redde 0.1.1 → 0.1.2

data/lib/generators/redde/deploy/templates/recipes/postfix.rb

@@ -1,37 +0,0 @@
-namespace :postfix do
-  def put_sudo(data, to)
-    filename = File.basename(to)
-    to_directory = File.dirname(to)
-    put data, "/tmp/#{filename}"
-    run "#{sudo} mv /tmp/#{filename} #{to_directory}"
-  end
-
-  def template_sudo(from, to)
-    erb = File.read(File.expand_path("../templates/#{from}", __FILE__))
-    put_sudo ERB.new(erb).result(binding), to
-  end
-
-  desc "Install latest stable release of postfix"
-  task :install, roles: :web do
-    run "#{sudo} DEBIAN_FRONTEND=noninteractive apt-get -y install postfix"
-    run "#{sudo} apt-get install -y dkim-filter"
-    run "#{sudo} mkdir -p /etc/postfix/dkim"
-    run "#{sudo} dkim-genkey -d #{fqdn} -s mail -r -D /etc/postfix/dkim/"
-    run "#{sudo} mv /etc/postfix/dkim/mail.private /etc/postfix/dkim/mail"
-    template_sudo "dkim-keys.conf.erb", "/etc/dkim-keys.conf"
-    template_sudo "dkim-filter.defaults.erb", "/etc/default/dkim-filter"
-    run "#{sudo} chgrp postfix /etc/postfix/dkim/"
-    run "#{sudo} chmod 750 /etc/postfix/dkim/"
-    template_sudo "main.cf.erb", "/etc/postfix/main.cf"
-    template_sudo "dkim-filter.conf.erb", "/etc/dkim-filter.conf"
-    restart
-  end
-  after "deploy:install", "postfix:install"
-
-  %w[start stop restart].each do |command|
-    desc "#{command} postfix"
-    task command, roles: :web do
-      run "#{sudo} service postfix #{command} && #{sudo} service dkim-filter #{command}"
-    end
-  end
-end

data/lib/generators/redde/deploy/templates/recipes/rbenv.rb

@@ -1,17 +0,0 @@
-set_default :ruby_version, "1.9.3-p194"
-
-namespace :rbenv do
-  desc "Install rbenv, Ruby, and the Bundler gem"
-  task :install, roles: :app do
-    run "sudo apt-get -y install curl git-core"
-    run "curl -L https://raw.github.com/fesplugas/rbenv-installer/master/bin/rbenv-installer | bash"
-    run "echo 'export PATH=\"$HOME/.rbenv/bin:$PATH\"' > ~/.bashrc"
-    run "echo 'eval \"$(rbenv init -)\"' >> ~/.bashrc"
-    run "rbenv install #{ruby_version}"
-    run "rbenv global #{ruby_version}"
-    run "gem install bundler --no-ri --no-rdoc"
-    run "rbenv rehash"
-    template "gemrc.erb", "/home/webmaster/.gemrc"
-  end
-  after "deploy:install", "rbenv:install"
-end

data/lib/generators/redde/deploy/templates/recipes/templates/database.yml.erb

@@ -1,8 +0,0 @@
-production:
-  adapter: mysql2
-  #encoding: unicode
-  database: <%= database_database %>
-  pool: 5
-  username: <%= database_user %>
-  password: 
-  host: <%= database_host %>

data/lib/generators/redde/deploy/templates/recipes/templates/dkim-filter.conf.erb

@@ -1,57 +0,0 @@
-# Log to syslog
-Syslog			yes
-# Required to use local socket with MTAs that access the socket as a non-
-# privileged user (e.g. Postfix)
-UMask			002
-
-# Sign for example.com with key in /etc/mail/dkim.key using
-# selector '2007' (e.g. 2007._domainkey.example.com)
-#Domain			example.com
-#KeyFile		/etc/mail/dkim.key
-#Selector		2007
-
-# Common settings. See dkim-filter.conf(5) for more information.
-#AutoRestart		no
-#Background		yes
-#Canonicalization	simple
-#DNSTimeout		5
-#Mode			sv
-#SignatureAlgorithm	rsa-sha256
-#SubDomains		no
-#ADSPDiscard		no
-#Version		rfc4871
-#X-Header		no
-
-###############################################
-# Other (less-standard) configuration options #
-###############################################
-# 
-# If enabled, log verification stats here
-#Statistics		/var/run/dkim-filter/dkim-stats
-#
-# KeyList is a file containing tuples of key information. Requires
-# KeyFile to be unset. Each line of the file should be of the format:
-#    sender glob:signing domain:signing key file
-# Blank lines and lines beginning with # are ignored. Selector will be
-# derived from the key's filename.
-#KeyList		/etc/dkim-keys.conf
-#
-# If enabled, will generate verification failure reports for any messages
-# that fail signature verification. These will be sent to the r= address
-# in the policy record, if any.
-#SendReports		yes
-#
-# If enabled, will issue a Sendmail QUARANTINE for any messages that fail
-# signature verification, allowing them to be inspected later.
-#Quarantine		yes
-#
-# If enabled, will check for required headers when processing messages.
-# At a minimum, that means From: and Date: will be required. Messages not
-# containing the required headers will not be signed or verified, but will
-# be passed through
-#RequiredHeaders	yes
-Canonicalization    relaxed/relaxed
-KeyList         /etc/dkim-keys.conf
-Domain *
-BodyLengths yes
-#On-DNSError accept

