from-scratch 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 5b496c570f495a440506371b464e4533fb5470bb
+  data.tar.gz: 33954a19f5906d5b5c8af4d27cc0f95793084488
+SHA512:
+  metadata.gz: c7fdbec146ed46a5ddd7eb85ed9f6888400074903d09484959665a242331490704cf6a17d2e6b728b87de8e7876294b99a5e8a47cd0d7a6ba9a0bb637722a680
+  data.tar.gz: d390f3867386c55f06e2e4ad61c06acbe9c85c24529ac7125583b1fb2fb7b923fc673f6ef85ebd24fb5fd625cd634c18dfbf0c290ddd982647d5b70bd0afa2f4

data/.chef/knife.rb

@@ -0,0 +1,6 @@
+cookbook_path    "cookbooks"
+node_path        "tmp/nodes"
+data_bag_path    "tmp/data_bags"
+
+knife[:berkshelf_path] = "cookbooks"
+Chef::Config[:ssl_verify_mode] = :verify_peer if defined? ::Chef

data/.gitignore

@@ -0,0 +1,9 @@
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/

data/.rspec

@@ -0,0 +1,2 @@
+--format documentation
+--color

data/.travis.yml

@@ -0,0 +1,4 @@
+language: ruby
+rvm:
+  - 2.2.2
+before_install: gem install bundler -v 1.10.6

data/Berksfile

@@ -0,0 +1,17 @@
+#!/usr/bin/env ruby
+#^syntax detection
+
+source "https://supermarket.chef.io"
+
+metadata
+
+cookbook 'user'
+cookbook 'rvm', github: 'fnichol/chef-rvm'
+cookbook 'postgresql'
+
+# cookbook 'dpkg_packages', git: "https://gitlab.acid.cl/acidlabs/chef-dpkg-packages.git"
+# cookbook 'nginx',         git: "https://gitlab.acid.cl/acidlabs/chef-nginx.git"
+# cookbook 'postgresql',    git: "https://github.com/phlipper/chef-postgresql.git"
+# cookbook 'rvm'
+# cookbook 'ssh-hardening'
+# cookbook 'sudo'

data/Berksfile.lock

@@ -0,0 +1,19 @@
+DEPENDENCIES
+  rvm
+    git: git://github.com/fnichol/chef-rvm.git
+    revision: 08ec265f277e112a5a2e4b201bd32ddfe1bb968c
+  scratchify
+    path: .
+    metadata: true
+  user
+
+GRAPH
+  chef_gem (0.1.0)
+  java (1.35.0)
+  rvm (0.10.1)
+    chef_gem (>= 0.0.0)
+    java (>= 0.0.0)
+  scratchify (0.1.0)
+    rvm (>= 0.0.0)
+    user (>= 0.0.0)
+  user (0.4.2)

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in from-scratch.gemspec
+gemspec

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2015 Andrew Shaydurov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,58 @@
+# FromScratch
+
+I'm sick and tired of thousands of articles "How to setup Rails app server". Here is your last command to do that.
+
+No configs, no questions. Just ~~one ring to rule them all~~ one command to get fully functional server with best security practices ready for first `cap production deploy`.
+
+## Usage
+
+    $ gem install from-scratch
+    $ scratchify your_app_name your.host.com
+
+And everything is done. Then add following to your `config/deploy.rb` or `config/deploy/production.rb` for Capistrano:
+
+```ruby
+server 'your.host.com', user: 'deploy', roles: %w(app db web)
+set :deploy_to, "/home/deploy/your_app_name"
+```
+
+## Supports
+
+OS:
+
+  - APT-based Linux (Ubuntu, Debian)
+  - YUM-based Linux (RedHat, CentOS)
+
+## It's a kind of magic!
+
+Not actully. Just preconfigured [Chef](https://www.chef.io/). Here are the things done with the command:
+
+  - Install system-wide RVM with latest MRI (2.2.3)
+  - Install PostgreSQL, create database with user, pg_tune a little
+  - Add _deploy_ non-admin user to system specially for your app, upload your SSH pub key to it
+  - Install nginx and replace it's default site config with one prepared for rails app
+  - Generate app folder inside _deploy_'s home and generate `database.yml` and `secrets.yml`
+
+## Things you need to know
+
+Nginx config is set up to connect to unix socket placed at `/home/deploy/your_app_name/shared/tmp/sockets/application.sock`. Change it manually or config your favorite app server (Puma, Unicorn, Thin etc) to place it's socket there.
+
+You can just `ssh deploy@your.host.com` because your SSH pub key is already there.
+
+Both `postgres` and `your_app_name` DB users get (different) randomly generated passwords. You can see app-user password inside `config/database.yml`, but `postgres` password is not saved anywhere. If you need admin access to your PostgreSQL, then you should SSH as root and:
+
+    # su - postgres
+    $ psql
+
+## Development
+
+TODO
+
+## Contributing
+
+TODO
+
+## License
+
+The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).
+

data/Rakefile

@@ -0,0 +1,6 @@
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task :default => :spec

data/Thorfile

@@ -0,0 +1,5 @@
+# encoding: utf-8
+
+require 'bundler'
+require 'bundler/setup'
+require 'berkshelf/thor'

data/bin/scratchify

@@ -0,0 +1,6 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "from-scratch"
+
+FromScratch.run!

