rubber 2.0.4 → 2.0.5

data/templates/torquebox/config/rubber/deploy-torquebox.rb

@@ -0,0 +1,104 @@
+namespace :rubber do
+
+  namespace :torquebox do
+
+    rubber.allow_optional_tasks(self)
+
+    after "rubber:install_packages", "rubber:torquebox:custom_install"
+
+    task :custom_install, :roles => :torquebox do
+      rubber.sudo_script 'install_torquebox', <<-ENDSCRIPT
+        if [[ -z `ls #{rubber_env.torquebox_prefix}/torquebox-#{rubber_env.torquebox_version} 2> /dev/null` ]]; then
+          wget -q http://torquebox.org/release/org/torquebox/torquebox-dist/#{rubber_env.torquebox_version}/torquebox-dist-#{rubber_env.torquebox_version}-bin.zip
+          unzip -d #{rubber_env.torquebox_prefix} torquebox-dist-#{rubber_env.torquebox_version}-bin.zip &> /dev/null
+          chown -R #{rubber_env.app_user} #{rubber_env.torquebox_prefix}/torquebox-#{rubber_env.torquebox_version}
+
+          # Install to appropriate location.
+          rm -f #{rubber_env.torquebox_dir}
+          ln -s #{rubber_env.torquebox_prefix}/torquebox-#{rubber_env.torquebox_version} #{rubber_env.torquebox_dir}
+
+          # Cleanup after ourselves.
+          rm torquebox-dist-#{rubber_env.torquebox_version}-bin.zip
+        fi
+      ENDSCRIPT
+    end
+
+    after "rubber:install_packages", "rubber:torquebox:install_mod_cluster"
+
+    task :install_mod_cluster, :roles => :app do
+      rubber.sudo_script 'install_mod_cluster', <<-ENDSCRIPT
+        if [[ ! -f /usr/lib/apache2/modules/mod_proxy_cluster.so ]]; then
+          wget -q http://downloads.jboss.org/mod_cluster/#{rubber_env.mod_cluster_version}.Final/mod_cluster-#{rubber_env.mod_cluster_version}.Final-linux2-x64-so.tar.gz
+          tar -zxf mod_cluster-#{rubber_env.mod_cluster_version}.Final-linux2-x64-so.tar.gz
+
+          # Install to appropriate locations
+          chmod 644 mod_*.so
+          mv mod_*.so /usr/lib/apache2/modules/
+
+          # Cleanup after ourselves.
+          rm mod_cluster-#{rubber_env.mod_cluster_version}.Final-linux2-x64-so.tar.gz
+        fi
+      ENDSCRIPT
+    end
+
+    # serial_task can only be called after roles defined - not normally a problem, but
+    # rubber auto-roles don't get defined till after all tasks are defined
+    on :load do
+      rubber.serial_task self, :serial_reload, :roles => [:torquebox] do
+        rsudo "touch #{jboss_home}/standalone/deployments/#{application}-knob.yml.dodeploy"
+
+        # Wait for TorqueBox to startup before moving on so we don't remove all hosts from the cluster.
+        logger.info "Waiting for TorqueBox to startup"
+
+        #rsudo "while ! curl -s -f http://$HOSTNAME:#{rubber_env.torquebox_http_port} &> /dev/null; do echo .; sleep 1; done"
+
+        # TorqueBox first "deploys" the app, then lets the web context startup.  While it's deploying,
+        # the old context can still service requests.  So, we need to wait until the app is deployed before we can
+        # start checking if it's handling web requests.  Once it's deployed and web requests are being served we can move on.
+        rsudo "while ls #{jboss_home}/standalone/deployments/#{application}-knob.yml.dodeploy &> /dev/null; do echo .; sleep 1; done"
+        rsudo "while ! curl -s -f http://$HOSTNAME:#{rubber_env.torquebox_http_port} &> /dev/null; do echo .; sleep 1; done"
+      end
+    end
+
+    after "rubber:deploy:cold", "rubber:torquebox:install_backstage"
+
+    task :install_backstage, :roles => :app do
+      rsudo "backstage deploy --secure=#{rubber_env.backstage_user}:#{rubber_env.backstage_password}"
+    end
+
+    after "rubber:setup_app_permissions", "rubber:torquebox:setup_app_permissions"
+
+    task :setup_app_permissions do
+      rsudo "chown -R #{rubber_env.app_user}:#{rubber_env.app_user} #{current_path}/public"
+      rsudo "chown -R #{rubber_env.app_user}:#{rubber_env.app_user} #{current_path}/tmp"
+    end
+
+    before "deploy:finalize_update", "rubber:torquebox:create_cache_directory"
+
+    task :create_cache_directory do
+      rsudo "mkdir #{shared_path}/cache || true"
+      rsudo "chown -R #{rubber_env.app_user}:#{rubber_env.app_user} #{shared_path}/cache"
+    end
+
+    task :restart, :roles => :torquebox do
+      stop
+      start
+    end
+
+    task :stop, :roles => :torquebox do
+      rsudo "service torquebox stop || true"
+    end
+
+    task :start, :roles => :torquebox do
+      rsudo "service torquebox start || true"
+    end
+
+    after "deploy:restart", "rubber:torquebox:reload"
+
+    desc "Reloads the apache web server"
+    task :reload, :roles => :torquebox do
+      serial_reload
+    end
+
+  end
+end

