Empact-deprec 1.99.21

data/lib/deprec/templates/postfix/master.cf.erb

@@ -0,0 +1,77 @@
+#
+# Postfix master process configuration file.  For details on the format
+# of the file, see the master(5) manual page (command: "man 5 master").
+#
+# ==========================================================================
+# service type  private unpriv  chroot  wakeup  maxproc command + args
+#               (yes)   (yes)   (yes)   (never) (100)
+# ==========================================================================
+smtp      inet  n       -       -       -       -       smtpd
+#submission inet n       -       -       -       -       smtpd
+#  -o smtpd_enforce_tls=yes
+#  -o smtpd_sasl_auth_enable=yes
+#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
+#smtps     inet  n       -       -       -       -       smtpd
+#  -o smtpd_tls_wrappermode=yes
+#  -o smtpd_sasl_auth_enable=yes
+#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
+#628      inet  n       -       -       -       -       qmqpd
+pickup    fifo  n       -       -       60      1       pickup
+cleanup   unix  n       -       -       -       0       cleanup
+qmgr      fifo  n       -       n       300     1       qmgr
+#qmgr     fifo  n       -       -       300     1       oqmgr
+tlsmgr    unix  -       -       -       1000?   1       tlsmgr
+rewrite   unix  -       -       -       -       -       trivial-rewrite
+bounce    unix  -       -       -       -       0       bounce
+defer     unix  -       -       -       -       0       bounce
+trace     unix  -       -       -       -       0       bounce
+verify    unix  -       -       -       -       1       verify
+flush     unix  n       -       -       1000?   0       flush
+proxymap  unix  -       -       n       -       -       proxymap
+smtp      unix  -       -       -       -       -       smtp
+# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
+relay     unix  -       -       -       -       -       smtp
+	-o smtp_fallback_relay=
+#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
+showq     unix  n       -       -       -       -       showq
+error     unix  -       -       -       -       -       error
+retry     unix  -       -       -       -       -       error
+discard   unix  -       -       -       -       -       discard
+local     unix  -       n       n       -       -       local
+virtual   unix  -       n       n       -       -       virtual
+lmtp      unix  -       -       -       -       -       lmtp
+anvil     unix  -       -       -       -       1       anvil
+scache	  unix	-	-	-	-	1	scache
+#
+# ====================================================================
+# Interfaces to non-Postfix software. Be sure to examine the manual
+# pages of the non-Postfix software to find out what options it wants.
+#
+# Many of the following services use the Postfix pipe(8) delivery
+# agent.  See the pipe(8) man page for information about ${recipient}
+# and other message envelope options.
+# ====================================================================
+#
+# maildrop. See the Postfix MAILDROP_README file for details.
+# Also specify in main.cf: maildrop_destination_recipient_limit=1
+#
+maildrop  unix  -       n       n       -       -       pipe
+  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
+#
+# See the Postfix UUCP_README file for configuration details.
+#
+uucp      unix  -       n       n       -       -       pipe
+  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
+#
+# Other external delivery methods.
+#
+ifmail    unix  -       n       n       -       -       pipe
+  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
+bsmtp     unix  -       n       n       -       -       pipe
+  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
+scalemail-backend unix	-	n	n	-	2	pipe
+  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
+mailman   unix  -       n       n       -       -       pipe
+  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
+  ${nexthop} ${user}
+

data/lib/deprec/templates/rails/database.yml.erb

@@ -0,0 +1,6 @@
+<%= @rails_env %>:
+  adapter:   mysql
+  database:  <%= @db_name %>_prod
+  username:  <%= @username %>_db
+  password:  <%= @mysqlpass %>
+  host:      <%= @mysql_host %>

data/lib/deprec/templates/sphinx/monit.conf.erb

@@ -0,0 +1,5 @@
+check process searchd with pidfile /opt/local/var/db/sphinx/log/searchd.pid
+	start program = "/usr/local/bin/searchd --config <%= deploy_to %>/current/config/ultrasphinx/production.conf"
+	stop program = "/usr/local/bin/searchd --stop --config <%= deploy_to %>/current/config/ultrasphinx/production.conf"
+
+	if 3 restarts within 5 cycles then timeout