data/chefignore

@@ -0,0 +1,101 @@
+# Put files/directories that should be ignored in this file when uploading
+# or sharing to the community site.
+# Lines that start with '# ' are comments.
+
+# OS generated files #
+######################
+.DS_Store
+Icon?
+nohup.out
+ehthumbs.db
+Thumbs.db
+
+# SASS #
+########
+.sass-cache
+
+# EDITORS #
+###########
+\#*
+.#*
+*~
+*.sw[a-z]
+*.bak
+REVISION
+TAGS*
+tmtags
+*_flymake.*
+*_flymake
+*.tmproj
+.project
+.settings
+mkmf.log
+
+## COMPILED ##
+##############
+a.out
+*.o
+*.pyc
+*.so
+*.com
+*.class
+*.dll
+*.exe
+*/rdoc/
+
+# Testing #
+###########
+.watchr
+.rspec
+spec/*
+spec/fixtures/*
+test/*
+features/*
+Guardfile
+Procfile
+
+# SCM #
+#######
+.git
+*/.git
+.gitignore
+.gitmodules
+.gitconfig
+.gitattributes
+.svn
+*/.bzr/*
+*/.hg/*
+*/.svn/*
+
+# Berkshelf #
+#############
+cookbooks/*
+tmp
+
+# Cookbooks #
+#############
+CONTRIBUTING
+CHANGELOG*
+
+# Strainer #
+############
+Colanderfile
+Strainerfile
+.colander
+.strainer
+
+# Vagrant #
+###########
+.vagrant
+Vagrantfile
+
+# Travis #
+##########
+.travis.yml
+
+# Gem files #
+Gemfile
+Gemfile.lock
+Rakefile
+lib/*
+bin/*

data/cookbooks/chef_gem/CHANGELOG.md

@@ -0,0 +1,24 @@
+v0.1.0
+------
+* Add name to metadata.rb (thanks [Eli Klein](https://github.com/eklein))
+
+v0.0.5
+------
+* Applies backport of CHEF-3164 to _all_ versions under 10.14.0 (thanks [cgriego](https://github.com/cgriego))
+
+v0.0.4
+------
+* Backports CHEF-3164 (thanks [cgriego](https://github.com/cgriego))
+
+v0.0.3
+------
+* Default node in overrides if it is unavailable
+
+v0.0.2
+------
+* Add omnibus fixes for installs < 0.10.12
+* Add conditional patching based on chef version
+
+v0.0.1
+------
+* Initial release

data/cookbooks/chef_gem/README.md

@@ -0,0 +1,38 @@
+ChefGem
+=======
+
+This cookbook is a transition cookbook aimed at helping move from the
+pre-chef_gem era to the post chef_gem era. The chef_gem resource was
+introducde in Chef 0.10.9, providing an easy mechanism for installing
+and using gems required by Chef internally. When used within an omnibus
+installation, chef_gems are installed within the embedded Ruby.
+
+What this cookbook provides
+----------------------------
+
+For pre 0.10.9 Chef installations, it provides a chef_gem compatible resouce
+allowing cookbooks to be updated but not requiring full conversions. For installations
+under 0.10.12, some patches are added to aid in proper omnibus functionality allowing
+chef_gem to work as expected. For Chef installations of 0.10.12 and beyond, this
+cookbook provides nothing. This means you will get consistent and expected behavior
+across Chef versions.
+
+Configuration
+-------------
+
+Notable attributes (note that these should only be required for special cases):
+
+* `node[:gem_binary] = '/usr/local/bin/gem'`
+* `node[:chef_gem_binary] = '/opt/opscode/embedded/bin/gem'`
+
+Notes
+-----
+
+With the release of 0.10.12 this cookbook should be considered deprecated and used
+only for compatibility with older installations.
+
+Repository
+----------
+
+* https://github.com/hw-cookbooks/chef_gem
+* IRC: Freenode @ #heavywater