data/templates/torquebox/config/rubber/role/app/mod_manager.load

@@ -0,0 +1,5 @@
+<%
+  @path = '/etc/apache2/mods-available/manager.load'
+  @post = 'a2enmod manager'
+%>
+LoadModule manager_module /usr/lib/apache2/modules/mod_manager.so

data/templates/torquebox/config/rubber/role/app/mod_proxy_cluster.conf

@@ -0,0 +1,7 @@
+<%
+  @path = '/etc/apache2/mods-available/proxy_cluster.conf'
+  @post = 'service apache2 reload'
+%>
+
+# Create in all VirtualHosts.
+CreateBalancers 0

data/templates/torquebox/config/rubber/role/app/mod_proxy_cluster.load

@@ -0,0 +1,5 @@
+<%
+  @path = '/etc/apache2/mods-available/proxy_cluster.load'
+  @post = 'a2enmod proxy_cluster && a2enmod proxy_ajp'
+%>
+LoadModule proxy_cluster_module /usr/lib/apache2/modules/mod_proxy_cluster.so

data/templates/torquebox/config/rubber/role/app/mod_slotmem.load

@@ -0,0 +1,5 @@
+<%
+  @path = '/etc/apache2/mods-available/slotmem.load'
+  @post = 'a2enmod slotmem && rm -f /etc/apache2/logs && ln -s /var/log/apache2 /etc/apache2/logs'
+%>
+LoadModule slotmem_module /usr/lib/apache2/modules/mod_slotmem.so

data/templates/torquebox/config/rubber/role/app/torquebox-apache-vhost.conf

@@ -0,0 +1,102 @@
+<%
+  @path = "/etc/apache2/sites-available/#{rubber_env.app_name}-passenger"
+  @post = "a2enmod rewrite && a2enmod ssl && a2enmod expires && a2enmod xsendfile && a2ensite #{rubber_env.app_name}"
+%>
+
+NameVirtualHost *:<%= rubber_env.apache_listen_port %>
+
+<% [rubber_env.apache_listen_port, rubber_env.apache_listen_ssl_port].each do |port| %>
+Listen <%= port %>
+<VirtualHost *:<%= port %>>
+  ServerName      <%= rubber_env.domain %>
+<%- if rubber_env.web_aliases -%>
+  ServerAlias	    <%= rubber_env.web_aliases.join(" ") %>
+<%- end -%>
+  DocumentRoot    <%= Rubber.root + "/public" %>
+
+  ErrorDocument 404 /404.html
+  ErrorDocument 500 /500.html
+
+  SetEnvIf User-Agent "^(.*MSIE.*)|(.*AppleWebKit.*)$" nokeepalive
+
+  # Don't show haproxy checks in access log (see also apache2.conf)
+  SetEnvIf Request_URI "^/httpchk.txt$" dontlog
+
+  RailsEnv  <%= Rubber.env %>
+
+  XSendFile on
+
+  RewriteEngine On
+  RewriteCond %{HTTP_HOST} ^<%= rubber_env.domain %>$
+  RewriteRule ^(.*)$ http://www.<%= rubber_env.domain %>$1 [R,L]
+
+  # Include <%= Rubber.root %>/config/apache/rewrites.conf
+
+  RewriteCond %{DOCUMENT_ROOT}/system/maintenance.html -f
+  RewriteCond %{SCRIPT_FILENAME} !maintenance.html
+  RewriteRule ^.*$ /system/maintenance.html [L]
+
+  <% if Rubber::Util.has_asset_pipeline? %>
+  <LocationMatch "^/assets/.*$">
+    Header unset ETag
+    FileETag None
+
+    # RFC says only cache for 1 year.
+    ExpiresActive On
+    ExpiresDefault "access plus 1 year"
+
+    # Cache the resource even if SSL is in use.
+    Header merge Cache-Control public
+
+    SetEnv no-gzip
+  </LocationMatch>
+
+  # Serve the gzip'd assets directly from disk if they were generated by Sprockets.
+  # This avoids gzipping the asset on the fly by Apache and Sprockets will usually use a higher level
+  # of compression than mod_deflate will, yielding savings all around.
+
+  RewriteCond %{HTTP:Accept-Encoding} \b(x-)?gzip\b
+  RewriteCond <%= Rubber.root + "/public" %>%{REQUEST_FILENAME}.gz -s
+  RewriteRule ^(.+) $1.gz [L]
+
+  <FilesMatch \.css\.gz$>
+    ForceType text/css
+    Header set Content-Encoding gzip
+  </FilesMatch>
+
+  <FilesMatch \.js\.gz$>
+    ForceType text/javascript
+    Header set Content-Encoding gzip
+  </FilesMatch>
+  <% end %>
+
+  <% if port == rubber_env.passenger_listen_ssl_port %>
+  SSLEngine on
+  SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
+  SSLCertificateFile    /etc/ssl/certs/ssl-cert-snakeoil.pem
+  SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
+  # SSLCertificateFile <%= Rubber.root %>/config/<%= rubber_env.domain %>.crt
+  # SSLCertificateKeyFile <%= Rubber.root %>/config/<%= rubber_env.domain %>.key
+  # SSLCertificateChainFile /etc/ssl/certs/gd_intermediate_bundle.crt
+
+  SSLHonorCipherOrder On
+  SSLCipherSuite ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM
+  <% end %>
+
+  # Show additional information in mod_cluster-manager.
+  AllowDisplay On
+
+  # Enable receiving TorqueBox node registration requests.
+  EnableMCPMReceive
+
+  # Enabled the mod_cluster manager.
+  <Location /mod_cluster-manager>
+    SetHandler mod_cluster-manager
+    Order deny,allow
+    Deny from all
+    Allow from 127.0.0.1
+  </Location>
+</VirtualHost>
+
+<% end %>
+

