machines 0.5.1

data/lib/packages/load_machines.rb

@@ -0,0 +1,38 @@
+class ConfigError < StandardError; end
+
+task :load_machines, 'Loads the machines.yml' do
+  $conf.machines = AppConf.new
+  $conf.load('machines.yml')
+
+  machine = $conf.machine = $conf.machines[$conf.machine_name]
+  raise ConfigError, "#{$conf.machine_name} does not match any machine in machines.yml" unless machine
+  $conf.db_server = $conf.machines[machine.db_server]
+
+  if machine.root_pass.nil?
+    machine.root_pass = generate_password
+    $conf.machines_changed = true
+  end
+
+  $conf.user_home = "/home/#{machine.user}"
+  $conf.appsroot = $conf.appsroots[machine.user] if machine.user
+  $conf.users = $conf.appsroots.keys
+  $conf.user = machine.user
+  $conf.environment = machine.environment
+  $conf.roles = machine.roles
+
+  errors = []
+  errors << 'Machine needs to have an address or be an EC2 instance.' unless machine.address || machine.ec2
+  errors << 'No user set for machine.' unless machine.user
+  errors << 'User does not have an appsroot.' unless $conf.appsroot || machine.user.nil?
+  if errors.any?
+    errors << 'Check machines.yml and config.yml for errors.'
+    raise ConfigError, errors.join("\n")
+  end
+
+  thread = Thread.new { connect && run_instance } if machine.ec2 && machine.address.nil? unless $conf.log_only
+
+  load_app_settings(machine.apps)
+
+  thread.join if thread
+end
+

data/lib/packages/monit.rb

@@ -0,0 +1,10 @@
+task :monit, 'Install and configure monit' do
+  sudo install 'monit'
+  sudo "/etc/init.d/monit stop && update-rc.d -f monit remove"
+  sudo upload 'monit/upstart.conf', '/etc/init/monit.conf'
+
+  sudo create_from 'monit/monitrc.erb', :to => '/etc/monit/monitrc'
+  sudo create_from 'monit/conf.d/system.erb', :to => '/etc/monit/conf.d/system'
+  sudo upload 'monit/conf.d/ssh', '/etc/monit/conf.d/ssh'
+end
+

data/lib/packages/mysql.rb

@@ -0,0 +1,46 @@
+def mysql_execute(sql, options)
+  required_options options, [:password]
+  run "echo \"#{sql}\" | mysql -u root -p#{options[:password]}", nil
+end
+
+only roles: :db do
+  task :mysql, 'Install MySQL' do
+    name = 'mysql-server-5.5'
+    key = 'mysql-server/root_password'
+    sudo debconf name, key, 'password', $conf.machine.root_pass
+    sudo debconf name, "#{key}_again", 'password', $conf.machine.root_pass
+    sudo install %w(mysql-server mysql-client libmysqlclient-dev)
+    run restart 'mysql'
+  end
+end
+
+only roles: :dbmaster do
+  task :dbperms, 'Grant applications access to the database' do
+    $conf.webapps.values.each do |app|
+      mysql_execute "GRANT ALL ON *.* TO '#{app.name}'@'%' " +
+        "IDENTIFIED BY '#{app.password}';", password: $conf.machine.root_pass
+    end
+  end
+
+  task :replication, 'Grant replication access to this machine' do
+    sudo upload "mysql/dbmaster.cnf", "/etc/mysql/conf.d/dbmaster.cnf"
+    mysql_execute "GRANT REPLICATION SLAVE ON *.* " +
+      "TO '#{$conf.machine.replication_user}'@'%' " +
+      "IDENTIFIED BY '#{$conf.machine.replication_pass}';", password: $conf.machine.root_pass
+  end
+end
+
+only roles: :dbslave do
+  task :replication, 'Setup database replication from master' do
+    sudo upload "mysql/dbslave.cnf", "/etc/mysql/conf.d/dbslave.cnf"
+    mysql_execute "CHANGE MASTER TO " +
+      "MASTER_HOST='#{$conf.db_server.address}', " +
+      "MASTER_USER='#{$conf.db_server.replication_user}' " +
+      "MASTER_PASSWORD='#{$conf.db_server.replication_pass}';", password: $conf.machine.root_pass
+  end
+end
+
+task :monit_mysql, 'Configure monit for MySQL', if: [:monit, :mysql] do
+  sudo create_from 'monit/conf.d/mysql.erb', to: '/etc/monit/conf.d/mysql'
+end
+

