le1t0-deprec 2.1.6.001

data/lib/deprec/recipes/users.rb

@@ -0,0 +1,90 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do
+    namespace :users do
+      
+      # desc "Create user account"
+      # task :add do
+      #   target_user = Capistrano::CLI.ui.ask "Enter userid for new user" do |q|
+      #     q.default = user
+      #   end
+      #   deprec2.useradd(target_user, :shell => '/bin/bash')
+      #   puts "Setting password for new account"
+      #   deprec2.invoke_with_input("passwd #{target_user}", /UNIX password/)
+      # end
+      
+      desc "Create account"
+      task :add do
+        target_user = Capistrano::CLI.ui.ask "Enter userid for new user" do |q|
+          q.default = user
+        end 
+        make_admin = Capistrano::CLI.ui.ask "Should this be an admin account?" do |q|
+          q.default = 'no'
+        end
+        copy_keys = false
+        if File.readable?("config/ssh/authorized_keys/#{target_user}")
+          copy_keys = Capistrano::CLI.ui.ask "I've found an authorized_keys file for #{target_user}. Should I copy it out?" do |q|
+            q.default = 'yes'
+          end
+        end
+        
+        new_password = Capistrano::CLI.ui.ask("Enter new password for #{target_user}") { |q| q.echo = false }
+        
+        deprec2.useradd(target_user, :shell => '/bin/bash')
+
+        deprec2.invoke_with_input("passwd #{target_user}", /UNIX password/, new_password)
+        
+        if make_admin.match(/y/i)
+          deprec2.groupadd('admin')
+          deprec2.add_user_to_group(target_user, 'admin')
+          deprec2.append_to_file_if_missing('/etc/sudoers', '%admin ALL=(ALL) ALL')
+        end
+        
+        if copy_keys && copy_keys.grep(/y/i)
+          set :target_user, target_user
+          top.deprec.ssh.setup_keys
+        end
+        
+      end
+      
+      desc "Create account"
+      task :add_admin do
+        puts 'deprecated! use deprec:users:add'
+        add
+      end
+  
+      desc "Change user password"
+      task :passwd do
+        target_user = Capistrano::CLI.ui.ask "Enter user to change password for" do |q|
+          q.default = user if user.is_a?(String)
+        end
+        new_password = Capistrano::CLI.ui.ask("Enter new password for #{target_user}") { |q| q.echo = false }
+  
+        deprec2.invoke_with_input("passwd #{target_user}", /UNIX password/, new_password) 
+      end
+      
+      desc "Add user to group"
+      task :add_user_to_group do
+        target_user = Capistrano::CLI.ui.ask "Which user?" do |q|
+          q.default = user if user.is_a?(String)
+        end
+        target_group = Capistrano::CLI.ui.ask "Add to which group?" do |q|
+          q.default = 'deploy'
+        end
+        deprec2.add_user_to_group(target_user, target_group)
+      end
+
+      # desc "Create group"
+      # task :add_group do
+      #   target_group = Capistrano::CLI.ui.ask "Enter name for new group" 
+      #   deprec2.groupadd(target_group)
+      # end
+      # 
+      # desc "Add user to group"
+      # task :add_user_to_group do
+      #   # XXX not yet implemented
+      # end
+
+    end
+  end
+end

data/lib/deprec/recipes/utils.rb

@@ -0,0 +1,58 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do
+  namespace :deprec do
+    namespace :utils do
+
+        SRC_PACKAGES[:daemonize] = {
+          :filename => 'daemonize-1.5.6.tar.gz',
+          :md5sum => "2f5fbb8788ebe803ccaff3cd4b5c3188  daemonize-1.5.6.tar.gz",
+          :dir => 'daemonize-1.5.6',
+          :url => "http://www.clapper.org/software/daemonize/daemonize-1.5.6.tar.gz",
+          :unpack => "tar zxf daemonize-1.5.6.tar.gz;",
+          :configure => %w(
+            ./configure
+            ;
+            ).reject{|arg| arg.match '#'}.join(' '),
+          :make => 'make;',
+          :install => 'make install;'
+        }
+
+        namespace :daemonize do
+
+          desc "Install daemonize"
+          task :install do
+            deprec2.download_src(SRC_PACKAGES[:daemonize], src_dir)
+            deprec2.install_from_src(SRC_PACKAGES[:daemonize], src_dir)
+          end
+
+        end
+
+        desc "Install some useful network utils"
+        task :net do
+          apps = %w(lynx nmap netcat telnet dnsutils rsync curl wget)
+          apt.install( {:base => apps}, :stable )
+        end
+
+        desc "Install some useful mail utils"
+        task :mail do
+          apps = %w(mailx mutt)
+          apt.install( {:base => apps}, :stable )
+        end
+
+        desc "Install some useful utils"
+        task :other do
+          apps = %w(lsof vim tree psmisc screen)
+          apt.install( {:base => apps}, :stable )
+        end
+
+        desc "Install handy utils"
+        task :handy do
+          net
+          mail
+          other
+        end
+
+    end
+  end
+end
+

data/lib/deprec/recipes/vnstat.rb

@@ -0,0 +1,85 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  
+  namespace :deprec do 
+    namespace :vnstat do
+      
+      desc <<-EOF
+      vnstat description
+      EOF
+      task :default do
+      end
+          
+      SRC_PACKAGES[:vnstat] = {
+        :url => "http://humdi.net/vnstat/vnstat-1.6.tar.gz",
+        :md5sum => "ccaffe8e70d47e0cf2f25e52daa25712  vnstat-1.6.tar.gz", 
+        :configure => '',
+        :post_install => 'vnstat --testkernel && vnstat -u -i eth0'
+      }
+  
+      desc <<-EOF
+      Install vnstat. Add interfaces with 'vnstat -u -i ethN' 
+      (where N is interface number). 
+      
+      View stats using the vnstat command line tool.
+      EOF
+      task :install do
+        install_deps
+        deprec2.download_src(SRC_PACKAGES[:vnstat], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:vnstat], src_dir)
+      end
+  
+      # install dependencies for monit
+      task :install_deps do
+        # apt.install( {:base => %w(flex bison libssl-dev)}, :stable )
+      end
+    
+    end 
+    
+    
+    namespace :vnstat_php do
+      
+      SRC_PACKAGES[:vnstat_php] = {
+        :url => "http://www.sqweek.com/sqweek/files/vnstat_php_frontend-1.3.tar.gz",
+        :md5sum => "190b37808ae16bd1c1a132434b170437  vnstat_php_frontend-1.3.tar.gz", 
+        :configure => '',
+        :make => '',
+        :install => "test -d /var/www/vnstat_php_frontend-1.3 && rm -fr /var/www/vnstat_php_frontend-1.3; mv #{src_dir}/vnstat_php_frontend-1.3 /var/www && 
+          ln -sf /var/www/vnstat_php_frontend-1.3 /var/www/vnstat"
+      }
+    
+      task :install do
+        install_deps
+        deprec2.download_src(SRC_PACKAGES[:vnstat_php], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:vnstat_php], src_dir)
+      end
+    
+      # install dependencies for monit
+      task :install_deps do
+        apt.install( {:base => %w(apache2 php5 php5-gd)}, :stable )
+      end
+      
+      SYSTEM_CONFIG_FILES[:vnstat] = [
+
+        {:template => 'config.php',
+         :path => '/var/www/vnstat',
+         :mode => 0755,
+         :owner => 'root:root'}
+         
+      ]
+      
+      task :config_gen do
+        SYSTEM_CONFIG_FILES[:vnstat].each do |file|
+          deprec2.render_template(:vnstat, file)
+        end
+      end
+
+      desc "Push monit config files to server"
+      task :config do
+        deprec2.push_configs(:vnstat, SYSTEM_CONFIG_FILES[:vnstat])
+      end
+            
+    end
+    
+  end
+end

