machines 0.5.1

data/lib/template/machines.yml

@@ -0,0 +1,179 @@
+# BE CAREFUL: THIS FILE IS ALSO WRITTEN TO BY MACHINES
+# This config file is used to read and also write machine settings.
+# You can replace these comments with your own. Comment lines will be retained upto
+# the ---.
+#
+# THIS CONTAINS A NUMBER OF PASSWORDS. SETTING PROPER PERMISSIONS IS HIGHLY RECOMMENDED.
+#
+# Each machine represents a physical (or virtual) computer in your server architecture. This file
+# is used to determine where to point database connections from app servers. Because of this,
+# database servers must be created before application servers.
+#
+# Edit this file to setup your initial machines. If using EC2, Machines will populate the
+# address setting with the new instance that is created.
+#
+# For example:
+#     machines build maindb # creates the master database and sets address in machines.yml
+#   then:
+#     machines build production # creates the app server and sets db to point to maindb
+#
+# machines:
+#   <machine_name>:
+#     hostname: Used to set the hostname of the machine (e.g. main.electricvisions.com)
+#     address: IP or DNS name of the machine (this is populated automatically when creating EC2 machines)
+#     user: User to login as and to identify the  users/ folder to use
+#     environment: Rails.env to use
+#     apps: An array of app names to setup on this machine (nil for all, [] for none)
+#     roles: Roles of the server (Roles known by standard template are: app, db, dbmaster, dbslave)
+#     db_server: Db server that will be used or replicated from (e.g. db_server: maindb).
+#     root_pass: Root password for db servers - Leave blank to generate one
+#     replication_user: User to connect with when replicating
+#     replication_pass: Password to connect with when replicating
+#     ec2: tells Machines to create a new ec2 instance (unless address is already set)
+#       type: Size of EC2 instance
+#         32 bit instances - t1.micro, m1.small, m1.medium
+#         64 bit instances - m1.large, m1.xlarge, c1.xlarge, cc1.4xlarge, cg1.4xlarge, m2.xlarge, m2.2xlarge, m2.4xlarge
+#       ami: Amazon Machine Image - Choose your preferred AMI at http://alestic.com/ (e.g. ami-11f0cc65 - EU West 32 bit Ubuntu 11.10 EBS)
+#       region: Location of instance (e.g. ec2.eu-west-1.amazonaws.com)
+#       public_key_path: Path to public key file
+#       private_key_path: Path to private key file
+#       username: Instance username (Canonical uses 'ubuntu' in it's AMIs)
+#       security_group: Security group you setup on Amazon -  (e.g. ev-public)
+
+---
+machines:
+  testvm:
+    hostname: main.electricvisions.com
+    address: machinesvm
+    user: phil
+    password: password
+    environment: development
+    apps:
+      - condensd
+      - fountainwiki
+      - velocitytracking
+    roles:
+      - app
+      - db
+    db_server: testvm
+
+  philworkstation:
+    hostname: main.electricvisions.com
+    address:
+    user: phil
+    environment: development
+    apps:
+      - electricvisions
+      - condensd
+      - fountainwiki
+      - merrol
+      - somafila
+      - velocitytracking
+      - eutopia
+      - sanity
+      - tvs
+    roles:
+      - app
+      - db
+    db_server: philworkstation
+    root_pass: secure
+
+  maindb:
+    hostname: dbmaster.electricvisions.com
+    address:
+    user: www
+    environment: production
+    apps:
+      - electricvisions
+      - condensd
+      - fountainwiki
+      - merrol
+      - somafila
+      - velocitytracking
+    roles:
+      - db
+      - dbmaster
+    root_pass: secure
+    replication_user: repl
+    replication_pass: secure
+    cloud:
+      flavor_id: t1.micro
+      image_id: ami-11f0cc65 # EU WEST 1 Ubuntu x32 11.10 EBS
+      region: eu-west-1
+      public_key_path: ssh/id_rsa.pub
+      private_key_path: ssh/id_rsa
+      username: ubuntu
+
+  backupdb:
+    hostname: dbslave.electricvisions.com
+    address:
+    user: www
+    environment: production
+    apps:
+      - electricvisions
+      - condensd
+      - fountainwiki
+      - merrol
+      - somafila
+      - velocitytracking
+    roles:
+      - db
+      - dbslave
+    root_pass: secure
+    db_server: maindb
+    cloud:
+      flavor_id: t1.micro
+      image_id: ami-11f0cc65 # EU WEST 1 Ubuntu x32 11.10 EBS
+      region: eu-west-1
+      public_key_path: ssh/id_rsa.pub
+      private_key_path: ssh/id_rsa
+      username: ubuntu
+
+  staging:
+    hostname: staging.electricvisions.com
+    address:
+    user: www
+    environment: staging
+    apps:
+      - electricvisions
+      - condensd
+      - fountainwiki
+      - merrol
+      - somafila
+      - velocitytracking
+    roles:
+      - app
+      - db
+    db_server: staging
+    root_pass: secure
+    cloud:
+      flavor_id: t1.micro
+      image_id: ami-11f0cc65 # EU WEST 1 Ubuntu x32 11.10 EBS
+      region: eu-west-1
+      public_key_path: ssh/id_rsa.pub
+      private_key_path: ssh/id_rsa
+      username: ubuntu
+
+  production:
+    hostname: electricvisions.com
+    address:
+    user: www
+    environment: production
+    apps:
+      - electricvisions
+      - condensd
+      - fountainwiki
+      - merrol
+      - somafila
+      - velocitytracking
+    roles:
+      - app
+    db_server: maindb
+    cloud:
+      flavor_id: t1.micro
+      image_id: ami-11f0cc65 # EU WEST 1 Ubuntu x32 11.10 EBS
+      region: eu-west-1
+      public_key_path: ssh/id_rsa.pub
+      private_key_path: ssh/id_rsa
+      username: ubuntu
+