data/lib/generators/redde/deploy/templates/recipes/templates/dkim-filter.defaults.erb

@@ -1,11 +0,0 @@
-# Command-line options specified here will override the contents of
-# /etc/dkim-filter.conf. See dkim-filter(8) for a complete list of options.
-#DAEMON_OPTS=""
-#
-# Uncomment to specify an alternate socket
-# Note that setting this will override any Socket value in dkim-filter.conf
-#SOCKET="local:/var/run/dkim-filter/dkim-filter.sock" # default
-#SOCKET="inet:54321" # listen on all interfaces on port 54321
-#SOCKET="inet:12345@localhost" # listen on loopback on port 12345
-#SOCKET="inet:12345@192.0.2.1" # listen on 192.0.2.1 on port 12345
-SOCKET="inet:8891@localhost"

data/lib/generators/redde/deploy/templates/recipes/templates/dkim-keys.conf.erb

@@ -1,2 +0,0 @@
-*@<%= fqdn %>:<%= fqdn %>:/etc/postfix/dkim/mail
-*:<%= fqdn %>:/etc/postfix/dkim/mail

data/lib/generators/redde/deploy/templates/recipes/templates/gemrc.erb

@@ -1 +0,0 @@
-gem: --no-ri --no-rdoc

data/lib/generators/redde/deploy/templates/recipes/templates/main.cf.erb

@@ -1,43 +0,0 @@
-# See /usr/share/postfix/main.cf.dist for a commented, more complete version
-
-
-# Debian specific:  Specifying a file name will cause the first
-# line of that file to be used as the name.  The Debian default
-# is /etc/mailname.
-#myorigin = /etc/mailname
-
-smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
-biff = no
-
-# appending .domain is the MUA's job.
-append_dot_mydomain = no
-
-# Uncomment the next line to generate "delayed mail" warnings
-#delay_warning_time = 4h
-
-readme_directory = no
-
-# TLS parameters
-smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
-smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
-smtpd_use_tls=yes
-smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
-smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
-
-# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
-# information on enabling SSL in the smtp client.
-
-myhostname = <%= fqdn %>
-alias_maps = hash:/etc/aliases
-alias_database = hash:/etc/aliases
-myorigin = /etc/mailname
-mydestination = localhost.localdomain, localhost
-relayhost =
-mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
-mailbox_size_limit = 0
-recipient_delimiter = +
-inet_interfaces = all
-milter_default_action = accept
-milter_protocol = 2
-smtpd_milters = inet:localhost:8891
-non_smtpd_milters = inet:localhost:8891

data/lib/generators/redde/deploy/templates/recipes/templates/memcached.erb

@@ -1,47 +0,0 @@
-# memcached default config file
-# 2003 - Jay Bonci <jaybonci@debian.org>
-# This configuration file is read by the start-memcached script provided as
-# part of the Debian GNU/Linux distribution.
-
-# Run memcached as a daemon. This command is implied, and is not needed for the
-# daemon to run. See the README.Debian that comes with this package for more
-# information.
--d
-
-# Log memcached's output to /var/log/memcached
-logfile /var/log/memcached.log
-
-# Be verbose
-# -v
-
-# Be even more verbose (print client commands as well)
-# -vv
-
-# Start with a cap of 64 megs of memory. It's reasonable, and the daemon default
-# Note that the daemon will grow to this size, but does not start out holding this much
-# memory
--m 64
-
-# Default connection port is 11211
--p 11211
-
-# Run the daemon as root. The start-memcached will default to running as root if no
-# -u command is present in this config file
--u nobody
-
-# Specify which IP address to listen on. The default is to listen on all IP addresses
-# This parameter is one of the only security measures that memcached has, so make sure
-# it's listening on a firewalled interface.
--l 127.0.0.1
-
-# Limit the number of simultaneous incoming connections. The daemon default is 1024
-# -c 1024
-
-# Lock down all paged memory. Consult with the README and homepage before you do this
-# -k
-
-# Return error when memory is exhausted (rather than removing items)
-# -M
-
-# Maximize core file limit
-# -r

