capistrano-atlas 0.0.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (48) hide show
  1. checksums.yaml +7 -0
  2. data/.gitignore +17 -0
  3. data/CHANGELOG.md +13 -0
  4. data/Gemfile +4 -0
  5. data/LICENSE.txt +22 -0
  6. data/README.md +215 -0
  7. data/Rakefile +5 -0
  8. data/capistrano-atlas.gemspec +32 -0
  9. data/lib/capistrano/atlas.rb +27 -0
  10. data/lib/capistrano/atlas/compatibility.rb +37 -0
  11. data/lib/capistrano/atlas/dsl.rb +157 -0
  12. data/lib/capistrano/atlas/recipe.rb +49 -0
  13. data/lib/capistrano/atlas/templates/crontab.erb +1 -0
  14. data/lib/capistrano/atlas/templates/csr_config.erb +10 -0
  15. data/lib/capistrano/atlas/templates/logrotate.erb +9 -0
  16. data/lib/capistrano/atlas/templates/maintenance.html.erb +26 -0
  17. data/lib/capistrano/atlas/templates/nginx.erb +64 -0
  18. data/lib/capistrano/atlas/templates/nginx_site.erb +97 -0
  19. data/lib/capistrano/atlas/templates/pgpass.erb +1 -0
  20. data/lib/capistrano/atlas/templates/postgresql-backup-logrotate.erb +11 -0
  21. data/lib/capistrano/atlas/templates/puma.rb.erb +22 -0
  22. data/lib/capistrano/atlas/templates/puma_init.erb +43 -0
  23. data/lib/capistrano/atlas/templates/rbenv_bashrc +4 -0
  24. data/lib/capistrano/atlas/templates/sidekiq_init.erb +100 -0
  25. data/lib/capistrano/atlas/templates/ssl_setup +43 -0
  26. data/lib/capistrano/atlas/templates/version.rb.erb +3 -0
  27. data/lib/capistrano/atlas/version.rb +5 -0
  28. data/lib/capistrano/tasks/aptitude.rake +111 -0
  29. data/lib/capistrano/tasks/bundler.rake +31 -0
  30. data/lib/capistrano/tasks/crontab.rake +14 -0
  31. data/lib/capistrano/tasks/defaults.rake +137 -0
  32. data/lib/capistrano/tasks/dotenv.rake +57 -0
  33. data/lib/capistrano/tasks/logrotate.rake +16 -0
  34. data/lib/capistrano/tasks/maintenance.rake +28 -0
  35. data/lib/capistrano/tasks/migrate.rake +29 -0
  36. data/lib/capistrano/tasks/nginx.rake +25 -0
  37. data/lib/capistrano/tasks/postgresql.rake +149 -0
  38. data/lib/capistrano/tasks/provision.rake +18 -0
  39. data/lib/capistrano/tasks/puma.rake +67 -0
  40. data/lib/capistrano/tasks/rake.rake +20 -0
  41. data/lib/capistrano/tasks/rbenv.rake +104 -0
  42. data/lib/capistrano/tasks/seed.rake +16 -0
  43. data/lib/capistrano/tasks/sidekiq.rake +42 -0
  44. data/lib/capistrano/tasks/ssl.rake +57 -0
  45. data/lib/capistrano/tasks/ufw.rake +32 -0
  46. data/lib/capistrano/tasks/user.rake +32 -0
  47. data/lib/capistrano/tasks/version.rake +34 -0
  48. metadata +161 -0
data/lib/capistrano/atlas/recipe.rb ADDED
@@ -0,0 +1,49 @@
1
+ module Capistrano
2
+ module Atlas
3
+ class Recipe
4
+ attr_reader :name
5
+
6
+ def initialize(name)
7
+ @name = name.to_s
8
+ end
9
+
10
+ def enabled?
11
+ fetch(:atlas_recipes, []).map(&:to_s).include?(name)
12
+ end
13
+
14
+ def prior_to(task_to_extend, *recipe_tasks)
15
+ inject_tasks(:before, task_to_extend, *recipe_tasks)
16
+ end
17
+
18
+ def during(task_to_extend, *recipe_tasks)
19
+ inject_tasks(:after, task_to_extend, *recipe_tasks)
20
+ end
21
+
22
+ private
23
+
24
+ def inject_tasks(method, task_to_extend, *recipe_tasks)
25
+ create_task_unless_exists(task_to_extend)
26
+
27
+ recipe_tasks.flatten.each do |task|
28
+ qualified_task = apply_namespace(task)
29
+ create_task_unless_exists("#{qualified_task}:if_enabled") do
30
+ invoke qualified_task if enabled?