data/lib/template/misc/awstats.conf.erb

@@ -0,0 +1,7 @@
+LogFile="/var/log/<%= $conf.webserver.name %>/<%= name %>.access.log"
+LogFormat=1
+SiteDomain="<%= server_name %>"
+HostAliases="localhost 127.0.0.1 <%= server_name %>"
+DNSLookup=1
+DirData="<%= $conf.appsroot %>/<%= name %>_stats/data"
+

data/lib/template/misc/ntp.conf

@@ -0,0 +1,7 @@
+tinker panic 0
+restrict 127.0.0.1
+restrict default kod nomodify notrap
+server 0.pool.ntp.org
+server 1.pool.ntp.org
+server 2.pool.ntp.org
+server 3.pool.ntp.org

data/lib/template/monit/conf.d/delayed_job.erb

@@ -0,0 +1,11 @@
+<% $conf.webapps.each do |appname, app| %>
+  <% if app.monitor_delayed_job %>
+    <% path = "PATH=#{$conf.user_home}/.rbenv/bin:#{$conf.user_home}/.rbenv/shims:$PATH" %>
+    <% env = "RAILS_ENV=#{$conf.environment}" %>
+    <% script = "cd #{app.path}/current && #{path} #{env} bundle exec script/delayed_job" %>
+    check process delayed_job with pidfile <%= app.path %>/shared/pids/delayed_job.pid
+          start program = "/bin/bash -c '<%= script %> start'" as uid <%= $conf.user %> and gid <%= $conf.user %>
+          stop program = "/bin/bash -c '<%= script %> stop'"
+  <% end %>
+<% end %>
+

data/lib/template/monit/conf.d/mysql.erb

@@ -0,0 +1,7 @@
+check process mysql with pidfile /var/run/mysqld/mysqld.pid
+      group database
+      start program = "/sbin/start mysql"
+      stop program = "/sbin/stop mysql"
+      if failed host <%= $conf.db_server.address %> port 3306 protocol mysql then restart
+      if 5 restarts within 5 cycles then timeout
+

data/lib/template/monit/conf.d/nginx

@@ -0,0 +1,5 @@
+check process nginx with pidfile /var/run/nginx.pid
+  start program = "/sbin/start nginx"
+  stop program  = "/sbin/stop nginx"
+  group www
+

data/lib/template/monit/conf.d/postfix

@@ -0,0 +1,7 @@
+check process postfix with pidfile /var/spool/postfix/pid/master.pid
+      group mail
+      start program = "/sbin/start postfix"
+      stop  program = "/sbin/stop postfix"
+      if failed port 25 protocol smtp then restart
+      if 5 restarts within 5 cycles then timeout
+

data/lib/template/monit/conf.d/ssh

@@ -0,0 +1,6 @@
+check process sshd with pidfile /var/run/sshd.pid
+   start program  "/sbin/start ssh"
+   stop program  "/sbin/stop ssh"
+   if failed port 22 protocol ssh then restart
+   if 5 restarts within 5 cycles then timeout
+

