kitsune-kit 0.4.1 → 0.6.0

data/lib/kitsune/kit/commands/setup_do_metrics.rb

@@ -1,123 +0,0 @@
-require "thor"
-require "net/ssh"
-require_relative "../defaults"
-require_relative "../options_builder"
-
-module Kitsune
-  module Kit
-    module Commands
-      class SetupDoMetrics < Thor
-        namespace "setup_do_metrics"
-
-        class_option :server_ip, aliases: "-s", required: true, desc: "Server IP address"
-        class_option :ssh_port, aliases: "-p", desc: "SSH port"
-        class_option :ssh_key_path, aliases: "-k", desc: "SSH private key path"
-
-        desc "create", "Install and enable the DigitalOcean Metrics Agent"
-        def create
-          unless Kitsune::Kit::Defaults.metrics[:enable_do_metrics]
-            say "⚠️ DigitalOcean Metrics Agent setup is disabled via ENABLE_DO_METRICS=false", :yellow
-            return
-          end
-
-          filled_options = Kitsune::Kit::OptionsBuilder.build(
-            options,
-            required: [:server_ip],
-            defaults: Kitsune::Kit::Defaults.ssh
-          )
-
-          with_ssh_connection(filled_options) do |ssh|
-            install_agent(ssh)
-          end
-        end
-
-        desc "rollback", "Uninstall the DigitalOcean Metrics Agent"
-        def rollback
-          filled_options = Kitsune::Kit::OptionsBuilder.build(
-            options,
-            required: [:server_ip],
-            defaults: Kitsune::Kit::Defaults.ssh
-          )
-
-          with_ssh_connection(filled_options) do |ssh|
-            uninstall_agent(ssh)
-          end
-        end
-
-        no_commands do
-          def with_ssh_connection(filled_options)
-            Net::SSH.start(
-              filled_options[:server_ip],
-              "deploy",
-              port: filled_options[:ssh_port],
-              keys: [File.expand_path(filled_options[:ssh_key_path])],
-              non_interactive: true,
-              timeout: 5
-            ) do |ssh|
-              yield ssh
-            end
-          end
-
-          def install_agent(ssh)
-            marker = "/usr/local/backups/setup_do_metrics.after"
-
-            script = <<~BASH
-              set -e
-              sudo mkdir -p /usr/local/backups
-
-              if [ -f "#{marker}" ]; then
-                echo "🔁 Metrics Agent already installed, skipping."
-                exit 0
-              fi
-
-              echo "✍🏻 Installing DigitalOcean Metrics Agent..."
-              curl -sSL https://repos.insights.digitalocean.com/install.sh | sudo bash
-
-              sudo touch "#{marker}"
-              echo "✅ Metrics Agent installed"
-
-              ps aux | grep do-agent | grep -v grep || echo "⚠️ do-agent process not found"
-            BASH
-
-            say ssh.exec!(script)
-          end
-
-          def uninstall_agent(ssh)
-            marker = "/usr/local/backups/setup_do_metrics.after"
-
-            script = <<~BASH
-              set -e
-
-              if [ ! -f "#{marker}" ]; then
-                echo "💡 No marker for metrics agent found. Skipping rollback."
-                exit 0
-              fi
-
-              echo "🧹 Uninstalling DigitalOcean Metrics Agent..."
-
-              if dpkg -l | grep -q do-agent; then
-                echo "📦 Removing do-agent package..."
-                sudo apt-get remove --purge -y do-agent
-              else
-                echo "💡 do-agent is not installed, skipping package removal."
-              fi
-
-              if systemctl list-unit-files | grep -q do-agent.service; then
-                echo "✍🏻 Stopping do-agent service..."
