neetob 0.5.5 → 0.5.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2e9f4f9a2ee60826478456769b0ec2e13822cefde51c5169281a30d1dceea6f4
-  data.tar.gz: 9266e85257bede98e0591aa16be29ca957728f6a83171645f99361a69066667d
+  metadata.gz: 1faa095ee6bf4577f4f7eb7998ed75cc2f5d7b7cc4a8f58a77c2111bfee962d1
+  data.tar.gz: 8da64fc40ecb7511210cd83f227e2f54b59f492594510116594437b1cba70788
 SHA512:
-  metadata.gz: 32214fd0f0ae2e81b4163a71f3a73e84402e76bb98fdbeb3be19d3ec415c62dc3a9ef792f2ddcecd0c67016fb262725814ba9419d487e7a56788068dd659f427
-  data.tar.gz: c78d355e36cefdb274ccd8b5820299c4a188343f10af7bf03c54c357bd1f4bfa70a1290135c80137f3d51392b8d2a9d35c4906f7840a2689506d2e085914b3da
+  metadata.gz: fcdf7dd75fba94cae9bfb4ab69d39c28beda90ec0c018063739351180fe3840be26f95fc009faf9948e10605714455c6f2ac4b7b6cc0c70631cba220184de818
+  data.tar.gz: 9ea00f74654d339d5af9954928ce2076fc809ecebaaddf43a6de0b91089b819881d95bdf3554009f5a55ae2809bd12a64382f3d051ce29e723e79d28a339d288

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    neetob (0.5.5)
+    neetob (0.5.6)
       brakeman (~> 5.0)
       chronic
       dotenv (~> 2.8.1)
@@ -142,7 +142,7 @@ GEM
     chronic (0.10.2)
     coderay (1.1.3)
     colorize (1.1.0)
-    concurrent-ruby (1.3.1)
+    concurrent-ruby (1.3.4)
     connection_pool (2.4.1)
     crack (0.4.5)
       rexml
@@ -172,7 +172,7 @@ GEM
     ffi (1.17.0)
     ffi (1.17.0-x86_64-darwin)
     ffi (1.17.0-x86_64-linux-gnu)
-    fugit (1.11.0)
+    fugit (1.11.1)
       et-orbi (~> 1, >= 1.2.11)
       raabro (~> 1.4)
     fury (0.0.1)
@@ -364,7 +364,7 @@ GEM
       io-console (~> 0.5)
     request_store (1.7.0)
       rack (>= 1.4)
-    rexml (3.3.3)
+    rexml (3.3.6)
       strscan
     rinku (2.0.6)
     rubocop (1.39.0)
@@ -427,7 +427,7 @@ GEM
     strscan (3.1.0)
     terminal-table (3.0.2)
       unicode-display_width (>= 1.1.1, < 3)
-    thor (1.3.1)
+    thor (1.3.2)
     tilt (2.3.0)
     timeout (0.4.1)
     tty-cursor (0.7.1)

data/README.md

@@ -23,15 +23,25 @@ The `neetob` gem gives a different set of commands for interacting with Github r
    3. [Execute](#execute)
 5. [Working with neetoDeploy](#working-with-neetodeploy)
    1. [Config Vars](#config-vars)
-6. [Working with Users](#working-with-users)
+   2. [Autoscaling](#autoscaling)
+6. [Working with Cloudflare](#working-with-cloudflare)
+   1. [SSL Mode](#ssl-mode)
+   2. [Minimum TLS Version](#minimum-tls-version)
+   3. [Always Use HTTPS](#always-use-https)
+   4. [Verify SPF](#verify-spf)
+   5. [Bot Protection Mode](#bot-protection-mode)
+   6. [DNS Proxy Status](#dns-proxy-status)
+7. [Working with SRE helpers](#working-with-sre-helpers)
+   1. [Checking essential environment variables](#checking-essential-environment-variables)
+8. [Working with Users](#working-with-users)
    1. [Audit](#audit)
    2. [Commits](#commits)
-7. [Make Repos Uptodate](#make-repos-uptodate)
-8. [Working with neeto Repos](#working-with-neeto-repos)
+9. [Make Repos Uptodate](#make-repos-uptodate)
+10. [Working with neeto Repos](#working-with-neeto-repos)
    1. [Audit](#audit-1)
-9. [Working with local Repos](#working-with-local-repos)
+11. [Working with local Repos](#working-with-local-repos)
    1. [ls](#ls)
-10. [Testing](docs/testing.md)
+12. [Testing](docs/testing.md)
 
