digital_heroes_startkit 0.1.1

data/lib/generators/project/config/deploy/production.rb

@@ -0,0 +1,67 @@
+# server-based syntax
+# ======================
+# Defines a single server with a list of roles and multiple properties.
+# You can define all roles on a single server, or split them:
+
+# server 'example.com', user: 'deploy', roles: %w{app db web}, my_property: :my_value
+# server 'example.com', user: 'deploy', roles: %w{app web}, other_property: :other_value
+# server 'db.example.com', user: 'deploy', roles: %w{db}
+
+
+
+# role-based syntax
+# ==================
+
+# Defines a role with one or multiple servers. The primary server in each
+# group is considered to be the first unless any  hosts have the primary
+# property set. Specify the username and a domain or IP for the server.
+# Don't use `:all`, it's a meta role.
+
+role :app, %w{root@cap_server}
+role :web, %w{root@cap_server}
+role :db,  %w{root@cap_server}
+
+# role :app, %w{deploy@example.com}, my_property: :my_value
+# role :web, %w{user1@primary.com user2@additional.com}, other_property: :other_value
+# role :db,  %w{deploy@example.com}
+
+
+
+# Configuration
+# =============
+# You can set any configuration variable like in config/deploy.rb
+# These variables are then only loaded and set in this stage.
+# For available Capistrano configuration variables see the documentation page.
+# http://capistranorb.com/documentation/getting-started/configuration/
+# Feel free to add new variables to customise your setup.
+
+
+
+# Custom SSH Options
+# ==================
+# You may pass any option but keep in mind that net/ssh understands a
+# limited set of options, consult the Net::SSH documentation.
+# http://net-ssh.github.io/net-ssh/classes/Net/SSH.html#method-c-start
+#
+# Global options
+# --------------
+#  set :ssh_options, {
+#    user: 'root',
+#    keys: %w(~/.ssh/id_rsa),
+#    forward_agent: true,
+#    auth_methods: %w(publickey),
+#    passphrase: 'pussy'
+#  }
+#
+# The server-based syntax can be used to override options:
+# ------------------------------------
+server 'cap_server',
+  user: 'root',
+  roles: %w{web app},
+  ssh_options: {
+    keys: %w(~/.ssh/id_rsa),
+    forward_agent: true,
+    auth_methods: %w(publickey),
+    passphrase: 'cap_passphrase'
+  }
+

data/lib/generators/project/config/deploy/secrets.yml

@@ -0,0 +1,32 @@
+# Be sure to restart your server when you modify this file.
+
+# Your secret key is used for verifying the integrity of signed cookies.
+# If you change this key, all old signed cookies will become invalid!
+
+# Make sure the secret is at least 30 characters and all random,
+# no regular words or you'll be exposed to dictionary attacks.
+# You can use `rails secret` to generate a secure secret key.
+
+# Make sure the secrets in this file are kept private
+# if you're sharing your code publicly.
+
+# Shared secrets are available across all environments.
+
+# shared:
+#   api_key: a1B2c3D4e5F6
+
+# Environmental secrets are only available for that specific environment.
+
+development:
+  secret_key_base: 7ff3b76410a4c14ad8838e6346fe9db0b70870c620fa29010f1651c07bf98a7859e0960392d23830a59e958bb319010a916a91575c72cb8ee00553c14df66d4d
+
+test:
+  secret_key_base: c9efcdd85fbe9746a2e7c312e6d20bc1e6ed3b736ac3ad6e6365d62e5b54c96f97246198c7ff5f8a8b93228c09de0dcb0ccd65b9401e6fd7a137630fbf3cc7ad
+
+# Do not keep production secrets in the unencrypted secrets file.
+# Instead, either read values from the environment.
+# Or, use `bin/rails secrets:setup` to configure encrypted secrets
+# and move the `production:` environment over there.
+
+production:
+  secret_key_base: c9efcdd85fbe9746a2e7c312e6d20bc1e6ed3b736ac3ad6e6365d62e5b54c96f97246198c7ff5f8a8b93228c09de0dcb0ccd65b9401e6fd7a137630fbf3cc7ad

data/lib/generators/project/config/deploy/secrets.yml.enc

@@ -0,0 +1 @@
+MPKpTQBQxrvDUNb5sp3F0BhbkBMh/inAqPYsgmvPcdZSazGEYtZUaVbGxz4B06gB0MbhSfs3HWDb+OXK6cwURAzMmEfqWKhhRJiLuPjR+UjvSKAeykL1prWSFwad7+flVglgKJTH/XSqUdc0HY0feZvUUIlPamidJyfJ30CsbQE0h3RGmt9CnqrAyZ+fzP6lKHdQSpg=--HgeBlbKi/YsUTBia--P2ZlSAWAQgIps/iwdL08Tw==

