prun-ops 0.4.1 → 0.4.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ab8a519c3d3c607ef319f544086d6f085e1d691ccd12df93fc5dda7c126db41a
-  data.tar.gz: 951a9db04bebc5dd627281212d5da02fc7f4e5b922026413b581bc4478a09d0f
+  metadata.gz: 6db83ea42405061a985ad0735a5639153113ef023ce5a8508c9f44c4fc937eef
+  data.tar.gz: 8758ab13d2d398b11dbaf4aaad38cbdeafcef524a18c00a8fb1eba19ee901780
 SHA512:
-  metadata.gz: f86e9847dbf61129fc413822a2d0a943c61a7cfc48116b08cd670cedd232eceb51de7edfeddf382b0aa86fe62ecc14c14018bf1d4cc1ffdabac35e4f8d39ec85
-  data.tar.gz: 4d1a57864a962827a2fb2868e188b082781e25303a353b2dc7586e29b77a106282fb51e0020eb073391d8e3427fdadeb13590b6f59782c9bbefc98194f10a35a
+  metadata.gz: f1f8ff8c12d6f347c37f89ec4b168224b352f81bdc8d1a528b40aad5a914ced296d48fa8dcf2c13e52702f6c729b1ba15a922b9a54ffe061f46425467b3946c3
+  data.tar.gz: 06fec349960354343974b5e53f2428aff7e02e869e34eb678ab77c7dfd773cdf9c2734a684f0ac84efa14671d79ad9e53206a838c26ae3c08ab4c876f7a21576

data/lib/capistrano/config/ubuntu.rake

@@ -6,10 +6,10 @@ namespace :ubuntu do
       execute "sudo apt-get -y update"
       # Pre-requirements
       execute <<-EOBLOCK
-        #{apt_nointeractive} git build-essential libsqlite3-dev libssl-dev gawk g++ vim#{" "}
+        #{apt_nointeractive} git build-essential libsqlite3-dev libssl-dev gawk g++ vim
         #{apt_nointeractive} libssl-dev libreadline-dev libgdbm-dev openssl
         #{apt_nointeractive} libreadline6-dev libyaml-dev sqlite3 autoconf libgdbm-dev
-        #{apt_nointeractive} libcurl4 libcurl3-gnutls libcurl4-openssl-dev#{" "}
+        #{apt_nointeractive} libcurl4 libcurl3-gnutls libcurl4-openssl-dev
         #{apt_nointeractive} libncurses5-dev automake libtool bison pkg-config libffi-dev libvips
         #{apt_nointeractive} software-properties-common gnupg2
       EOBLOCK

data/lib/prun/ops/railitie.rb

@@ -5,7 +5,7 @@ require "rails"
 module PrunOps
   class Railtie < Rails::Railtie
     rake_tasks do
-      Dir.glob("#{File.dirname(__FILE__)}/../tasks/*.rake").each { |r| load r }
+      Dir.glob("#{File.dirname(__FILE__)}/../../tasks/*.rake").each { |r| load r }
     end
   end
 end

data/lib/prun/ops/version.rb

@@ -2,6 +2,6 @@
 
 module Prun
   module Ops
-    VERSION = "0.4.1"
+    VERSION = "0.4.3"
   end
 end

data/lib/prun/ssl_certificate.rb

@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+class SslCertificate
+  DNS_PROVIDER = 'digitalocean'
+  NGINX_RELOAD_COMMAND = 'service nginx restart'
+  CREDENTIALS_PATH = '/etc/letsencrypt/digitalocean.ini'
+  DOMAIN = "#{`hostname`.strip}.com".freeze
+
+  def self.renew = new.renew
+
+  def renew
+    create_credentials_file
+    if run_command(certbot_command)
+      Rails.logger.info "SSL::Certificate renewed successfully for #{DOMAIN}."
+      if run_command(NGINX_RELOAD_COMMAND)
+        Rails.logger.info 'SSL::Web server reloaded.'
+      else
+        Rails.logger.fail 'SSL::Failed to reload web server.'
+      end
+    else
+      Rails.logger.fail "SSL::Certificate renewal failed for #{DOMAIN}."
+    end
+    remove_credentials_file
+  end
+
+  private
+
+  def certbot_command
+    'certbot certonly ' \
+      "--dns-#{DNS_PROVIDER} " \
+      "--dns-#{DNS_PROVIDER}-credentials #{CREDENTIALS_PATH} " \
+      "-d '*.#{DOMAIN}' " \
+      "-d '#{DOMAIN}' " \
+      '--agree-tos ' \
+      '--no-eff-email ' \
+      "--email admin@#{DOMAIN} " \
+      '--force-renewal'
+  end
+
+  def create_credentials_file
+    File.write(CREDENTIALS_PATH, "dns_#{DNS_PROVIDER}_api_token=#{Cred[:digitalocean_api_token]}")
+    File.chmod(0o600, CREDENTIALS_PATH)
+    Rails.logger.info "SSL::Credentials file created at #{CREDENTIALS_PATH}."
+  end
+
+  def remove_credentials_file
+    File.delete(CREDENTIALS_PATH) if File.exist?(CREDENTIALS_PATH)
+    Rails.logger.info "SSL::Credentials file removed from #{CREDENTIALS_PATH}."
+  rescue Errno::ENOENT
+    Rails.logger.warn "SSL::Credentials file not found at #{CREDENTIALS_PATH}."
+  rescue StandardError => e
+    Rails.logger.error "SSL::Error removing credentials file: #{e.message}"
+  end
+
+  def run_command(command)
+    Rails.logger.info "SSL::Running: #{command}"
+    output = `#{command} 2>&1`
+    success = $CHILD_STATUS.success?
+
+    Rails.logger.info("SSL::Output:\n#{output}") unless output.strip.empty?
+    Rails.logger.fail("SSL::Command failed with exit status: #{$CHILD_STATUS.exitstatus}") unless success
+
+    success
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: prun-ops
 version: !ruby/object:Gem::Version
-  version: 0.4.1
+  version: 0.4.3
 platform: ruby
 authors:
 - jlebrijo
@@ -120,6 +120,7 @@ files:
 - lib/prun/ops.rb
 - lib/prun/ops/railitie.rb
 - lib/prun/ops/version.rb
+- lib/prun/ssl_certificate.rb
 - lib/tasks/backup.rake
 - lib/tasks/db.rake
 - lib/tasks/git.rake