rubber 1.14.1 → 1.15.0

data/generators/vulcanize/templates/passenger_nginx/config/rubber/deploy-passenger_nginx.rb

@@ -0,0 +1,86 @@
+
+namespace :rubber do
+
+  namespace :passenger_nginx do
+  
+    rubber.allow_optional_tasks(self)
+  
+    after "rubber:install_gems", "rubber:passenger_nginx:custom_install"
+    
+    task :custom_install, :roles => :passenger_nginx do
+      rubber.sudo_script 'install_passenger_nginx', <<-ENDSCRIPT
+        # Check if there is an nginx with the required version and passenger built in.
+        if [ -x /usr/sbin/nginx ]
+          then echo 'Found nginx on system'
+          pax=$(/usr/sbin/nginx -V 2>&1 | awk '/nginx\\/#{rubber_env.nginx_version}/{a++}/passenger-#{rubber_env.passenger_version}/{b++} END {print a&&b}')
+          if [ $pax -eq 1 ]
+            then echo 'Nginx/Passenger version matches'
+            exit 0
+          fi
+        fi
+        # Lets install
+        echo 'Installing / Upgrading nginx #{rubber_env.nginx_version}'
+        TMPDIR=`mktemp -d` || exit 1
+        cd $TMPDIR
+        echo 'Downloading'
+        wget -qN http://sysoev.ru/nginx/nginx-#{rubber_env.nginx_version}.tar.gz
+        echo 'Unpacking'
+        tar xf nginx-#{rubber_env.nginx_version}.tar.gz
+        passenger-install-nginx-module --auto --prefix=/opt/nginx --nginx-source-dir=$TMPDIR/nginx-#{rubber_env.nginx_version} --extra-configure-flags="--conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --lock-path=/var/lock/nginx.lock --pid-path=/var/run/nginx.pid --sbin-path=/usr/sbin/nginx"
+      ENDSCRIPT
+    end
+
+    after "rubber:setup_app_permissions", "rubber:passenger_nginx:setup_passenger_permissions"
+
+    task :setup_passenger_permissions, :roles => :passenger_nginx do
+      rsudo "chown #{rubber_env.app_user}:#{rubber_env.app_user} #{current_path}/config/environment.rb"
+    end
+    
+    on :load do
+      rubber.serial_task self, :serial_restart, :roles => :passenger_nginx do
+        rsudo "service nginx restart"
+      end
+      rubber.serial_task self, :serial_reload, :roles => :passenger_nginx do
+        rsudo "if ! ps ax | grep -v grep | grep -c nginx &> /dev/null; then service nginx start; else service nginx reload; fi"
+      end
+    end
+
+    before "deploy:stop", "rubber:passenger_nginx:stop"
+    after "deploy:start", "rubber:passenger_nginx:start"
+    after "deploy:restart", "rubber:passenger_nginx:reload"
+    
+    desc "Stops the nginx web server"
+    task :stop, :roles => :passenger_nginx do
+      rsudo "service nginx stop; exit 0"
+    end
+    
+    desc "Starts the nginx web server"
+    task :start, :roles => :passenger_nginx do
+      rsudo "service nginx start"
+    end
+    
+    desc "Restarts the nginx web server"
+    task :restart, :roles => :passenger_nginx do
+      serial_restart
+    end
+  
+    desc "Reloads the nginx web server"
+    task :reload, :roles => :passenger_nginx do
+      serial_reload
+    end
+    
+    
+    deploy.task :restart, :roles => :passenger_nginx do
+    end
+    
+    deploy.task :reload, :roles => :passenger_nginx do
+    end
+    
+    deploy.task :stop, :roles => :passenger_nginx do
+    end
+    
+    deploy.task :start, :roles => :passenger_nginx do
+    end
+    
+  end
+end

data/generators/vulcanize/templates/passenger_nginx/config/rubber/role/passenger_nginx/application.conf

@@ -0,0 +1,30 @@
+<%
+  @path = "/etc/nginx/rubber/application.conf"
+%>
+
+server_name  <%= [ rubber_env.domain, rubber_env.web_aliases ].flatten.compact.join(" ") %>;
+passenger_enabled on;
+
+passenger_min_instances 1;
+
+root <%= RUBBER_ROOT + "/public" %>;
+
+# this rewrites all the requests to the maintenance.html
+# page if it exists in the doc root. This is for capistrano's
+# disable web task
+if (-f $document_root/system/maintenance.html)
+{
+  rewrite  ^(.*)$  /system/maintenance.html last;
+  break;
+}
+
+error_page   500 502 503 504  /500.html;
+location = /500.html
+{
+  root <%= RUBBER_ROOT + "/public" %>;
+}
+error_page 404  /404.html;
+location = /404.html
+{
+  root <%= RUBBER_ROOT + "/public" %>;
+}

data/generators/vulcanize/templates/passenger_nginx/config/rubber/role/passenger_nginx/crontab

