prun-ops 0.3.0 → 0.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cfe66e0e6eca2984b10e276613767b236a719ed2cdcb92ed51ca3b78062b71ce
-  data.tar.gz: 366be3e7998aac88911f68bf8a78a087212055fe240f6c0d662070227eb085b3
+  metadata.gz: 611578094a2a464881d040c4198a388ea290a325cd12226addc6821bc99b75e9
+  data.tar.gz: f7a716870e424f577ad27df87b86588a13a1fabbc45158066dfa944fe5cc3c99
 SHA512:
-  metadata.gz: 3b721ff34499c5ec3891a61fa6ae3f2a0bf2fa9fa615cb78d54747b551e1ccedf6f40ef7e405ef36043ee8236f53873104367c50b03b743a59d73a3ba2d4b833
-  data.tar.gz: b47621f17dfa836188fa03e022b28767e94b30112082388128363db45f65ceffe4c5f8c8e75131232eb98e941fb0c72cfbc44c9e961d71387d3cccfea77b84ba
+  metadata.gz: 284f0a9aea2ae885ac64871bdbf98ea121d8184623df22c3e58cba73c66690881bb6fe769d6fe771db0871375ff7103836bdfaf849782279e8a32879c1d0453a
+  data.tar.gz: 6ceac8d461ad1896e53a3557363f857bf2ac46c5d7e3b763f42f4193858eadb2af0b6c7e2169fb8fb7787b98b4b65d58ef468d5d78d61a8e99f040791238fb02

data/README.md

@@ -49,6 +49,28 @@ Dir.glob('lib/capistrano/tasks/*.rake').each { |r| import r }
 Dir.glob('lib/capistrano/tasks/*.cap').each { |r| import r }
 ```
 
+In order to configure RVM and PUMA you have here the params:
+
+```ruby
+set :rvm_ruby_version, "ruby-3.2.2"
+set :rvm_custom_path, "/usr/share/rvm"
+
+
+#PUMA:
+# Run 'cap production puma:systemd:config' to setup teh linux service
+
+# set :puma_threads, [4, 16]
+# set :puma_workers, 0
+set :puma_service_unit_type, "notify"
+set :puma_access_log, "#{release_path}/log/puma.access.log"
+set :puma_error_log, "#{release_path}/log/puma.error.log"
+set :puma_bind, "tcp://0.0.0.0:3000"
+# set :puma_conf, "#{shared_path}/puma.rb"
+# set :puma_state, "#{shared_path}/tmp/pids/puma.state"
+# set :puma_pid, "#{shared_path}/tmp/pids/puma.pid"
+# set :puma_preload_app, true
+```
+
 Notice that you are adding all prun-ops tasks with the line `require 'capistrano/prun-ops'`
 
 Your config/deploy/production.rb:
@@ -82,10 +104,10 @@ Secondary tasks:
 - `cap [stg] nginx:[start|stop|restart]` start/stop nginx
 - `cap [stg] nodejs:install` install node
 - `cap [stg] redis:install` install redis server
-- `cap [stg] app:prepare`(DEPRECATED) create init scripts
+- `cap [stg] puma:install` install puma server
 - `cap [stg] app:db_prepare`(DEPRECATED) database first load
-- `cap [stg] nginx:cert` create SSL certificates with [Let's Encrypt](https://letsencrypt.org/)
-- `cap [stg] nginx:ssl` configure nginx with SSL certificates
+- `cap [stg] nginx:cert` create SSL certificates with [Let's Encrypt](https://letsencrypt.org/) and confiture nginx
+- `cap [stg] nginx:ssl`(DEPRECATED) configure nginx with SSL certificates
 
 Considerations:
 - 

data/lib/capistrano/config/app.rake

@@ -1,17 +1,5 @@
 namespace :app do
 
-  task :prepare do
-    on roles(:app) do
-      template 'app_init.sh', "/etc/init.d/#{fetch :application}"
-      execute <<-EOBLOCK
-        sudo thin config -C /etc/thin/#{fetch :application}.yml -c /var/www/#{fetch :application}/current -l log/thin.log -e #{fetch :stage} --servers 1 --port 3000
-        sudo chmod a+x /etc/init.d/#{fetch :application}
-        sudo update-rc.d #{fetch :application} defaults
-        sudo systemctl daemon-reload
-      EOBLOCK
-    end
-  end
-
   task :db_prepare do
     on roles(:app) do
       invoke 'deploy:starting'

data/lib/capistrano/config/nginx.rake

@@ -13,12 +13,9 @@ namespace :nginx do
     on roles(:web, :api) do |host|
       run_locally do
         run_in host, <<-EOBLOCK
-          sudo cd /usr/local/sbin
-          sudo wget https://dl.eff.org/certbot-auto
-          sudo chmod a+x /usr/local/sbin/certbot-auto
-          sudo mkdir /var/www/#{fetch :application}/current/public/.well-known
-          sudo certbot-auto certonly -a webroot --webroot-path=/var/www/#{fetch :application}/current/public -d #{host.hostname}