-                sudo systemctl stop do-agent || true
-                sudo systemctl disable do-agent || true
-              else
-                echo "💡 do-agent.service not found in systemd, skipping stop/disable"
-              fi
-
-              sudo rm -f "#{marker}"
-              echo "✅ Metrics Agent removed"
-            BASH
-
-            say ssh.exec!(script)
-          end
-        end
-      end
-    end
-  end
-end

data/lib/kitsune/kit/commands/setup_docker_prereqs.rb

@@ -1,151 +0,0 @@
-require "thor"
-require "net/ssh"
-require_relative "../options_builder"
-require_relative "../defaults"
-
-module Kitsune
-  module Kit
-    module Commands
-      class SetupDockerPrereqs < Thor
-        namespace "setup_docker_prereqs"
-
-        class_option :server_ip,    aliases: "-s", required: true, desc: "Server IP address or hostname"
-        class_option :ssh_port,     aliases: "-p", desc: "SSH port"
-        class_option :ssh_key_path, aliases: "-k", desc: "Path to your private SSH key"
-
-        desc "create", "Install Docker prerequisites on the remote server"
-        def create
-          filled_options = Kitsune::Kit::OptionsBuilder.build(
-            options,
-            required: [:server_ip],
-            defaults: Kitsune::Kit::Defaults.ssh
-          )
-
-          with_ssh_connection(filled_options) do |ssh|
-            perform_setup(ssh)
-          end
-        end
-
-        desc "rollback", "Remove installed Docker prerequisites from the remote server"
-        def rollback
-          filled_options = Kitsune::Kit::OptionsBuilder.build(
-            options,
-            required: [:server_ip],
-            defaults: Kitsune::Kit::Defaults.ssh
-          )
-
-          with_ssh_connection(filled_options) do |ssh|
-            perform_rollback(ssh)
-          end
-        end
-
-        no_commands do
-          def with_ssh_connection(filled_options)
-            server = filled_options[:server_ip]
-            port   = filled_options[:ssh_port]
-            key    = File.expand_path(filled_options[:ssh_key_path])
-
-            say "🔑 Connecting as deploy@#{server}:#{port}", :green
-            Net::SSH.start(server, "deploy", port: port, keys: [key], non_interactive: true, timeout: 5) do |ssh|
-              yield ssh
-            end
-          end
-
-          def perform_setup(ssh)
-            output = ssh.exec! <<~EOH
-              set -e
-
-              sudo mkdir -p /usr/local/backups
-              sudo chown deploy:deploy /usr/local/backups
-
-              BACKUP_DIR="/usr/local/backups"
-              SCRIPT_ID="setup_docker_prereqs"
-              BEFORE_FILE="${BACKUP_DIR}/${SCRIPT_ID}.before"
-              AFTER_FILE="${BACKUP_DIR}/${SCRIPT_ID}.after"
-
-              TARGET_PKGS=(
-                apt-transport-https
-                ca-certificates
-                curl
-                gnupg
-                lsb-release
-                software-properties-common
-              )
-
-              echo "✍🏻 TARGET_PKGS=(\${TARGET_PKGS[*]})"
-
-              if [ ! -f "$AFTER_FILE" ]; then
-                for pkg in "\${TARGET_PKGS[@]}"; do
-                  if dpkg -l "\$pkg" &>/dev/null; then
-                    echo "\$pkg" >> "$BEFORE_FILE"
-                  fi
-                done
-
-                echo "✍🏻 Installing prerequisites..."
-                sudo apt-get update -y
-                sudo apt-get install -y "\${TARGET_PKGS[@]}"
-                sudo touch "$AFTER_FILE" && echo "   - marker created at $AFTER_FILE"
-              else
-                echo "🔁 Already set up, ensuring latest"
-                sudo apt-get update -y
-                sudo apt-get install -y "\${TARGET_PKGS[@]}"
-                echo "✅ Prerequisites are current"
-              fi
-            EOH
-            say output
-            say "✅ Docker prerequisites setup completed", :green
-          end
-
-          def perform_rollback(ssh)
-            output = ssh.exec! <<~EOH
-              set -e
-
-              sudo mkdir -p /usr/local/backups
-              sudo chown deploy:deploy /usr/local/backups
-
-              BACKUP_DIR="/usr/local/backups"
-              SCRIPT_ID="setup_docker_prereqs"
-              BEFORE_FILE="${BACKUP_DIR}/${SCRIPT_ID}.before"
-              AFTER_FILE="${BACKUP_DIR}/${SCRIPT_ID}.after"
-
-              TARGET_PKGS=(
-                apt-transport-https
-                ca-certificates
-                curl
-                gnupg
-                lsb-release
-                software-properties-common
-              )
-
-              echo "✍🏻 TARGET_PKGS=(\${TARGET_PKGS[*]})"
-
-              if [ -f "$AFTER_FILE" ]; then
-                to_remove=()
-                for pkg in "\${TARGET_PKGS[@]}"; do
-                  if dpkg -l "\$pkg" &>/dev/null; then
-                    if ! grep -Fxq "\$pkg" "$BEFORE_FILE"; then
-                      to_remove+=("\$pkg")
-                    fi
-                  fi
-                done
-
-                if [ \${#to_remove[@]} -gt 0 ]; then
-                  echo "🔁 Removing packages..."
