rails-ahoy 0.0.1

data/lib/generators/ahoy/templates/ansible/playbooks/roles/nginx/tasks/main.yml

@@ -0,0 +1,15 @@
+---
+- name: add apt-get repository for latest nginx
+  action: apt_repository repo=ppa:nginx/stable
+
+- name: install nginx
+  apt: pkg=nginx state=present update_cache=true
+
+- name: delete default vhost
+  action: file path=/etc/nginx/sites-enabled/default state=absent
+
+- name: copy nginx conf
+  template: src=platform.conf dest=/etc/nginx/sites-enabled/platform.conf
+
+- name: restart nginx
+  action: service name=nginx pattern=/etc/init.d/nginx state=restarted enabled=yes

data/lib/generators/ahoy/templates/ansible/playbooks/roles/nginx/templates/platform.conf

@@ -0,0 +1,24 @@
+upstream {{ app_name }} { 
+  server {{ domain }}:3000;
+  server unix:///var/www/{{ app_name }}/shared/tmp/sockets/puma.sock; 
+} 
+server { 
+  listen 80;
+  server_name {{ domain }};
+  root /var/www/{{ app_name }}/current/public;
+
+  location / { 
+    proxy_set_header Host $host; 
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
+    proxy_pass http://{{ app_name }};
+  } 
+
+  location ~* ^/assets/ { 
+    expires 1y; 
+    add_header Cache-Control public; 
+
+    add_header Last-Modified ""; 
+    add_header ETag ""; 
+    break; 
+  } 
+}

data/lib/generators/ahoy/templates/ansible/playbooks/roles/nodejs/tasks/main.yml

@@ -0,0 +1,6 @@
+---
+- name: add apt-get repository for latest node
+  action: apt_repository repo=ppa:chris-lea/node.js
+
+- name: install node.js
+  apt: pkg=nodejs state=present update_cache=true

data/lib/generators/ahoy/templates/ansible/playbooks/roles/postgresql/handlers/main.yml

@@ -0,0 +1,3 @@
+---
+- name: restart postgresql
+  service: name=postgresql state=restarted

data/lib/generators/ahoy/templates/ansible/playbooks/roles/postgresql/tasks/main.yml

@@ -0,0 +1,39 @@
+---
+- name: install dependencies
+  action: apt pkg={{ item }} state=latest
+  with_items:
+    - python-apt
+    - python-psycopg2
+    - libpq-dev
+
+- name: get postgres apt key
+  apt_key: url=http://apt.postgresql.org/pub/repos/apt/ACCC4CF8.asc
+
+- name: add apt-get repository for latest postgres
+  apt_repository: repo="deb http://apt.postgresql.org/pub/repos/apt/ {{ ansible_lsb.codename }}-pgdg main"
+
+- name: install postgres
+  apt: name=postgresql-{{ postgresql.version }} state=latest update_cache=true
+
+- name: copy pg_hba.conf
+  sudo: true
+  template: src=pg_hba.conf dest=/etc/postgresql/{{ postgresql.version }}/main/pg_hba.conf
+
+- name: set pg_hba.conf permissions
+  sudo: true
+  file: path=/etc/postgresql/{{ postgresql.version }}/main/pg_hba.conf owner=postgres group=postgres mode=0640
+
+- name: start postgresql
+  service: name=postgresql state=started 
+
+- name: create db user
+  postgresql_user: name={{ database.user }} password={{ database.password }} role_attr_flags=CREATEDB
+  sudo_user: postgres
+
+- name: create database
+  postgresql_db: name={{ database.name }} owner={{ database.user }} encoding=unicode lc_collate=en_US.utf8 lc_ctype=en_US.utf8 template=template0
+  sudo_user: postgres
+  when: inventory_hostname == 'production_deploy'
+
+- name: ensure postgres starts on a fresh reboot
+  service: name=postgresql state=started enabled=yes

data/lib/generators/ahoy/templates/ansible/playbooks/roles/postgresql/templates/pg_hba.conf