data/lib/generators/redde/deploy/templates/recipes/templates/monit_monitrc.erb

@@ -1,21 +0,0 @@
-set daemon 30
-
-set logfile /var/log/monit.log
-set idfile /var/lib/monit/id
-set statefile /var/lib/monit/state
-
-set eventqueue
-    basedir /var/lib/monit/events
-    slots 100
-
-# set mailserver smtp.gmail.com port 587
-#     username "foo@example.com" password "secret"
-#     using tlsv1
-#     with timeout 30 seconds
-
-check system <%= application %>
-  if loadavg(5min) > 2 for 2 cycles then alert
-  if memory > 75% for 2 cycles then alert
-  if cpu(user) > 75% for 2 cycles then alert
-
-include /etc/monit/conf.d/*

data/lib/generators/redde/deploy/templates/recipes/templates/monit_nginx.erb

@@ -1,5 +0,0 @@
-check process nginx with pidfile /var/run/nginx.pid
-  start program = "/etc/init.d/nginx start"
-  stop program = "/etc/init.d/nginx stop"
-  if children > 250 then restart
-  if 5 restarts within 5 cycles then timeout

data/lib/generators/redde/deploy/templates/recipes/templates/monit_unicorn.erb

@@ -1,14 +0,0 @@
-check process <%= application %>_unicorn with pidfile <%= unicorn_pid %>
-  start program = "/etc/init.d/<%= application %> start"
-  stop program = "/etc/init.d/<%= application %> stop"
-
-<% unicorn_workers.times do |n| %>
-  <% pid = unicorn_pid.sub(".pid", ".#{n}.pid") %>
-  check process <%= application %>_unicorn_worker_<%= n %> with pidfile <%= pid %>
-    start program = "/bin/true"
-    stop program = "/usr/bin/test -s <%= pid %> && /bin/kill -QUIT `cat <%= pid %>`"
-    if mem > 200.0 MB for 1 cycles then restart
-    if cpu > 50% for 3 cycles then restart
-    if 5 restarts within 5 cycles then timeout
-    if changed pid 2 times within 60 cycles then alert
-<% end %>

data/lib/generators/redde/deploy/templates/recipes/templates/nginx_unicorn.erb

@@ -1,28 +0,0 @@
-upstream unicorn {
-  server unix:<%= unicorn_socket %> fail_timeout=0;
-}
-
-server {
-  listen 80 default deferred;
-  # server_name example.com;
-  root <%= current_path %>/public;
-
-  location ^~ /assets/ {
-    gzip_static on;
-    expires max;
-    add_header Cache-Control public;
-  }
-
-  try_files $uri/index.html $uri @unicorn;
-  location @unicorn {
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header Host $http_host;
-    proxy_redirect off;
-    proxy_pass http://unicorn;
-  }
-
-  error_page 500 502 503 504 /500.html;
-  error_page 404 /404.html;
-  client_max_body_size 4G;
-  keepalive_timeout 10;
-}

data/lib/generators/redde/deploy/templates/recipes/templates/unicorn.rb.erb

@@ -1,36 +0,0 @@
-working_directory "<%= current_path %>"
-pid "<%= unicorn_pid %>"
-stderr_path "<%= unicorn_log %>"
-stdout_path "<%= unicorn_log %>"
-
-listen "<%= unicorn_socket %>"
-worker_processes <%= unicorn_workers %>
-timeout 120
-
-preload_app true
-
-before_fork do |server, worker|
-  # Disconnect since the database connection will not carry over
-  if defined? ActiveRecord::Base
-    ActiveRecord::Base.connection.disconnect!
-  end
-
-  # Quit the old unicorn process
-  old_pid = "#{server.config[:pid]}.oldbin"
-  if File.exists?(old_pid) && server.pid != old_pid
-    begin
-      Process.kill("QUIT", File.read(old_pid).to_i)
-    rescue Errno::ENOENT, Errno::ESRCH
-      # someone else did our job for us
-    end
-  end
-end
-
-after_fork do |server, worker|
-  # Start up the database connection again in the worker
-  if defined?(ActiveRecord::Base)
-    ActiveRecord::Base.establish_connection
-  end
-  child_pid = server.config[:pid].sub(".pid", ".#{worker.nr}.pid")
-  system("echo #{Process.pid} > #{child_pid}")
-end