data/lib/deprec/templates/ssh/ssh_config.erb

@@ -0,0 +1,50 @@
+
+# This is the ssh client system-wide configuration file.  See
+# ssh_config(5) for more information.  This file provides defaults for
+# users, and the values can be changed in per-user configuration files
+# or on the command line.
+
+# Configuration data is parsed as follows:
+#  1. command line options
+#  2. user-specific file
+#  3. system-wide file
+# Any configuration value is only changed the first time it is set.
+# Thus, host-specific definitions should be at the beginning of the
+# configuration file, and defaults at the end.
+
+# Site-wide defaults for some commonly used options.  For a comprehensive
+# list of available options, their meanings and defaults, please see the
+# ssh_config(5) man page.
+
+Host *
+#   ForwardAgent no
+#   ForwardX11 no
+#   ForwardX11Trusted yes
+#   RhostsRSAAuthentication no
+#   RSAAuthentication yes
+#   PasswordAuthentication yes
+#   HostbasedAuthentication no
+#   GSSAPIAuthentication no
+#   GSSAPIDelegateCredentials no
+#   GSSAPIKeyExchange no
+#   GSSAPITrustDNS no
+#   BatchMode no
+#   CheckHostIP yes
+#   AddressFamily any
+#   ConnectTimeout 0
+#   StrictHostKeyChecking ask
+#   IdentityFile ~/.ssh/identity
+#   IdentityFile ~/.ssh/id_rsa
+#   IdentityFile ~/.ssh/id_dsa
+#   Port 22
+#   Protocol 2,1
+#   Cipher 3des
+#   Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc
+#   EscapeChar ~
+#   Tunnel no
+#   TunnelDevice any:any
+#   PermitLocalCommand no
+    SendEnv LANG LC_*
+    HashKnownHosts yes
+    GSSAPIAuthentication yes
+    GSSAPIDelegateCredentials no

data/lib/deprec/templates/ssh/sshd_config.erb

@@ -0,0 +1,78 @@
+# Package generated configuration file
+# See the sshd(8) manpage for details
+
+# What ports, IPs and protocols we listen for
+Port 22
+# Use these options to restrict which interfaces/protocols sshd will bind to
+#ListenAddress ::
+#ListenAddress 0.0.0.0
+Protocol 2
+# HostKeys for protocol version 2
+HostKey /etc/ssh/ssh_host_rsa_key
+HostKey /etc/ssh/ssh_host_dsa_key
+#Privilege Separation is turned on for security
+UsePrivilegeSeparation yes
+
+# Lifetime and size of ephemeral version 1 server key
+KeyRegenerationInterval 3600
+ServerKeyBits 768
+
+# Logging
+SyslogFacility AUTH
+LogLevel INFO
+
+# Authentication:
+LoginGraceTime 120
+PermitRootLogin no
+StrictModes yes
+
+RSAAuthentication yes
+PubkeyAuthentication yes
+#AuthorizedKeysFile	%h/.ssh/authorized_keys
+
+# Don't read the user's ~/.rhosts and ~/.shosts files
+IgnoreRhosts yes
+# For this to work you will also need host keys in /etc/ssh_known_hosts
+RhostsRSAAuthentication no
+# similar for protocol version 2
+HostbasedAuthentication no
+# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
+#IgnoreUserKnownHosts yes
+
+# To enable empty passwords, change to yes (NOT RECOMMENDED)
+PermitEmptyPasswords no
+
+# Change to yes to enable challenge-response passwords (beware issues with
+# some PAM modules and threads)
+ChallengeResponseAuthentication no
+
+# Change to no to disable tunnelled clear text passwords
+PasswordAuthentication no
+
+# Kerberos options
+#KerberosAuthentication no
+#KerberosGetAFSToken no
+#KerberosOrLocalPasswd yes
+#KerberosTicketCleanup yes
+
+# GSSAPI options
+#GSSAPIAuthentication no
+#GSSAPICleanupCredentials yes
+
+X11Forwarding yes
+X11DisplayOffset 10
+PrintMotd no
+PrintLastLog yes
+TCPKeepAlive yes
+#UseLogin no
+
+#MaxStartups 10:30:60
+#Banner /etc/issue.net
+
+# Allow client to pass locale environment variables
+AcceptEnv LANG LC_*
+
+Subsystem sftp /usr/lib/openssh/sftp-server
+
+UsePAM no
+UseDNS no

