rails_pwnerer 0.6.49 → 0.6.50

data/CHANGELOG

@@ -1,3 +1,5 @@
+v0.6.50. SSL support in nginx configuration.
+
 v0.6.49. Re-added Ruby extension compiling support that somehow disappeared.
 
 v0.6.48. Added openssl and https support to ruby.

data/README

@@ -147,6 +147,21 @@ underscores (_) instead. You can use dots in application names,
 though.
 
 
+SSL servers with +rails_pwnerer+:
+
+1) Generate a server key:
+openssl req -new -newkey rsa:2048 -keyout config/rails_pwnerer/instance.pem -out instance.csr -nodes
+
+2) Be sure to set the CN (Common Name) to your server's DNS address. Send the 
+CSR file to your CA: cat instance.csr
+
+3) Copy the certificate into the +rails_pwnerer+ configuration directory:
+cat > config/rails_pwnerer/instance.cer
+
+4) Clean up: rm instance.csr
+
+5) Update the application in production: sudo rpwn update
+
 Hooked on +rails_pwnerer+:
 
 You're growing to complex applications which need daemons outside

data/lib/pwnage/app/config.rb

@@ -74,13 +74,22 @@ class RailsPwnage::App::Config
     
     populate_defaults app_name, instance_name, app_config
     Dir.chdir app_config[:app_path] do
+      # Populate the default SSL configuration if the right files exist.
+      ssl_cert = File.expand_path "config/rails_pwnerer/#{instance_name}.cer"
+      ssl_key = File.expand_path "config/rails_pwnerer/#{instance_name}.pem"      
+      if File.exists?(ssl_cert) and File.exists?(ssl_key)
+        app_config[:ssl_cert] = ssl_cert
+        app_config[:ssl_key] = ssl_key
+        app_config[:port] = 443
+      end
+      
       ["config/rails_pwnerer/.yml", "config/rails_pwnerer/#{instance_name}.yml"].each do |fname|
         next unless File.exists? fname
         config_update = File.open(fname, 'r') { |f| YAML.load f }
         config_update.each do |key, value|
           app_config[key] = value
         end
-      end
+      end      
     end
     
     # TODO: if database settings changed, the database should be moved (re-created or re-keyed)

data/lib/pwnage/app/nginx_config.rb

@@ -15,7 +15,8 @@ class RailsPwnage::App::NginxConfig
       dns_names = app_config[:dns_name]
     end
     
-    app_port = app_config[:port] || 80
+    default_app_port = app_config[:ssl_key] ? 443 : 80
+    app_port = app_config[:port] || default_app_port
     
     nginx_config = File.join(RailsPwnage::Config.path_to(:nginx_configs),
                              app_name + '.' + instance_name) 
@@ -31,6 +32,9 @@ class RailsPwnage::App::NginxConfig
       f << <<NGINX_CONFIG
   server {
     listen #{app_port};
+    #{app_config[:ssl_key] ? 'ssl on;' : ''}
+    #{app_config[:ssl_key] ? "ssl_certificate #{app_config[:ssl_cert]};" : ''}
+    #{app_config[:ssl_key] ? "ssl_certificate_key #{app_config[:ssl_key]};" : ''}
     #{(dns_names.empty? ? '' : "server_name " + dns_names.join(' ') + ";")}
     root #{app_config[:app_path]}/public;
     client_max_body_size #{app_config[:max_request_mb]}M;

data/lib/pwnage/app/vcs/svn.rb

@@ -59,7 +59,7 @@ class RailsPwnage::App::Svn
 
   def checkout(remote_path, app_name, instance_name)
     app_path = RailsPwnage::Config[app_name, instance_name][:app_path]
-    return :next unless remote_path =~ /svn.*\:\/\//
+    return :next unless remote_path =~ /svn.*\:\/\// or remote_path =~ /http.*\:\/\/.*svn/
     
     print "Doing SVN checkout, please enter your password if prompted...\n"
     system "svn co #{remote_path} #{app_path}"

data/lib/pwnage/base/rails.rb

@@ -3,7 +3,7 @@
 module RailsPwnage::Base
   # check if the given path is the root of a Rails application
   def check_rails_root(path = '.')
-    ['app', 'config', 'db', 'lib', 'log', 'public',
-    'script', 'tmp', 'vendor', 'Rakefile'].all? { |dir| File.exists? File.join(path, dir) }     
+    ['app', 'config', 'db', 'public', 'script', 'vendor',
+     'Rakefile'].all? { |dir| File.exists? File.join(path, dir) }     
   end
-end
+end

data/rails_pwnerer.gemspec

@@ -2,11 +2,11 @@
 
 Gem::Specification.new do |s|
   s.name = %q{rails_pwnerer}
-  s.version = "0.6.49"
+  s.version = "0.6.50"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Victor Costan"]
-  s.date = %q{2009-09-25}
+  s.date = %q{2010-02-03}
   s.default_executable = %q{bin/rpwn}
   s.description = %q{Rails deployment tool/hack.}
   s.email = %q{victor@costan.us}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: rails_pwnerer
 version: !ruby/object:Gem::Version 
-  version: 0.6.49
+  version: 0.6.50
 platform: ruby
 authors: 
 - Victor Costan
@@ -9,7 +9,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2009-09-25 00:00:00 -04:00
+date: 2010-02-03 00:00:00 -05:00
 default_executable: bin/rpwn
 dependencies: []