data/templates/torquebox/config/rubber/role/torquebox/monit-torquebox.conf

@@ -0,0 +1,8 @@
+<%
+  @path = '/etc/monit/monit.d/monit-torquebox.conf'
+%>
+check process torquebox with pidfile <%= rubber_env.torquebox_pid_file %>
+  group torquebox-<%= Rubber.env %>
+  start program = "/usr/bin/env service torquebox start"
+  stop program = "/usr/bin/env service torquebox stop"
+  if failed host <%= rubber_env.host %> port <%= rubber_env.torquebox_http_port %> with timeout 10 seconds for 20 cycles then restart

data/templates/torquebox/config/rubber/role/torquebox/standalone-ha.xml

@@ -0,0 +1,616 @@
+<%
+        @path = "#{rubber_env.torquebox_dir}/jboss/standalone/configuration/standalone-ha.xml"
+        %><?xml version='1.0' encoding='UTF-8'?>
+<server xmlns='urn:jboss:domain:1.2'>
+<extensions>
+  <extension module='org.jboss.as.clustering.infinispan'/>
+  <extension module='org.jboss.as.clustering.jgroups'/>
+  <extension module='org.jboss.as.cmp'/>
+  <extension module='org.jboss.as.configadmin'/>
+  <extension module='org.jboss.as.connector'/>
+  <extension module='org.jboss.as.deployment-scanner'/>
+  <extension module='org.jboss.as.ee'/>
+  <extension module='org.jboss.as.ejb3'/>
+  <extension module='org.jboss.as.jacorb'/>
+  <extension module='org.jboss.as.jaxr'/>
+  <extension module='org.jboss.as.jaxrs'/>
+  <extension module='org.jboss.as.jdr'/>
+  <extension module='org.jboss.as.jmx'/>
+  <extension module='org.jboss.as.jpa'/>
+  <extension module='org.jboss.as.jsr77'/>
+  <extension module='org.jboss.as.logging'/>
+  <extension module='org.jboss.as.mail'/>
+  <extension module='org.jboss.as.messaging'/>
+  <extension module='org.jboss.as.modcluster'/>
+  <extension module='org.jboss.as.naming'/>
+  <extension module='org.jboss.as.osgi'/>
+  <extension module='org.jboss.as.pojo'/>
+  <extension module='org.jboss.as.remoting'/>
+  <extension module='org.jboss.as.sar'/>
+  <extension module='org.jboss.as.security'/>
+  <extension module='org.jboss.as.threads'/>
+  <extension module='org.jboss.as.transactions'/>
+  <extension module='org.jboss.as.web'/>
+  <extension module='org.jboss.as.webservices'/>
+  <extension module='org.jboss.as.weld'/>
+  <extension module='org.torquebox.bootstrap'/>
+  <extension module='org.torquebox.core'/>
+  <extension module='org.torquebox.services'/>
+  <extension module='org.torquebox.security'/>
+  <extension module='org.torquebox.jobs'/>
+  <extension module='org.torquebox.stomp'/>
+  <extension module='org.torquebox.messaging'/>
+  <extension module='org.torquebox.cdi'/>
+  <extension module='org.torquebox.web'/>
+  <extension module='org.torquebox.cache'/>
+  <extension module='org.projectodd.polyglot.hasingleton'/>
+</extensions>
+<system-properties>
+  <property name='org.apache.tomcat.util.http.ServerCookie.FWD_SLASH_IS_SEPARATOR' value='false'/>
+  <property name='org.apache.tomcat.util.net.WAIT_FOR_THREAD' value='false'/>
+</system-properties>
+<management>
+  <security-realms>
+    <security-realm name='ManagementRealm'>
+      <authentication>
+        <properties path='mgmt-users.properties' relative-to='jboss.server.config.dir'/>
+      </authentication>
+    </security-realm>
+    <security-realm name='ApplicationRealm'>
+      <authentication>
+        <properties path='application-users.properties' relative-to='jboss.server.config.dir'/>
+      </authentication>
+    </security-realm>
+  </security-realms>
+  <management-interfaces>
+    <native-interface>
+      <socket-binding native='management-native'/>
+    </native-interface>
+    <http-interface>
+      <socket-binding http='management-http'/>
+    </http-interface>
+  </management-interfaces>
+</management>
+<profile>
+  <subsystem xmlns='urn:jboss:domain:logging:1.1'>
+    <console-handler name='CONSOLE'>
+      <level name='INFO'/>
+      <formatter>
+        <pattern-formatter pattern='%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%E%n'/>
+      </formatter>
+    </console-handler>
+    <periodic-rotating-file-handler name='FILE'>
+      <formatter>
+        <pattern-formatter pattern='%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%E%n'/>
+      </formatter>
+      <file relative-to='jboss.server.log.dir' path='server.log'/>
+      <suffix value='.yyyy-MM-dd'/>
+      <append value='true'/>
+    </periodic-rotating-file-handler>
+    <logger category='com.arjuna'>