-                  sudo apt-get remove -y "\${to_remove[@]}" && echo "   - removed: \${to_remove[*]}"
-                else
-                  echo "   - no new packages to remove"
-                fi
-
-                sudo rm -f "$BEFORE_FILE" "$AFTER_FILE" && echo "   - backups removed"
-              else
-                echo "   - no marker for $SCRIPT_ID, skipping removal"
-              fi
-            EOH
-            say output
-            say "✅ Docker prerequisites rollback completed", :green
-          end
-        end
-      end
-    end
-  end
-end

data/lib/kitsune/kit/commands/setup_firewall.rb

@@ -1,132 +0,0 @@
-require "thor"
-require "net/ssh"
-require_relative "../defaults"
-require_relative "../options_builder"
-
-module Kitsune
-  module Kit
-    module Commands
-      class SetupFirewall < Thor
-        namespace "setup_firewall"
-
-        class_option :server_ip,    aliases: "-s", required: true, desc: "Server IP address or hostname"
-        class_option :ssh_port,     aliases: "-p", desc: "SSH port"
-        class_option :ssh_key_path, aliases: "-k", desc: "Path to your private SSH key"
-
-        desc "create", "Setup UFW firewall rules on the remote server"
-        def create
-          filled_options = Kitsune::Kit::OptionsBuilder.build(
-            options,
-            required: [:server_ip],
-            defaults: Kitsune::Kit::Defaults.ssh
-          )
-
-          with_ssh_connection(filled_options) do |ssh|
-            perform_setup(ssh, filled_options)
-          end
-        end
-
-        desc "rollback", "Remove UFW firewall rules and disable UFW on the remote server"
-        def rollback
-          filled_options = Kitsune::Kit::OptionsBuilder.build(
-            options,
-            required: [:server_ip],
-            defaults: Kitsune::Kit::Defaults.ssh
-          )
-
-          with_ssh_connection(filled_options) do |ssh|
-            perform_rollback(ssh, filled_options)
-          end
-        end
-
-        no_commands do
-          def with_ssh_connection(filled_options)
-            server = filled_options[:server_ip]
-            port   = filled_options[:ssh_port]
-            key    = File.expand_path(filled_options[:ssh_key_path])
-
-            say "🔑 Connecting as deploy@#{server}:#{port}", :green
-            Net::SSH.start(server, "deploy", port: port, keys: [key], non_interactive: true, timeout: 5) do |ssh|
-              yield ssh
-            end
-          end
-
-          def perform_setup(ssh, filled_options)
-            ssh_port = filled_options[:ssh_port]
-
-            output = ssh.exec! <<~EOH
-              set -e
-
-              echo "✍🏻 Updating repositories and ensuring UFW is installed…"
-              if ! dpkg -l | grep -q ufw; then
-                sudo apt-get update -y
-                sudo apt-get install -y ufw && echo "   - ufw installed"
-              else
-                echo "   - ufw is already installed"
-              fi
-
-              echo "✍🏻 Configuring UFW rules…"
-              add_rule() {
-                local rule="$1"
-                if ! sudo ufw status | grep -q "$rule"; then
-                  sudo ufw allow "$rule" >/dev/null 2>&1 && echo "   - rule '$rule' added"
-                else
-                  echo "   - rule '$rule' already exists"
-                fi
-              }
-              add_rule "#{ssh_port}/tcp"
-              add_rule "80/tcp"
-              add_rule "443/tcp"
-
-              echo "✍🏻 Enabling UFW logging…"
-              if ! sudo ufw status verbose | grep -q "Logging: on"; then
-                sudo ufw logging on >/dev/null 2>&1 && echo "   - logging enabled"
-              else
-                echo "   - logging was already enabled"
-              fi
-
-              echo "✍🏻 Enabling UFW…"
-              if sudo ufw status | grep -q "Status: inactive"; then
-                sudo ufw --force enable >/dev/null 2>&1 && echo "   - UFW enabled"
-              else
-                echo "   - UFW is already enabled"
-              fi
-            EOH
-            say output
-            say "✅ Firewall setup completed", :green
-          end
-
-          def perform_rollback(ssh, filled_options)
-            ssh_port = filled_options[:ssh_port]
-
-            output = ssh.exec! <<~EOH
-              set -e
-
-              echo "🔁 Removing UFW rules…"
-              delete_rule() {
-                local rule="$1"
-                if sudo ufw status | grep -q "$rule"; then
-                  sudo ufw delete allow "$rule" >/dev/null 2>&1 && echo "   - rule '$rule' removed"
-                else
-                  echo "   - rule '$rule' does not exist"
-                fi
-              }
-              delete_rule "#{ssh_port}/tcp"
-              delete_rule "80/tcp"
-              delete_rule "443/tcp"
-
-              echo "✍🏻 Disabling UFW if active…"
-              if sudo ufw status | grep -q "Status: inactive"; then
-                echo "   - UFW is already inactive"
-              else
-                sudo ufw --force disable >/dev/null 2>&1 && echo "   - UFW disabled"
-              fi
-            EOH
-            say output
-            say "✅ Firewall rollback completed", :green
-          end
-        end
-      end
-    end
-  end
-end

data/lib/kitsune/kit/commands/setup_postgres_docker.rb

@@ -1,246 +0,0 @@
-require "thor"
-require "net/ssh"
-require "tempfile"
-require "fileutils"
-require "shellwords"
-require_relative "../defaults"
-require_relative "../options_builder"
-
-module Kitsune
-  module Kit
-    module Commands
-      class SetupPostgresDocker < Thor
-        namespace "setup_postgres_docker"
-
-        class_option :server_ip, aliases: "-s", required: true, desc: "Server IP address or hostname"
-        class_option :ssh_port, aliases: "-p", desc: "SSH port"
-        class_option :ssh_key_path, aliases: "-k", desc: "Path to SSH private key"
-
-        desc "create", "Setup PostgreSQL using Docker Compose on remote server"
-        def create
-          postgres_defaults = Kitsune::Kit::Defaults.postgres
-
-          if postgres_defaults[:postgres_password] == "secret"
-            say "⚠️ Warning: You are using the default PostgreSQL password ('secret').", :yellow
-            if ENV.fetch("KIT_ENV", "development") == "production"
-              abort "❌ Production environment requires a secure PostgreSQL password!"
