# frozen_string_literal: true module Meroku # A node is an ec2 node, that powers meroku class Node include Meroku::Shared include Meroku::Aws include Meroku::Sshable attr_reader :instance_id def initialize make_instance && associate_address start_ssh && user_creations && configure_keys install_packages && homedir_creations database_inits && git_clone nginx_configs start_rails close_ssh end private def start_ssh @connection = Net::SSH.start(ip_address, 'ubuntu', sshopts) end def configure_keys configure_host_keys execute_script <<~HEREDOC curl -s -o /home/ubuntu/letsencrypt_fullchain.pem #{bucket}letsencrypt_fullchain.pem curl -s -o /home/ubuntu/letsencrypt_privkey.pem #{bucket}letsencrypt_privkey.pem curl -s https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo apt-key add - echo "Dpkg::Use-Pty "0";" | sudo tee /etc/apt/apt.conf.d/00usepty HEREDOC end def configure_host_keys execute_script <<~HEREDOC sudo sh -c 'curl -s #{bucket}ssh_host_.tar | tar xvf - -C /etc/ssh/' HEREDOC end def install_packages ubuntu_site = 'http://archive.ubuntu.com/ubuntu/' postgres_site = 'http://apt.postgresql.org/pub/repos/apt/' execute_script <<~HEREDOC sudo apt-add-repository ppa:brightbox/ruby-ng --yes 2>/dev/null >/dev/null echo "deb #{ubuntu_site} trusty main universe" | sudo tee -a /etc/apt/sources.list echo "deb #{ubuntu_site} trusty-security main universe" | sudo tee -a /etc/apt/sources.list echo "deb #{ubuntu_site} trusty-updates main universe" | sudo tee -a /etc/apt/sources.list echo "deb #{postgres_site} trusty-pgdg main" | sudo tee -a /etc/apt/sources.list DEBIAN_FRONTEND=noninteractive sudo apt-get update -qq DEBIAN_FRONTEND=noninteractive sudo apt-get upgrade -yqq --force-yes 2>/dev/null >/dev/null DEBIAN_PRIORITY=critical DEBIAN_FRONTEND=noninteractive sudo apt-get install -q -y -o "Dpkg::Options::=--force-confdef" -o "Dpkg::Options::=--force-confold" autoconf bind9-host bison build-essential coreutils curl daemontools dnsutils ed git imagemagick iputils-tracepath language-pack-en libbz2-dev libcurl4-openssl-dev libev-dev libevent-dev libglib2.0-dev libjpeg-dev libmagickwand-dev libmysqlclient-dev libncurses5-dev librdkafka-dev libreadline6-dev libssl-dev libuv-dev libxml2-dev libxslt-dev netcat-openbsd openjdk-7-jdk openjdk-7-jre-headless openssh-client openssh-server python python-dev socat stunnel syslinux tar telnet zip zlib1g-dev ruby2.4 ruby2.4-dev nginx libsqlite3-dev nodejs libpq-dev postgresql-9.6 awscli 2>/dev/null >/dev/null HEREDOC end def homedir_creations execute_script <<~HEREDOC curl -s -o /tmp/latest #{bucket}homedir_backups/latest tar -tvf /tmp/latest | tail sudo tar -xvf /tmp/latest -C /home/ sudo rm -f /tmp/latest HEREDOC end def user_creations execute_script <<~HEREDOC sudo sh -c 'curl -s #{bucket}etc_backups/latest | tar xvf - -C /' HEREDOC end def database_inits execute_script <<~HEREDOC sudo -u postgres createuser -e meroku sudo -u postgres createdb meroku #sudo -u postgres psql -c "ALTER ROLE meroku WITH PASSWORD '#{Meroku::Shared.secrets.meroku_secret}';" curl -s -o /tmp/latest #{bucket}db_backups/latest sudo -u postgres psql -f /tmp/latest sudo rm -f /tmp/latest sudo perl -pi -e "s#local.*all.*all.*peer#local all all md5#" /etc/postgresql/9.6/main/pg_hba.conf sudo service postgresql restart HEREDOC end def git_clone execute_script <<~HEREDOC cd ~ && git clone https://github.com/meroku/meroku cd ~ && git clone https://github.com/meroku/backend_api HEREDOC end def nginx_configs execute_script <<~HEREDOC sudo rm -f /etc/nginx/sites-enabled/* /etc/nginx/sites-available/* # Place vhost config for backend_api sudo cp ~/backend_api/config/etc_nginx_sites-enabled_default /etc/nginx/conf.d/backend_api.conf # Place vhost config template for end-user apps sudo mkdir /world_readable && sudo chmod 777 /world_readable sudo cp /home/ubuntu/meroku/data/etc_nginx_sites-enabled_template /world_readable sudo chmod a+r /world_readable/etc_nginx_sites-enabled_template # consumer apps nginx config folder sudo mkdir /owner_writable/ sudo chmod 777 /owner_writable/ sudo sh -c 'echo "include /owner_writable/*.conf;" > /etc/nginx/conf.d/include_owner_writable.conf' sudo curl -s -o /tmp/latest #{bucket}nginxconfs_backups/latest sudo tar -xvz -f /tmp/latest -C /owner_writable/ sudo chmod a+w /owner_writable/* # TODO fix this sudo rm -f /tmp/latest HEREDOC end def start_rails execute_script <<~HEREDOC cd ~/backend_api; sudo gem install bundler; NOKOGIRI_USE_SYSTEM_LIBRARIES=true bundle; cd ~/backend_api; SECRET=#{Meroku::Shared.secrets.meroku_secret} RAILS_ENV=production bundle exec rake db:migrate cd ~/backend_api; SECRET=#{Meroku::Shared.secrets.meroku_secret} SECRET_KEY_BASE=#{Meroku::Shared.secrets.meroku_secret} RAILS_ENV=production bundle exec unicorn -D -l unix:///home/ubuntu/backend_api/tmp/backend_api.sock -c config/unicorn.rb HEREDOC execute_script 'sudo /home/ubuntu/backend_api/script/start_user_apps' end end end