@@ -0,0 +1,8 @@
+<%
+  @read_cmd = 'crontab -l'
+  @write_cmd = 'crontab -'
+  @additive = ["# rubber-nginx-start", "# rubber-nginx-end"]
+%>
+
+# Roll the nginx logs at midnight
+0 0 * * * LOG_DIR=/mnt/nginx/logs <%= RUBBER_ROOT %>/script/cron-rake rubber:rotate_logs

data/generators/vulcanize/templates/passenger_nginx/config/rubber/role/passenger_nginx/monit-nginx.conf

@@ -0,0 +1,7 @@
+<%
+  @path = '/etc/monit/monit.d/monit-nginx.conf'
+%>
+check process nginx with pidfile /var/run/nginx.pid
+  group nginx-<%= RUBBER_ENV %>
+  start program = "/usr/bin/env service nginx start"
+  stop program = "/usr/bin/env service nginx stop"

data/generators/vulcanize/templates/passenger_nginx/config/rubber/role/passenger_nginx/munin-passenger-memory.conf

@@ -0,0 +1,34 @@
+<%
+  @path = "/etc/munin/plugins/passenger_memory_status"
+  @perms = 0755
+%>#!/usr/bin/env ruby
+# put in /etc/munin/plugins and restart munin-node
+# by Dan Manges, http://www.dcmanges.com/blog/rails-application-visualization-with-munin
+# NOTE: you might need to add munin to allow passwordless sudo for passenger-memory-stats
+
+def output_config
+  puts <<-END
+graph_category App
+graph_title Passenger memory stats
+graph_vlabel megabytes
+
+memory.label memory
+END
+  exit 0
+end
+
+def output_values
+  status = `rvm exec sudo <%= rubber_env.rvm_gem_home %>/bin/passenger-memory-stats | tail -1`
+  unless $?.success?
+    $stderr.puts "failed executing passenger-memory-stats"
+    exit 1
+  end
+  status =~ /(\d+\.\d+)/
+  puts "memory.value #{$1}"
+end
+
+if ARGV[0] == "config"
+  output_config
+else
+  output_values
+end

data/generators/vulcanize/templates/passenger_nginx/config/rubber/role/passenger_nginx/munin-passenger-sudoers.conf

@@ -0,0 +1,8 @@
+<%
+  @path = '/etc/sudoers'
+  @additive = ["# munin passenger start", "# munin passenger end"]
+%>
+Defaults env_keep = GEM_PATH
+
+nobody  ALL=(ALL) NOPASSWD: <%= rubber_env.rvm_gem_home %>/bin/passenger-status
+nobody  ALL=(ALL) NOPASSWD: <%= rubber_env.rvm_gem_home %>/bin/passenger-memory-stats

data/generators/vulcanize/templates/passenger_nginx/config/rubber/role/passenger_nginx/munin-passenger.conf

@@ -0,0 +1,47 @@
+<%
+  @path = "/etc/munin/plugins/passenger_status"
+  @perms = 0755
+%>#!/usr/bin/env ruby
+
+# from http://gist.github.com/21328
+# by Dan Manges, http://www.dcmanges.com/blog/rails-application-visualization-with-munin
+
+def output_config
+  puts <<-END
+graph_category App
+graph_title passenger status
+graph_vlabel count
+
+sessions.label sessions
+max.label max processes
+running.label running processes
+active.label active processes
+END
+  exit 0
+end
+
+def output_values
+  status = `rvm exec sudo <%= rubber_env.rvm_gem_home %>/bin/passenger-status`
+  unless $?.success?
+    $stderr.puts "failed executing passenger-status"
+    exit 1
+  end
+  status =~ /max\s+=\s+(\d+)/
+  puts "max.value #{$1}"
+
+  status =~ /count\s+=\s+(\d+)/
+  puts "running.value #{$1}"
+
+  status =~ /active\s+=\s+(\d+)/
+  puts "active.value #{$1}"
+
+  total_sessions = 0
+  status.scan(/Sessions: (\d+)/).flatten.each { |count| total_sessions += count.to_i }
+  puts "sessions.value #{total_sessions}"
+end
+
+if ARGV[0] == "config"
+  output_config
+else
+  output_values
+end

data/generators/vulcanize/templates/passenger_nginx/config/rubber/role/passenger_nginx/nginx