+      <level name='WARN'/>
+    </logger>
+    <logger category='org.apache.tomcat.util.modeler'>
+      <level name='WARN'/>
+    </logger>
+    <logger category='sun.rmi'>
+      <level name='WARN'/>
+    </logger>
+    <logger category='jacorb'>
+      <level name='WARN'/>
+    </logger>
+    <logger category='jacorb.config'>
+      <level name='ERROR'/>
+    </logger>
+    <root-logger>
+      <level name='INFO'/>
+      <handlers>
+        <handler name='CONSOLE'/>
+        <handler name='FILE'/>
+      </handlers>
+    </root-logger>
+    <logger category='org.jboss.jca.adapters.jdbc.extensions.mysql'>
+      <level name='ERROR'/>
+    </logger>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:cmp:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:configadmin:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:datasources:1.0'>
+    <datasources>
+      <datasource jndi-name='java:jboss/datasources/ExampleDS' pool-name='ExampleDS' enabled='true' use-java-context='true'>
+        <connection-url>
+          jdbc:h2:mem:test;DB_CLOSE_DELAY=-1
+        </connection-url>
+        <driver>
+          h2
+        </driver>
+        <security>
+          <user-name>
+            sa
+          </user-name>
+          <password>
+            sa
+          </password>
+        </security>
+      </datasource>
+      <drivers>
+        <driver name='h2' module='com.h2database.h2'>
+          <xa-datasource-class>
+            org.h2.jdbcx.JdbcDataSource
+          </xa-datasource-class>
+        </driver>
+      </drivers>
+    </datasources>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:deployment-scanner:1.1'>
+    <deployment-scanner path='deployments' relative-to='jboss.server.base.dir' scan-interval='5000' deployment-timeout='1200'/>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:ee:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:ejb3:1.2'>
+    <session-bean>
+      <stateless>
+        <bean-instance-pool-ref pool-name='slsb-strict-max-pool'/>
+      </stateless>
+      <stateful default-access-timeout='5000' cache-ref='simple' clustered-cache-ref='clustered'/>
+      <singleton default-access-timeout='5000'/>
+    </session-bean>
+    <mdb>
+      <resource-adapter-ref resource-adapter-name='hornetq-ra'/>
+      <bean-instance-pool-ref pool-name='mdb-strict-max-pool'/>
+    </mdb>
+    <pools>
+      <bean-instance-pools>
+        <strict-max-pool name='slsb-strict-max-pool' max-pool-size='20' instance-acquisition-timeout='5' instance-acquisition-timeout-unit='MINUTES'/>
+        <strict-max-pool name='mdb-strict-max-pool' max-pool-size='20' instance-acquisition-timeout='5' instance-acquisition-timeout-unit='MINUTES'/>
+      </bean-instance-pools>
+    </pools>
+    <caches>
+      <cache name='simple' aliases='NoPassivationCache'/>
+      <cache name='passivating' passivation-store-ref='file' aliases='SimpleStatefulCache'/>
+      <cache name='clustered' passivation-store-ref='infinispan' aliases='StatefulTreeCache'/>
+    </caches>
+    <passivation-stores>
+      <file-passivation-store name='file'/>
+      <cluster-passivation-store name='infinispan' cache-container='ejb'/>
+    </passivation-stores>
+    <async thread-pool-name='default'/>
+    <timer-service thread-pool-name='default'>
+      <data-store path='timer-service-data' relative-to='jboss.server.data.dir'/>
+    </timer-service>
+    <remote connector-ref='remoting-connector' thread-pool-name='default'/>
+    <thread-pools>
+      <thread-pool name='default'>
+        <max-threads count='10'/>
+        <keepalive-time time='100' unit='milliseconds'/>
+      </thread-pool>
+    </thread-pools>
+    <iiop enable-by-default='false' use-qualified-name='false'/>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:infinispan:1.2' default-cache-container='cluster'>
+    <cache-container name='cluster' aliases='ha-partition' default-cache='default'>
+      <transport lock-timeout='60000'/>
+      <replicated-cache name='default' mode='SYNC' batching='true'>
+        <locking isolation='REPEATABLE_READ'/>
+      </replicated-cache>
+    </cache-container>
+    <cache-container name='web' aliases='torquebox standard-session-cache' default-cache='repl'>
+      <transport lock-timeout='60000'/>
+      <replicated-cache name='repl' mode='ASYNC' batching='true'>
+        <file-store/>
+      </replicated-cache>