31
+ end
32
+ send(method, task_to_extend, "#{qualified_task}:if_enabled")
33
+ end
34
+ end
35
+
36
+ def apply_namespace(task_name)
37
+ return task_name if task_name.include?(":")
38
+
39
+ "atlas:#{name}:#{task_name}"
40
+ end
41
+
42
+ def create_task_unless_exists(task_name, &block)
43
+ unless Rake::Task.task_defined?(task_name)
44
+ Rake::Task.define_task(task_name, &block)
45
+ end
46
+ end
47
+ end
48
+ end
49
+ end
data/lib/capistrano/atlas/templates/crontab.erb ADDED
@@ -0,0 +1 @@
1
+ # Sample crontab (empty)
data/lib/capistrano/atlas/templates/csr_config.erb ADDED
@@ -0,0 +1,10 @@
1
+ [ req ]
2
+ distinguished_name="req_distinguished_name"
3
+ prompt="no"
4
+
5
+ [ req_distinguished_name ]
6
+ C="<%= fetch(:atlas_ssl_csr_country) %>"
7
+ ST="<%= fetch(:atlas_ssl_csr_state) %>"
8
+ L="<%= fetch(:atlas_ssl_csr_city) %>"
9
+ O="<%= fetch(:atlas_ssl_csr_org) %>"
10
+ CN="<%= fetch(:atlas_ssl_csr_name) %>"
data/lib/capistrano/atlas/templates/logrotate.erb ADDED
@@ -0,0 +1,9 @@
1
+ <%= shared_path %>/log/*.log {
2
+ daily
3
+ nomissingok
4
+ rotate 7
5
+ compress
6
+ delaycompress
7
+ notifempty
8
+ copytruncate
9
+ }
data/lib/capistrano/atlas/templates/maintenance.html.erb ADDED
@@ -0,0 +1,26 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <meta charset="utf-8">
5
+ <title>Maintenance</title>
6
+ <style type="text/css">
7
+ body {
8
+ width: 500px;
9
+ margin: 100px auto;
10
+ font: 300 120% "OpenSans", "Helvetica Neue", "Helvetica", Arial, Verdana, sans-serif;
11
+ }
12
+
13
+ h1 {
14
+ font-weight: 300;
15
+ }
16
+ </style>
17
+ </head>
18
+ <body>
19
+ <h1>Maintenance</h1>
20
+
21
+ <p>Our systems are currently down for <%= reason ? reason : "maintenance" %><br>
22
+ as of <%= Time.now.strftime("%H:%M %Z") %>.</p>
23
+
24
+ <p>We’ll be back <%= deadline ? deadline : "shortly" %>.</p>
25
+ </body>
26
+ </html>
data/lib/capistrano/atlas/templates/nginx.erb ADDED
@@ -0,0 +1,64 @@
1
+ # Based on https://github.com/defunkt/unicorn/blob/master/examples/nginx.conf
2
+
3
+ user www-data;
4
+ pid /run/nginx.pid;
5
+ error_log /var/log/nginx/error.log;
6
+
7
+ # you generally only need one nginx worker unless you're serving
8
+ # large amounts of static files which require blocking disk reads
9
+ worker_processes 1;
10
+
11
+ events {
12
+ worker_connections 1024; # increase if you have lots of clients
13
+ accept_mutex off; # "on" if nginx worker_processes > 1
14
+ use epoll; # for Linux 2.6+
15
+ }
16
+
17
+ http {
18
+ # ensure nginx is able to load lots of third-party modules
19
+ types_hash_max_size 2048;
20
+ server_names_hash_bucket_size 64;
21
+
22
+ # nginx will find this file in the config directory set at nginx build time
23
+ include mime.types;
24
+
25
+ # fallback in case we can't determine a type
26
+ default_type application/octet-stream;
27
+
28
+ # click tracking!
29
+ access_log /var/log/nginx/access.log combined;
30
+
31
+ # you generally want to serve static files with nginx since neither
32
+ # Unicorn nor Rainbows! is optimized for it at the moment
33
+ sendfile on;
34
+
35
+ # configure reverse proxy cache
36
+ proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=default:8m max_size=1000m inactive=30d;
37
+ proxy_temp_path /var/cache/nginx/tmp;
38
+
39
+ tcp_nopush on; # off may be better for *some* Comet/long-poll stuff
40
+ tcp_nodelay off; # on may be better for some Comet/long-poll stuff
41
+
42
+ # we haven't checked to see if Rack::Deflate on the app server is
43
+ # faster or not than doing compression via nginx. It's easier
44
+ # to configure it all in one place here for static files and also
45
+ # to disable gzip for clients who don't get gzip/deflate right.
46
+ # There are other gzip settings that may be needed used to deal with
47
+ # bad clients out there, see http://wiki.nginx.org/NginxHttpGzipModule
48
+ gzip on;
49
+ gzip_http_version 1.0;
50
+ gzip_proxied any;
51
+ gzip_min_length 500;
52
+ gzip_disable "MSIE [1-6]\.";
53
+ gzip_types text/plain text/xml text/css
54
+ text/comma-separated-values
55
+ text/javascript application/x-javascript
56
+ application/atom+xml;
57
+
58
+
59
+ # Allow SSL session resumption
60
+ ssl_session_cache shared:SSL:10m;
61
+
62
+ include /etc/nginx/conf.d/*.conf;
63
+ include /etc/nginx/sites-enabled/*;
64
+ }
data/lib/capistrano/atlas/templates/nginx_site.erb ADDED
@@ -0,0 +1,97 @@
1
+ # Based on https://github.com/defunkt/unicorn/blob/master/examples/nginx.conf
2
+
3
+ upstream <%= fetch(:atlas_server_name) %>_<%= application_basename %> {
4
+ server unix:/tmp/<%= fetch(:atlas_server_name) %>.<%= application_basename %>.sock fail_timeout=0;
5
+ }
6
+
7
+ <% [80, 443].each do |port| %>
8
+
9
+ <% fetch(:atlas_nginx_redirect_hosts).each do |orig, desired| %>
10
+ server {
11
+ listen <%= port %>;
12
+ server_name <%= orig %>;
13
+ return 301 <%= fetch(:atlas_nginx_force_https) ? "https" : "$scheme" %>://<%= desired %>$request_uri;
14
+ }
15
+ <% end %>
16
+
17
+ server {
18
+ listen <%= port %> <%= "spdy" if port == 443 %> default deferred; # for Linux
19
+
20
+ <% if port == 80 && fetch(:atlas_nginx_force_https) %>
21
+ rewrite ^(.*) https://$http_host$1 permanent;
22
+ <% else %>
23
+
24
+ client_max_body_size 4G;
25
+ server_name _;
26
+
27
+ # ~2 seconds is often enough for most folks to parse HTML/CSS and
28
+ # retrieve needed images/icons/frames, connections are cheap in
29
+ # nginx so increasing this is generally safe...
30
+ keepalive_timeout 5;
31
+
32
+ # path for static files
33
+ root <%= current_path %>/public;
34
+
35
+ # Capistrano `deploy:web:disable` support
36
+ if (-f $document_root/system/maintenance.html) {
37
+ return 503;
38
+ }
39
+ error_page 503 @maintenance;
40
+ location @maintenance {
41
+ rewrite ^(.*)$ /system/maintenance.html last;
42
+ break;
43
+ }
44
+
45
+ <% if port == 443 %>
46
+ ssl on;
47
+ ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:RSA+3DES:!ADH:!AECDH:!MD5;
48
+ ssl_prefer_server_ciphers on;
49
+ ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
50
+ ssl_certificate /etc/ssl/<%= application_basename %>.crt;
51
+ ssl_certificate_key /etc/ssl/<%= application_basename %>.key;
52
+
53
+ <% if fetch(:atlas_nginx_force_https) %>
54
+ add_header Strict-Transport-Security "max-age=631138519";
55
+ <% end %>
56
+ <% end %>
57
+
58
+ # Far-future expires and gzip for fingerprinted assets
59
+ location ^~ /<%= fetch(:assets_prefix, "assets") %>/ {
60
+ gzip_static on;
61
+ expires max;
62
+ add_header Cache-Control public;
63
+ }
64
+
65
+ include /etc/nginx/<%= application_basename%>-locations/*;
66
+
67
+ # Prefer to serve static files directly from nginx to avoid unnecessary
68
+ # data copies from the application server.
69
+ try_files $uri/index.html $uri @<%= fetch(:atlas_server_name) %>;
70
+
71
+ location @<%= fetch(:atlas_server_name) %> {
72
+ # an HTTP header important enough to have its own Wikipedia entry:
73
+ # http://en.wikipedia.org/wiki/X-Forwarded-For
74
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
75
+
76
+ # this helps Rack set the proper URL scheme for doing HTTPS redirects:
77
+ proxy_set_header X-Forwarded-Proto $scheme;
78
+
79
+ # pass the Host: header from the client right along so redirects
80
+ # can be set properly within the Rack application
81
+ proxy_set_header Host $http_host;
82
+
83
+ # we don't want nginx trying to do something clever with
84
+ # redirects, we set the Host: header above already.
85
+ proxy_redirect off;
86
+
87
+ proxy_pass http://<%= fetch(:atlas_server_name) %>_<%= application_basename %>;
88
+ }
89
+
90
+ # Rails error pages
91
+ error_page 500 502 503 504 /500.html;
92
+ location = /500.html {
93
+ root <%= current_path %>/public;
94
+ }
95
+ <% end %>
96
+ }
97
+ <% end %>
data/lib/capistrano/atlas/templates/pgpass.erb ADDED
@@ -0,0 +1 @@
1
+ <%= fetch(:atlas_postgresql_host) %>:5432:<%= fetch(:atlas_postgresql_database) %>:<%= fetch(:atlas_postgresql_user) %>:<%= fetch(:atlas_postgresql_password).gsub(/([\\:])/, '\\\\\1') %>
data/lib/capistrano/atlas/templates/postgresql-backup-logrotate.erb ADDED
@@ -0,0 +1,11 @@
1
+ <%= fetch(:atlas_postgresql_backup_path) %> {
2
+ daily
3
+ nomissingok
4
+ rotate 30
5
+ ifempty
6
+ create 600 <%= user %>
7
+ dateext
8
+ postrotate
9
+ /usr/bin/sudo -u <%= user %> PGPASSFILE=<%= fetch(:atlas_postgresql_pgpass_path) %> /usr/bin/pg_dump -Fc -Z9 -O -x <%= fetch(:atlas_postgresql_dump_options) %> -h <%= fetch(:atlas_postgresql_host) %> -U <%= fetch(:atlas_postgresql_user) %> -f <%= fetch(:atlas_postgresql_backup_path) %> <%= fetch(:atlas_postgresql_database) %>
10
+ endscript
11
+ }
data/lib/capistrano/atlas/templates/puma.rb.erb ADDED
@@ -0,0 +1,22 @@
1
+ #!/usr/bin/env puma
2
+
3
+ directory "<%= current_path %>"
4
+ environment "<%= fetch(:rails_env) %>"
5
+
6
+ daemonize
7
+ pidfile "<%= fetch(:atlas_puma_pid) %>"
8
+ state_path "<%= current_path %>/tmp/pids/puma.state"
9
+ stdout_redirect "<%= fetch(:atlas_puma_stdout_log) %>",
10
+ "<%= fetch(:atlas_puma_stderr_log) %>",
11
+ true
12
+
13
+ threads <%= fetch(:atlas_puma_threads) %>
14
+
15
+ <% if fetch(:atlas_puma_workers, 0) > 1 %>
16
+ workers <%= fetch(:atlas_puma_workers) %>
17
+ worker_timeout <%= fetch(:atlas_puma_timeout) %>
18
+ <% end %>
19
+
20
+ bind "unix:/tmp/puma.<%= application_basename %>.sock"
21
+ prune_bundler
22
+ tag "<%= application_basename %>"
data/lib/capistrano/atlas/templates/puma_init.erb ADDED
@@ -0,0 +1,43 @@
1
+ #!/bin/sh
2
+ ### BEGIN INIT INFO
3
+ # Provides: puma
4
+ # Required-Start: $remote_fs $syslog
5
+ # Required-Stop: $remote_fs $syslog
6
+ # Default-Start: 2 3 4 5
7
+ # Default-Stop: 0 1 6
8
+ # Short-Description: Manage puma server
9
+ # Description: Start, stop, restart puma server for a specific application.