-          sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048
+          sudo snap install --classic certbot
+          sudo ln -s /snap/bin/certbot /usr/bin/certbot
+          sudo certbot --nginx -m admin@#{host.hostname} --non-interactive --agree-tos --domains #{host.hostname}
         EOBLOCK
       end
     end

data/lib/capistrano/config/postgres.rake

@@ -25,8 +25,8 @@ namespace :postgres do
       execute <<-EOBLOCK
         sudo sed -i "s/#listen_addresses = 'localhost'/listen_addresses = '*'/" /etc/postgresql/#{version}/main/postgresql.conf
         sudo sed -i "s/local   all             all                                     peer/local   all             all                                     md5/" /etc/postgresql/#{version}/main/pg_hba.conf
-        sudo sed -i "s/host    all             all             127.0.0.1/32            md5/host    all             all             all                     md5/" /etc/postgresql/#{version}/main/pg_hba.conf
-        sudo sed -i "s/ssl = true/ssl = false/" /etc/postgresql/#{version}/main/postgresql.conf
+        sudo sed -i "s/host    all             all             127.0.0.1/32            scram-sha-256/host    all             all             all                     scram-sha-256/" /etc/postgresql/#{version}/main/pg_hba.conf
+        sudo sed -i "s/ssl = on/ssl = off/" /etc/postgresql/#{version}/main/postgresql.conf
         sudo service postgresql restart
       EOBLOCK
 
@@ -36,6 +36,8 @@ namespace :postgres do
       EOBLOCK
       execute <<-EOBLOCK
         sudo -u postgres psql -c "create database #{database};"
+        sudo -u postgres psql -c "grant all privileges on database #{database} to #{username};"
+        sudo -u postgres psql -c "alter user #{username} with superuser;"
       EOBLOCK
 
       invoke 'postgres:restart'

data/lib/capistrano/config/templates/vhost.conf.erb

@@ -22,5 +22,11 @@ server {
     stub_status on;
     allow all;
   }
+  location /cable {
+    proxy_pass http://0.0.0.0:3000;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection "Upgrade";
+  }
 
 }

data/lib/capistrano/config/templates/vhost_ssl.conf.erb

@@ -35,6 +35,13 @@ server {
     stub_status on;
     allow all;
   }
+  location /cable {
+    proxy_pass http://0.0.0.0:3000;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection "Upgrade";
+  }
+
   location ~ /.well-known {
     allow all;
   }

data/lib/capistrano/config/ubuntu.rake

@@ -8,7 +8,7 @@ namespace :ubuntu do
         #{apt_nointeractive} libssl-dev libreadline-dev libgdbm-dev openssl
         #{apt_nointeractive} libreadline6-dev libyaml-dev sqlite3 autoconf libgdbm-dev
         #{apt_nointeractive} libcurl4 libcurl3-gnutls libcurl4-openssl-dev 
-        #{apt_nointeractive} libncurses5-dev automake libtool bison pkg-config libffi-dev
+        #{apt_nointeractive} libncurses5-dev automake libtool bison pkg-config libffi-dev libvips
         #{apt_nointeractive} software-properties-common gnupg2
       EOBLOCK
     end

data/lib/capistrano/prun-ops.rb

@@ -9,7 +9,7 @@ def template(template_name, target_path)
     file = File.read("lib/capistrano/config/templates/#{template_name}.erb")
   end
 
-  template = ERB.new file, nil, "%"
+  template = ERB.new file, nil, trim_mode: "%"
   rendered = template.result(binding)
   tmp_file = "/tmp/#{SecureRandom.hex}.#{template_name}"
   upload! StringIO.new(rendered), tmp_file

data/lib/prun-ops/version.rb

@@ -1,3 +1,3 @@
 module PrunOps
-  VERSION = "0.3.0"
+  VERSION = "0.3.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: prun-ops
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.2
 platform: ruby
 authors:
 - Juan Lebrijo
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-02-20 00:00:00.000000000 Z
+date: 2024-07-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler