boring_services 0.8.0 → 0.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d1211d9bead3bd016414ec0b41c4750d59bb3afabb1e892ea9e05488bdb12dd2
-  data.tar.gz: a813b195971c06f10bae0989255fb0a63d99158d2afbcc4ea6aecb756e291a93
+  metadata.gz: e67745f3e72ccf6dce8646fc1606dda6f080f7634f58e5e614e21d732a24baef
+  data.tar.gz: 6d16d20e74f47f17c855d217ceb59799a4c67e390f695050dd73ba09f949befd
 SHA512:
-  metadata.gz: 3c321ae267b8eb3594955db1d965da1633a9f879db5a3bd8986939cfa3770dd54b18fad07299c0bf7a375e9e3ef05224e3303b9e8d1a5af631119698847a6016
-  data.tar.gz: 1462cef1c4ff1f49c993da325c5db5d847fab9636fbfe66f03c92f96def0c899ba01309f18ce192195029da6be159e0f36fb4c76c0f04acd11674415482554fc
+  metadata.gz: 1201bdcc2598275c86c3ceceae12193c398c4135e6e8cbe675b6f5dce5fa2896b1b27fd776ecfc5fd34c2af8456a092ca968734e52d6ceac58c46c7f055c454d
+  data.tar.gz: 9bc9c48947ffe1805a73accab2fa699c8c007d744722d785fe51b5cd555595bd14eb4ee33c0deb0ad6ce982c6c7d6b5e8d18c9f61127a7f45d5c2dbb4cb927bf

data/CHANGELOG.md

@@ -0,0 +1,68 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.9.0] - 2026-10-02
+
+### Changed
+
+- Update development dependencies.
+- Link gem source metadata to the matching release tag.
+
+### Added
+
+- Per-host jump routing, strict known-hosts configuration, and a targeted
+  `install --host LABEL` path for safely adding services to a new origin.
+
+## [0.8.1] - 2026-08-20
+
+### Changed
+
+- Require Ruby 4.0 or newer.
+- Align runtime and development dependencies with the maintained toolchain.
+- Add blocking test, lint, dependency-audit, and package-build CI checks.
+- Add automated Bundler and GitHub Actions dependency updates.
+- Clarify that private IP metadata does not configure bind addresses or
+  firewalls.
+
+## [0.1.0] - 2025-01-21
+
+### Added
+- Initial release of BoringServices
+- Deploy infrastructure services (Memcached, Redis, HAProxy, Nginx) via SSH
+- Rails integration with generators and rake tasks
+- Standalone Ruby support (no Rails dependency required)
+- Configuration override support for HAProxy via `custom_params`:
+  - `timeout_connect`, `timeout_client`, `timeout_server`
+  - `balance` algorithm (roundrobin, leastconn, etc.)
+  - `health_check_path` customization
+  - `ssl_ciphers` and `ssl_options` for SSL/TLS configuration
+- Configuration override support for Memcached via `custom_params`:
+  - `listen_address`, `max_connections`
+  - `max_item_size`, `verbosity`
+- Custom config template support:
+  - HAProxy: `custom_config_template` option to provide your own config file
+  - Memcached: `custom_config_template` option to provide your own config file
+- VPN/private network support with `private_ip` field for tracking internal IPs
+- Multi-host deployment support for services
+- Environment-based configuration (development, staging, production)
+- Secret management via environment variables or command execution
+- SSL/TLS support for HAProxy with automatic certificate management
+- Health checking and status monitoring
+- SSH key-based authentication with configurable options
+
+### Changed
+- Made railties dependency optional for standalone Ruby usage
+- Improved documentation with comprehensive examples
+- Updated Ruby requirement to >= 3.0.0 (from >= 3.4.0)
+
+### Technical Details
+- Uses SSHKit for SSH operations
+- Supports Ubuntu 20.04+ servers (Debian-based distributions)
+- YAML-based configuration with ERB support
+- Thor-based CLI interface

data/README.md

@@ -371,9 +371,15 @@ BoringServices supports deploying services over VPN or private networks (e.g., W
 
 - **Public IPs** (`host`) for SSH deployment access
 - **Private IPs** (`private_ip`) for service communication
-- Services listen on all interfaces (0.0.0.0) by default
+- Some generated service configurations listen on all interfaces (`0.0.0.0`)
+  by default
 - Accessible via private network IPs
-- No public exposure of services
+- `private_ip` documents the address clients should use; it does not change the
+  service bind address or configure a firewall
+
+Before deploying, restrict each service port to the intended private CIDRs with
+the provider firewall and the host firewall, or set a supported service-specific
+listen address. A public SSH address does not make a service endpoint private.
 
