subspace 3.0.0 → 3.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b24a2573b737094142caaf93e8b7380b4f4bf756c611fe81012a9adcc0d8d026
-  data.tar.gz: c0fe4b9c23cf613c28ddf832a4bf67ac48055fcc51a32b1ffe8ebc4ad143d14a
+  metadata.gz: 6ad6288b03639fd9b79a3fb69e14c32f952d8c816f3ea00c55f78eb360855408
+  data.tar.gz: 5b8eb9d18bd3e43cd17c0142eee6137748536e03566ccdd172109212ab96b9d3
 SHA512:
-  metadata.gz: a758a05af7793e9f5ee377f1008238678ee94d5fc3d5ff5e03289cb4b1736288e3d829efa36440b3744045358a5340ae4934107fd29a034bda9042b4cfcc9254
-  data.tar.gz: da042e9f7c0f6871ac50bb64c3525ef4ce54bdcebd9ed1b3bdb6d5a8602332dd93551a47f1fda97215c1180d9550e9f87bf0030453c1f9f5d388c3dc944eeaca
+  metadata.gz: 6e4b42e4a10031f9fe0078e4453709578f31be3cb5208ac691cf9f46737111b0949c979affb6153245e95fdb94fedb996ad271154366377d60d772c658d46f64
+  data.tar.gz: e5de029bbf3f4ee9ba1590925ef2294f24eab635e5b6a922519f11c5730afd2344a9b855e2d3dea5d41e78e4c91a1fdcad26488f75ed9360d45e92e4a1c1f96d

data/CHANGELOG.md

@@ -12,7 +12,11 @@ This project attempts to follow [semantic versioning](https://semver.org/).
 
 ## Unreleased
 
-## 3.0.0
+## 3.0.1
+  * Add maintenance tag to tailscale commands
+  * Only run tailscale up if forcing reauth
+
+## 3.0.0.rc2
   * Install redis from vendor repos (BREAKING, see README)
   * Removed outdated awscli role
   * Added `subspace secrets rekey` to generate and rekey ansible-vault secrets

data/ansible/roles/delayed_job/templates/delayed-job-systemd.service

@@ -3,7 +3,7 @@ Description=Start delayed_job_{{job_queue}}{{loop_index}} instance
 After=syslog.target network.target
 
 [Service]
-Type=simple
+Type=forking
 
 # Uncomment this if you are going to use this as a system service
 # if using as a user service then leave commented out, or you will get an error trying to start the service
@@ -18,7 +18,7 @@ WorkingDirectory=/u/apps/{{project_name}}/current
 ExecStart=/usr/local/bin/bundle exec {{delayed_job_command}} --identifier={{job_queue}}{{loop_index}} --queue={{job_queue}} start
 ExecStop=/usr/local/bin/bundle exec {{delayed_job_command}} --identifier={{job_queue}}{{loop_index}} --queue={{job_queue}} stop
 TimeoutSec=120
-PIDFile=/u/apps/{{project_name}}/shared/tmp/pids/delayed_job_{{job_queue}}{{loop_index}}.pid
+PIDFile=/u/apps/{{project_name}}/shared/tmp/pids/delayed_job.{{job_queue}}{{loop_index}}.pid
 
 # if we crash, restart
 RestartSec=1

data/ansible/roles/nginx/tasks/main.yml

@@ -2,6 +2,12 @@
   apt: pkg=nginx state=latest
   become: true
 
+- name: Disable Server tokens
+  lineinfile:
+    path: /etc/nginx/nginx.conf
+    regexp: '# server_tokens off'
+    line: "\tserver_tokens off;"
+
 - name: Remove the default app
   file:
     path: /etc/nginx/sites-enabled/default

data/ansible/roles/rails/tasks/main.yml

@@ -44,23 +44,6 @@
       owner: "{{deploy_user}}"
     become: true
 
-  - name: Create application.yml (legacy)
-    when: appyml is defined
-    template:
-      src: application.yml
-      dest: /u/apps/{{project_name}}/shared/config/application.yml
-      owner: "{{deploy_user}}"
-    become: true
-    tags:
-      - appyml
-
-  - debug:
-      msg: "Warning: Using legacy appyml for variable configuration.  Consider switching to application.yml.template"
-      verbosity: 0
-    when: appyml is defined
-    tags:
-      - appyml
-
   - name: Create application.yml
     when: appyml is not defined
     template:

data/ansible/roles/redis/tasks/main.yml

@@ -32,6 +32,13 @@
       line: 'bind {{redis_bind}}'
       state: present
 
+  - name: Disable protected-mode
+    become: true
+    lineinfile:
+      name: /etc/redis/redis.conf
+      regexp: '^protected-mode yes'
+      line: 'protected-mode no'
+
   - name: restart redis
     become: true
     systemd:

data/ansible/roles/tailscale/tasks/main.yml

@@ -4,19 +4,26 @@
     apt_key:
       url: https://pkgs.tailscale.com/stable/ubuntu/{{ansible_distribution_release}}.gpg
       state: present
+    tags:
+      - maintenance
 
   - name: "Add Tailscale apt repos"
     become: true
     apt_repository:
       repo: "deb https://pkgs.tailscale.com/stable/ubuntu {{ansible_distribution_release}} main"
       state: present
+    tags:
+      - maintenance
 
-  - name: "Install tailscale from api"
+  - name: "Install tailscale from apt"
     apt:
       name: tailscale
       state: latest
       update_cache: yes
+    tags:
+      - maintenance
 
-  - name: "Join the tailnet"
+  - name: "Join the tailnet and force reauth"
     become: true
-    command: tailscale up --ssh --auth-key={{tailscale_auth_key}} --hostname={{project_name}}-{{hostname}} --accept-risk=lose-ssh {{tailscale_options}}
+    command: tailscale up --ssh --auth-key={{tailscale_auth_key}} --hostname={{project_name}}-{{hostname}} --accept-risk=lose-ssh {{tailscale_options}} --force-reauth
+    tags: [ 'never', 'tailscale_reauth' ]

data/lib/subspace/version.rb

@@ -1,3 +1,3 @@
 module Subspace
-  VERSION = "3.0.0"
+  VERSION = "3.0.3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: subspace
 version: !ruby/object:Gem::Version
-  version: 3.0.0
+  version: 3.0.3
 platform: ruby
 authors:
 - Brian Samson
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-01-10 00:00:00.000000000 Z
+date: 2023-05-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -313,7 +313,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.3
+rubygems_version: 3.4.13
 signing_key:
 specification_version: 4
 summary: Ansible-based server provisioning for rails projects