+      <replicated-cache name='sso' mode='SYNC' batching='true'/>
+      <distributed-cache name='dist' mode='ASYNC' batching='true'>
+        <file-store/>
+      </distributed-cache>
+    </cache-container>
+    <cache-container name='ejb' aliases='sfsb sfsb-cache' default-cache='repl'>
+      <transport lock-timeout='60000'/>
+      <replicated-cache name='repl' mode='ASYNC' batching='true'>
+        <eviction strategy='LRU'/>
+        <file-store/>
+      </replicated-cache>
+      <!--
+      ~  Clustered cache used internally by EJB subsytem for managing the client-mapping(s) of
+      ~                 the socketbinding referenced by the EJB remoting connector
+      -->
+      <replicated-cache name='remote-connector-client-mappings' mode='SYNC' batching='true'/>
+      <distributed-cache name='dist' mode='ASYNC' batching='true'>
+        <eviction strategy='LRU'/>
+        <file-store/>
+      </distributed-cache>
+    </cache-container>
+    <cache-container name='hibernate' default-cache='local-query'>
+      <transport lock-timeout='60000'/>
+      <local-cache name='local-query'>
+        <transaction mode='NONE'/>
+        <eviction strategy='LRU' max-entries='10000'/>
+        <expiration max-idle='100000'/>
+      </local-cache>
+      <invalidation-cache name='entity' mode='SYNC'>
+        <transaction mode='NON_XA'/>
+        <eviction strategy='LRU' max-entries='10000'/>
+        <expiration max-idle='100000'/>
+      </invalidation-cache>
+      <replicated-cache name='timestamps' mode='ASYNC'>
+        <transaction mode='NONE'/>
+        <eviction strategy='NONE'/>
+      </replicated-cache>
+    </cache-container>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:jacorb:1.1'>
+    <orb>
+      <initializers transactions='spec' security='on'/>
+    </orb>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:jaxr:1.1'>
+    <connection-factory jndi-name='java:jboss/jaxr/ConnectionFactory'/>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:jaxrs:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:jca:1.1'>
+    <archive-validation enabled='true' fail-on-error='true' fail-on-warn='false'/>
+    <bean-validation enabled='true'/>
+    <default-workmanager>
+      <short-running-threads>
+        <core-threads count='50'/>
+        <queue-length count='50'/>
+        <max-threads count='50'/>
+        <keepalive-time time='10' unit='seconds'/>
+      </short-running-threads>
+      <long-running-threads>
+        <core-threads count='50'/>
+        <queue-length count='50'/>
+        <max-threads count='50'/>
+        <keepalive-time time='10' unit='seconds'/>
+      </long-running-threads>
+    </default-workmanager>
+    <cached-connection-manager/>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:jdr:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:jgroups:1.1' default-stack='tcp'>
+    <stack name='udp'>
+      <transport type='UDP' socket-binding='jgroups-udp' diagnostics-socket-binding='jgroups-diagnostics'/>
+      <protocol type='PING'/>
+      <protocol type='MERGE2'/>
+      <protocol type='FD_SOCK' socket-binding='jgroups-udp-fd'/>
+      <protocol type='FD'/>
+      <protocol type='VERIFY_SUSPECT'/>
+      <protocol type='BARRIER'/>
+      <protocol type='pbcast.NAKACK'/>
+      <protocol type='UNICAST2'/>
+      <protocol type='pbcast.STABLE'/>
+      <protocol type='pbcast.GMS'/>
+      <protocol type='UFC'/>
+      <protocol type='MFC'/>
+      <protocol type='FRAG2'/>
+    </stack>
+    <stack name='tcp'>
+      <transport type='TCP' socket-binding='jgroups-tcp' diagnostics-socket-binding='jgroups-diagnostics'/>
+      <protocol type="TCPPING">
+        <property name="initial_hosts">
+          <%= rubber_instances.for_role('torquebox').collect { |host| "#{host.full_name}[7600]" }.join(',') %>
+        </property>
+      </protocol>
+      <protocol type='MPING' socket-binding='jgroups-mping'/>
+      <protocol type='MERGE2'/>
+      <protocol type='FD_SOCK' socket-binding='jgroups-tcp-fd'/>
+      <protocol type='FD'/>
+      <protocol type='VERIFY_SUSPECT'/>
+      <protocol type='BARRIER'/>
+      <protocol type='pbcast.NAKACK'/>
+      <protocol type='UNICAST2'/>
+      <protocol type='pbcast.STABLE'/>
+      <protocol type='pbcast.GMS'/>
+      <protocol type='UFC'/>
+      <protocol type='MFC'/>
+      <protocol type='FRAG2'/>
+    </stack>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:jmx:1.1'>
