magic_recipes_two 0.0.41 → 0.0.42
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +8 -8
- data/lib/capistrano/magic_recipes/version.rb +1 -1
- data/lib/capistrano/tasks/secrets.rake +30 -2
- metadata +1 -1
checksums.yaml
CHANGED
@@ -1,15 +1,15 @@
|
|
1
1
|
---
|
2
2
|
!binary "U0hBMQ==":
|
3
3
|
metadata.gz: !binary |-
|
4
|
-
|
4
|
+
NzZiOTA3ZTg1MjYxNmE3ODE1YzFlMmZiMTQ0NjI1Y2EwYmRkOTcwMw==
|
5
5
|
data.tar.gz: !binary |-
|
6
|
-
|
6
|
+
ZGZkOTM2MWNkYTMwZDIyZDAzMmUxMjA5YjMwNWQzNzA3OTM4M2FlNw==
|
7
7
|
SHA512:
|
8
8
|
metadata.gz: !binary |-
|
9
|
-
|
10
|
-
|
11
|
-
|
9
|
+
ZTA4NDY5MjMxZDFmMDQwMzg2NjFkOGExYzBjYmZmNTA0NzRkMjY4Y2FkOWFk
|
10
|
+
ZjNjYjIzYzFmZmE0MDI5ZjgwMDM3ODlhZjgxMzZkNDdlMzU1ZDk0N2U4MTg2
|
11
|
+
NWUzOTNhZjFmNmY0MzJmNDg1OWQyMDljY2M5NjY1NmJiZjgyNjk=
|
12
12
|
data.tar.gz: !binary |-
|
13
|
-
|
14
|
-
|
15
|
-
|
13
|
+
MjFiODhmMWI2ZGQ4YmQ4ZDA2ZWIzNjczZGQxNDI0MmY2MmVhNjEyNWYyOTMz
|
14
|
+
MzA5NzBkMjI4MjJhMTVjMTVmZmY2Y2Y1NjNlOGYxMDQ3MTE2ZWNkMzUxMDRh
|
15
|
+
NzA4MmFmZTc1YTJjYWJlMDY4MWMwZDA0MmNmNDg3NTcwYjhjYzk=
|
@@ -4,11 +4,13 @@ include Capistrano::MagicRecipes::BaseHelpers
|
|
4
4
|
namespace :load do
|
5
5
|
task :defaults do
|
6
6
|
set :secrets_roles, -> { :app }
|
7
|
-
set :secrets_profile, -> { "bashrc" } # "profile" | "bashrc"
|
7
|
+
set :secrets_profile, -> { "bashrc" } # "profile" | "bashrc" | "bach_profile" | "bash_login"
|
8
8
|
set :secrets_key_base, -> { generate_secrect_key }
|
9
9
|
set :secrets_key_name, -> { "#{ fetch(:application) }_#{ fetch(:stage) }_SECRET_KEY_BASE".gsub(/-/, "_").gsub(/[^a-zA-Z_]/, "").upcase }
|
10
10
|
set :secrets_user_path, -> { "/home/#{fetch(:user)}" }
|
11
11
|
set :secrets_set_both, -> { false }
|
12
|
+
set :secrets_set_env, -> { true }
|
13
|
+
set :secrets_set_etc, -> { false }
|
12
14
|
set :secrets_hooks, -> { true }
|
13
15
|
set :secrets_symlink, -> { false }
|
14
16
|
end
|
@@ -28,7 +30,7 @@ namespace :secrets do
|
|
28
30
|
end
|
29
31
|
|
30
32
|
|
31
|
-
desc "set secret-key in .profile or .bashrc"
|
33
|
+
desc "set secret-key in .profile or .bashrc or .bash_profile or .."
|
32
34
|
task :profile do
|
33
35
|
on release_roles fetch(:secrets_roles) do
|
34
36
|
within fetch(:secrets_user_path) do
|
@@ -40,6 +42,30 @@ namespace :secrets do
|
|
40
42
|
end
|
41
43
|
end
|
42
44
|
|
45
|
+
desc "set secret-key in /etc/environment .. for rvm usage"
|
46
|
+
task :environment do
|
47
|
+
on release_roles fetch(:secrets_roles) do
|
48
|
+
within "/etc" do
|
49
|
+
execute :sudo, "echo 'export #{fetch(:secrets_key_name)}=#{fetch(:secrets_key_base)}' | cat >> environment"
|
50
|
+
if fetch(:secrets_set_both, false)
|
51
|
+
execute :sudo, "echo 'export SECRET_KEY_BASE=#{fetch(:secrets_key_base)}' | cat >> environment"
|
52
|
+
end
|
53
|
+
end
|
54
|
+
end
|
55
|
+
end
|
56
|
+
|
57
|
+
desc "set secret-key in /etc/profile .. set for all users"
|
58
|
+
task :etc_profile do
|
59
|
+
on release_roles fetch(:secrets_roles) do
|
60
|
+
within "/etc" do
|
61
|
+
execute :sudo, "echo 'export #{fetch(:secrets_key_name)}=#{fetch(:secrets_key_base)}' | cat >> profile"
|
62
|
+
if fetch(:secrets_set_both, false)
|
63
|
+
execute :sudo, "echo 'export SECRET_KEY_BASE=#{fetch(:secrets_key_base)}' | cat >> profile"
|
64
|
+
end
|
65
|
+
end
|
66
|
+
end
|
67
|
+
end
|
68
|
+
|
43
69
|
|
44
70
|
desc "export secret-key in actual bash env"
|
45
71
|
task :export do
|
@@ -69,6 +95,8 @@ namespace :secrets do
|
|
69
95
|
desc 'secrets setup task (upload and set)'
|
70
96
|
task :setup do
|
71
97
|
invoke "secrets:profile"
|
98
|
+
invoke "secrets:environment" if fetch(:secrets_set_env)
|
99
|
+
invoke "secrets:etc_profile" if fetch(:secrets_set_etc)
|
72
100
|
invoke "secrets:export"
|
73
101
|
invoke "secrets:upload"
|
74
102
|
end
|