 **Example with Private IPs:**
 
@@ -428,7 +434,7 @@ haproxy: healthy
 
 ## Requirements
 
-- Ruby 3.0+
+- Ruby 4.0+
 - Ubuntu 20.04+ servers (Debian-based distributions)
 - SSH key-based authentication
 - Optional: VPN solution (WireGuard, Tailscale, etc.) for private networking

data/SECURITY.md

@@ -0,0 +1,22 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please do not open a public issue for a potential vulnerability. Email
+[security@boringcache.com](mailto:security@boringcache.com) or use
+[GitHub private vulnerability reporting](https://github.com/boringcache/services/security/advisories/new).
+
+Include the affected version, service, expected impact, and enough reproduction
+detail for us to investigate. Do not include live credentials, private keys,
+certificates, customer data, or production configuration.
+
+## Supported Versions
+
+Only the latest published release is supported. Security fixes are normally
+shipped in a new release rather than backported.
+
+## Scope
+
+Reports about SSH host verification, network exposure, secret handling,
+generated service configuration, command execution, or release integrity are
+welcome.

data/lib/boring_services/cli.rb

@@ -25,8 +25,10 @@ module BoringServices
     end
 
     desc 'install [SERVICE]', 'Install service(s) - all services or specific service'
+    option :host, type: :string, desc: 'Install only the host matching this label or address'
     def install(service_name = nil)
       config = Configuration.load(options[:config], options[:environment])
+      config.only_host!(options[:host]) if options[:host]
       installer = Installer.new(config)
       service_name ? installer.install_service(service_name) : installer.install_all
     rescue Error => e
@@ -52,7 +54,8 @@ module BoringServices
       exit 1
     end
 
-    desc 'reconfigure [SERVICE]', 'Reconfigure service(s) - skips package installation, only updates config and restarts'
+    desc 'reconfigure [SERVICE]',
+         'Reconfigure service(s) - skips package installation, only updates config and restarts'
     def reconfigure(service_name = nil)
       config = Configuration.load(options[:config], options[:environment])
       installer = Installer.new(config)
@@ -108,7 +111,7 @@ module BoringServices
     end
 
     def print_memcached_stats(stats)
-      bytes = format_bytes(stats['bytes']&.to_i || 0)
+      bytes = format_bytes(stats['bytes'].to_i)
       conns = stats['curr_connections'] || '0'
       items = stats['curr_items'] || '0'
       hit_rate = calculate_hit_rate(stats['get_hits'], stats['get_misses'])
@@ -116,8 +119,8 @@ module BoringServices
     end
 
     def calculate_hit_rate(hits, misses)
-      hits = hits&.to_i || 0
-      misses = misses&.to_i || 0
+      hits = hits.to_i
+      misses = misses.to_i
       total = hits + misses
       total.positive? ? ((hits.to_f / total) * 100).round(1) : 0
     end

data/lib/boring_services/configuration.rb

@@ -14,6 +14,7 @@ module BoringServices
       @config_path = config_path
       @environment = environment.to_s
       @config = load_config
+      @all_hosts = host_entries
     end
 
     def service_config(service_name)
@@ -42,6 +43,54 @@ module BoringServices
       @config['ssh_key'] || '~/.ssh/id_rsa'
     end
 
+    def ssh_known_hosts_file
+      path = @config['ssh_known_hosts_file']
+      File.expand_path(path) if path
+    end
+
+    def verify_host_key_mode
+      case @config.fetch('verify_host_key', true)
+      when true, 'always', :always then :always
+      when 'accept_new', :accept_new then :accept_new
+      when false, 'never', :never then :never
+      else :always
+      end
+    end
+
+    def host_config(reference)
+      reference = reference.to_s
+      @all_hosts.find do |host|
+        next unless host.is_a?(Hash)
+
+        host['host'].to_s == reference ||
+          host['label'].to_s.casecmp?(reference) ||
+          host['name'].to_s.casecmp?(reference)
+      end
+    end
+
+    def jump_host_config(host)
+      return unless host.is_a?(Hash)
+
+      reference = host['jump_host'] || host[:jump_host]
+      return unless reference
+
+      host_config(reference) || raise(Error, "Jump host not found: #{reference}")
+    end
+
+    def only_host!(reference)
+      selected = host_config(reference)
+      raise Error, "Host not found: #{reference}" unless selected
+
+      @config['services'] = services.filter_map do |service|
+        hosts = Array(service['hosts'] || service['host']).compact
+        matches = hosts.select { |host| same_host?(host, selected) }
+        next if matches.empty?
+
+        service.merge('hosts' => matches).tap { |entry| entry.delete('host') }
+      end
+      self
+    end
+
     def forward_agent
       return @config['forward_agent'] unless @config['forward_agent'].nil?
 
@@ -64,6 +113,16 @@ module BoringServices
 
     private
 
+    def host_entries
+      services.flat_map { |service| Array(service['hosts'] || service['host']).compact }
+    end
+
+    def same_host?(candidate, selected)
+      return candidate.to_s == selected['host'].to_s unless candidate.is_a?(Hash)
+
+      candidate['host'].to_s == selected['host'].to_s
+    end
+
     def load_config
       raise Error, "Config file not found: #{@config_path}" unless File.exist?(@config_path)
 

data/lib/boring_services/installer.rb

@@ -115,9 +115,9 @@ module BoringServices
     end
 
     def print_credentials_summary(hints)
-      puts "\n" + "=" * 50
-      puts "📋 Add to Rails credentials:"
-      puts "=" * 50
+      puts "\n#{'=' * 50}"
+      puts '📋 Add to Rails credentials:'
+      puts '=' * 50
 
       # Group by service type
       grouped = hints.group_by { |h| h[:type] }
@@ -129,14 +129,14 @@ module BoringServices
         by_region = entries.group_by { |e| e[:region] }
         by_region.each do |region, region_entries|
           puts "  #{region}:"
-          puts "    servers:"
+          puts '    servers:'
           region_entries.each do |entry|
             puts "      - #{entry[:server]}  # #{entry[:label]}"
           end
         end
       end
 
-      puts "\n" + "=" * 50
+      puts "\n#{'=' * 50}"
     end
   end
 end

data/lib/boring_services/secrets.rb

@@ -1,4 +1,7 @@
 require 'English'
+require 'open3'
+require 'shellwords'
+
 module BoringServices
   class Secrets
     def self.resolve(value)
@@ -8,10 +11,10 @@ module BoringServices
 
       if value_str.start_with?('credentials:')
         resolve_rails_credentials(value_str)
-      elsif value_str.start_with?('$')
-        resolve_env_var(value_str)
       elsif value_str.start_with?('$(') && value_str.end_with?(')')
         resolve_command(value_str[2..-2])
+      elsif value_str.start_with?('$')
+        resolve_env_var(value_str)
       else
         value_str
       end
@@ -24,16 +27,19 @@ module BoringServices
 
       # Use rails credentials:show to fetch the value
       # This requires being run from the Rails root directory
-      command = "RAILS_ENV=production bundle exec rails runner \"puts Rails.application.credentials.dig(#{keys.map { |k| ":#{k}" }.join(', ')})\""
-      result = `#{command}`.strip
+      runner = "puts Rails.application.credentials.dig(#{keys.map { |key| key.to_sym.inspect }.join(', ')})"
+      result, stderr, status = Open3.capture3(
+        { 'RAILS_ENV' => ENV.fetch('RAILS_ENV', 'production') },
+        'bundle', 'exec', 'rails', 'runner', runner
+      )
 
-      unless $CHILD_STATUS.success?
-        raise Error, "Failed to resolve Rails credentials: #{key_path}. Make sure you're running from the Rails root directory."
+      unless status.success?
+        detail = stderr.strip.empty? ? 'Make sure you are running from the Rails root directory.' : stderr.strip
+        raise Error, "Failed to resolve Rails credentials: #{key_path}. #{detail}"
       end
 
-      if result.empty?
-        raise Error, "Rails credentials key not found: #{key_path}"
-      end
+      result = result.strip
+      raise Error, "Rails credentials key not found: #{key_path}" if result.empty?
 
       result
     end
@@ -46,10 +52,13 @@ module BoringServices
     end
 
     def self.resolve_command(command)
-      result = `#{command}`.strip
-      raise Error, "Command failed: #{command}" unless $CHILD_STATUS.success?
+      argv = Shellwords.split(command)
+      raise Error, 'Command secret is empty' if argv.empty?
 
