# Ambari Nifi Install

    module.exports = header: 'Ambari Ranger Install', handler: (options) ->

## Identities

      @system.group header: 'Group', options.group
      @system.user header: 'User', options.user

## Package

      @service 'ranger-admin'
      @service 'ranger-usersync'
      @service 'ranger-storm-plugin'

## SSL

      @call header: 'SSL', retry: 0, if: options.ssl.enabled, ->
        @system.mkdir
          unless_exists: true
          target: path.dirname options.ssl.truststore.target
          uid: options.user.name
          gid: options.group.name
          mode: 0o0755
        # Client: import certificate to all hosts
        # `keytool -list -v -keystore /etc/nifi/conf/truststore.jks -storepass NifiTruststore123-`
        @java.keystore_add
          keystore: options.ssl.truststore.target
          storepass: options.ssl.truststore.password
          caname: "hadoop_root_ca"
          cacert: options.ssl.cacert.source
          local: options.ssl.cacert.local
          uid: options.user.name
          gid: options.group.name
          mode: 0o0644
        for hostname, cert of options.ssl.certs
          @java.keystore_add
            keystore: options.ssl.truststore.target
            storepass: options.ssl.truststore.password
            caname: "#{hostname}"
            cacert: "#{cert.source}"
            local: cert.local
        # Server: import certificates, private and public keys to hosts with a server
        # `keytool -list -v -keystore /etc/nifi/conf/keystore.jks -storepass NifiKeystore123-`
        @java.keystore_add
          keystore: options.ssl.keystore.target
          storepass: options.ssl.keystore.password
          key: options.ssl.key.source
          cert: options.ssl.cert.source
          keypass: options.ssl.keystore.keypass
          name: options.ssl.key.name
          local: options.ssl.key.local
          uid: options.user.name
          gid: options.group.name
          mode: 0o0600
        @java.keystore_add
          keystore: options.ssl.keystore.target
          storepass: options.ssl.keystore.password
          caname: "hadoop_root_ca"
          cacert: options.ssl.cacert.source
          local: options.ssl.cacert.local

## Dependencies

    path = require('path').posix