data/cookbooks/chef_gem/libraries/chef_gem.rb

@@ -0,0 +1,72 @@
+current_version = Gem::Version.new(Chef::VERSION)
+
+if(current_version < Gem::Version.new('10.12.0'))
+
+  if(current_version < Gem::Version.new('0.10.9'))
+    Chef::Log.info '*** Adding ChefGem Resource ***'
+  else
+    Chef::Log.info '*** Adding fixes to ChefGem Resource ***'
+  end
+  
+  require 'chef/resource/gem_package'
+
+  class Chef::Resource::GemPackage
+    def gem_binary(*args)
+      node ||= {}
+      node[:gem_binary] || 'gem'
+    end
+  end
+
+  class Chef::Resource::ChefGem < Chef::Resource::GemPackage
+
+    #  provides :chef_gem, :on_platforms => :all
+
+    def initialize(name, run_context=nil)
+      super
+      @resource_name = :chef_gem
+      @provider = Chef::Provider::Package::Rubygems
+      after_created
+    end
+
+    def gem_binary(*args)
+      node ||= {}
+      node[:chef_gem_binary] || ::File.join(Gem.bindir, 'gem')
+    end
+
+    def after_created
+      Array(@action).flatten.compact.each do |action|
+        self.run_action(action)
+      end
+      Gem.clear_paths
+    end
+  end
+end
+
+if(Chef::VERSION.to_s.start_with?('0.10.10'))
+  Chef::Log.info '** Patching Chef::Provider::Package::Rubygems#is_omnibus? to properly find all omnibus installs **'
+  class Chef::Provider::Package::Rubygems
+    def is_omnibus?
+      if RbConfig::CONFIG['bindir'] =~ %r!/opt/(opscode|chef)/embedded/bin!
+        Chef::Log.debug("#{@new_resource} detected omnibus installation in #{RbConfig::CONFIG['bindir']}")
+        # Omnibus installs to a static path because of linking on unix, find it.
+        true
+      elsif RbConfig::CONFIG['bindir'].sub(/^[\w]:/, '')  == "/opscode/chef/embedded/bin"
+        Chef::Log.debug("#{@new_resource} detected omnibus installation in #{RbConfig::CONFIG['bindir']}")
+        # windows, with the drive letter removed
+        true
+      else
+        false
+      end
+    end
+  end
+end
+
+if(current_version < Gem::Version.new('10.14.0'))
+  module Chef3164
+    def after_created(*)
+      Gem.clear_paths # NOTE: Related to CHEF-3164
+      super
+    end
+  end
+  Chef::Resource::ChefGem.send(:include, Chef3164)
+end

data/cookbooks/chef_gem/metadata.json

@@ -0,0 +1,29 @@
+{
+  "name": "chef_gem",
+  "description": "Provides proper chef_gem resource support for Chef versions < 0.10.12",
+  "long_description": "ChefGem\n=======\n\nThis cookbook is a transition cookbook aimed at helping move from the\npre-chef_gem era to the post chef_gem era. The chef_gem resource was\nintroducde in Chef 0.10.9, providing an easy mechanism for installing\nand using gems required by Chef internally. When used within an omnibus\ninstallation, chef_gems are installed within the embedded Ruby.\n\nWhat this cookbook provides\n----------------------------\n\nFor pre 0.10.9 Chef installations, it provides a chef_gem compatible resouce\nallowing cookbooks to be updated but not requiring full conversions. For installations\nunder 0.10.12, some patches are added to aid in proper omnibus functionality allowing\nchef_gem to work as expected. For Chef installations of 0.10.12 and beyond, this\ncookbook provides nothing. This means you will get consistent and expected behavior\nacross Chef versions.\n\nConfiguration\n-------------\n\nNotable attributes (note that these should only be required for special cases):\n\n* `node[:gem_binary] = '/usr/local/bin/gem'`\n* `node[:chef_gem_binary] = '/opt/opscode/embedded/bin/gem'`\n\nNotes\n-----\n\nWith the release of 0.10.12 this cookbook should be considered deprecated and used\nonly for compatibility with older installations.\n\nRepository\n----------\n\n* https://github.com/hw-cookbooks/chef_gem\n* IRC: Freenode @ #heavywater",
+  "maintainer": "Chris Roberts",
+  "maintainer_email": "chrisroberts.code@gmail.com",
+  "license": "Apache 2.0",
+  "platforms": {
+  },
+  "dependencies": {
+  },
+  "recommendations": {
+  },
+  "suggestions": {
+  },
+  "conflicting": {
+  },
+  "providing": {
+  },
+  "replacing": {
+  },
+  "attributes": {
+  },
+  "groupings": {
+  },
+  "recipes": {
+  },
+  "version": "0.1.0"
+}