 ## Usage
 
@@ -460,6 +470,129 @@ To update the above-mentioned config variables under the defined project, we can
 neetob neetodeploy config_vars upsert --path_with_project_keys ~/Desktop/config.json --apps "neeto-*-staging"
 ```
 
+### Autoscaling
+
+Use the following commands to check whether autoscaling is enabled or not for an application deployed in NeetoDeploy.
+
+```
+neetodeploy autoscaling_config list -a neeto-replay-web-production
+```
+
+This command will print whether or not autoscaling is enabled for all the process types specified in your Procfile like so.
+
+```
+{"release"=>false, "web"=>true, "worker"=>true}
+```
+
+## Working with Cloudflare
+
+The `cloudflare` command interacts with resources in Cloudflare. For all the following commands you need to pass `CLOUDFLARE_API_KEY` as an environment variable.
+
+### SSL Mode
+
+Use the `ssl_mode` command to check if SSL/TLS is set to Full or not in Cloudflare.
+
+```
+CLOUDFLARE_API_KEY="Bearer APIKEY" neetob cloudflare ssl_mode -d "neetocode.com"
+```
+
+This will print the output like so:
+
+```
+SSL Mode is set to full
+```
+or like so if the SSL mode is set to `Full (strict)`:
+
+```
+SSL Mode is set to strict
+```
+
+### Minimum TLS Version
+
+Use the `min_tls_version` command to check the value of the Minimum TLS version setting in Cloudflare for your domain.
+
+```
+CLOUDFLARE_API_KEY="Bearer APIKEY" neetob cloudflare min_tls_version -d "neetocode.com"
+```
+
+This will print the output like so:
+
+```
+Minimum TLS version is set to 1.2
+```
+
+### Always Use HTTPS
+
+Use the `always_use_https` command to check if always use HTTPS is turned on in Cloudflare for your domain.
+
+```
+CLOUDFLARE_API_KEY="Bearer APIKEY" neetob cloudflare always_use_https -d "neetocode.com"
+```
+
+This will print the output like so:
+
+```
+Always use HTTPS is turned on
+```
+
+### Verify SPF
+
+Use the `verify_spf` command to check if SPF settings are configured properly or not in Cloudflare for your domain.
+
+```
+CLOUDFLARE_API_KEY="Bearer uw_ec9MQAaLybH27dNQiZ4t1dELLx061A6hbfWM-" neetob cloudflare verify_spf -d "neetocode.com"
+```
+
+This will print the output like so:
+
+```
+Only one TXT record for SPF present
+SPF TXT 1: v=spf1 include:_spf.mlsend.com include:_spf.google.com -all
+```
+
+Each domain should have only one TXT record for SPF.
+
+### Bot Protection Mode
+
+Use the `bot_fight_mode` command of to check if bot protection is turned on or not in Cloudflare.
+
+```
+CLOUDFLARE_API_KEY="Bearer uw_ec9MQAaLybH27dNQiZ4t1dELLx061A6hbfWM-" neetob cloudflare bot_fight_mode -d "neetocode.com"
+```
+
+This will print the output like so:
+
+```
+Bot fight mode is turned on
+```
+
+### DNS Proxy status
+
+Use the `dns_proxy` command to check if DNS proxy is enabled for all DNS records of your domain in Cloudflare.
+
+```
+CLOUDFLARE_API_KEY="Bearer uw_ec9MQAaLybH27dNQiZ4t1dELLx061A6hbfWM-" neetob cloudflare dns_proxy -d "neetocode.com"
+```
+
+This will print the output like so:
+
+```
+DNS proxy is turned on for A record neetocode.com
+DNS proxy is turned on for A record *.neetocode.com
+```
+
+## Working with SRE helpers
+
+### Checking essential environment variables
+
+The `neetob sre` command can be used to run a check against all Neeto apps to confirm whether or not the above mentioned essential environment variables are set in the application or not.
+
+You can run it like so and it will print a list of all the apps, whether the environment variables are set, and if they're missing any it will print a list of missing envs.
+
+```
+neetob sre check_essential_env
+```
+
 ## Working with users
 
 The `users` command interacts with the contributors of neeto applications.

data/lib/neetob/cli/cloudflare/verify_spf.rb

@@ -22,10 +22,15 @@ module Neetob
 
           raise(StandardError, "No DNS records found") if response[:result].empty?
 
-          spf_txt_records = response[:result].filter { |dns| dns[:type] == "TXT" && dns[:content].start_with?("v=spf1") }
+          spf_txt_records = response[:result].filter { |dns|
+            dns[:type] == "TXT" &&
+            (dns[:content].start_with?("v=spf1") || dns[:content].start_with?("\"v=spf1"))
+          }
 
           if spf_txt_records.count > 1
             ui.error("More than one TXT record found for SPF")
+          elsif spf_txt_records.count == 0
+            ui.success("No TXT record for SPF present")
           else
             ui.success("Only one TXT record for SPF present")
           end
@@ -33,6 +38,16 @@ module Neetob
           spf_txt_records.each_with_index do |dns, index|
             ui.info("SPF TXT #{index + 1}: #{dns[:content]}")
           end
+
+          if spf_txt_records.count == 1
+            unique_spf_txt_record = spf_txt_records.first
+
+            if unique_spf_txt_record[:content].end_with?("-all") || unique_spf_txt_record[:content].end_with?("-all\"")
+              ui.success("SPF TXT record is set to hard fail for SPF compliance")
+            else
+              ui.error("SPF TXT record is not set to hard fail for SPF compliance")
+            end
+          end
         end
       end
     end

data/lib/neetob/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Neetob
-  VERSION = "0.5.5"
+  VERSION = "0.5.6"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: neetob
 version: !ruby/object:Gem::Version
-  version: 0.5.5
+  version: 0.5.6
 platform: ruby
 authors:
 - Udai Gupta
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-08-09 00:00:00.000000000 Z
+date: 2024-10-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor
@@ -255,7 +255,7 @@ metadata:
   homepage_uri: https://github.com/bigbinary/neetob
   source_code_uri: https://github.com/bigbinary/neetob
   changelog_uri: https://github.com/bigbinary/neetob/blob/main/CHANGELOG.md
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -271,7 +271,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubygems_version: 3.4.10
-signing_key: 
+signing_key:
 specification_version: 4
 summary: Provides a set of helper scripts for Github and Heroku.
 test_files: []