data/lib/generators/redde/deploy/templates/recipes/templates/unicorn_init.erb

@@ -1,84 +0,0 @@
-#!/bin/sh
-### BEGIN INIT INFO
-# Provides:          unicorn
-# Required-Start:    $remote_fs $syslog
-# Required-Stop:     $remote_fs $syslog
-# Default-Start:     2 3 4 5
-# Default-Stop:      0 1 6
-# Short-Description: Manage unicorn server
-# Description:       Start, stop, restart unicorn server for a specific application.
-### END INIT INFO
-set -e
-
-# Feel free to change any of the following variables for your app:
-TIMEOUT=${TIMEOUT-60}
-APP_ROOT=<%= current_path %>
-PID=<%= unicorn_pid %>
-CMD="cd <%= current_path %>; bundle exec unicorn_rails -D -c <%= unicorn_config %> -E production"
-AS_USER=<%= unicorn_user %>
-set -u
-
-OLD_PIN="$PID.oldbin"
-
-sig () {
-  test -s "$PID" && kill -$1 `cat $PID`
-}
-
-oldsig () {
-  test -s $OLD_PIN && kill -$1 `cat $OLD_PIN`
-}
-
-run () {
-  if [ "$(id -un)" = "$AS_USER" ]; then
-    eval $1
-  else
-    su -c "$1" - $AS_USER
-  fi
-}
-
-case "$1" in
-start)
-  sig 0 && echo >&2 "Already running" && exit 0
-  run "$CMD"
-  ;;
-stop)
-  sig QUIT && exit 0
-  echo >&2 "Not running"
-  ;;
-force-stop)
-  sig TERM && exit 0
-  echo >&2 "Not running"
-  ;;
-restart|reload)
-  sig USR2 && echo reloaded OK && exit 0
-  echo >&2 "Couldn't reload, starting '$CMD' instead"
-  run "$CMD"
-  ;;
-upgrade)
-  if sig USR2 && sleep 2 && sig 0 && oldsig QUIT
-  then
-    n=$TIMEOUT
-    while test -s $OLD_PIN && test $n -ge 0
-    do
-      printf '.' && sleep 1 && n=$(( $n - 1 ))
-    done
-    echo
-
-    if test $n -lt 0 && test -s $OLD_PIN
-    then
-      echo >&2 "$OLD_PIN still exists after $TIMEOUT seconds"
-      exit 1
-    fi
-    exit 0
-  fi
-  echo >&2 "Couldn't upgrade, starting '$CMD' instead"
-  run "$CMD"
-  ;;
-reopen-logs)
-  sig USR1
-  ;;
-*)
-  echo >&2 "Usage: $0 <start|stop|restart|upgrade|force-stop|reopen-logs>"
-  exit 1
-  ;;
-esac

data/lib/generators/redde/deploy/templates/recipes/unicorn.rb

@@ -1,27 +0,0 @@
-set_default(:unicorn_user) { user }
-set_default(:unicorn_pid) { "#{current_path}/tmp/pids/unicorn.pid" }
-set_default(:unicorn_config) { "#{shared_path}/config/unicorn.rb" }
-set_default(:unicorn_socket) { "#{current_path}/tmp/unicorn.sock" }
-set_default(:unicorn_log) { "#{shared_path}/log/unicorn.log" }
-set_default(:unicorn_workers, 2)
-
-namespace :unicorn do
-  desc "Setup Unicorn"
-  task :setup, roles: :app do
-    run "mkdir -p #{shared_path}/config"
-    template "unicorn.rb.erb", unicorn_config
-    template "unicorn_init.erb", "/tmp/unicorn_init"
-    run "chmod +x /tmp/unicorn_init"
-    run "sudo mv /tmp/unicorn_init /etc/init.d/#{application}"
-    run "sudo update-rc.d -f #{application} defaults"
-  end
-  after "deploy:setup", "unicorn:setup"
-
-  %w[start stop restart].each do |command|
-    desc "#{command} unicorn"
-    task command, roles: :app do
-      run "sudo service #{application} #{command}"
-    end
-    after "deploy:#{command}", "unicorn:#{command}"
-  end
-end