => hiera('cron::environment', []),