1if redhat?
 2  execute "yum upgrade -y ca-certificates"
 3  package "epel-release"
 4end
 5
 6package "nginx"
 7user "nginx"
 8
 9configuration = node['stronglifters']['nginx']
10
11template "/etc/nginx/nginx.conf" do
12  variables(configuration)
13  notifies :restart, 'service[nginx]'
14end
15
16execute "certbot renew"
17execute "cd /etc/ssl/certs && openssl dhparam -out dhparam.pem 2048" do
18  not_if { ::File.exist?('/etc/ssl/certs/dhparam.pem') }
19  notifies :restart, "service[nginx]"
20end
21
22directory '/var/log/nginx' do
23  mode '0755'
24end
25
26service "nginx" do
27  action [:enable, :start]
28end
29
30template "/etc/logrotate.d/nginx" do
31  source "nginx_logrotate.erb"
32  mode "0644"
33end