From 1aa8da9f9e1eb72ac3e0c3b5737a2bc6bbdeebd3 Mon Sep 17 00:00:00 2001
From: Jared Whiklo <jwhiklo@gmail.com>
Date: Mon, 22 Jan 2018 16:08:45 -0600
Subject: [PATCH 1/3] Install the Syn jar

---
 tasks/install.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/tasks/install.yml b/tasks/install.yml
index 03a7c63..2202bdd 100644
--- a/tasks/install.yml
+++ b/tasks/install.yml
@@ -13,3 +13,11 @@
     dest: "{{ fcrepo_syn_folder }}"
     owner: "{{ fcrepo_syn_user }}"
     group: "{{ fcrepo_syn_user }}"
+
+- name: Move syn jar to webapp
+  copy:
+    src: "{{ fcrepo_syn_folder }}/islandora-syn-{{ fcrepo_syn_version }}-all.jar"
+    dest: "{{ fcrepo_syn_tomcat_home }}/webapps/fcrepo/WEB-INF/lib/"
+    remote_src: yes
+    owner: "{{ fcrepo_syn_user }}"
+    group: "{{ fcrepo_syn_user }}"

From c93de4909ceef71f80a1865ebd9f066510aaee18 Mon Sep 17 00:00:00 2001
From: Jared Whiklo <jwhiklo@gmail.com>
Date: Wed, 28 Feb 2018 16:25:38 -0600
Subject: [PATCH 2/3] Need to configure fcrepo

---
 tasks/config.yml | 38 +++++++++++++++++++++++++++++++++++---
 1 file changed, 35 insertions(+), 3 deletions(-)

diff --git a/tasks/config.yml b/tasks/config.yml
index d801445..cf6653f 100644
--- a/tasks/config.yml
+++ b/tasks/config.yml
@@ -9,6 +9,38 @@
 - name: Copy templated syn-settings.xml
   template:
     src: syn-settings.xml
-    dest: "{{fcrepo_syn_tomcat_home}}/conf/syn-settings.xml"
-    owner: "{{fcrepo_syn_user}}"
-    group: "{{fcrepo_syn_user}}"
+    dest: "{{ fcrepo_syn_tomcat_home }}/conf/syn-settings.xml"
+    owner: "{{ fcrepo_syn_user }}"
+    group: "{{ fcrepo_syn_user }}"
+
+- name: Add valve
+  lineinfile:
+    path: "{{ fcrepo_syn_tomcat_home }}/conf/context.xml"
+    line: "<Valve className=\"ca.islandora.syn.valve.SynValve\" pathname=\"{{ fcrepo_syn_tomcat_home }}/conf/syn-settings.xml\" />"
+    insertbefore: "</Context>"
+
+- name: Modify web.xml
+  blockinfile:
+    path: "{{ fcrepo_syn_tomcat_home }}/webapps/fcrepo/WEB-INF/web.xml"
+    insertbefore: "^</web-app>$"
+    marker: "<!-- {mark} ANSIBLE MANAGED BLOCK -->"
+    block: |
+      <security-constraint>
+        <web-resource-collection>
+          <web-resource-name>Fedora4</web-resource-name>
+          <url-pattern>/*</url-pattern>
+        </web-resource-collection>
+        <auth-constraint>
+          <role-name>*</role-name>
+        </auth-constraint>
+        <user-data-constraint>
+          <transport-guarantee>NONE</transport-guarantee>
+        </user-data-constraint>
+      </security-constraint>
+      <security-role>
+        <role-name>islandora</role-name>
+      </security-role>
+      <login-config>
+        <auth-method>BASIC</auth-method>
+        <realm-name>fcrepo</realm-name>
+      </login-config>

From a00e8806bd0443ba978663ad6f8a3fb5378cc716 Mon Sep 17 00:00:00 2001
From: Jared Whiklo <jwhiklo@gmail.com>
Date: Thu, 1 Mar 2018 14:33:16 -0600
Subject: [PATCH 3/3] Valves need to be accessible to the entire container.

---
 tasks/install.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/install.yml b/tasks/install.yml
index 2202bdd..e4ad665 100644
--- a/tasks/install.yml
+++ b/tasks/install.yml
@@ -17,7 +17,7 @@
 - name: Move syn jar to webapp
   copy:
     src: "{{ fcrepo_syn_folder }}/islandora-syn-{{ fcrepo_syn_version }}-all.jar"
-    dest: "{{ fcrepo_syn_tomcat_home }}/webapps/fcrepo/WEB-INF/lib/"
+    dest: "{{ fcrepo_syn_tomcat_home }}/lib/"
     remote_src: yes
     owner: "{{ fcrepo_syn_user }}"
     group: "{{ fcrepo_syn_user }}"