-      result
+      result, stderr, status = Open3.capture3(*argv)
+      raise Error, "Command failed: #{argv.first}: #{stderr.strip}" unless status.success?
+
+      result.strip
     end
   end
 end

data/lib/boring_services/service_locator.rb

@@ -66,7 +66,7 @@ module BoringServices
 
       return nil if hosts.empty?
 
-      port = port_for('memcached') || 11211
+      port = port_for('memcached') || 11_211
       hosts.map { |h| "#{h}:#{port}" }.join(',')
     end
 

data/lib/boring_services/services/haproxy.rb

@@ -9,7 +9,7 @@ module BoringServices
           configure_haproxy
           validate_config
           ssh_executor.systemd_enable('haproxy')
-          ssh_executor.systemd_restart('haproxy')  # Use restart instead of start to reload config
+          ssh_executor.systemd_restart('haproxy') # Use restart instead of start to reload config
           verify_listening_ports
         end
       end
@@ -124,7 +124,7 @@ module BoringServices
         end
       end
 
-      # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
+      # rubocop:disable-next Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
       def configure_haproxy
         # Check if custom config template is provided
         if service_config['custom_config_template'] && File.exist?(service_config['custom_config_template'])
@@ -239,7 +239,6 @@ module BoringServices
         execute :sudo, :chown, 'root:root', '/etc/haproxy/haproxy.cfg'
         execute :sudo, :chmod, '644', '/etc/haproxy/haproxy.cfg'
       end
-      # rubocop:enable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength, Metrics/PerceivedComplexity
 
       def verify_listening_ports
         puts '    Verifying HAProxy is listening on ports...'
@@ -257,7 +256,7 @@ module BoringServices
         ports_to_check << stats_port
 
         ports_to_check.each do |check_port|
-          result = execute :sudo, :ss, '-tlnp', '|', :grep, "-E", "':#{check_port} '", raise_on_error: false
+          result = execute :sudo, :ss, '-tlnp', '|', :grep, '-E', "':#{check_port} '", raise_on_error: false
           if result
             puts "    ✓ Port #{check_port} is listening"
           else

data/lib/boring_services/services/redis.rb

@@ -42,7 +42,7 @@ module BoringServices
         listen_port = port || 6379
         password = resolve_secret('redis_password') if config.secrets['redis_password']
         has_private_ip = !private_ip.to_s.strip.empty?
-        bind_address = has_private_ip ? "127.0.0.1 #{private_ip}" : "0.0.0.0"
+        bind_address = has_private_ip ? "127.0.0.1 #{private_ip}" : '0.0.0.0'
 
         config_content = <<~REDIS
           bind #{bind_address}
@@ -62,9 +62,7 @@ module BoringServices
         execute :sudo, :chmod, '640', '/etc/redis/redis.conf'
 
         # If using private IP (WireGuard), ensure Redis starts after WireGuard
-        if has_private_ip
-          configure_wireguard_dependency
-        end
+        configure_wireguard_dependency if has_private_ip
 
         # Set vm.overcommit_memory for Redis background saves
         execute :sudo, :sysctl, '-w', 'vm.overcommit_memory=1'

data/lib/boring_services/ssh_executor.rb

@@ -2,6 +2,8 @@
 
 require 'sshkit'
 require 'sshkit/dsl'
+require 'net/ssh/proxy/command'
+require 'shellwords'
 
 module BoringServices
   class SSHExecutor
@@ -152,10 +154,10 @@ module BoringServices
       end
     end
 
-    def capture_on_host(host, *args)
+    def capture_on_host(host, *)
       output = nil
       execute_on_host(host) do
-        output = capture(*args, raise_on_non_zero_exit: false)
+        output = capture(*, raise_on_non_zero_exit: false)
       end
       output
     end
@@ -174,8 +176,10 @@ module BoringServices
           forward_agent: config.forward_agent,
           auth_methods: config.ssh_auth_methods,
           keys_only: !config.use_ssh_agent,
-          use_agent: config.use_ssh_agent
+          use_agent: config.use_ssh_agent,
+          verify_host_key: config.verify_host_key_mode
         }
+        ssh.ssh_options[:user_known_hosts_file] = [config.ssh_known_hosts_file] if config.ssh_known_hosts_file
       end
     end
 
@@ -185,19 +189,48 @@ module BoringServices
         target_host = host['host'] || host[:host]
         raise Error, 'Host entry missing host field' unless target_host
 
-        build_sshkit_host(target_host, host['user'] || host[:user])
+        build_sshkit_host(target_host, host['user'] || host[:user], host)
       else
         host_string = host.to_s
         return SSHKit::Host.new(host_string) if host_string.include?('@')
 