data/lib/deprec/templates/subversion/svn.apache.vhost.erb

@@ -0,0 +1,43 @@
+<VirtualHost *:80>
+  ServerName <%= @username %>.svn.engineyard.com
+  ServerAdmin admin@engineyard.com
+
+  <Location />
+    DAV svn
+
+    Satisfy Any
+    Require valid-user
+
+    AuthType Basic
+    AuthName "Engine Yard SVN Cluster: <%= @username %>"
+    AuthUserFile       /data/svn/<%= @username %>/users
+
+    AuthzSVNAccessFile /data/svn/<%= @username %>/access
+
+    SVNPath            /data/svn/<%= @username %>/repo
+  </Location>
+</VirtualHost>
+
+<VirtualHost *:443>
+  ServerName <%= @username %>.svn.engineyard.com
+  ServerAdmin admin@engineyard.com
+
+  <Location />
+    DAV svn
+
+    Satisfy Any
+    Require valid-user
+
+    AuthType Basic
+    AuthName "Engine Yard SVN Cluster: <%= @username %>"
+    AuthUserFile       /data/svn/<%= @username %>/users
+
+    AuthzSVNAccessFile /data/svn/<%= @username %>/access
+
+    SVNPath            /data/svn/<%= @username %>/repo
+  </Location>
+
+  SSLEngine on
+  SSLProtocol all
+  SSLCipherSuite HIGH:MEDIUM
+</VirtualHost>

data/lib/deprec/templates/swiftiply/swiftiply-init-script

@@ -0,0 +1,61 @@
+#!/bin/bash
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides:             swiftiply
+# Should-Start:         $local_fs
+# Should-Stop:          $local_fs
+# Default-Start:        2 3 4 5
+# Default-Stop:         0 1 6
+# Short-Description:    swiftiply - Back-end agnostic load balancer
+# Description:          swiftiply - Back-end agnostic load balancer
+### END INIT INFO
+
+
+PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
+DAEMON=/usr/local/bin/swiftiply
+NAME=swiftiply
+DESC=swiftiply
+PIDFILE=<%= swiftiply_pid_file %>
+
+ARGS="-c <%= swiftiply_conf %>"
+
+EVENT=1
+
+case "$1" in
+  start)
+	  echo -n "Starting $DESC: "
+    : > <%= swiftiply_conf %>
+    find <%= swiftiply_conf_dir %> -wholename <%= swiftiply_conf %> -o -type f , -type l -exec cat '{}' \; >> <%= swiftiply_conf %>
+
+	  start-stop-daemon --start --quiet --pidfile $PIDFILE -m --exec $DAEMON -- $ARGS
+	  echo "$NAME."
+	  ;;
+  stop)
+	  echo -n "Stopping $DESC: "
+	  start-stop-daemon --stop --quiet --oknodo --pidfile $PIDFILE --exec $DAEMON 
+	  echo "$NAME."
+	  rm -f $PIDFILE
+	  ;;
+  stop)
+	  echo -n "Reloading $DESC"
+	  kill -HUP `cat $PIDFILE`
+	  echo "$NAME."
+	  rm -f $PIDFILE
+	  ;;
+
+  restart|force-reload)
+	  echo -n "Restarting $DESC: "
+	  start-stop-daemon --stop --quiet --oknodo --pidfile $PIDFILE
+	  rm -f $PIDFILE
+
+	  start-stop-daemon --start --quiet --exec $ARGS
+	  echo "$NAME."
+	  ;;
+  *)
+	  N=/etc/init.d/$NAME
+	  echo "Usage: $N {start|stop|reload|restart|force-reload}" >&2
+	  exit 1
+	  ;;
+esac
+
+exit 0