10
+ ### END INIT INFO
11
+ set -e
12
+
13
+ APP_ROOT=<%= current_path %>
14
+ PUMACTL_CMD="cd <%= current_path %>; bundle exec pumactl -F <%= fetch(:atlas_puma_config) %>"
15
+ AS_USER=<%= puma_user %>
16
+ set -u
17
+
18
+ pumactl () {
19
+ if [ "$(id -un)" = "$AS_USER" ]; then
20
+ eval $PUMACTL_CMD $1
21
+ else
22
+ su -c "$PUMACTL_CMD $1" - $AS_USER
23
+ fi
24
+ }
25
+
26
+ case "$1" in
27
+ start)
28
+ pumactl "start"
29
+ ;;
30
+ stop)
31
+ pumactl "stop"
32
+ ;;
33
+ restart|reload)
34
+ pumactl "phased-restart"
35
+ ;;
36
+ status)
37
+ pumactl "status"
38
+ ;;
39
+ *)
40
+ echo >&2 "Usage: $0 <start|stop|restart|status>"
41
+ exit 1
42
+ ;;
43
+ esac
data/lib/capistrano/atlas/templates/rbenv_bashrc ADDED
@@ -0,0 +1,4 @@
1
+ if [ -d $HOME/.rbenv ]; then
2
+ export PATH="$HOME/.rbenv/bin:$PATH"
3
+ eval "$(rbenv init -)"
4
+ fi
data/lib/capistrano/atlas/templates/sidekiq_init.erb ADDED
@@ -0,0 +1,100 @@
1
+ #!/bin/sh
2
+ ### BEGIN INIT INFO
3
+ # Provides: sidekiq
4
+ # Required-Start: $remote_fs $syslog
5
+ # Required-Stop: $remote_fs $syslog
6
+ # Default-Start: 2 3 4 5
7
+ # Default-Stop: 0 1 6
8
+ # Short-Description: Manage sidekiq worker
9
+ # Description: Start, stop, restart sidekiq worker.
10
+ ### END INIT INFO
11
+
12
+ APP_DIR="<%= current_path %>"
13
+ LOG_FILE="$APP_DIR/log/sidekiq.log"
14
+ PID_FILE="$APP_DIR/tmp/pids/sidekiq.pid"
15
+ SIDEKIQ="sidekiq"
16
+ SIDEKIQCTL="sidekiqctl"
17
+ APP_ENV="<%= fetch(:rails_env) %>"
18
+ BUNDLE="bundle"
19
+ AS_USER=<%= fetch(:atlas_sidekiq_user, user) %>
20
+ CONCURRENCY=<%= fetch(:atlas_sidekiq_concurrency) %>
21
+
22
+ START_CMD="cd $APP_DIR; $BUNDLE exec $SIDEKIQ -d -e $APP_ENV -P $PID_FILE --concurrency $CONCURRENCY -L $LOG_FILE"
23
+ CTL_CMD="cd $APP_DIR; $BUNDLE exec $SIDEKIQCTL"
24
+ RETVAL=0
25
+
26
+
27
+ run () {
28
+ if [ "$(id -un)" = "$AS_USER" ]; then
29
+ eval $1
30
+ else
31
+ su -c "$1" - $AS_USER
32
+ fi
33
+ }
34
+
35
+ start() {
36
+
37
+ status
38
+ if [ $? -eq 1 ]; then
39
+
40
+ [ -d $APP_DIR ] || (echo "$APP_DIR not found!.. Exiting"; exit 6)
41
+ echo "Starting $SIDEKIQ message processor .. "
42
+ run "$START_CMD"
43
+ RETVAL=$?
44
+ #Sleeping for 8 seconds for process to be precisely visible in process table - See status ()
45
+ sleep 8
46
+ return $RETVAL
47
+ else
48
+ echo "$SIDEKIQ message processor is already running .. "
49
+ fi
50
+
51
+
52
+ }
53
+
54
+ stop() {
55
+
56
+ status
57
+ if [ $? -eq 0 ]; then
58
+
59
+ echo "Stopping $SIDEKIQ message processor .."
60
+ run "$CTL_CMD stop $PID_FILE"
61
+ RETVAL=$?
62
+ return $RETVAL
63
+
64
+ else
65
+ echo "$SIDEKIQ message processor is already stopped .. "
66
+ fi
67
+
68
+ }
69
+
70
+ status() {
71
+
72
+ ps -ef | egrep 'sidekiq [0-9]+.[0-9]+.[0-9]+' | grep -v grep
73
+ return $?
74
+ }
75
+
76
+
77
+ case "$1" in
78
+ start)
79
+ start
80
+ ;;
81
+ stop)
82
+ stop
83
+ ;;
84
+ status)
85
+ status
86
+
87
+ if [ $? -eq 0 ]; then
88
+ echo "$SIDEKIQ message processor is running .."
89
+ RETVAL=0
90
+ else
91
+ echo "$SIDEKIQ message processor is stopped .."
92
+ RETVAL=1
93
+ fi
94
+ ;;
95
+ *)
96
+ echo "Usage: $0 {start|stop|status}"
97
+ exit 0
98
+ ;;
99
+ esac
100
+ exit $RETVAL