-            else
-              say "🔒 Please change POSTGRES_PASSWORD in your .env if needed.", :yellow
-            end
-          end
-
-          filled_options = Kitsune::Kit::OptionsBuilder.build(
-            options,
-            required: [:server_ip],
-            defaults: Kitsune::Kit::Defaults.ssh
-          )
-
-          with_ssh_connection(filled_options) do |ssh|
-            perform_setup(ssh, postgres_defaults, filled_options)
-          end
-        end
-
-        desc "rollback", "Remove PostgreSQL Docker setup from remote server"
-        def rollback
-          postgres_defaults = Kitsune::Kit::Defaults.postgres
-
-          filled_options = Kitsune::Kit::OptionsBuilder.build(
-            options,
-            required: [:server_ip],
-            defaults: Kitsune::Kit::Defaults.ssh
-          )
-
-          with_ssh_connection(filled_options) do |ssh|
-            perform_rollback(ssh, postgres_defaults)
-          end
-        end
-
-        no_commands do
-          def with_ssh_connection(filled_options)
-            server = filled_options[:server_ip]
-            port   = filled_options[:ssh_port]
-            key    = File.expand_path(filled_options[:ssh_key_path])
-
-            say "🔑 Connecting as deploy@#{server}:#{port}", :green
-            Net::SSH.start(server, "deploy", port: port, keys: [key], non_interactive: true, timeout: 5) do |ssh|
-              yield ssh
-            end
-          end
-
-          def perform_setup(ssh, postgres_defaults, filled_options)
-            local_compose = ".kitsune/docker/postgres.yml"
-            remote_dir = "$HOME/docker/postgres"
-            compose_remote = "#{remote_dir}/docker-compose.yml"
-            env_remote = "#{remote_dir}/.env"
-            marker = "/usr/local/backups/setup_postgres_docker.after"
-
-            abort "❌ Missing #{local_compose}" unless File.exist?(local_compose)
-
-            # 1. Create base directory securely
-            ssh.exec!("mkdir -p #{remote_dir} && chmod 700 #{remote_dir}")
-
-            # 2. Upload docker-compose.yml
-            say "📦 Uploading docker-compose.yml to #{remote_dir}", :cyan
-            upload_file(ssh, File.read(local_compose), compose_remote)
-
-            # 3. Create .env file for docker-compose based on postgres_defaults
-            say "📦 Creating .env file for Docker Compose...", :cyan
-            env_content = <<~ENVFILE
-              POSTGRES_DB=#{postgres_defaults[:postgres_db]}
-              POSTGRES_USER=#{postgres_defaults[:postgres_user]}
-              POSTGRES_PASSWORD=#{postgres_defaults[:postgres_password]}
-              POSTGRES_PORT=#{postgres_defaults[:postgres_port]}
-              POSTGRES_IMAGE=#{postgres_defaults[:postgres_image]}
-            ENVFILE
-            upload_file(ssh, env_content, env_remote)
-
-            # 4. Secure file permissions
-            ssh.exec!("chmod 600 #{compose_remote} #{env_remote}")
-
-            # 5. Create backup marker
-            ssh.exec!("sudo mkdir -p /usr/local/backups && sudo touch #{marker}")
-
-            # 6. Validate docker-compose.yml
-            say "🔍 Validating docker-compose.yml...", :cyan
-            validation_output = ssh.exec!("cd #{remote_dir} && docker compose config")
-            say validation_output, :cyan
-
-            # 7. Check if container is running
-            container_status = ssh.exec!("docker ps --filter 'name=postgres' --format '{{.Status}}'").strip
-
-            if container_status.empty?
-              say "▶️ No running container. Running docker compose up...", :cyan
-              ssh.exec!("cd #{remote_dir} && docker compose up -d")
-            else
-              say "⚠️ PostgreSQL container is already running.", :yellow
-              if yes?("🔁 Recreate the container with updated configuration? [y/N]", :yellow)
-                say "🔄 Recreating container...", :cyan
-                ssh.exec!("cd #{remote_dir} && docker compose down -v && docker compose up -d")
-              else
-                say "⏩ Keeping existing container.", :cyan
-              end
-            end
-
-            # 8. Check container status
-            say "📋 Final container status (docker compose ps):", :cyan
-            docker_ps_output = ssh.exec!("cd #{remote_dir} && docker compose ps --format json")
-
-            if docker_ps_output.nil? || docker_ps_output.strip.empty? || docker_ps_output.include?("no configuration file")
-              say "⚠️ docker compose ps returned no valid output.", :yellow
-            else
-              begin