data/lib/packages/nginx.rb

@@ -0,0 +1,22 @@
+task :nginx, 'Download and configure Nginx' do
+  sudo extract $conf.webserver.url
+  modules = "#{$conf.webserver.modules} --add-module=#{$conf.passenger.nginx}"
+  commands = [
+    "cd #{$conf.webserver.src_path}",
+    "./configure #{modules}",
+    "make",
+    "make install"
+  ].join(' && ')
+
+
+  sudo commands, check_file("#{$conf.webserver.path}/sbin/nginx")
+
+  sudo create_from 'nginx/nginx.conf.erb', :to => "#{$conf.webserver.path}/#{$conf.webserver.conf_path}/nginx.conf"
+
+  sudo create_from 'nginx/upstart.conf.erb', :to => "/etc/init/nginx.conf"
+end
+
+task :monit_nginx, 'Add monit configuration for Nginx', :if => [:monit, :nginx] do
+  sudo upload 'monit/conf.d/nginx', '/etc/monit/conf.d/nginx'
+end
+

data/lib/packages/nginx_logrotate.rb

@@ -0,0 +1,26 @@
+task :logrotate_nginx, 'Logrotate nginx access and error logs and optionally generate stats' do
+  $conf.webapps.each do |app_name, app|
+    %w(access error).each do |type|
+      if type == 'access' && app.stats
+        stats_prerotate = "/usr/lib/cgi-bin/awstats.pl -update -config=#{app.server_name} > /dev/null"
+        stats_postrotate = "/usr/local/bin/awstats_render #{app.server_name} #{app.path}_stats/public > /dev/null"
+      else
+        stats_prerotate = stats_postrotate = nil
+      end
+      settings = AppBuilder.new(
+        log_path: "/var/log/nginx/#{app.name}.#{type}.log",
+        stats_prerotate: stats_prerotate,
+        stats_postrotate: stats_postrotate
+      )
+      sudo create_from 'logrotate/nginx.erb', settings: settings, to: "/etc/logrotate.d/#{app.name}_nginx_#{type}"
+    end
+  end
+end
+
+task :logrotate_apps, 'Logrotate Rails app logs' do
+  $conf.webapps.each do |app_name, app|
+    settings = AppBuilder.new(log_path: File.join(app.path, 'shared', 'log', '*.log'))
+    sudo create_from 'logrotate/app.erb', settings: settings, to: File.join('/etc', 'logrotate.d', "#{app.name}_app")
+  end
+end
+

data/lib/packages/openbox.rb

@@ -0,0 +1,35 @@
+task :openbox, 'Install Openbox window manager and associated fonts, themes, etc' do
+  sudo debconf 'ttf-mscorefonts-installer', 'msttcorefonts/accepted-mscorefonts-eula', 'boolean', true
+  sudo install [
+    'dmz-cursor-theme',           # Mouse cursor theme
+    'elementary-icon-theme',      # An icon theme
+    'feh',                        # Set the background image: feh --bg-scale
+    'gnome-screenshot',           # Press Print Screen to take a screen shot of the desktop
+    'gnome-themes-standard',      # Needed to theme GTK 3 apps
+    'lxappearance',               # Set gtk themes, cursors and icons - Set to clearlooks
+    'obconf',                     # Set openbox themes - Set to onyx black
+    'openbox',                    # Openbox lightweight Window Manager
+    'pcmanfm',                    # Lightweight File manager
+    'suckless-tools',             # Includes slock - Locks screen. Password unlocks - no prompt. Can be used with xautolock
+    'terminator',                 # Multi-window enhanced console
+    'ttf-ubuntu-font-family',     # The new ubuntu font
+    'ttf-mscorefonts-installer',  # Microsoft fonts
+    'xautolock',                  # Locks screen after idle
+    'xcompmgr',                   # Compositing manager - Needed by docky for transparency
+    'xorg',                       # Basic X Windows Graphical Interface needed by Openbox
+  ]
+end
+
+task :fonts, 'Set openbox and Gnome interface fonts (See also rc.xml, fonts.conf, gtkrc-2.0)' do
+  run configure "/apps/metacity/general/titlebar_font" => "Ubuntu Bold 8"
+  run configure "/apps/nautilus/preferences/desktop_font" => "Ubuntu Light 8"
+  run configure "/apps/nautilus/preferences/default_folder_viewer" => 'compact_view'
+  run configure "/desktop/gnome/interface/font_name" => "Ubuntu Light 8"
+  run configure "/desktop/gnome/interface/document_font_name" => "Ubuntu Light 8"
+  run configure "/desktop/gnome/interface/monospace_font_name" => "Monospace 10"
+end
+
+sudo append 'inode/directory=pcmanfm.desktop', :to => '.local/share/applications/mimeapps.list'
+
+run append 'ck-launch-session openbox-session', :to => '~/.xinitrc'
+