@@ -0,0 +1,91 @@
+# PostgreSQL Client Authentication Configuration File
+# ===================================================
+#
+# Refer to the "Client Authentication" section in the PostgreSQL
+# documentation for a complete description of this file.  A short
+# synopsis follows.
+#
+# This file controls: which hosts are allowed to connect, how clients
+# are authenticated, which PostgreSQL user names they can use, which
+# databases they can access.  Records take one of these forms:
+#
+# local      DATABASE  USER  METHOD  [OPTIONS]
+# host       DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+# hostssl    DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+# hostnossl  DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+#
+# (The uppercase items must be replaced by actual values.)
+#
+# The first field is the connection type: "local" is a Unix-domain
+# socket, "host" is either a plain or SSL-encrypted TCP/IP socket,
+# "hostssl" is an SSL-encrypted TCP/IP socket, and "hostnossl" is a
+# plain TCP/IP socket.
+#
+# DATABASE can be "all", "sameuser", "samerole", "replication", a
+# database name, or a comma-separated list thereof. The "all"
+# keyword does not match "replication". Access to replication
+# must be enabled in a separate record (see example below).
+#
+# USER can be "all", a user name, a group name prefixed with "+", or a
+# comma-separated list thereof.  In both the DATABASE and USER fields
+# you can also write a file name prefixed with "@" to include names
+# from a separate file.
+#
+# ADDRESS specifies the set of hosts the record matches.  It can be a
+# host name, or it is made up of an IP address and a CIDR mask that is
+# an integer (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that
+# specifies the number of significant bits in the mask.  A host name
+# that starts with a dot (.) matches a suffix of the actual host name.
+# Alternatively, you can write an IP address and netmask in separate
+# columns to specify the set of hosts.  Instead of a CIDR-address, you
+# can write "samehost" to match any of the server's own IP addresses,
+# or "samenet" to match any address in any subnet that the server is
+# directly connected to.
+#
+# METHOD can be "trust", "reject", "md5", "password", "gss", "sspi",
+# "krb5", "ident", "peer", "pam", "ldap", "radius" or "cert".  Note that
+# "password" sends passwords in clear text; "md5" is preferred since
+# it sends encrypted passwords.
+#
+# OPTIONS are a set of options for the authentication in the format
+# NAME=VALUE.  The available options depend on the different
+# authentication methods -- refer to the "Client Authentication"
+# section in the documentation for a list of which options are
+# available for which authentication methods.
+#
+# Database and user names containing spaces, commas, quotes and other
+# special characters must be quoted.  Quoting one of the keywords
+# "all", "sameuser", "samerole" or "replication" makes the name lose
+# its special character, and just match a database or username with
+# that name.
+#
+# This file is read on server startup and when the postmaster receives
+# a SIGHUP signal.  If you edit the file on a running system, you have
+# to SIGHUP the postmaster for the changes to take effect.  You can
+# use "pg_ctl reload" to do that.
+
+# Put your actual configuration here
+# ----------------------------------
+#
+# If you want to allow non-local connections, you need to add more
+# "host" records.  In that case you will also need to make PostgreSQL
+# listen on a non-local interface via the listen_addresses
+# configuration parameter, or via the -i or -h command line switches.
+
+# DO NOT DISABLE!
+# If you change this first entry you will need to make sure that the
+# database superuser can access the database using some other method.
+# Noninteractive access to all databases is required during automatic
+# maintenance (custom daily cronjobs, replication, and similar tasks).
+#
+# Database administrative login by Unix domain socket
+local   all             postgres                                peer
+local   all             all                                     md5
+host    all             all             127.0.0.1/32            md5
+host    all             all             ::1/128                 md5
+
+# Allow replication connections from localhost, by a user with the
+# replication privilege.
+#local   replication     postgres                                peer
+#host    replication     postgres        127.0.0.1/32            md5
+#host    replication     postgres        ::1/128                 md5

data/lib/generators/ahoy/templates/ansible/playbooks/roles/ruby/files/gemrc

@@ -0,0 +1,5 @@
+---
+:sources:
+- http://gems.rubyforge.org
+- http://gems.github.com
+gem: --no-ri --no-rdoc

data/lib/generators/ahoy/templates/ansible/playbooks/roles/ruby/tasks/gems.yml

@@ -0,0 +1,6 @@
+---
+- name: set gemrc
+  copy: src=gemrc dest=/home/{{ deploy_user }}/.gemrc owner={{ deploy_user}} group={{ deploy_user }} mode=0644
+
+- name: install bundler
+  shell: RBENV_ROOT={{ rbenv_root }} rbenv exec gem install bundler --no-ri --no-rdoc

data/lib/generators/ahoy/templates/ansible/playbooks/roles/ruby/tasks/main.yml

@@ -0,0 +1,4 @@
+---
+- include: rbenv.yml
+- include: ruby.yml
+- include: gems.yml

data/lib/generators/ahoy/templates/ansible/playbooks/roles/ruby/tasks/rbenv.yml

@@ -0,0 +1,31 @@
+---
+- name: install dependencies
+  apt: pkg={{ item }} state=present
+  with_items:
+    - libqt4-dev
+    - libssl-dev
+    - libreadline-dev
+
+- name: install rbenv
+  sudo: true
+  git: repo=git://github.com/sstephenson/rbenv.git dest={{ rbenv_root }}
+
+- name: install ruby-build as rbenv plugin
+  sudo: true
+  git: repo=https://github.com/sstephenson/ruby-build.git dest={{ rbenv_root }}/plugins/ruby-build
+
+- name: change owner of rbenv directory
+  sudo: true
+  file: path={{ rbenv_root }} owner={{ deploy_user }} recurse=yes state=directory
+
+- name: add rbenv symlink
+  file: path=/usr/local/bin/rbenv src={{ rbenv_root }}/bin/rbenv state=link
+
+- name: export RBENV_ROOT to profile
+  lineinfile: line='export RBENV_ROOT="{{ rbenv_root }}"' dest=/home/{{ deploy_user }}/.profile
+
+- name: export PATH to rbenv bin to profile
+  lineinfile: line='export PATH="{{ rbenv_root }}/bin:$PATH"' dest=/home/{{ deploy_user }}/.profile
+
+- name: eval rbenv init
+  lineinfile: line="eval \"$(rbenv init -)\"" dest=/home/{{ deploy_user }}/.profile

data/lib/generators/ahoy/templates/ansible/playbooks/roles/ruby/tasks/ruby.yml

@@ -0,0 +1,15 @@
+---
+- name: check if proper ruby version is installed
+  shell: RBENV_ROOT={{ rbenv_root }} rbenv versions | grep {{ ruby_version }}
+  register: ruby_installed
+  ignore_errors: yes
+
+- name: install proper ruby version
+  shell: RBENV_ROOT={{ rbenv_root }} rbenv install {{ ruby_version }}
+  when: ruby_installed|failed
+
+- name: set global ruby
+  shell: RBENV_ROOT={{ rbenv_root }} rbenv global {{ ruby_version }}
+
+- name: rehash rbenv
+  shell: RBENV_ROOT={{ rbenv_root }} rbenv rehash

data/lib/generators/ahoy/templates/ansible/playbooks/roles/security/tasks/firewall.yml

@@ -0,0 +1,6 @@
+---
+- name: setup firewall
+  shell: ufw allow 22; ufw allow 1224; ufw allow 80; ufw allow 443
+
+- name: enable firewall
+  shell: echo 'y' | ufw enable

data/lib/generators/ahoy/templates/ansible/playbooks/roles/security/tasks/main.yml

@@ -0,0 +1,9 @@
+---
+- name: install fail2ban
+  apt: name=fail2ban state=present update_cache=true
+  when: inventory_hostname == 'production_root'
+
+- include: firewall.yml
+  when: inventory_hostname == 'production_root'
+
+- include: ssh_settings.yml

data/lib/generators/ahoy/templates/ansible/playbooks/roles/user/tasks/main.yml

@@ -0,0 +1,6 @@
+---
+- name: create deploy user
+  user: name={{ deploy_user }} shell=/bin/bash generate_ssh_key=yes ssh_key_bits=2048
+
+- name: allow deploy user sudo commands without password
+  action: lineinfile dest=/etc/sudoers regexp="^root" line="root ALL=(ALL:ALL) ALL\n{{ deploy_user }} ALL=(ALL) NOPASSWD:ALL" state=present