-                services = JSON.parse(docker_ps_output)
-                services = [services] if services.is_a?(Hash)
-
-                postgres = services.find { |svc| svc["Service"] == "postgres" }
-                status = postgres && postgres["State"]
-                health = postgres && postgres["Health"]
-
-                if (status == "running" && health == "healthy") || (health == "healthy")
-                  say "✅ PostgreSQL container is running and healthy.", :green
-                else
-                  say "⚠️ PostgreSQL container is not healthy yet.", :yellow
-                end
-              rescue JSON::ParserError => e
-                say "🚨 Failed to parse docker compose ps output as JSON: #{e.message}", :red
-              end
-            end
-
-            # 9. Check PostgreSQL readiness with retries
-            say "🔍 Checking PostgreSQL health with retries...", :cyan
-
-            max_attempts = 10
-            attempt = 0
-            success = false
-
-            while attempt < max_attempts
-              attempt += 1
-              healthcheck = ssh.exec!("docker exec $(docker ps -qf name=postgres) pg_isready -U #{postgres_defaults[:postgres_user]} -d #{postgres_defaults[:postgres_db]} -h localhost")
-
-              if healthcheck.include?("accepting connections")
-                say "✅ PostgreSQL is up and accepting connections! (attempt #{attempt})", :green
-                success = true
-
-                database_url = build_database_url(filled_options, postgres_defaults)
-                say "🔗 Your DATABASE_URL is:\t", :cyan
-                say database_url, :green
-                break
-              else
-                say "⏳ PostgreSQL not ready yet, retrying in 5 seconds... (#{attempt}/#{max_attempts})", :yellow
-                sleep 5
-              end
-            end
-
-            unless success
-              say "❌ PostgreSQL did not become ready after #{max_attempts} attempts.", :red
-            end
-
-            # 10. Allow PostgreSQL port through firewall (ufw)
-            say "🛡️ Configuring firewall to allow PostgreSQL (port #{postgres_defaults[:postgres_port]})...", :cyan
-            output = ssh.exec! <<~EOH
-              if command -v ufw >/dev/null; then
-                if ! sudo ufw status | grep -q "#{postgres_defaults[:postgres_port]}"; then
-                  sudo ufw allow #{postgres_defaults[:postgres_port]}
-                else
-                  echo "💡 Port #{postgres_defaults[:postgres_port]} is already allowed in ufw."
-                fi
-              else
-                echo "⚠️ ufw not found. Skipping firewall configuration."
-              fi
-            EOH
-            say output
-
-            say "✅ PostgreSQL setup completed successfully!", :green
-          end
-
-          def perform_rollback(ssh, postgres_defaults)
-            output = ssh.exec! <<~EOH
-              set -e
-
-              BASE_DIR="$HOME/docker/postgres"
-              BACKUP_DIR="/usr/local/backups"
-              SCRIPT_ID="setup_postgres_docker"
-              AFTER_FILE="${BACKUP_DIR}/${SCRIPT_ID}.after"
-
-              if [ -f "$AFTER_FILE" ]; then
-                echo "🔁 Stopping and removing docker containers..."
-                cd "$BASE_DIR"
-                docker compose down -v || true
-
-                echo "🧹 Cleaning up files..."
-                rm -rf "$BASE_DIR"
-                sudo rm -f "$AFTER_FILE"
-
-                if command -v ufw >/dev/null; then
-                  echo "🛡️ Removing PostgreSQL port from firewall..."
-                  sudo ufw delete allow #{postgres_defaults[:postgres_port]} || true
-                fi
-              else
-                echo "💡 Nothing to rollback"
-              fi
-
-              echo "✅ Rollback completed"
-            EOH
-            say output
-          end
-
-          def upload_file(ssh, content, remote_path)
-            escaped = Shellwords.escape(content)
-            ssh.exec!("mkdir -p #{File.dirname(remote_path)}")
-            ssh.exec!("echo #{escaped} > #{remote_path}")
-          end
-
-          def build_database_url(filled_options, postgres_defaults)
-            user = postgres_defaults[:postgres_user]
-            password = postgres_defaults[:postgres_password]
-            host = filled_options[:server_ip]
-            port = postgres_defaults[:postgres_port]
-            db = postgres_defaults[:postgres_db]
-
-            "postgres://#{user}:#{password}@#{host}:#{port}/#{db}"
-          end
-        end
-      end
-    end
-  end
-end