data/lib/packages/passenger.rb

@@ -0,0 +1,14 @@
+task :passenger, 'Install passenger' do
+  sudo install 'libcurl4-openssl-dev'
+  #HACK: PATHS are added to .profile which is not run on a non-login shell. NET::Ssh creates non-login shells
+  if $conf.ruby.gems_path =~ /^.rbenv/
+    rbenv_gem = '~/.rbenv/bin/rbenv exec gem '
+    run "#{rbenv_gem} install passenger -v #{$conf.passenger.version}", check_command("#{rbenv_gem} list", 'passenger')
+  else
+    run gem 'passenger', :version => $conf.passenger.version
+  end
+
+  $conf.passenger.root = File.join($conf.user_home, $conf.ruby.gems_path, "passenger-#{$conf.passenger.version}")
+  $conf.passenger.ruby = File.join($conf.user_home, $conf.ruby.executable)
+end
+

data/lib/packages/passenger_nginx.rb

@@ -0,0 +1,8 @@
+task :passenger_nginx, 'Build the passenger module for Nginx' do
+  $conf.passenger.nginx = File.join($conf.passenger.root, 'ext/nginx')
+  rake_command = 'rake'
+  rake_command = '~/.rbenv/bin/rbenv exec rake' if $conf.ruby.gems_path =~ /^.rbenv/
+  check = check_command("ls #{$conf.passenger.root}/ext/ruby/ruby-#{$conf.ruby.version}*", 'passenger_native_support.so')
+  run "cd #{$conf.passenger.nginx} && #{rake_command} nginx RELEASE=yes && cd -", check
+end
+

data/lib/packages/postfix.rb

@@ -0,0 +1,10 @@
+task :postfix, 'Install postfix mail' do
+  sudo debconf 'postfix', 'postfix/main_mailer_type', 'select', 'Internet Site'
+  sudo debconf 'postfix', 'postfix/mailname', 'string', $conf.mail.domain
+  sudo install 'postfix'
+end
+
+task :monit_postfix, 'Configure monit for postfix', :if => [:monit, :postfix] do
+  sudo upload 'monit/conf.d/postfix', '/etc/monit/conf.d/postfix'
+end
+

data/lib/packages/questions.rb

@@ -0,0 +1,5 @@
+task :questions, 'Ask for the server password' do
+  $conf.passwords << $conf.password = 'pa55word' if $conf.log_only
+  $conf.password ||= enter_password('users', false) unless $conf.machine.ec2
+end
+