data/lib/template/monit/conf.d/system.erb

@@ -0,0 +1,14 @@
+check system localhost
+      if loadavg (1min) > 4 then alert
+      if loadavg (5min) > 2 then alert
+      if memory usage > 80% then alert
+      if swap usage > 25% then alert
+      if cpu usage (user) > 70% then alert
+      if cpu usage (system) > 30% then alert
+      if cpu usage (wait) > 20% then alert
+
+<% $conf.monit.check.paths.split(' ').each do |path| %>
+check filesystem rootfs with path <%= path %>
+      if space < 5% then alert
+<% end %>
+

data/lib/template/monit/monitrc.erb

@@ -0,0 +1,10 @@
+set daemon 120
+set logfile syslog facility log_daemon
+
+set mailserver <%= $conf.monit.mailserver %>
+set alert <%= $conf.monit.mailto %>
+
+set httpd port 2812 and allow <%= $conf.monit.webserver.username %>:<%= $conf.monit.webserver.password %>
+
+include /etc/monit/conf.d/*
+

data/lib/template/monit/upstart.conf

@@ -0,0 +1,16 @@
+# http://mmonit.com/wiki/Monit/Upstart
+
+description "Monit service manager"
+
+limit core unlimited unlimited
+
+start on runlevel [2345]
+stop on runlevel [!2345]
+
+expect daemon
+respawn
+
+exec /usr/bin/monit -c /etc/monit/monitrc
+
+pre-stop exec /usr/bin/monit -c /etc/monit/monitrc quit
+

data/lib/template/mysql/dbmaster.cnf

@@ -0,0 +1,7 @@
+[mysqld]
+server-id = 1
+log_bin = /var/log/mysql/mysql-bin.log
+bind-address = 0.0.0.0
+innodb_flush_log_at_trx_commit = 1
+sync_binlog = 1
+

data/lib/template/mysql/dbslave.cnf

@@ -0,0 +1,3 @@
+[mysqld]
+server-id = 2
+

data/lib/template/nginx/app_server.conf.erb

@@ -0,0 +1,87 @@
+# Redirect from www
+server {
+  server_name www.<%= server_name %>;
+  return 301 <%= ssl == 'force' ? 'https' : '$scheme' %>://<%= server_name %>$request_uri;
+}
+
+<% if ssl == 'force' %>
+# Redirect from http
+server {
+  listen 80;
+  server_name <%= server_name %>;
+  return 301 https://<%= server_name %>$request_uri;
+}
+
+<% end %>
+server {
+  <% unless ssl == 'force' %>
+  listen 80;
+  <% end %>
+  <% if ssl %>
+  listen 443;
+  <% end %>
+  server_name <%= server_name %>;
+  root <%= root %>;
+  rails_env <%= $conf.environment %>;
+  passenger_enabled on;
+  add_header  Cache-Control public;             # Ensure browsers cache secure pages
+
+  <% if ssl %>
+  ssl on;
+  ssl_certificate /usr/local/nginx/conf/<%= ssl_crt %>;
+  ssl_certificate_key /usr/local/nginx/conf/<%= ssl_key %>;
+
+  passenger_set_cgi_param HTTP_X_FORWARDED_FOR $proxy_add_x_forwarded_for;
+  passenger_set_cgi_param HTTP_HOST $http_host;
+  passenger_set_cgi_param HTTP_X_REAL_IP $remote_addr;
+  passenger_set_cgi_param HTTP_X_FORWARDED_PROTO https;
+  passenger_set_cgi_param HTTP_X_URL_SCHEME $scheme;
+
+  proxy_redirect    off;
+  proxy_max_temp_file_size 0;
+
+  <% end %>
+  access_log /var/log/nginx/<%= name %>.access.log main;
+  error_log /var/log/nginx/<%= name %>.error.log notice;
+
+  <% if monit_web %>
+  location /monit/ {
+    rewrite /monit(.*) $1 break;
+    proxy_pass http://127.0.0.1:2812;
+    proxy_redirect off;
+    proxy_set_header Host       $host;
+    proxy_set_header X-Real-IP  $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+  }
+
+  <% end %>
+  <% if stats %>
+  location /stats {
+    alias <%= "#{path}_stats/public" %>;
+    index <%= "awstats.#{server_name}.html" %>;
+  }
+
+  location /icon {
+    root /usr/share/awstats;
+  }
+
+  <% end %>
+  # Cache assets: see http://developer.yahoo.com/performance/rules.html#expires
+  location ~ ^/(images|javascripts|stylesheets)/ {
+    expires 10y;
+  }
+
+  # Rewrite all the requests to the maintenance.html page if it exists.
+  if (-f $document_root/system/maintenance.html) {
+    return 503;
+  }
+  # Allow images and css in maintenance.html file
+  if ($request_filename ~* \.(css|jpg|gif|png)$) {
+    break;
+  }
+  error_page 503 @503;
+  location @503 {
+    rewrite  ^(.*)$  /system/maintenance.html break;
+  }
+}
+