data/lib/deprec/recipes/web/apache.rb

@@ -0,0 +1,143 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do
+    namespace :apache do
+      
+      set :apache_user, 'www-data'
+      set :apache_vhost_dir, '/etc/apache2/sites-available'
+      set :apache_ssl_enabled, false
+      set :apache_ssl_ip, nil
+      set :apache_ssl_forward_all, apache_ssl_enabled
+      set :apache_ssl_chainfile, false
+      set :apache_modules_enabled, %w(rewrite ssl proxy_balancer proxy_http deflate headers)
+      set :apache_log_dir, '/var/log/apache2'
+       
+      desc "Install apache"
+      task :install do
+        install_deps
+        enable_modules
+        reload
+      end
+      
+      # install dependencies for apache
+      task :install_deps do
+        apt.install( {:base => %w(apache2-mpm-prefork apache2-prefork-dev rsync ssl-cert)}, :stable )
+      end
+      
+      SYSTEM_CONFIG_FILES[:apache] = [
+        
+        { :template => 'namevirtualhosts.conf',
+          :path => '/etc/apache2/conf.d/namevirtualhosts.conf',
+          :mode => 0644,
+          :owner => 'root:root'},
+          
+        { :template => 'ports.conf.erb',
+          :path => '/etc/apache2/ports.conf',
+          :mode => 0644,
+          :owner => 'root:root'},
+
+        { :template => 'status.conf.erb',
+          :path => '/etc/apache2/mods-available/status.conf',
+          :mode => 0644,
+          :owner => 'root:root'}
+          
+      ]
+
+      PROJECT_CONFIG_FILES[:apache] = [
+        # Not required
+      ]
+
+      desc "Generate configuration file(s) for apache from template(s)"
+      task :config_gen do
+        config_gen_system
+      end
+
+      task :config_gen_system do
+        SYSTEM_CONFIG_FILES[:apache].each do |file|
+          deprec2.render_template(:apache, file)
+        end
+      end
+
+      task :config_gen_project do
+        PROJECT_CONFIG_FILES[:apache].each do |file|
+          deprec2.render_template(:apache, file)
+        end
+        # XXX Need to flesh out generation of custom certs
+        # In the meantime we'll just use the snakeoil cert
+        #
+        # top.deprec.ssl.config_gen if apache_ssl_enabled
+        top.deprec.ssl.config_gen if apache_ssl_enabled
+      end
+      
+      desc "Push apache config files to server"
+      task :config, :roles => :web do
+        config_system
+        reload
+      end
+      
+      desc "Generate initial configs and copy direct to server."
+      task :initial_config, :roles => :web do
+        SYSTEM_CONFIG_FILES[:apache].each do |file|
+          deprec2.render_template(:apache, file.merge(:remote => true))
+        end
+      end
+      
+      desc "Push apache config files to server"
+      task :config_system, :roles => :web do
+        deprec2.push_configs(:apache, SYSTEM_CONFIG_FILES[:apache])
+      end
+      
+      # Stub so generic tasks don't fail (e.g. deprec:web:config_project)
+      task :config_project do
+        # XXX Need to flesh out generation of custom certs
+        # In the meantime we'll just use the snakeoil cert
+        #
+        top.deprec.ssl.config if apache_ssl_enabled
+      end
+      
+      task :enable_modules, :roles => :web do
+        apache_modules_enabled.each { |mod| sudo "a2enmod #{mod}" }
+        reload
+      end
+      
+      desc "Start Apache"
+      task :start, :roles => :web do
+        send(run_method, "/etc/init.d/apache2 start")
+      end
+
+      desc "Stop Apache"
+      task :stop, :roles => :web do
+        send(run_method, "/etc/init.d/apache2 stop")
+      end
+
+      desc "Restart Apache"
+      task :restart, :roles => :web do
+        send(run_method, "/etc/init.d/apache2 restart")
+      end
+
+      desc "Reload Apache"
+      task :reload, :roles => :web do
+        send(run_method, "/etc/init.d/apache2 force-reload")
+      end
+
+      desc "Set apache to start on boot"
+      task :activate, :roles => :web do
+        send(run_method, "update-rc.d apache2 defaults")
+      end
+      
+      desc "Set apache to not start on boot"
+      task :deactivate, :roles => :web do
+        send(run_method, "update-rc.d -f apache2 remove")
+      end
+      
+      task :backup, :roles => :web do
+        # not yet implemented
+      end
+      
+      task :restore, :roles => :web do
+        # not yet implemented
+      end
+
+    end
+  end
+end