data/lib/deprec/templates/swiftiply/swiftiply.yml.erb

@@ -0,0 +1,11 @@
+cluster_address: 127.0.0.1
+cluster_port: <%= swiftiply_port %>
+daemonize: true
+epoll: true
+epoll_descriptors: 8192
+map:
+  - incoming: <%= domain %>
+    outgoing: <%= thin_address %>:<%= thin_port.to_s %>
+    default: true
+    docroot: /var/www/apps/<%= application %>/current/public
+    redeployable: false

data/lib/deprec/templates/thin/thin-init-script

@@ -0,0 +1,51 @@
+#!/bin/bash
+#
+# Copyright (c) 2007 Bradley Taylor, bradley@railsmachine.com
+#
+# thin       Startup script for thin Ruby servers.
+#
+# chkconfig: - 85 15
+#              
+
+PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local:/usr/local/sbin:/usr/local/bin
+CONF_DIR=/etc/thin
+PID_DIR=/var/run/thin
+
+EVENT=1
+
+RETVAL=0
+
+# Gracefully exit if the controller is missing.
+which thin >/dev/null || exit 0
+
+# Go no further if config directory is missing.
+[ -d "$CONF_DIR" ] || exit 0
+
+case "$1" in
+    start)
+      # Create pid directory
+      mkdir -p $PID_DIR
+      # chown $USER:$USER $PID_DIR
+
+      thin start -c $CONF_DIR
+      RETVAL=$?
+  ;;
+    stop)
+      thin stop -c $CONF_DIR
+      RETVAL=$?
+  ;;
+    restart)
+      thin restart -c $CONF_DIR
+      RETVAL=$?
+  ;;
+    status)
+      thin status -c $CONF_DIR
+      RETVAL=$?
+  ;;
+    *)
+      echo "Usage: thin {start|stop|restart|status}"
+      exit 1
+  ;;
+esac      
+
+exit $RETVAL

data/lib/deprec/templates/thin/thin.yml.erb

@@ -0,0 +1,11 @@
+--- 
+user: <%= thin_user %>
+group: <%= thin_group %>
+chdir: <%= current_path %>
+log: <%= thin_log_dir %>/thin.log
+environment: <%= thin_environment %>
+port: <%= thin_port.to_s %>
+address: <%= thin_address %>
+pid: <%= thin_pid_dir %>/thin.pid
+servers: <%= thin_servers.to_s %>
+swiftiply: <%= thin_swiftiply %>

data/lib/deprec/templates/trac/apache_vhost.conf.erb

@@ -0,0 +1,24 @@
+<VirtualHost *:80>
+  ServerName <%= trac_home_url %>
+  
+  # Configure trac_cluster 
+  <Proxy balancer://trac_cluster>
+    BalancerMember http://127.0.0.1:<%= tracd_port %>
+  </Proxy>
+
+  RewriteEngine On
+  
+  # Redirect to the AGR track instance
+  RewriteRule   ^/$  /<%= application %>/  [R]
+  # Send all traffic to tracd
+  RewriteRule ^/(.*)$ balancer://trac_cluster%{REQUEST_URI} [P,QSA,L]
+  
+  # Deflate
+  AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css application/x-javascript
+  BrowserMatch ^Mozilla/4 gzip-only-text/html
+  BrowserMatch ^Mozilla/4\.0[678] no-gzip
+  BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
+
+  ErrorLog logs/trac.agoodride.tv-error_log
+  CustomLog logs/trac.agoodride.tv-access_log combined
+</VirtualHost>

data/lib/deprec/templates/trac/nginx_vhost.conf.erb

@@ -0,0 +1,26 @@
+upstream tracd-<%= application %> {
+  server 127.0.0.1:9000;
+}
+
+server {
+    listen       80;
+    server_name  <%= tracd_vhost_domain %>;
+
+    location / {
+            proxy_set_header  X-Real-IP  $remote_addr;
+            proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header Host $http_host;
+            proxy_redirect false;
+
+     		if ($request_filename !~ /<%= application %> ) {
+                    rewrite (.*) http://<%= tracd_vhost_domain %>/<%= application %>$1 permanent;
+			}
+            proxy_pass http://tracd-<%= application %>;
+            break;
+	}
+
+    error_page   500 502 503 504  /50x.html;
+    location = /50x.html {
+            root   html;
+    }
+}