# run_mode: controls in which mode the vhost should be run, there are different setups
#           possible:
#   - normal: (*default*) run vhost with the current active worker (default: prefork) don't
#             setup anything special
#   - itk: run vhost with the mpm_itk module (Incompatibility: cannot be used in combination
#          with 'proxy-itk' & 'static-itk' mode)
#   - proxy-itk: run vhost with a dual prefork/itk setup, where prefork just proxies all the
#                requests for the itk setup, that listens only on the loobpack device.
#                (Incompatibility: cannot be used in combination with the itk setup.)
#   - static-itk: run vhost with a dual prefork/itk setup, where prefork serves all the static
#                 content and proxies the dynamic calls to the itk setup, that listens only on
#                 the loobpack device (Incompatibility: cannot be used in combination with
#                 'itk' mode)
#
# run_uid: the uid the vhost should run as with the itk module
# run_gid: the gid the vhost should run as with the itk module
#
# mod_security: Whether we use mod_security or not (will include mod_security module)
#    - false: don't activate mod_security
#    - true: (*default*) activate mod_security
#
# logmode:
#   - default: Do normal logging to CustomLog and ErrorLog
#   - nologs: Send every logging to /dev/null
#   - anonym: Don't log ips for CustomLog, send ErrorLog to /dev/null
#   - semianonym: Don't log ips for CustomLog, log normal ErrorLog
define apache::vhost::php::joomla(
    $ensure                           = present,
    $domain                           = 'absent',
    $domainalias                      = 'absent',
    $server_admin                     = 'absent',
    $logmode                          = 'default',
    $path                             = 'absent',
    $owner                            = root,
    $group                            = apache,
    $documentroot_owner               = apache,
    $documentroot_group               = 0,
    $documentroot_mode                = '0640',
    $run_mode                         = 'normal',
    $run_uid                          = 'absent',
    $run_gid                          = 'absent',
    $allow_override                   = 'None',
    $php_settings                     = {},
    $php_options                      = {},
    $do_includes                      = false,
    $options                          = 'absent',
    $additional_options               = 'absent',
    $default_charset                  = 'absent',
    $mod_security                     = true,
    $mod_security_relevantonly        = true,
    $mod_security_rules_to_disable    = [],
    $mod_security_additional_options  = 'absent',
    $ssl_mode                         = false,
    $vhost_mode                       = 'template',
    $template_partial                 = 'apache/vhosts/php_joomla/partial.erb',
    $vhost_source                     = 'absent',
    $vhost_destination                = 'absent',
    $htpasswd_file                    = 'absent',
    $htpasswd_path                    = 'absent',
    $manage_config                    = true,
    $config_webwriteable              = false,
    $manage_directories               = true
){
  include ::apache::include::joomla

  $documentroot = $path ? {
    'absent' => $::operatingsystem ? {
      openbsd => "/var/www/htdocs/${name}/www",
      default => "/var/www/vhosts/${name}/www"
    },
    default => "${path}/www"
  }

  if $mod_security_additional_options == 'absent' {
    $id_str = $::operatingsystem ? {
      'CentOS'  => $::lsbmajdistrelease ? {
        5       => '',
        default => 'id:1199400,'
      },
      default => ''
    }
    $real_mod_security_additional_options = "# http://optics.csufresno.edu/~kriehn/fedora/fedora_files/f9/howto/modsecurity.html
        # Exceptions for Joomla Root Directory
        <LocationMatch \"^/\">
            SecRuleRemoveById 950013
        </LocationMatch>

        # Exceptions for Joomla Administration Panel
        SecRule REQUEST_FILENAME \"/administrator/index2.php\" \"${id_str}allow,phase:1,nolog,ctl:ruleEngine=Off\"

        # Exceptions for Joomla Component Expose
        <LocationMatch \"^/components/com_expose/expose/manager/amfphp/gateway.php\">
            SecRuleRemoveById 960010
        </LocationMatch>
"
  } else {
    $real_mod_security_additional_options = $mod_security_additional_options
  }

  # create vhost configuration file
  ::apache::vhost::php::webapp{
    $name:
      ensure                          => $ensure,
      domain                          => $domain,
      domainalias                     => $domainalias,
      server_admin                    => $server_admin,
      logmode                         => $logmode,
      path                            => $path,
      owner                           => $owner,
      group                           => $group,
      documentroot_owner              => $documentroot_owner,
      documentroot_group              => $documentroot_group,
      documentroot_mode               => $documentroot_mode,
      run_mode                        => $run_mode,
      run_uid                         => $run_uid,
      run_gid                         => $run_gid,
      allow_override                  => $allow_override,
      php_settings                    => $php_settings,
      php_options                     => $php_options,
      do_includes                     => $do_includes,
      options                         => $options,
      additional_options              => $additional_options,
      default_charset                 => $default_charset,
      mod_security                    => $mod_security,
      mod_security_relevantonly       => $mod_security_relevantonly,
      mod_security_rules_to_disable   => $mod_security_rules_to_disable,
      mod_security_additional_options => $real_mod_security_additional_options,
      ssl_mode                        => $ssl_mode,
      vhost_mode                      => $vhost_mode,
      template_partial                => $template_partial,
      vhost_source                    => $vhost_source,
      vhost_destination               => $vhost_destination,
      htpasswd_file                   => $htpasswd_file,
      htpasswd_path                   => $htpasswd_path,
      manage_directories              => $manage_directories,
      managed_directories             =>  [ "${documentroot}/administrator/backups",
                                            "${documentroot}/administrator/components",
                                            "${documentroot}/administrator/language",
                                            "${documentroot}/administrator/modules",
                                            "${documentroot}/administrator/templates",
                                            "${documentroot}/components",
                                            "${documentroot}/dmdocuments",
                                            "${documentroot}/images",
                                            "${documentroot}/language",
                                            "${documentroot}/media",
                                            "${documentroot}/modules",
                                            "${documentroot}/plugins",
                                            "${documentroot}/templates",
                                            "${documentroot}/cache",
                                            "${documentroot}/tmp",
                                            "${documentroot}/administrator/cache" ],
      manage_config                   => $manage_config,
      config_webwriteable             => $config_webwriteable,
      config_file                     => 'configuration.php',
  }

}