Mystery Machine fucked around with this message at 09:00 on Dec 14, 2013

The Journey Fraternity fucked around with this message at 18:32 on Dec 15, 2013

useradd -m -s /bin/bash ubuntu -G sudo
mkdir /home/ubuntu/.ssh
cp ~/.ssh/authorized_keys /home/ubuntu/.ssh/authorized_keys
chown ubuntu:ubuntu /home/ubuntu/.ssh -R
visudo

sudo bash -c 'echo "deb http://apt.postgresql.org/pub/repos/apt/ precise-pgdg main" >> /etc/apt/sources.list.d/pgdg.list'
wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo apt-key add -
sudo apt-get update
sudo apt-get install nginx postgresql-9.3 libpq-dev
sudo ufw allow ssh
sudo ufw allow http
sudo ufw enable

sudo su - postgres
psql
CREATE ROLE ubuntu WITH LOGIN;
CREATE DATABASE application_production WITH OWNER ubuntu;
\q
exit

gem 'capistrano', :require => false
gem 'capistrano-rails', :require => false
gem 'rvm1-capistrano3', :require => false
gem 'capistrano3-unicorn', :require => false

set :deploy_to, "/home/ubuntu/#{fetch(:application)}"

set :linked_files, %w{config/application.yml}
set :linked_dirs, %w{log tmp/pids tmp/cache tmp/sockets vendor/bundle public/system}

set :keep_releases, 5

set :rvm1_ruby_version, '2.0.0-p353'

set :unicorn_pid, -> { File.join(shared_path, "tmp", "pids", "unicorn.pid") }

namespace :deploy do  
  desc 'Restart application'
  task :restart do
    invoke 'unicorn:restart'
  end
  
  namespace :check do
    task :linked_files => shared_path.join('config/application.yml')
  end
end

remote_file shared_path.join('config/application.yml') => 'config/application.yml', roles: :app

file 'config/application.yml' do |t|
  on roles(:app) do |host|
    upload! t.name, shared_path.join(t.name)
  end
end

require 'capistrano/bundler'
require 'capistrano/rails'
require 'rvm1/capistrano3'
require "whenever/capistrano"
require "capistrano3/unicorn"

# Set your full path to application.
app_path = "/home/ubuntu/application/current"

# Set unicorn options
worker_processes 2
preload_app true
timeout 180

# Spawn unicorn master worker for user apps (group: apps)

# Fill path to your app
working_directory app_path

listen "#{app_path}/tmp/sockets/unicorn.sock", :backlog => 64

# Should be 'production' by default, otherwise use other env
rails_env = ENV['RAILS_ENV'] || 'production'

# Log everything to one file
stderr_path "log/unicorn.log"
stdout_path "log/unicorn.log"

# Set master PID location
pid "#{app_path}/tmp/pids/unicorn.pid"

before_fork do |server, worker|
  defined?(ActiveRecord::Base) and ActiveRecord::Base.connection.disconnect!

  # Before forking, kill the master process that belongs to the .oldbin PID.
  # This enables 0 downtime deploys.
  old_pid = "tmp/pids/unicorn.pid.oldbin"
  if File.exists?(old_pid) && server.pid != old_pid
    begin
      Process.kill("QUIT", File.read(old_pid).to_i)
    rescue Errno::ENOENT, Errno::ESRCH
      # someone else did our job for us
    end
  end
end

after_fork do |server, worker|
  defined?(ActiveRecord::Base) and ActiveRecord::Base.establish_connection
end

upstream application_rails{
  server unix:/home/ubuntu/application/current/tmp/sockets/unicorn.sock fail_timeout=0;
}

#server {
#  listen 80;
#  server_name _;
#  return 301 https://application.com$request_uri;
#}

server {
  listen 80;

#  ssl on;
#  ssl_certificate /etc/ssl/certs/application.com.combined.crt;
#  ssl_certificate_key /etc/ssl/certs/application.com.key;

  server_name _;

  root /home/ubuntu/application/current/public;
  index index.html;
  try_files $uri.html $uri @app;

  location ~ ^/assets/ {
    gzip_static on;
    expires max;
    add_header Cache-Control public;
  }  

  location @app {
    # If the file exists as a static file serve it directly
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto http;
    proxy_set_header Host $http_host;
    proxy_redirect off;

    # Oh yeah, hand over the request to Rails! Yay! :-D
    proxy_pass http://application_rails;
  }
}

sudo ln -s /etc/nginx/sites-available/application /etc/nginx/sites-enabled/application
sudo rm /etc/nginx/sites-enabled/default
sudo service nginx restart

kayakyakr fucked around with this message at 21:59 on Dec 16, 2013

Oh My Science fucked around with this message at 00:01 on Dec 17, 2013