+    <show-model value='true'/>
+    <remoting-connector/>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:jpa:1.0'>
+    <jpa default-datasource=''/>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:jsr77:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:mail:1.0'>
+    <mail-session jndi-name='java:jboss/mail/Default'>
+      <smtp-server outbound-socket-binding-ref='mail-smtp'/>
+    </mail-session>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:messaging:1.1'>
+    <hornetq-server>
+      <clustered>
+        true
+      </clustered>
+      <persistence-enabled>
+        true
+      </persistence-enabled>
+      <journal-file-size>
+        102400
+      </journal-file-size>
+      <journal-min-files>
+        2
+      </journal-min-files>
+      <connectors>
+        <netty-connector name='netty' socket-binding='messaging'/>
+        <netty-connector name='netty-throughput' socket-binding='messaging-throughput'>
+          <param key='batch-delay' value='50'/>
+        </netty-connector>
+        <in-vm-connector name='in-vm' server-id='0'/>
+      </connectors>
+      <acceptors>
+        <netty-acceptor name='netty' socket-binding='messaging'/>
+        <netty-acceptor name='netty-throughput' socket-binding='messaging-throughput'>
+          <param key='batch-delay' value='50'/>
+          <param key='direct-deliver' value='false'/>
+        </netty-acceptor>
+        <in-vm-acceptor name='in-vm' server-id='0'/>
+      </acceptors>
+      <broadcast-groups>
+        <broadcast-group name='bg-group1'>
+          <broadcast-period>
+            5000
+          </broadcast-period>
+          <connector-ref>
+            netty
+          </connector-ref>
+          <socket-binding>
+            messaging-group
+          </socket-binding>
+        </broadcast-group>
+      </broadcast-groups>
+      <discovery-groups>
+        <discovery-group name='dg-group1'>
+          <refresh-timeout>
+            10000
+          </refresh-timeout>
+          <socket-binding>
+            messaging-group
+          </socket-binding>
+        </discovery-group>
+      </discovery-groups>
+      <cluster-connections>
+        <cluster-connection name='my-cluster'>
+          <address>
+            jms
+          </address>
+          <connector-ref>
+            netty
+          </connector-ref>
+          <discovery-group-ref discovery-group-name='dg-group1'/>
+        </cluster-connection>
+      </cluster-connections>
+      <security-settings>
+        <security-setting match='#'>
+          <permission type='send' roles='guest'/>
+          <permission type='consume' roles='guest'/>
+          <permission type='createNonDurableQueue' roles='guest'/>
+          <permission type='deleteNonDurableQueue' roles='guest'/>
+        </security-setting>
+      </security-settings>
+      <address-settings>
+        <!--default for catch all-->
+        <address-setting match='#'>
+          <dead-letter-address>
+            jms.queue.DLQ
+          </dead-letter-address>
+          <expiry-address>
+            jms.queue.ExpiryQueue
+          </expiry-address>
+          <redelivery-delay>
+            0
+          </redelivery-delay>
+          <redistribution-delay>
+            1000
+          </redistribution-delay>
+          <max-size-bytes>
+            20971520
+          </max-size-bytes>
+          <address-full-policy>
+            PAGE
+          </address-full-policy>
+          <message-counter-history-day-limit>
+            10
+          </message-counter-history-day-limit>
+        </address-setting>
+      </address-settings>
+      <jms-connection-factories>
+        <connection-factory name='InVmConnectionFactory'>
+          <connectors>
+            <connector-ref connector-name='in-vm'/>
+          </connectors>
+          <entries>
+            <entry name='java:/ConnectionFactory'/>
+          </entries>
+          <consumer-window-size>
+            1
+          </consumer-window-size>
+        </connection-factory>
+        <connection-factory name='RemoteConnectionFactory'>
+          <connectors>
+            <connector-ref connector-name='netty'/>
+          </connectors>
+          <entries>
+            <entry name='RemoteConnectionFactory'/>
+            <entry name='java:jboss/exported/jms/RemoteConnectionFactory'/>
+          </entries>
+          <consumer-window-size>
+            1
+          </consumer-window-size>
+        </connection-factory>
+        <pooled-connection-factory name='hornetq-ra'>
+          <transaction mode='xa'/>
+          <connectors>
+            <connector-ref connector-name='in-vm'/>
+          </connectors>
+          <entries>
+            <entry name='java:/JmsXA'/>
+          </entries>
+        </pooled-connection-factory>
+      </jms-connection-factories>
+      <jms-destinations>
+      </jms-destinations>
+      <cluster-user>
+        admin
+      </cluster-user>
+      <cluster-password>
+        password
+      </cluster-password>
+      <jmx-management-enabled>
+        true
+      </jmx-management-enabled>
+      <security-enabled>
+        false
+      </security-enabled>
+    </hornetq-server>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:modcluster:1.0'>
+    <mod-cluster-config proxy-list="${jboss.mod_cluster.proxyList}" excluded-contexts='invoker,jbossws,juddi,console'>
+      <dynamic-load-provider>
+        <load-metric type='busyness'/>
+      </dynamic-load-provider>
+    </mod-cluster-config>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:naming:1.1'/>
+  <subsystem xmlns='urn:jboss:domain:osgi:1.2' activation='lazy'>
+    <properties>
+      <!-- Specifies the beginning start level of the framework -->
+      <property name='org.osgi.framework.startlevel.beginning'>
+        1
+      </property>
+    </properties>
+    <capabilities>
+      <!-- modules registered with the OSGi layer on startup -->
+      <capability name='javax.servlet.api:v25'/>
+      <capability name='javax.transaction.api'/>
+      <!-- bundles started in startlevel 1 -->
+      <capability name='org.apache.felix.log' startlevel='1'/>
+      <capability name='org.jboss.osgi.logging' startlevel='1'/>
+      <capability name='org.apache.felix.configadmin' startlevel='1'/>
+      <capability name='org.jboss.as.osgi.configadmin' startlevel='1'/>
+    </capabilities>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:pojo:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:remoting:1.1'>
+    <connector name='remoting-connector' socket-binding='remoting' security-realm='ApplicationRealm'/>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:resource-adapters:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:sar:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:security:1.1'>
+    <security-domains>
+      <security-domain name='other' cache-type='default'>
+        <authentication>
+          <login-module code='Remoting' flag='optional'>
+            <module-option name='password-stacking' value='useFirstPass'/>
+          </login-module>
+          <login-module code='RealmUsersRoles' flag='required'>
+            <module-option name='usersProperties' value='${jboss.server.config.dir}/application-users.properties'/>
+            <module-option name='rolesProperties' value='${jboss.server.config.dir}/application-roles.properties'/>
+            <module-option name='realm' value='ApplicationRealm'/>
+            <module-option name='password-stacking' value='useFirstPass'/>
+          </login-module>
+        </authentication>
+      </security-domain>
+      <security-domain name='jboss-web-policy' cache-type='default'>
+        <authorization>
+          <policy-module code='Delegating' flag='required'/>
+        </authorization>
+      </security-domain>
+      <security-domain name='jboss-ejb-policy' cache-type='default'>
+        <authorization>
+          <policy-module code='Delegating' flag='required'/>
+        </authorization>
+      </security-domain>
+    </security-domains>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:threads:1.1'/>
+  <subsystem xmlns='urn:jboss:domain:transactions:1.1'>
+    <core-environment>
+      <process-id>
+        <uuid/>
+      </process-id>
+    </core-environment>
+    <recovery-environment socket-binding='txn-recovery-environment' status-socket-binding='txn-status-manager'/>
+    <coordinator-environment default-timeout='300'/>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:web:1.1' default-virtual-server='default-host' native='false'>
+    <connector name='http' protocol='HTTP/1.1' scheme='http' socket-binding='http'/>
+    <connector name='ajp' protocol='AJP/1.3' scheme='http' socket-binding='ajp'/>
+    <virtual-server name='default-host'>