@@ -0,0 +1,101 @@
+<%
+  @path = "/etc/init.d/nginx"
+  @perms = 0755
+  @post = "/usr/sbin/update-rc.d -f nginx defaults"
+  @backup = false
+%>#!/bin/sh
+
+### BEGIN INIT INFO
+# Provides:          nginx
+# Required-Start:    $local_fs $remote_fs $network $syslog
+# Required-Stop:     $local_fs $remote_fs $network $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: starts the nginx web server
+# Description:       starts nginx using start-stop-daemon
+### END INIT INFO
+
+PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
+DAEMON=/usr/sbin/nginx
+NAME=nginx
+DESC=nginx
+
+# Include nginx defaults if available
+if [ -f /etc/default/nginx ]; then
+	. /etc/default/nginx
+fi
+
+test -x $DAEMON || exit 0
+
+set -e
+
+. /lib/lsb/init-functions
+
+test_nginx_config() {
+	if $DAEMON -t $DAEMON_OPTS >/dev/null 2>&1; then
+		return 0
+	else
+		$DAEMON -t $DAEMON_OPTS
+		return $?
+	fi
+}
+
+case "$1" in
+	start)
+		echo -n "Starting $DESC: "
+		test_nginx_config
+		# Check if the ULIMIT is set in /etc/default/nginx
+		if [ -n "$ULIMIT" ]; then
+			# Set the ulimits
+			ulimit $ULIMIT
+		fi
+		start-stop-daemon --start --quiet --pidfile /var/run/$NAME.pid \
+		    --exec $DAEMON -- $DAEMON_OPTS || true
+		echo "$NAME."
+		;;
+
+	stop)
+		echo -n "Stopping $DESC: "
+		start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.pid \
+		    --exec $DAEMON || true
+		echo "$NAME."
+		;;
+
+	restart|force-reload)
+		echo -n "Restarting $DESC: "
+		start-stop-daemon --stop --quiet --pidfile \
+		    /var/run/$NAME.pid --exec $DAEMON || true
+		sleep 1
+		test_nginx_config
+		start-stop-daemon --start --quiet --pidfile \
+		    /var/run/$NAME.pid --exec $DAEMON -- $DAEMON_OPTS || true
+		echo "$NAME."
+		;;
+
+	reload)
+		echo -n "Reloading $DESC configuration: "
+		test_nginx_config
+		start-stop-daemon --stop --signal HUP --quiet --pidfile /var/run/$NAME.pid \
+		    --exec $DAEMON || true
+		echo "$NAME."
+		;;
+
+	configtest|testconfig)
+		echo -n "Testing $DESC configuration: "
+		if test_nginx_config; then
+			echo "$NAME."
+		else
+			exit $?
+		fi
+		;;
+
+	status)
+		status_of_proc -p /var/run/$NAME.pid "$DAEMON" nginx && exit 0 || exit $?
+		;;
+	*)
+		echo "Usage: $NAME {start|stop|restart|reload|force-reload|status|configtest}" >&2
+		exit 1
+		;;
+esac
+
+exit 0

data/generators/vulcanize/templates/passenger_nginx/config/rubber/role/passenger_nginx/nginx.conf