data/lib/packages/rbenv.rb

@@ -0,0 +1,27 @@
+task :rbenv, "Install ruby-build, rbenv, ruby #{$conf.ruby.version} and Bundler" do
+  sudo install ['git-core', 'curl']
+  run git_clone 'git://github.com/sstephenson/ruby-build.git'
+  sudo 'cd ~/ruby-build && ./install.sh', check_file('/usr/local/bin/ruby-build')
+
+
+  # Safely execute bundler generated shims for your projects
+  # (https://twitter.com/#!/tpope/statuses/165631968996900865)
+  #     cd your_project
+  #     mkdir .bin/safe
+  #     bundle --binstubs=.bin (or just bundle if you use the example bashrc)
+  #
+  run git_clone 'git://github.com/sstephenson/rbenv.git', :to => '~/.rbenv'
+  #NOTE: This path will not be available to the session as Net::SSH uses a non-login shell
+  path = 'PATH=.bin/safe/../../.bin:$HOME/.rbenv/bin:$HOME/.rbenv/shims:$PATH'
+  run append path, :to => '~/.profile'
+  rbenv = '$HOME/.rbenv/bin/rbenv'
+
+  run "#{rbenv} install #{$conf.ruby.full_version}", check_command("#{rbenv} versions", $conf.ruby.version)
+  run "#{rbenv} rehash", check_command("#{path} which gem", '.rbenv/shims/gem')
+  run "#{rbenv} global #{$conf.ruby.full_version}", check_command("#{rbenv} exec ruby -v", $conf.ruby.version)
+
+  run write "gem: --no-rdoc --no-ri", :to => '.gemrc', :name => '.gemrc'
+  run "#{rbenv} exec gem install bundler", check_command("#{rbenv} exec gem list", 'bundler')
+  run "#{rbenv} rehash", check_command("#{path} which bundle", '.rbenv/shims/bundle')
+end
+

data/lib/packages/rvm.rb

@@ -0,0 +1,20 @@
+task :rvm, 'Install RVM' do
+  sudo install ['git-core']
+  installer = "bash -s #{$conf.rvm.version} < <(wget -q https://raw.github.com/wayneeseguin/rvm/master/binscripts/rvm-installer )"
+  run installer, check_file('~/.rvm/bin/rvm')
+
+  run "source .bashrc", "type rvm | head -1 | grep 'rvm is a function' #{echo_result}"
+  run remove 'rvm-installer'
+end
+
+task :rvm_prompt_off, 'turn off trust prompting for new .rvmrc files' do
+  run append 'export rvm_trust_rvmrcs_flag=1', :to => '.rvmrc'
+end
+
+task :ruby, "Install Ruby, make #{$conf.ruby.version}@global the default and install Bundler" do
+  run "rvm install #{$conf.ruby.version}", "rvm #{$conf.ruby.version} #{echo_result}"
+  run "rvm #{$conf.ruby.version}@global --default", "ruby -v | grep #{$conf.ruby.version} #{echo_result}"
+  run write "gem: --no-rdoc --no-ri", :to => '.gemrc', :name => '.gemrc'
+  run gem 'bundler'
+end
+

data/lib/packages/save_machines.rb

@@ -0,0 +1,4 @@
+task :save_machines, 'Saves the machines.yml' do
+  $conf.save(:machines, 'machines.yml') if $conf.machines_changed
+end
+

data/lib/packages/slim.rb

@@ -0,0 +1,6 @@
+task :slim, 'Install SLiM desktop manager' do
+  sudo install 'slim'
+  sudo upload 'slim/themes', '/usr/share/slim/themes'
+  sudo replace 'debian-spacefun', :with => $conf.login_theme, :in => '/etc/slim.conf'
+end
+

data/lib/packages/sqlserver.rb

@@ -0,0 +1,5 @@
+task :sqlserver, 'Download and build sqlserver driver' do
+  run git_clone 'git://github.com/rails-sqlserver/tiny_tds.git'
+  run 'cd tiny_tds && rake compile && rake native gem', check_file('tiny_tds/pkg/tiny_tds-0.5.0-amd64-linux.gem')
+end
+

data/lib/packages/subtle.rb

@@ -0,0 +1,29 @@
+task :subtle, 'Install Subtle tiling window manager and associated fonts, themes, etc' do
+  sudo debconf 'ttf-mscorefonts-installer', 'msttcorefonts/accepted-mscorefonts-eula', 'boolean', true
+  sudo install [
+    'dmz-cursor-theme',           # Mouse cursor theme
+    'elementary-icon-theme',      # An icon theme
+    'feh',                        # Set background image/view pics/slideshow/etc
+    'gnome-screenshot',           # Press Print Screen to take a screen shot of the desktop
+    'gnome-themes-standard',      # Needed to theme GTK 3 apps
+    'lxappearance',               # Set gtk themes, cursors and icons - Set to clearlooks
+    'pcmanfm',                    # Lightweight File manager
+    'rxvt-unicode',               # Default Subtle console
+    'subtle',                     # Tiling window manager
+    'suckless-tools',             # Includes slock - Locks screen. Password unlocks - no prompt. Can be used with xautolock
+    'ttf-ubuntu-font-family',     # The new ubuntu font
+    'ttf-mscorefonts-installer',  # Microsoft fonts
+    'xautolock',                  # Locks screen after idle
+    'xorg',                       # Basic X Windows Graphical Interface
+  ]
+
+  sudo append 'inode/directory=pcmanfm.desktop', to: '.local/share/applications/mimeapps.list'
+
+  # Copy default subtle.rb file for easy modification
+  run mkdir '.local/share/subtle'
+  run copy '/etc/xdg/subtle/subtle.rb', '.local/share/subtle'
+
+  run append 'ck-launch-session subtle', to: '~/.xinitrc'
+  sudo append 'snd_mixer_oss', to: '/etc/modules'
+end
+

data/lib/packages/sudo_mods.rb

@@ -0,0 +1,6 @@
+task :shutdown_without_password, 'Ensure we can shutdown/reboot without needing a password for sudo' do
+  sudo append 'ALL   ALL=NOPASSWD:/sbin/shutdown', :to => '/etc/sudoers.d/shutdown'
+  sudo append 'ALL   ALL=NOPASSWD:/sbin/reboot', :to => '/etc/sudoers.d/shutdown'
+  sudo chmod 440, '/etc/sudoers.d/shutdown'
+end
+

data/lib/packages/time.rb

@@ -0,0 +1,6 @@
+task :ntp, 'Install and configure NTP' do
+  sudo install 'ntp'
+  sudo cp '/etc/ntp.conf', '/etc/ntp.bak'
+  sudo upload 'misc/ntp.conf', '/etc/ntp.conf'
+end
+

data/lib/packages/time_daily.rb

@@ -0,0 +1,5 @@
+task :ntpdate, 'Synchronize time daily with ntpdate' do
+  sudo write 'ntpdate -s ntp.ubuntu.com pool.ntp.org', :to => '/etc/cron.daily/ntpdate'
+  sudo chmod 755, '/etc/cron.daily/ntpdate'
+end
+

data/lib/packages/timezone.rb

@@ -0,0 +1,10 @@
+task :timezone, 'Set timezone from config.yml' do
+  sudo link '/etc/localtime', "/usr/share/zoneinfo/#{$conf.timezone}"
+
+  # Ensure UTC is used or not
+  if !$conf.clock_utc.nil?
+    options = {false => 'no', true => 'yes'}
+    sudo replace "UTC=#{options[!$conf.clock_utc]}", :with => "UTC=#{options[$conf.clock_utc]}", :in => '/etc/default/rcS'
+  end
+end
+

data/lib/packages/unison.rb

@@ -0,0 +1,5 @@
+task :unison, 'Install unison two way file sync and set it to run hourly. Config in users/user/.unison/default.prf' do
+  sudo install 'unison'
+  run "echo '30 18 * * * /usr/bin/unison' | crontab", check_command('crontab -l', 'unison')
+end
+

data/lib/packages/virtualbox.rb

@@ -0,0 +1,11 @@
+task :virtualbox, 'Install VirtualBox' do
+  sudo install %w(dkms) # Ensures kernal modules are updated when upgrading virtual box
+
+  sudo add_ppa 'debfx/virtualbox', 'felix'
+
+  sudo install 'virtualbox'
+  sudo add :user => $conf.user, :to => 'vboxusers'
+  sudo append 'application/x-virtualbox-vbox-extpack=virtualbox.desktop', :to => '.local/share/applications/mimeapps.list'
+  sudo append 'application/x-virtualbox-ova=virtualbox.desktop', :to => '.local/share/applications/mimeapps.list'
+end
+

data/lib/packages/virtualbox_guest.rb

@@ -0,0 +1,7 @@
+task :virtualbox_guest, 'Installs VirtualBox Guest Additions and fixes piix4_smbus error' do
+  sudo add_ppa 'debfx/virtualbox', 'felix'
+  sudo install 'virtualbox-guest-additions'
+  sudo append 'blacklist i2c_piix4', to: '/etc/modprobe.d/blacklist.conf'
+  run append 'VBoxClient-all &', to: '.xinitrc' if $conf.autostart_vbox_client
+end
+

data/lib/packages/webapps.rb

@@ -0,0 +1,36 @@
+task :webapps, 'Sets up Web apps in config/webapps.yml using app_server.conf.erb. Copies SSL certs.' do
+  sudo mkdir File.join($conf.webserver.path, $conf.webserver.servers_dir) if $conf.webserver.servers_dir
+  $conf.webapps.each do |app_name, app|
+    if $conf.environment == 'development'
+      run git_clone app.scm, :to => app.path, :branch => app.branch
+      bundle_command =  $conf.ruby.gems_path =~ /^.rbenv/ ? "$HOME/.rbenv/bin/rbenv exec bundle" : "bundle"
+      bundle_command = "cd #{app.path} && #{bundle_command}"
+      run bundle_command, check_command("#{bundle_command} check")
+      run "#{bundle_command} --binstubs=.bin", check_dir("#{app.path}/.bin")
+      run mkdir "#{app.path}/.bin/safe" if $conf.bin_safe
+    else
+      %w(releases shared/config shared/system shared/log).each do |dir|
+        run mkdir File.join(app.path, dir)
+      end
+    end
+
+    if app.ssl && File.exists?("certificates/#{app.ssl_crt}") && File.exists?("certificates/#{app.ssl_key}")
+      webserver_conf_path = File.join $conf.webserver.path, $conf.webserver.conf_path
+      sudo upload "certificates/#{app.ssl_crt}", "#{webserver_conf_path}/#{app.ssl_crt}"
+      sudo upload "certificates/#{app.ssl_key}", "#{webserver_conf_path}/#{app.ssl_key}"
+      sudo chmod '600', "#{webserver_conf_path}/#{app.ssl_key}"
+    end
+    conf_name = "#{app.name}.conf"
+    conf_path = File.join($conf.webserver.path, $conf.webserver.servers_dir, conf_name)
+    sudo create_from "#{$conf.webserver.name}/app_server.conf.erb", :settings => app, :to => conf_path
+    sudo mkdir "/var/log/#{$conf.webserver.name}"
+
+    run write_database_yml app if app.write_yml && $conf.environment != 'development'
+    sudo append "127.0.0.1 #{app.server_name}", :to => '/etc/hosts'
+  end
+end
+
+task :monit_delayed_job, 'Add monit config for each delayed_job app', :if => [:monit] do
+  sudo create_from 'monit/conf.d/delayed_job.erb', :to => '/etc/monit/conf.d/delayed_job'
+end
+

data/lib/template/Machinesfile

@@ -0,0 +1,48 @@
+package :load_machines
+package :questions
+
+package :dependencies
+package :timezone
+package :hosts
+package :base
+
+package :virtualbox_guest if $conf.machine.name == 'phil_desktop'
+
+only :roles => :app do
+  package :monit unless $conf.environment == 'development'
+  package :dotfiles
+  package :git
+  package :rbenv
+  package :passenger
+  package :passenger_nginx
+  package :nginx
+  package :nginx_logrotate
+end
+
+only :roles => :db do
+  package :mysql
+end
+
+only :roles => :app do
+  package :webapps
+  package :postfix unless $conf.environment == 'development'
+end
+
+only :user => 'phil' do
+  package :sudo_mods
+  package :subtle
+  package :chrome
+  package :firefox
+  package :gedit
+  package :unison
+  package :abiword
+  package :gnumeric
+  package :file_roller
+  package :productivity
+  package :custom
+end
+
+package :finalise
+
+package :save_machines
+