data/lib/generators/project/config/deploy/secrets.yml.key

@@ -0,0 +1 @@
+b47e679d3adc2cafdc65515a486a5a36

data/lib/generators/project/config/deploy/staging.rb

@@ -0,0 +1,61 @@
+# server-based syntax
+# ======================
+# Defines a single server with a list of roles and multiple properties.
+# You can define all roles on a single server, or split them:
+
+# server 'example.com', user: 'deploy', roles: %w{app db web}, my_property: :my_value
+# server 'example.com', user: 'deploy', roles: %w{app web}, other_property: :other_value
+# server 'db.example.com', user: 'deploy', roles: %w{db}
+
+
+
+# role-based syntax
+# ==================
+
+# Defines a role with one or multiple servers. The primary server in each
+# group is considered to be the first unless any  hosts have the primary
+# property set. Specify the username and a domain or IP for the server.
+# Don't use `:all`, it's a meta role.
+
+# role :app, %w{deploy@example.com}, my_property: :my_value
+# role :web, %w{user1@primary.com user2@additional.com}, other_property: :other_value
+# role :db,  %w{deploy@example.com}
+
+
+
+# Configuration
+# =============
+# You can set any configuration variable like in config/deploy.rb
+# These variables are then only loaded and set in this stage.
+# For available Capistrano configuration variables see the documentation page.
+# http://capistranorb.com/documentation/getting-started/configuration/
+# Feel free to add new variables to customise your setup.
+
+
+
+# Custom SSH Options
+# ==================
+# You may pass any option but keep in mind that net/ssh understands a
+# limited set of options, consult the Net::SSH documentation.
+# http://net-ssh.github.io/net-ssh/classes/Net/SSH.html#method-c-start
+#
+# Global options
+# --------------
+#  set :ssh_options, {
+#    keys: %w(/home/rlisowski/.ssh/id_rsa),
+#    forward_agent: false,
+#    auth_methods: %w(password)
+#  }
+#
+# The server-based syntax can be used to override options:
+# ------------------------------------
+# server 'example.com',
+#   user: 'user_name',
+#   roles: %w{web app},
+#   ssh_options: {
+#     user: 'user_name', # overrides user setting above
+#     keys: %w(/home/user_name/.ssh/id_rsa),
+#     forward_agent: false,
+#     auth_methods: %w(publickey password)
+#     # password: 'please use keys'
+#   }

data/lib/generators/project/config/deploy/virgin_conf/database.yml

@@ -0,0 +1,42 @@
+# MySQL. Versions 5.0 and up are supported.
+#
+# Install the MySQL driver
+#   gem install mysql2
+#
+# Ensure the MySQL gem is defined in your Gemfile
+#   gem 'mysql2'
+#
+# And be sure to use new-style password hashing:
+#   http://dev.mysql.com/doc/refman/5.7/en/old-client.html
+#
+default: &default
+  adapter: mysql2
+  encoding: utf8
+  pool: 50
+  username: cap_db_user
+  password: cap_db_password
+#  socket: /tmp/mysql.sock
+  socket: /var/run/mysqld/mysqld.sock
+
+# As with config/secrets.yml, you never want to store sensitive information,
+# like your database password, in your source code. If your source code is
+# ever seen by anyone, they now have access to your database.
+#
+# Instead, provide the password as a unix environment variable when you boot
+# the app. Read http://guides.rubyonrails.org/configuring.html#configuring-a-database
+# for a full rundown on how to provide these environment variables in a
+# production deployment.
+#
+# On Heroku and other platform providers, you may have a full connection URL
+# available as an environment variable. For example:
+#
+#   DATABASE_URL="mysql2://myuser:mypass@localhost/somedatabase"
+#
+# You can use this database configuration with:
+#
+#   production:
+#     url: <%= ENV['DATABASE_URL'] %>
+#
+production:
+  <<: *default
+  database: cap_application

data/lib/generators/project/config/deploy/virgin_conf/nginx_site.conf

@@ -0,0 +1,47 @@
+upstream cap_application {
+    # Path to Puma SOCK file, as defined previously
+    server unix:/cap_shared_path/sockets/puma.sock fail_timeout=0;
+}
+
+server {
+    listen 443;
+
+    if ( $scheme = 'https' ) {
+        rewrite ^/(.*) http://$host/$1;
+    }
+}
+
+
+server {
+
+    listen 80;
+    server_name cap_application;
+
+    root cap_current_path/public;
+
+    try_files $uri/index.html $uri @cap_application;
+
+    location @cap_application {
+        proxy_pass http://cap_application;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Host $http_host;
+        proxy_redirect off;
+    }
+
+    location /cable {
+        proxy_pass http://cap_application;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "Upgrade";
+
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_redirect off;
+    }
+
+    error_page 500 502 503 504 /500.html;
+    client_max_body_size 1G;
+    keepalive_timeout 10;
+}

data/lib/generators/project/config/deploy/virgin_conf/nginx_site_ssl.conf

@@ -0,0 +1,57 @@
+upstream cap_application {
+    # Path to Puma SOCK file, as defined previously
+    server unix://cap_shared_path/sockets/puma.sock fail_timeout=0;
+}
+
+server {
+    listen 80;
+
+    if ( $scheme = 'http' ) {
+        rewrite ^/(.*) https://$host/$1;
+    }
+}
+
+server {
+    listen 443;
+    ssl on;
+    ssl_certificate /etc/ssl/cap_application.crt;
+    ssl_certificate_key /etc/ssl/cap_application.key;
+    server_name cap_domain;
+    ssl_ciphers ALL:-ADH:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP;
+    ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
+
+    root cap_current_path/public;
+
+    try_files $uri/index.html $uri @cap_application;
+
+
+    location @cap_application {
+        proxy_pass http://cap_application;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Host $host:443;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-Port 443;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_redirect off;
+    }
+
+    location /cable {
+        proxy_pass http://cap_application;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "Upgrade";
+
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_redirect off;
+    }
+
+    error_page 500 502 503 504 /500.html;
+    client_max_body_size 1G;
+    keepalive_timeout 10;
+}