@@ -0,0 +1,65 @@
+<%
+  @path = "/etc/nginx/nginx.conf"
+  @post = "mkdir -p /mnt/nginx/logs"
+%>
+
+user <%= rubber_env.app_user %>;
+worker_processes 4;
+worker_rlimit_nofile 10240;
+
+pid /var/run/nginx.pid;
+
+events
+{
+  worker_connections 8192;
+}
+
+http
+{
+  include           /etc/nginx/mime.types;
+  default_type      application/octet-stream;
+
+  sendfile          on;
+  tcp_nopush        on;
+  tcp_nodelay       off;
+
+  gzip              on;
+  gzip_http_version 1.0;
+  gzip_comp_level   2;
+  gzip_proxied      any;
+  
+  gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript image/x-icon image/x-ms-bmp image/svg+xml application/x-font-ttf font/opentype application/vnd.ms-fontobject;
+
+  # make sure gzip does not lose large gzipped js or css files
+  # see http://blog.leetsoft.com/2007/7/25/nginx-gzip-ssl
+  gzip_buffers 16 8k;
+
+  # configure log format like to Apache's "combined" log format
+  log_format        main
+                      '$remote_addr - $remote_user [$time_local] '
+                      '"$request" $status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_cookie"';
+
+  # default log files
+  error_log         /mnt/nginx/logs/error.log notice;
+  access_log        /mnt/nginx/logs/access.log main;
+
+	passenger_root <%= rubber_env.passenger_root %>;
+	passenger_ruby <%= rubber_env.passenger_ruby %>;
+	
+	passenger_max_pool_size <%= rubber_env.max_app_connections %>;
+	passenger_min_instances <%= rubber_env.max_app_connections %>;
+	passenger_max_instances_per_app 0;
+	passenger_pool_idle_time 0;
+	rails_framework_spawner_idle_time 0;
+	rails_app_spawner_idle_time 0;
+  rails_env <%= RUBBER_ENV %>;
+	passenger_friendly_error_pages <%= RUBBER_ENV == 'production' ? 'off' : 'on' %>;
+	
+	passenger_user <%= rubber_env.app_user %>;
+	
+  include /etc/nginx/rubber/passenger_nginx.conf;
+  <% if rubber_instances.for_role('web_tools').first %>
+    include /etc/nginx/rubber/tools.conf;
+  <% end %>
+}

data/generators/vulcanize/templates/passenger_nginx/config/rubber/role/passenger_nginx/passenger_nginx.conf

@@ -0,0 +1,30 @@
+<%
+  @path = "/etc/nginx/rubber/passenger_nginx.conf"
+%>        
+
+ server {
+    ssl on;
+    listen <%= rubber_env.passenger_listen_ssl_port %>;
+   
+    proxy_set_header X_FORWARDED_PROTO https;
+
+
+    <% if rubber_env.use_ssl_key %>
+    ssl_certificate <%= RUBBER_ROOT %>/config/<%= rubber_env.domain %>.crt;
+    ssl_certificate_key <%= RUBBER_ROOT %>/config/<%= rubber_env.domain %>.key;
+    <% else %>
+    ssl_certificate  /etc/ssl/certs/ssl-cert-snakeoil.pem;
+    ssl_certificate_key  /etc/ssl/private/ssl-cert-snakeoil.key;
+    <% end %>  
+
+    include /etc/nginx/rubber/application.conf;
+  }
+
+  server {
+    listen       <%= rubber_env.passenger_listen_port %>;
+    include /etc/nginx/rubber/application.conf;
+  }
+
+passenger_pre_start http://<%= rubber_env.domain %>:<%= rubber_env.passenger_listen_port %>/;
+passenger_pre_start https://<%= rubber_env.domain %>:<%= rubber_env.passenger_listen_ssl_port %>/;
+

data/generators/vulcanize/templates/passenger_nginx/config/rubber/role/web_tools/nginx-tools.conf

@@ -0,0 +1,55 @@
+<%
+  @path = "/etc/nginx/rubber/tools.conf"
+%>
+
+
+# This server is setup to serve http.
+server
+{
+  listen <%= rubber_env.web_tools_port %>;
+  server_name <%= rubber_env.full_host %>;
+  root /var/www;
+
+  rewrite (.*) https://$host:<%= rubber_env.web_tools_ssl_port %>$1 break;
+}
+
+# This server is setup to serve https.
+server
+{
+  listen <%= rubber_env.web_tools_ssl_port %>;
+  server_name <%= rubber_env.full_host %>;
+
+  ssl                  on;
+  ssl_certificate    /etc/ssl/certs/ssl-cert-snakeoil.pem;
+  ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
+  # ssl_certificate      <%= RUBBER_ROOT %>/config/snapmylife.com.crt;
+  # ssl_certificate_key  <%= RUBBER_ROOT %>/config/snapmylife.com.key;
+
+  auth_basic            "Rubber Admin Tools";
+  auth_basic_user_file  <%= RUBBER_ROOT %>/config/<%= rubber_env.app_name %>.auth;
+
+  client_max_body_size 10M;
+  root /var/www;
+
+
+  location /
+  {
+    # If the file exists as a static file serve it directly without
+    # running all the other rewrite tests on it
+    if (-f $request_filename)
+    {
+      break;
+    }
+
+    # check for index.html for directory index
+    # if its there on the filesystem then rewite
+    # the url to add /index.html to the end of it
+    # and then break to send it to the next config rules.
+    if (-f $request_filename/index.html)
+    {
+      rewrite (.*) $1/index.html break;
+    }
+  }
+
+  include /etc/nginx/rubber/tools/*.conf;
+}