# frozen_string_literal: true

# Cookbook:: travis_users
# Recipe:: default
#
# Copyright:: 2017 Travis CI GmbH
#
# Permission is hereby granted, free of charge, to any person obtaining
# a copy of this software and associated documentation files (the
# "Software"), to deal in the Software without restriction, including
# without limitation the rights to use, copy, modify, merge, publish,
# distribute, sublicense, and/or sell copies of the Software, and to
# permit persons to whom the Software is furnished to do so, subject to
# the following conditions:
#
# The above copyright notice and this permission notice shall be
# included in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
#

package 'zsh' do
  action %i(install upgrade)
  only_if { node['travis_users'].any? { |u| u['shell'] =~ /zsh/ } }
end

Array(node['travis_users']).each do |user|
  user user['id'] do
    home "/home/#{user['id']}"
    shell user['shell']
  end

  directory "/home/#{user['id']}" do
    mode '750'
    owner user['id']
    group user['id']
  end

  file "/home/#{user['id']}/.zshrc" do
    content "# this space intentionally left blank\n"
    mode '640'
    owner user['id']
    group user['id']
    only_if { user['shell'] =~ /zsh/ }
  end

  Array(user['groups']).each do |group_name|
    group group_name do
      action :modify
      members user['id']
      append true
    end
  end

  %W(
    /home/#{user['id']}
    /home/#{user['id']}/.ssh
  ).each do |dirname|
    directory dirname do
      owner user['id']
      group user['id']
      mode '700'
    end
  end

  template "/home/#{user['id']}/.ssh/authorized_keys" do
    owner user['id']
    group user['id']
    mode '644'
    source 'authorized_keys.erb'
    variables(keys: user['ssh_keys'])
    not_if { Array(user['ssh_keys']).empty? }
  end

  travis_users_github_keys user['id'] do
    github_username user['github_username']

    only_if do
      Array(user['ssh_keys']).empty? && !user['github_username'].empty?
    end
  end
end