data/lib/generators/ahoy/templates/ansible/playbooks/tasks/vagrant_settings.yml

@@ -0,0 +1,3 @@
+---
+- name: cd to vagrant directory by default
+  lineinfile: line="cd /vagrant" dest=/home/{{ deploy_user }}/.profile state=present

data/lib/generators/ahoy/templates/ansible_templates/_hosts

@@ -0,0 +1,5 @@
+[production_root]
+production_root ansible_ssh_host=<%= @server_ip == '' ? '127.0.0.1' : @server_ip %>
+
+[production_deploy]
+production_deploy ansible_ssh_host=<%= @server_ip == '' ? '127.0.0.1' : @server_ip %> ansible_ssh_port=<%= @server_ssh_port == '' ? '22' : @server_ssh_port %>

data/lib/generators/ahoy/templates/ansible_templates/_provision.sh

@@ -0,0 +1 @@
+ansible-playbook playbooks/playbook.yml -i hosts

data/lib/generators/ahoy/templates/ansible_templates/playbooks/group_vars/_all.yml

@@ -0,0 +1,6 @@
+---
+app_name: <%= Rails.application.class.parent_name.underscore %>
+postgresql:
+  version: <%= @postgresql_version == '' ? '9.3' : @postgresql_version %>
+ruby_version: <%= @ruby_version == '' ? '2.1.5' : @ruby_version %>
+rbenv_root: /usr/local/rbenv

data/lib/generators/ahoy/templates/ansible_templates/playbooks/host_vars/_default.yml

@@ -0,0 +1,8 @@
+---
+domain: 127.0.0.1
+deploy_user: vagrant
+database:
+  name: <%= Rails.application.class.parent_name.underscore %>_production
+  user: vagrant
+  password: vagrant
+secret_key_base: <%= Rails.application.secrets.secret_key_base %>

data/lib/generators/ahoy/templates/ansible_templates/playbooks/host_vars/_production_deploy.yml

@@ -0,0 +1,7 @@
+---
+domain: <%= @server_ip == '' ? '127.0.0.1' : @server_ip %>
+deploy_user: deploy
+database:
+  name: "{{ production.db_name }}"
+  user: "{{ production.db_user }}"
+  password: "{{ production.db_password }}"

data/lib/generators/ahoy/templates/ansible_templates/playbooks/host_vars/_production_root.yml

@@ -0,0 +1,2 @@
+---
+deploy_user: deploy

data/lib/generators/ahoy/templates/ansible_templates/playbooks/roles/security/tasks/_ssh_settings.yml

@@ -0,0 +1,25 @@
+---
+- name: add local ssh keys to authorized_keys
+  authorized_key: user={{ deploy_user }} key="{{ lookup('file', '~/.ssh/id_rsa.pub') }}"
+
+- name: change permissions on authorized_keys
+  file: path=/home/{{ deploy_user }}/.ssh/authorized_keys mode=0400
+
+- name: change ssh port
+  sudo: true
+  action: lineinfile dest=/etc/ssh/sshd_config regexp="^#?Port" line="Port <%= @server_ssh_port == '' ? '22' : @server_ssh_port %>"
+
+- name: disable root user login via ssh
+  sudo: true
+  action: lineinfile dest=/etc/ssh/sshd_config regexp="^#?PermitRootLogin" line="PermitRootLogin no"
+
+- name: disable password authentication
+  sudo: true
+  action: lineinfile dest=/etc/ssh/sshd_config regexp="^#?PasswordAuthentication" line="PasswordAuthentication no"
+
+- name: allow deploy user login via ssh
+  sudo: true
+  action: lineinfile dest=/etc/ssh/sshd_config insertafter=EOF line="AllowUsers {{ deploy_user }}"
+
+- name: restart ssh service
+  action: service name=ssh state=restarted