+      <alias name='localhost'/>
+      <alias name='example.com'/>
+    </virtual-server>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:webservices:1.1'>
+    <modify-wsdl-address>
+      true
+    </modify-wsdl-address>
+    <wsdl-host>
+      ${jboss.bind.address:127.0.0.1}
+    </wsdl-host>
+    <endpoint-config name='Standard-Endpoint-Config'/>
+    <endpoint-config name='Recording-Endpoint-Config'>
+      <pre-handler-chain name='recording-handlers' protocol-bindings='##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM'>
+        <handler name='RecordingHandler' class='org.jboss.ws.common.invocation.RecordingServerHandler'/>
+      </pre-handler-chain>
+    </endpoint-config>
+  </subsystem>
+  <subsystem xmlns='urn:jboss:domain:weld:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:torquebox-bootstrap:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:torquebox-core:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:torquebox-services:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:torquebox-security:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:torquebox-jobs:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:torquebox-stomp:1.0' socket-binding='stomp'/>
+  <subsystem xmlns='urn:jboss:domain:torquebox-messaging:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:torquebox-cdi:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:torquebox-web:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:torquebox-cache:1.0'/>
+  <subsystem xmlns='urn:jboss:domain:polyglot-hasingleton:1.0'/>
+</profile>
+<interfaces>
+  <interface name='management'>
+    <inet-address value='${jboss.bind.address.management:127.0.0.1}'/>
+  </interface>
+  <interface name='public'>
+    <inet-address value='${jboss.bind.address:127.0.0.1}'/>
+  </interface>
+  <!-- TODO - only show this if the jacorb subsystem is added  -->
+  <interface name='unsecure'>
+    <!--
+    ~  Used for IIOP sockets in the standard configuration.
+    ~                  To secure JacORB you need to setup SSL
+    -->
+    <inet-address value='${jboss.bind.address.unsecure:127.0.0.1}'/>
+  </interface>
+</interfaces>
+<socket-binding-group name='standard-sockets' default-interface='public' port-offset='${jboss.socket.binding.port-offset:0}'>
+  <socket-binding name='management-native' interface='management' port='${jboss.management.native.port:9999}'/>
+  <socket-binding name='management-http' interface='management' port='${jboss.management.http.port:9990}'/>
+  <socket-binding name='management-https' interface='management' port='${jboss.management.https.port:9443}'/>
+  <socket-binding name='ajp' port='<%= rubber_env.torquebox_ajp_port %>'/>
+  <socket-binding name='http' port='<%= rubber_env.torquebox_http_port %>'/>
+  <socket-binding name='https' port='<%= rubber_env.torquebox_https_port %>'/>
+  <socket-binding name='jacorb' interface='unsecure' port='3528'/>
+  <socket-binding name='jacorb-ssl' interface='unsecure' port='3529'/>
+  <socket-binding name='jgroups-diagnostics' port='0' multicast-address='224.0.75.75' multicast-port='7500'/>
+  <socket-binding name='jgroups-mping' port='0' multicast-address='${jboss.default.multicast.address:230.0.0.4}' multicast-port='45700'/>
+  <socket-binding name='jgroups-tcp' port='7600'/>
+  <socket-binding name='jgroups-tcp-fd' port='57600'/>
+  <socket-binding name='jgroups-udp' port='55200' multicast-address='${jboss.default.multicast.address:230.0.0.4}' multicast-port='45688'/>
+  <socket-binding name='jgroups-udp-fd' port='54200'/>
+  <socket-binding name='messaging' port='5445'/>
+  <socket-binding name='messaging-throughput' port='5455'/>
+  <socket-binding name='modcluster' port='0' multicast-address='224.0.1.105' multicast-port='23364'/>
+  <socket-binding name='osgi-http' interface='management' port='8090'/>
+  <socket-binding name='remoting' port='4447'/>
+  <socket-binding name='txn-recovery-environment' port='4712'/>
+  <socket-binding name='txn-status-manager' port='4713'/>
+  <outbound-socket-binding name='mail-smtp'>
+    <remote-destination host='localhost' port='25'/>
+  </outbound-socket-binding>
+  <socket-binding name='stomp' port='8675'/>
+  <socket-binding name='messaging-group' port='0' multicast-address='${jboss.messaging.group.address:231.7.7.7}' multicast-port='${jboss.messaging.group.port:9876}'/>
+</socket-binding-group>
+</server>