subspace 3.0.0 → 3.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b24a2573b737094142caaf93e8b7380b4f4bf756c611fe81012a9adcc0d8d026
-  data.tar.gz: c0fe4b9c23cf613c28ddf832a4bf67ac48055fcc51a32b1ffe8ebc4ad143d14a
+  metadata.gz: 89a7c0493002b2359b52e2f7ca8bf36995a217a9853b851ca6008212f923bbd9
+  data.tar.gz: e87cd56fa5654377faa379bf6b667a171ddc7eebf226d3b6f76449d9ee989f9c
 SHA512:
-  metadata.gz: a758a05af7793e9f5ee377f1008238678ee94d5fc3d5ff5e03289cb4b1736288e3d829efa36440b3744045358a5340ae4934107fd29a034bda9042b4cfcc9254
-  data.tar.gz: da042e9f7c0f6871ac50bb64c3525ef4ce54bdcebd9ed1b3bdb6d5a8602332dd93551a47f1fda97215c1180d9550e9f87bf0030453c1f9f5d388c3dc944eeaca
+  metadata.gz: b1e9c0b2829d967b31001a06f0a4f9be93646c77c301be7bed37dc0c5e4d83d1ea8bb2dd937216f68bd13a9efeb53128697350d8f0cf0df7f9cfc1df2f332385
+  data.tar.gz: 5d5f90c8264301357cc3f2d1b7a0b57b55e6853a6fc6b988e26101db2258e8f1e9b2c60c03d7668a1798b72af69102066b5fed697e293a45f84c374b70ac0625

data/CHANGELOG.md

@@ -12,7 +12,11 @@ This project attempts to follow [semantic versioning](https://semver.org/).
 
 ## Unreleased
 
-## 3.0.0
+## 3.0.1
+  * Add maintenance tag to tailscale commands
+  * Only run tailscale up if forcing reauth
+
+## 3.0.0.rc2
   * Install redis from vendor repos (BREAKING, see README)
   * Removed outdated awscli role
   * Added `subspace secrets rekey` to generate and rekey ansible-vault secrets

data/ansible/roles/delayed_job/templates/delayed-job-systemd.service

@@ -3,7 +3,7 @@ Description=Start delayed_job_{{job_queue}}{{loop_index}} instance
 After=syslog.target network.target
 
 [Service]
-Type=simple
+Type=forking
 
 # Uncomment this if you are going to use this as a system service
 # if using as a user service then leave commented out, or you will get an error trying to start the service
@@ -18,7 +18,7 @@ WorkingDirectory=/u/apps/{{project_name}}/current
 ExecStart=/usr/local/bin/bundle exec {{delayed_job_command}} --identifier={{job_queue}}{{loop_index}} --queue={{job_queue}} start
 ExecStop=/usr/local/bin/bundle exec {{delayed_job_command}} --identifier={{job_queue}}{{loop_index}} --queue={{job_queue}} stop
 TimeoutSec=120
-PIDFile=/u/apps/{{project_name}}/shared/tmp/pids/delayed_job_{{job_queue}}{{loop_index}}.pid
+PIDFile=/u/apps/{{project_name}}/shared/tmp/pids/delayed_job.{{job_queue}}{{loop_index}}.pid
 
 # if we crash, restart
 RestartSec=1

data/ansible/roles/nginx/tasks/main.yml

@@ -2,6 +2,12 @@
   apt: pkg=nginx state=latest
   become: true
 
+- name: Disable Server tokens
+  lineinfile:
+    path: /etc/nginx/nginx.conf
+    regexp: '# server_tokens off'
+    line: "\tserver_tokens off;"
+
 - name: Remove the default app
   file:
     path: /etc/nginx/sites-enabled/default

data/ansible/roles/rails/tasks/main.yml

@@ -44,23 +44,6 @@
       owner: "{{deploy_user}}"
     become: true
 
-  - name: Create application.yml (legacy)
-    when: appyml is defined
-    template:
-      src: application.yml
-      dest: /u/apps/{{project_name}}/shared/config/application.yml
-      owner: "{{deploy_user}}"
-    become: true
-    tags:
-      - appyml
-
-  - debug:
-      msg: "Warning: Using legacy appyml for variable configuration.  Consider switching to application.yml.template"
-      verbosity: 0
-    when: appyml is defined
-    tags:
-      - appyml
-
   - name: Create application.yml
     when: appyml is not defined
     template:

data/ansible/roles/tailscale/tasks/main.yml

@@ -4,19 +4,26 @@
     apt_key:
       url: https://pkgs.tailscale.com/stable/ubuntu/{{ansible_distribution_release}}.gpg
       state: present
+    tags:
+      - maintenance
 
   - name: "Add Tailscale apt repos"
     become: true
     apt_repository:
       repo: "deb https://pkgs.tailscale.com/stable/ubuntu {{ansible_distribution_release}} main"
       state: present
+    tags:
+      - maintenance
 
-  - name: "Install tailscale from api"
+  - name: "Install tailscale from apt"
     apt:
       name: tailscale
       state: latest
       update_cache: yes
+    tags:
+      - maintenance
 
-  - name: "Join the tailnet"
+  - name: "Join the tailnet and force reauth"
     become: true
-    command: tailscale up --ssh --auth-key={{tailscale_auth_key}} --hostname={{project_name}}-{{hostname}} --accept-risk=lose-ssh {{tailscale_options}}
+    command: tailscale up --ssh --auth-key={{tailscale_auth_key}} --hostname={{project_name}}-{{hostname}} --accept-risk=lose-ssh {{tailscale_options}} --force-reauth
+    tags: [ 'never', 'tailscale_reauth' ]

data/lib/subspace/version.rb

@@ -1,3 +1,3 @@
 module Subspace
-  VERSION = "3.0.0"
+  VERSION = "3.0.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: subspace
 version: !ruby/object:Gem::Version
-  version: 3.0.0
+  version: 3.0.2
 platform: ruby
 authors:
 - Brian Samson
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-01-10 00:00:00.000000000 Z
+date: 2023-05-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -313,7 +313,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.3
+rubygems_version: 3.4.13
 signing_key:
 specification_version: 4
 summary: Ansible-based server provisioning for rails projects