data/lib/deprec/recipes/web/nginx.rb

@@ -0,0 +1,172 @@
+# Copyright 2006-2008 by Mike Bailey. All rights reserved.
+Capistrano::Configuration.instance(:must_exist).load do 
+  namespace :deprec do 
+    namespace :nginx do
+
+      set :nginx_server_name, nil
+      set :nginx_user,  'nginx'
+      set :nginx_group, 'nginx'
+      set :nginx_vhost_dir, '/usr/local/nginx/conf/vhosts'
+      set :nginx_client_max_body_size, '100M'
+      set :nginx_worker_processes, 4
+
+      SRC_PACKAGES[:nginx] = {
+        :url => "http://sysoev.ru/nginx/nginx-0.7.59.tar.gz",
+        :md5sum => "d981b03b4c3ba43de580553355608b63  nginx-0.7.59.tar.gz",
+        :configure => './configure --sbin-path=/usr/local/sbin --with-http_ssl_module;'
+      }
+
+      desc "Install nginx"
+      task :install, :roles => :web do
+        install_deps
+        deprec2.download_src(SRC_PACKAGES[:nginx], src_dir)
+        deprec2.install_from_src(SRC_PACKAGES[:nginx], src_dir)
+        create_nginx_user
+        initial_config
+        activate
+        start
+      end
+
+      # install dependencies for nginx
+      task :install_deps, :roles => :web do
+        apt.install( {:base => %w(libpcre3 libpcre3-dev libpcrecpp0 libssl-dev zlib1g-dev)}, :stable )
+        # do we need libgcrypt11-dev?
+      end
+
+      task :create_nginx_user, :roles => :web do
+        deprec2.groupadd(nginx_group)
+        deprec2.useradd(nginx_user, :group => nginx_group, :homedir => false)
+      end
+
+      SYSTEM_CONFIG_FILES[:nginx] = [
+
+        {:template => 'nginx-init-script',
+          :path => '/etc/init.d/nginx',
+          :mode => 0755,
+          :owner => 'root:root'},
+
+        {:template => 'nginx.conf.erb',
+          :path => "/usr/local/nginx/conf/nginx.conf",
+          :mode => 0644,
+          :owner => 'root:root'},
+
+        {:template => 'mime.types.erb',
+          :path => "/usr/local/nginx/conf/mime.types",
+          :mode => 0644,
+          :owner => 'root:root'},
+
+        {:template => 'nothing.conf',
+          :path => "/usr/local/nginx/conf/vhosts/nothing.conf",
+          :mode => 0644,
+          :owner => 'root:root'}
+      ]
+      
+      PROJECT_CONFIG_FILES[:nginx] = [
+           
+        {:template => 'logrotate.conf.erb',
+         :path => "logrotate.conf", 
+         :mode => 0644,
+         :owner => 'root:root'}  
+      ]
+
+      task :initial_config, :roles => :web do
+        SYSTEM_CONFIG_FILES[:nginx].each do |file|
+          deprec2.render_template(:nginx, file.merge(:remote => true))
+        end
+      end
+      
+      desc <<-DESC
+      Generate nginx config from template. Note that this does not
+      push the config to the server, it merely generates required
+      configuration files. These should be kept under source control.            
+      The can be pushed to the server with the :config task.
+      DESC
+      task :config_gen do
+        SYSTEM_CONFIG_FILES[:nginx].each do |file|
+          deprec2.render_template(:nginx, file)
+        end
+      end
+      
+      desc "Generate config files for rails app."
+      task :config_gen_project do
+        PROJECT_CONFIG_FILES[:nginx].each do |file|
+          deprec2.render_template(:nginx, file)
+        end
+      end
+
+      desc "Push nginx config files to server"
+      task :config, :roles => :web do
+        deprec2.push_configs(:nginx, SYSTEM_CONFIG_FILES[:nginx])
+      end
+      
+      desc "Push out config files for rails app."
+      task :config_project, :roles => :web do
+        deprec2.push_configs(:nginx, PROJECT_CONFIG_FILES[:nginx])
+      end
+
+      desc <<-DESC
+      Activate nginx start scripts on server.
+      Setup server to start nginx on boot.
+      DESC
+      task :activate, :roles => :web do
+        activate_system
+      end
+
+      task :activate_system, :roles => :web do
+        send(run_method, "update-rc.d nginx defaults")
+      end
+
+      desc <<-DESC
+      Dectivate nginx start scripts on server.
+      Setup server to start nginx on boot.
+      DESC
+      task :deactivate, :roles => :web do
+        send(run_method, "update-rc.d -f nginx remove")
+      end
+
+      # Control
+
+      desc "Start Nginx"
+      task :start, :roles => :web do
+        # Nginx returns error code if you try to start it when it's already running
+        # We don't want this to kill Capistrano.
+        send(run_method, "/etc/init.d/nginx start; exit 0")
+      end
+
+      desc "Stop Nginx"
+      task :stop, :roles => :web do
+        # Nginx returns error code if you try to stop when it's not running
+        # We don't want this to kill Capistrano. 
+        send(run_method, "/etc/init.d/nginx stop; exit 0") 
+      end
+
+      desc "Restart Nginx"
+      task :restart, :roles => :web do
+        stop
+        start
+      end
+
+      desc "Reload Nginx"
+      task :reload, :roles => :web do
+        # Nginx returns error code if you try to reload when it's not running
+        # We don't want this to kill Capistrano.
+        send(run_method, "/etc/init.d/nginx reload; exit 0")
+      end
+
+      task :backup, :roles => :web do
+        # there's nothing to backup for nginx
+      end
+
+      task :restore, :roles => :web do
+        # there's nothing to store for nginx
+      end
+      
+      # Helper task to get rid of pesky "it works" page - not called by deprec tasks
+      task :rename_index_page, :roles => :web do
+        index_file = '/usr/local/nginx/html/index.html'
+        sudo "test -f #{index_file} && sudo mv #{index_file} #{index_file}.orig || exit 0"
+      end
+
+    end 
+  end
+end