-        build_sshkit_host(host_string, nil)
+        build_sshkit_host(host_string, nil, nil)
       end
     end
 
-    def build_sshkit_host(hostname, user)
+    def build_sshkit_host(hostname, user, host_config)
       sshkit_host = SSHKit::Host.new(hostname)
       sshkit_host.user = user || config.user
+      options = { verify_host_key: config.verify_host_key_mode }
+      options[:user_known_hosts_file] = [config.ssh_known_hosts_file] if config.ssh_known_hosts_file
+      if (jump_host = config.jump_host_config(host_config))
+        options[:proxy] = jump_proxy(jump_host)
+      end
+      sshkit_host.ssh_options = options
       sshkit_host
     end
+
+    def jump_proxy(jump_host)
+      user = jump_host['user'] || config.user
+      command = [
+        'ssh', '-F', '/dev/null',
+        '-o', 'BatchMode=yes',
+        '-o', 'ForwardAgent=no',
+        '-o', "StrictHostKeyChecking=#{open_ssh_host_key_mode}"
+      ]
+      command.push('-o', "UserKnownHostsFile=#{config.ssh_known_hosts_file}") if config.ssh_known_hosts_file
+      command.push('-i', File.expand_path(config.ssh_key), '-o', 'IdentitiesOnly=yes')
+      command.push('-W', '%h:%p', "#{user}@#{jump_host.fetch('host')}")
+      command_line = Shellwords.join(command).gsub('\\%h', '%h').gsub('\\%p', '%p')
+      Net::SSH::Proxy::Command.new(command_line)
+    end
+
+    def open_ssh_host_key_mode
+      case config.verify_host_key_mode
+      when :accept_new then 'accept-new'
+      when :never then 'no'
+      else 'yes'
+      end
+    end
   end
 end

data/lib/boring_services/version.rb

@@ -1,3 +1,3 @@
 module BoringServices
-  VERSION = '0.8.0'.freeze
+  VERSION = '0.9.0'.freeze
 end

data/lib/boring_services.rb

@@ -71,7 +71,7 @@ module BoringServices
 
     # Get Memcached port
     def memcached_port
-      locator.port_for('memcached') || 11211
+      locator.port_for('memcached') || 11_211
     end
 
     # Get Memcached servers string (host:port,host:port)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: boring_services
 version: !ruby/object:Gem::Version
-  version: 0.8.0
+  version: 0.9.0
 platform: ruby
 authors:
 - BoringCache
@@ -29,84 +29,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.4'
 - !ruby/object:Gem::Dependency
   name: sshkit
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.21'
+        version: '1.25'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.21'
+        version: '1.25'
 - !ruby/object:Gem::Dependency
   name: thor
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.5'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
-- !ruby/object:Gem::Dependency
-  name: minitest
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '5.0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '5.0'
-- !ruby/object:Gem::Dependency
-  name: rubocop
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.50'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.50'
-- !ruby/object:Gem::Dependency
-  name: simplecov
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.22'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.22'
+        version: '1.5'
 description: Simple deployment and management of infrastructure services like Memcached,
   Redis, HAProxy, and Nginx. Works standalone or with Rails.
 email:
@@ -116,8 +74,10 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - LICENSE
 - README.md
+- SECURITY.md
 - exe/boringservices
 - lib/boring_services.rb
 - lib/boring_services/cli.rb
@@ -136,14 +96,14 @@ files:
 - lib/boring_services/ssh_executor.rb
 - lib/boring_services/version.rb
 - lib/tasks/services.rake
-homepage: https://github.com/boringcache/boring_services
+homepage: https://github.com/boringcache/services
 licenses:
 - MIT
 metadata:
-  homepage_uri: https://github.com/boringcache/boring_services
-  source_code_uri: https://github.com/boringcache/boring_services
-  documentation_uri: https://github.com/boringcache/boring_services/blob/main/README.md
-  changelog_uri: https://github.com/boringcache/boring_services/blob/main/CHANGELOG.md
+  source_code_uri: https://github.com/boringcache/services/tree/v0.9.0
+  documentation_uri: https://github.com/boringcache/services/blob/main/README.md
+  changelog_uri: https://github.com/boringcache/services/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://github.com/boringcache/services/issues
   rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:
@@ -152,14 +112,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.4'
+      version: 4.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 4.0.16
 specification_version: 4
 summary: Deploy infrastructure services for Ruby & Rails apps
 test_files: []