Manager Bot
3 years ago
parent
636434c30d
commit
910c826d83
8 changed files with 278 additions and 44 deletions
@ -0,0 +1,20 @@ |
||||
name = MJB-Backend-Nginx |
||||
abstract = Provision websites on nginx servers |
||||
author = Kaitlyn Parkhurst <symkat@symkat.com> |
||||
license = Perl_5 |
||||
copyright_holder = Kaitlyn Parkhurst |
||||
copyright_year = 2022 |
||||
version = 0.001 |
||||
|
||||
[@Basic] |
||||
|
||||
[Prereqs] |
||||
Moo = 0 |
||||
IPC::Run3 = 0 |
||||
Cwd = 0 |
||||
File::Path = 0 |
||||
Storable = 0 |
||||
Mojo::File = 0 |
||||
|
||||
[AutoPrereqs] |
||||
|
||||
@ -0,0 +1,42 @@ |
||||
package MJB::Backend::Nginx; |
||||
use Moo; |
||||
use MJB::Backend::Nginx::DomainConfig; |
||||
use Mojo::File qw( tempfile ); |
||||
|
||||
with 'MJB::Backend::Role::SystemCommand'; |
||||
|
||||
has servers => ( |
||||
is => 'ro', |
||||
default => sub { [ ] }, |
||||
); |
||||
|
||||
sub provision_website { |
||||
my ( $self, $domain, $ssl_domain ) = @_; |
||||
|
||||
$ssl_domain ||= $domain; |
||||
|
||||
my $config = MJB::Backend::Nginx::DomainConfig->new( |
||||
domain => $domain, |
||||
ssl_domain => $ssl_domain, |
||||
)->config; |
||||
|
||||
my $config_file = tempfile; |
||||
$config_file->spurt( $config ); |
||||
my $welcome_file = tempfile; |
||||
$welcome_file->spurt( "Your new blog is being setup... please reload soon." ); |
||||
|
||||
foreach my $server ( @{$self->servers} ) { |
||||
$self->system_command( [ 'scp', $config_file->to_string, $server . ":/etc/nginx/sites-enabled/" . $domain ] ); |
||||
$self->system_command( [ 'ssh', $server, 'mkdir -p /var/www/' . $domain . '/html' ] ); |
||||
$self->system_command( [ 'scp', $welcome_file->to_string, $server . "/var/www/" . $domain . "/html/index.html" ] ); |
||||
$self->system_command( [ 'ssh', $server, 'chown -R www-data:www-data /var/www/' . $domain ] ); |
||||
} |
||||
} |
||||
|
||||
sub deprovision_website { |
||||
|
||||
} |
||||
|
||||
|
||||
|
||||
1; |
||||
@ -0,0 +1,77 @@ |
||||
package MJB::Backend::Nginx::DomainConfig; |
||||
use Moo; |
||||
use Mojo::File; |
||||
|
||||
has domain => ( |
||||
is => 'ro', |
||||
); |
||||
|
||||
has ssl_domain => ( |
||||
is => 'ro', |
||||
); |
||||
|
||||
has template => ( |
||||
is => 'ro', |
||||
default => sub {return <<' EOF;' |
||||
server { |
||||
server_name {{ domain }}; |
||||
root /var/www/{{ domain }}/html; |
||||
index index.html; |
||||
|
||||
error_log /var/log/nginx/{{ domain }}.error.log warn; |
||||
access_log /var/log/nginx/{{ domain }}.access.log combined; |
||||
|
||||
listen 443 ssl; |
||||
ssl_certificate /etc/letsencrypt/live/{{ ssl_domain }}/fullchain.pem; |
||||
ssl_certificate_key /etc/letsencrypt/live/{{ ssl_domain }}/privkey.pem; |
||||
|
||||
ssl_session_cache shared:le_nginx_SSL:10m; |
||||
ssl_session_timeout 1440m; |
||||
ssl_session_tickets off; |
||||
|
||||
ssl_protocols TLSv1.2 TLSv1.3; |
||||
ssl_prefer_server_ciphers off; |
||||
|
||||
ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"; |
||||
|
||||
ssl_dhparam /etc/nginx/ssl-dhparams.pem; |
||||
|
||||
} |
||||
|
||||
server { |
||||
if ($host = {{ domain }}) { |
||||
return 301 https://$host$request_uri; |
||||
} |
||||
|
||||
listen 80; |
||||
server_name {{ domain }} |
||||
return 404; |
||||
} |
||||
EOF; |
||||
} |
||||
); |
||||
|
||||
has config => ( |
||||
is => 'lazy', |
||||
); |
||||
|
||||
sub _build_config { |
||||
my ( $self ) = @_; |
||||
|
||||
my $config = $self->template; |
||||
|
||||
# Fill in variables in the template. |
||||