data/lib/generators/ahoy/vagrant_generator.rb

@@ -0,0 +1,52 @@
+require 'rails/generators'
+require 'generators/ahoy/base'
+
+module Ahoy
+  class VagrantGenerator < Ahoy::Generator::Base
+
+    def use_vagrant
+      defaults('No')
+      @use_vagrant = yes?('=> Would you like to use Vagrant with your project?')
+    end
+
+    def prompt_user
+      if @use_vagrant
+        defaults('2')
+        @memory = ask('=> How many Megabytes of memory would you like to allocate to your VM? [enter for default]').to_i
+        defaults('1')
+        @cpus = ask('=> How many CPUs would you like to allocated? [enter for default]').to_i
+        copy_templates
+        append_ansible_playbook
+      else
+        puts 'Skipping Vagrant'
+      end
+    end
+
+    private
+
+    def copy_templates
+      template '_Vagrantfile', 'Vagrantfile'
+      template '_database.yml', 'config/database.yml'
+      template 'ansible_templates/playbooks/host_vars/_default.yml', 'config/ansible/playbooks/host_vars/default.yml'
+    end
+
+    def append_ansible_playbook
+      append_file 'config/ansible/playbooks/playbook.yml', VAGRANT_PLAYBOOK
+    end
+  end
+end
+
+VAGRANT_PLAYBOOK = "
+# Vagrant playbook
+#==========================================================
+- hosts: default
+  sudo: true
+  roles:
+    - role: user
+    - role: essentials
+    - role: nodejs
+    - role: postgresql
+    - role: ruby
+  tasks:
+    - include: tasks/vagrant_settings.yml
+"

metadata

@@ -0,0 +1,121 @@
+--- !ruby/object:Gem::Specification
+name: rails-ahoy
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Nathan Pearson
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-01-19 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+description: Generator for building ansible based provisioning scripts, and mina/puma
+  deployment scripts
+email:
+- npearson72@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".DS_Store"
+- ".gitignore"
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- ahoy.gemspec
+- lib/ahoy.rb
+- lib/ahoy/version.rb
+- lib/generators/ahoy/ansible_generator.rb
+- lib/generators/ahoy/base.rb
+- lib/generators/ahoy/deploy_generator.rb
+- lib/generators/ahoy/init_generator.rb
+- lib/generators/ahoy/templates/_Vagrantfile
+- lib/generators/ahoy/templates/_database.yml
+- lib/generators/ahoy/templates/_deploy.rb
+- lib/generators/ahoy/templates/_env_vars.yml
+- lib/generators/ahoy/templates/_puma.rb
+- lib/generators/ahoy/templates/_puma.sh
+- lib/generators/ahoy/templates/ansible/playbooks/playbook.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/deploy_env/tasks/main.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/deploy_env/templates/database.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/deploy_env/templates/secrets.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/essentials/tasks/main.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/essentials/templates/vimrc
+- lib/generators/ahoy/templates/ansible/playbooks/roles/nginx/tasks/main.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/nginx/templates/platform.conf
+- lib/generators/ahoy/templates/ansible/playbooks/roles/nodejs/tasks/main.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/postgresql/handlers/main.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/postgresql/tasks/main.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/postgresql/templates/pg_hba.conf
+- lib/generators/ahoy/templates/ansible/playbooks/roles/ruby/files/gemrc
+- lib/generators/ahoy/templates/ansible/playbooks/roles/ruby/tasks/gems.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/ruby/tasks/main.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/ruby/tasks/rbenv.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/ruby/tasks/ruby.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/security/tasks/firewall.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/security/tasks/main.yml
+- lib/generators/ahoy/templates/ansible/playbooks/roles/user/tasks/main.yml
+- lib/generators/ahoy/templates/ansible/playbooks/tasks/vagrant_settings.yml
+- lib/generators/ahoy/templates/ansible_templates/_hosts
+- lib/generators/ahoy/templates/ansible_templates/_provision.sh
+- lib/generators/ahoy/templates/ansible_templates/playbooks/group_vars/_all.yml
+- lib/generators/ahoy/templates/ansible_templates/playbooks/host_vars/_default.yml
+- lib/generators/ahoy/templates/ansible_templates/playbooks/host_vars/_production_deploy.yml
+- lib/generators/ahoy/templates/ansible_templates/playbooks/host_vars/_production_root.yml
+- lib/generators/ahoy/templates/ansible_templates/playbooks/roles/security/tasks/_ssh_settings.yml
+- lib/generators/ahoy/vagrant_generator.rb
+homepage: ''
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: Quick and painless Rails deployment
+test_files: []