data/lib/template/nginx/nginx.conf.erb

@@ -0,0 +1,46 @@
+user <%= $conf.machine.user %>;
+worker_processes  4;    # Match this with the number of CPUs or increase for large static files
+pid /var/run/nginx.pid; # Used by monit
+
+events {
+  worker_connections  1024;
+}
+
+http {
+  include       mime.types;
+  default_type  application/octet-stream;
+
+  sendfile            on;
+  tcp_nopush          on;
+  tcp_nodelay         off;
+  keepalive_timeout   65;
+  keepalive_requests  0;      # http://technosophos.com/content/nginx-tcpnopush-sendfile-and-memcache-right-configuration
+
+  log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                    '$status $body_bytes_sent "$http_referer" '
+                    '"$http_user_agent" "$http_x_forwarded_for"';
+
+  gzip              on;
+  gzip_http_version 1.0;
+  gzip_comp_level   2;
+  gzip_proxied      any;
+  gzip_types        text/plain text/css application/x-javascript text/xml
+                    application/xml application/xml+rss text/javascript;
+
+  client_body_buffer_size 128k; # Buffer size that will be written to before using a temporary file
+  client_max_body_size 5M;      # Max content to be served. Increase if media content is to be served
+  # client_body_timeout 60;     # Time allowed to respond in seconds. Increase for long requests
+
+  passenger_root <%= $conf.passenger.root %>;
+  passenger_ruby <%= $conf.passenger.ruby %>;
+
+  passenger_max_pool_size 8;                      # Max number of simultaneous instances
+  passenger_pool_idle_time 0;                     # Do not shutdown instances unless needed
+  <% $conf.webapps.each do |app_name, app| %>
+    <% scheme = app.ssl == 'force' ? 'https' : 'http' %>
+    passenger_pre_start <%= scheme %>://<%= app.server_name %>;  # Hit the server so it's ready
+  <% end %>
+
+  include <%= File.join($conf.webserver.path, $conf.webserver.servers_dir, '*.conf') %>;
+}
+

data/lib/template/nginx/upstart.conf.erb

@@ -0,0 +1,21 @@
+description "nginx http daemon"
+
+start on (filesystem and net-device-up IFACE=lo)
+stop on runlevel [!2345]
+
+env DAEMON=<%= $conf.webserver.path %>/sbin/nginx
+env PID=/var/run/nginx.pid
+
+# Needed to allow Nginx to start however, the wrong PID will be tracked
+expect fork
+
+# Test the nginx configuration (Upstart will exit if this fails)
+pre-start exec $DAEMON -t
+
+# Ensure nginx is shutdown gracefully
+# Upstart will be tracking the wrong PID so the following is needed to stop nginx
+post-stop exec start-stop-daemon --stop --pidfile $PID --name nginx --exec $DAEMON --signal QUIT
+
+# Start Nginx
+exec $DAEMON
+

data/lib/template/packages/custom.rb

@@ -0,0 +1,17 @@
+only :user => 'phil' do
+  task :workspace, 'Setup home folders' do
+    %w(downloads music pictures reference videos).each do |folder|
+      run mkdir folder
+      run append "file://#{$conf.user_home}/#{folder} folder", to: '.gtk-bookmarks'
+    end
+  end
+
+  sudo install [
+    'flashplugin-installer',    # Play Flash in a Web browser
+    'libsqlite3-dev',           # Needed if SQLite Gem is used
+    'ubuntu-restricted-extras', # play/record MP3, DVD, Flash, Quicktime, WMA, WMV, etc
+  ]
+
+  run append 'startx', :to => '.profile'
+end
+

data/lib/template/packages/productivity.rb

@@ -0,0 +1,18 @@
+task :productivity, 'Install some productivity apps and set associations'do
+  sudo install [
+    'audacious',                # media player
+    'brasero',                  # CD/DVD Burning tool
+    'evince',                   # PDF viewer
+    'gimp',                     # bitmap graphics editor
+    'gitk',                     # GUI for git
+    'inkscape',                 # vector graphics editor
+    'meld',                     # Diff tool used by git
+    'mysql-navigator',          # GUI for MySQL
+  ]
+
+  run append 'application/pdf=evince.desktop', :to => '.local/share/applications/mimeapps.list'
+  run append 'image/png=gimp.desktop', :to => '.local/share/applications/mimeapps.list'
+  run append 'image/jpeg=gimp.desktop', :to => '.local/share/applications/mimeapps.list'
+  run append 'image/svg=inkscape.desktop', :to => '.local/share/applications/mimeapps.list'
+end
+

data/lib/template/slim/themes/dark/slim.theme

@@ -0,0 +1,39 @@
+# Dark SLiM theme
+
+# Messages (ie: shutdown)
+msg_color               #AAAAAA
+msg_font                Ubuntu:size=18:bold:dpi=75
+
+# valid values: stretch, tile
+background_style        stretch
+
+# Input controls
+input_panel_x           50%
+input_panel_y           50%
+input_name_x            160
+input_name_y            107
+input_pass_x            160
+input_pass_y            163
+input_font              Ubuntu:size=14:dpi=75
+input_fgcolor           #444444
+
+# Username / password request
+username_font           Ubuntu:size=16:bold:dpi=75
+username_color          #cccccc
+username_x              35
+username_y		        110
+username_shadow_xoffset 	-1
+username_shadow_yoffset 	-1
+username_shadow_color   	#333333
+
+password_font           Ubuntu:size=16:bold:dpi=75
+password_color          #cccccc
+password_x              35
+password_y              165
+password_shadow_xoffset 	-1
+password_shadow_yoffset 	-1
+password_shadow_color   	#333333
+
+username_msg            Username:
+password_msg            Password:
+

data/lib/template/users/phil/dotfiles/bash_aliases

@@ -0,0 +1,45 @@
+# Output raw control characters in less (colors log files that use escape codes)
+alias less='less -R'
+
+alias g='gedit'
+
+# Create binstubs for bundler
+alias bb='bundle --binstubs=.bin'
+
+# Halve the size of all images in the current folder
+alias halfsize='ls *.* | xargs -n1 --replace convert -verbose {} -resize 50% {}'
+
+# Slideshow with feh image viewer
+# Press ENTER to load current image into Gimp. H to pause slideshow
+#   slide <file or folder>
+function slide {
+  feh --action "gimp '%f'" --fullscreen --auto-zoom --borderless --slideshow-delay 5 --sort name
+}
+
+# Search a Rails project excluding non-source directories
+function s {
+  grep --color=auto --exclude-dir={coverage,db,doc,.git,log,tmp,vendor,.yardoc} -r $* .
+}
+
+# Reset network interface
+function ifr {
+  sudo ifdown eth0
+  sudo ifup eth0
+}
+
+# Get git branch name
+parse_git_branch() {
+  git symbolic-ref -q HEAD 2> /dev/null | sed 's/refs\/heads\/\(.*\)/ \1/'
+}
+
+# Colour-coded prompt
+#     machine-name current-dir rubyversion@gemset [branch] $
+PURPLE="\[\e[0;35m\]"
+BLUE="\[\e[0;34m\]"
+RED="\[\e[0;31m\]"
+YELLOW="\[\e[0;33m\]"
+NORMAL="\[\e[m\]"
+BRANCH="\$(parse_git_branch)"
+# RVM="\$(~/.rvm/bin/rvm-prompt v g)" # Uncomment to enable rubyversion@gemset
+PS1="$PURPLE\h $BLUE\w$RED$RVM$YELLOW$BRANCH $PURPLE\$$NORMAL "
+

data/lib/template/users/phil/dotfiles/config/Trolltech.conf

@@ -0,0 +1,4 @@
+[Qt]
+font="Ubuntu,9,-1,5,25,0,0,0,0,0"
+style=GTK+
+

data/lib/template/users/phil/dotfiles/config/gtk-3.0/settings.ini

@@ -0,0 +1,9 @@
+[Settings]
+gtk-theme-name = Adwaita
+gtk-icon-theme-name = elementary-mono-dark
+gtk-fallback-icon-theme = gnome
+# next option is applicable only if selected theme supports it
+gtk-application-prefer-dark-theme = true
+# set font name and dimension
+gtk-font-name = 'Ubuntu Light 9'
+

data/lib/template/users/phil/dotfiles/config/openbox/autostart.sh

@@ -0,0 +1,14 @@
+# ~/.config/openbox/autostart.sh
+
+# Lock screen after 5 minutes using slock (type password and press enter to unlock (no feedback))
+# xautolock -time 5 -locker slock &
+
+# Set a background image
+feh --bg-scale $HOME/Pictures/wallpaper.jpg
+
+# Run the compositing manager
+xcompmgr &
+
+# Start Docky the dock launcher
+docky &
+