my ( $domain, $ssl_domain ) = ( $self->domain, $self->ssl_domain ); |
||||
|
||||
s/\{\{ domain \}\}/$domain/g, |
||||
s/\{\{ ssl_domain \}\}/$ssl_domain/g |
||||
for $config; |
||||
|
||||
# Trim the excess whitespace |
||||
$config =~ s/^ {8}//gm; |
||||
|
||||
|
||||
return $config; |
||||
} |
||||
|
||||
1; |
||||
@ -0,0 +1,20 @@ |
||||
name = MJB-Backend-Role-SystemCommand |
||||
abstract = Provide system_command as a role |
||||
author = Kaitlyn Parkhurst <symkat@symkat.com> |
||||
license = Perl_5 |
||||
copyright_holder = Kaitlyn Parkhurst |
||||
copyright_year = 2022 |
||||
version = 0.001 |
||||
|
||||
[@Basic] |
||||
|
||||
[Prereqs] |
||||
Moo = 0 |
||||
IPC::Run3 = 0 |
||||
Cwd = 0 |
||||
File::Path = 0 |
||||
Storable = 0 |
||||
Mojo::File = 0 |
||||
|
||||
[AutoPrereqs] |
||||
|
||||
@ -0,0 +1,92 @@ |
||||
package MJB::Backend::Role::SystemCommand; |
||||
use Moo::Role; |
||||
use Storable qw( dclone ); |
||||
use IPC::Run3 qw( run3 ); |
||||
|
||||
sub system_command { |
||||
my ( $self, $cmd, $settings ) = @_; |
||||
|
||||
$settings ||= {}; |
||||
|
||||
# Change the directory, if requested. |
||||
if ( $settings->{chdir} ) { |
||||
# Throw an error if that directory doesn't exist. |
||||
die "Error: directory " . $settings->{chdir} . "doesn't exist." |
||||
unless -d $settings->{chdir}; |
||||
|
||||
# Change to that directory, or die with error. |
||||
chdir $settings->{chdir} |
||||
or die "Failed to chdir to " . $settings->{chdir} . ": $!"; |
||||
|
||||
$settings->{return_chdir} = getcwd(); |
||||
} |
||||
|
||||
# Mask values we don't want exposed in the logs. |
||||
my $masked_cmd = dclone($cmd); |
||||
if ( ref $settings->{mask} eq 'HASH' ) { |
||||
foreach my $key ( keys %{$settings->{mask}} ) { |
||||
my $value = $settings->{mask}{$key}; |
||||
$masked_cmd = [ map { s/\Q$key\E/$value/g; $_ } @{$masked_cmd} ]; |
||||
} |
||||
} |
||||
|
||||
# Log the lines |
||||
my ( $out, $err ); |
||||
my $ret = run3( $cmd, \undef, sub { |
||||
chomp $_; |
||||
# Mask values we don't want exposed in the logs. |
||||
if ( ref $settings->{mask} eq 'HASH' ) { |
||||
foreach my $key ( keys %{$settings->{mask}} ) { |
||||
my $value = $settings->{mask}{$key}; |
||||
s/\Q$key\E/$value/g; |
||||
} |
||||
} |
||||
$out .= "$_\n"; |
||||
}, sub { |
||||
chomp $_; |
||||
# Mask values we don't want exposed in the logs. |
||||
if ( ref $settings->{mask} eq 'HASH' ) { |
||||
foreach my $key ( keys %{$settings->{mask}} ) { |
||||
my $value = $settings->{mask}{$key}; |
||||
s/\Q$key\E/$value/g; |
||||
} |
||||
} |
||||
$err .= "$_\n"; |
||||
}); |
||||
|
||||
# Check stderr for errors to fail on. |
||||
if ( $settings->{fail_on_stderr} ) { |
||||
my @tests = @{$settings->{fail_on_stderr}}; |
||||
|
||||
while ( my $regex = shift @tests ) { |
||||
my $reason = shift @tests; |
||||
|
||||
if ( $err =~ /$regex/ ) { |
||||
die $reason; |
||||
} |
||||
} |
||||
} |
||||
|
||||
# Return to the directory we started in if we chdir'ed. |
||||
if ( $settings->{return_chdir} ) { |
||||
chdir $settings->{return_chdir} |
||||
or die "Failed to chdir to " . $settings->{chdir} . ": $!"; |
||||
} |
||||
|
||||
if ( $ENV{MJB_DEBUG} ) { |
||||
require Data::Dumper; |
||||
print Data::Dumper::Dumper({ |
||||
stdout => $out, |
||||
stderr => $err, |
||||
exitno => $ret, |
||||
}); |
||||
} |
||||
|
||||
return { |
||||
stdout => $out, |
||||
stderr => $err, |
||||
exitno => $ret, |
||||
}; |
||||
} |
||||
|
||||
1; |
||||
Loading…
Reference in new issue