data/lib/template/certificates/selfsigned.crt

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+

data/lib/template/certificates/selfsigned.key

@@ -0,0 +1,16 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+

data/lib/template/config.yml

@@ -0,0 +1,98 @@
+# Base folder where webapps are installed for each user
+# $conf.appsroot points to the current users root
+appsroots:
+  phil: /home/phil/workspace
+  www: /home/www
+
+# Adds VBoxClient-all to xinitrc (needed when using a Window Manager that does not start /etc/xdg/autostart/*.desktop such as subtle)
+autostart_vbox_client: true
+
+# Create .bin/safe folder in bundler controlled projects
+# (https://twitter.com/#!/tpope/statuses/165631968996900865)
+# The post recommends .git/safe but I find this confusing and suggest using .bin as this is where binstubs
+# are configured (bin/ is the default for `bundler --binstubs` but bin/ is already used by gems that have one
+# or more executables.)
+bin_safe: true
+
+# Set to false if your BIOS clock is set to localtime (e.g. you dual boot Windows)
+# This will override whatever option was chosen when Ubuntu was installed
+clock_utc: true
+
+cloud:
+  provider: AWS
+  aws_access_key_id: 123
+  aws_secret_access_key: 456
+
+# IP hosts. These are added to /etc/hosts by the hosts task in the base package
+# They are also added to known hosts but the host must be accessible at this point
+# Note:
+#   localhost and local domain hosts are added by base package
+#   app URLS are added by webapps package
+#   hosts without addresses are only added to known_hosts file and not to /etc/hosts
+hosts:
+  github.com:
+  gist.github.com:
+  server: 192.168.1.4
+  host: 192.168.56.1
+
+login_theme: dark
+
+mail:
+  domain: example.com
+  address: mail
+
+
+monit:
+  mailto: admin@example.com
+  check:
+    paths: /
+  webserver:
+    address: 192.168.1.0/255.255.255.0
+    username: admin
+    password: monit
+
+# Latest version including preferred nginx version:
+# https://github.com/FooBarWidget/passenger/blob/master/NEWS
+passenger:
+  version: 3.0.11
+# Set in passenger.rb package
+#  root: Points to passenger path in rubygems
+#  ruby: Points to the ruby executable in rbenv, rvm, compiled or installed by your package manager
+
+# Uncomment to use RVM
+# Ruby will be installed using RVM
+# Passenger will be installed using rvmsudo
+#rvm:
+#  url: https://rvm.beginrescueend.com/install/rvm
+#  version: 1.9.2
+
+ruby:
+  version: 1.9.2
+  full_version: 1.9.2-p290
+#  gems_path: '.rvm/gems/1.9.2-p290/@global/gems'
+#  executable: .rvm/wrappers/1.9.2-p290@global/ruby
+  gems_path: .rbenv/versions/1.9.2-p290/lib/ruby/gems/1.9.1/gems
+  executable: .rbenv/versions/1.9.2-p290/bin/ruby
+
+set_rails_env_for:
+  - qa
+  - staging
+  - production
+
+timezone: GB
+
+# Where different packages exist for open and non open source
+# setting this to true prefers opensource - Currently only
+# used by chrome/chromium
+use_opensource: true
+
+# Settings used in webserver packages such as nginx and apache
+webserver:
+  name: nginx
+  modules: --with-http_ssl_module
+  version: 1.0.11
+  url: http://nginx.org/download/nginx-1.0.11.tar.gz
+  src_path: /usr/local/src/nginx-1.0.11
+  path: /usr/local/nginx
+  servers_dir: conf/servers
+

data/lib/template/logrotate/app.erb

@@ -0,0 +1,10 @@
+<%= log_path %> {
+  weekly
+  compress
+  rotate 4
+  missingok
+  delaycompress
+  notifempty
+  copytruncate
+}
+

data/lib/template/logrotate/nginx.erb

@@ -0,0 +1,12 @@
+<%= log_path %> {
+  daily
+  rotate 14
+  compress
+  delaycompress
+  sharedscripts
+  <%= stats_command %>
+  postrotate
+    test ! -f /var/run/nginx.pid || kill -USR1 `cat /var/run/nginx.pid`
+  endscript
+}
+