#
# Cookbook:: irrigate-cron
# Recipe:: accounting_activemq

if platform_family?('rhel')
  if node['platform_version'].start_with?('7')

    packages = %w(
      java-1.8.0-openjdk
    )

    packages.each do |name|
      package name
    end
  end
elsif platform_family?('debian')
  if node['platform_version'].start_with?('12')
    prerequisite_packages = %w(
      ca-certificates
      curl
      gpg
    )

    prerequisite_packages.each do |name|
      package name
    end

    apt_repository 'orchardit_general' do
      components ['main']
      key 'https://packagecloud.io/orchardit/general/gpgkey'
      trusted false
      uri 'https://packagecloud.io/orchardit/general/debian/'
    end

    packages = %w(
      openjdk-8-jdk
      openjdk-8-jre
      openjdk-8-jdk-headless
      openjdk-8-jre-headless
    )

    packages.each do |name|
      package name
    end
  end
end

# Make sure the firewall is installed and enabled
firewall 'default' do
  log_level :high
  action :install
end

if platform_family?('rhel')
  firewall_rule 'established' do
    stateful %w(related established)
    protocol :none
    position 1
    command :allow
  end
end

firewall_rule 'ssh' do
  port 22
  protocol :tcp
  position 2
  command :allow
end

firewall_rule 'activemq_web' do
  port 8161
  protocol :tcp
  position 3
  command :allow
end

firewall_rule 'activemq_stomp' do
  port 61616
  protocol :tcp
  position 3
  command :allow
end