tusd/.infra/Freyfile.hcl

global {
  appname = "tusd"
  approot = "/srv/tusd"
  ssh {
    key_dir = "./ssh"
  }
  ansiblecfg {
    privilege_escalation {
      become = true
    }
    defaults {
      host_key_checking = false
      ansible_managed = "Ansible managed"
    }
    ssh_connection {
      pipelining = true
    }
  }
}

infra provider aws {
  access_key = "${var.FREY_AWS_ACCESS_KEY}"
  region     = "us-east-1"
  secret_key = "${var.FREY_AWS_SECRET_KEY}"
}

infra variable {
  amis {
    type = "map"
    default {
      "us-east-1" = "ami-9bce7af0"
    }
  }
  region {
    default = "us-east-1"
  }
}

infra output {
  public_address {
    value = "${aws_instance.tusd.0.public_dns}"
  }
  public_addresses {
    value = "${join("\n", aws_instance.tusd.*.public_dns)}"
  }
  endpoint {
    value = "http://${aws_route53_record.www.name}:80/"
  }
}

infra resource aws_key_pair "infra-tusd-main" {
  key_name   = "infra-tusd-main"
  public_key = "${file("{{{config.global.ssh.publickey_file}}}")}"
}

infra resource aws_instance tusd {
  ami             = "${lookup(var.amis, var.region)}"
  instance_type   = "c3.large"
  key_name        = "${aws_key_pair.infra-tusd-main.key_name}"

  security_groups = ["fw-tusd-main"]
  connection {
    key_file = "{{{config.global.ssh.privatekey_file}}}"
    user     = "{{{config.global.ssh.user}}}"
  }
  tags {
    "Name" = "${var.FREY_DOMAIN}"
  }
}

infra resource "aws_route53_record" www {
  name    = "${var.FREY_DOMAIN}"
  records = ["${aws_instance.tusd.public_dns}"]
  ttl     = "300"
  type    = "CNAME"
  zone_id = "${var.FREY_AWS_ZONE_ID}"
}

infra resource aws_security_group "fw-tusd-main" {
  description = "Infra tusd"
  name        = "fw-tusd-main"
  ingress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = 8080
    protocol    = "tcp"
    to_port     = 8080
  }
  ingress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = 80
    protocol    = "tcp"
    to_port     = 80
  }
  ingress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = 443
    protocol    = "tcp"
    to_port     = 443
  }
  ingress {
    cidr_blocks = ["0.0.0.0/0"]
    from_port   = 22
    protocol    = "tcp"
    to_port     = 22
  }
}

install {
  playbooks {
    hosts = "tusd"
    name  = "Install tusd"
    roles {
      role        = "{{{init.paths.roles_dir}}}/apt/1.4.0"
      apt_install = [
        "apg",
        "build-essential",
        "curl",
        "git-core",
        "htop",
        "iotop",
        "libpcre3",
        "logtail",
        "mlocate",
        "mtr",
        "psmisc",
        "telnet",
        "vim",
        "wget"
      ]
    }
    roles {
      role = "{{{init.paths.roles_dir}}}/unattended-upgrades/1.3.1"
    }
    tasks {
      lineinfile = "dest=/home/{{{config.global.ssh.user}}}/.bashrc line=\"alias wtf='sudo tail -f /var/log/*{log,err} /var/log/{dmesg,messages,*{,/*}{log,err}}'\" owner={{{config.global.ssh.user}}} group={{{config.global.ssh.user}}} mode=0644 backup=yes"
      name       = "Common | Add convenience shortcut wtf"
    }
    tasks {
      lineinfile = "dest=/home/{{{config.global.ssh.user}}}/.bashrc line=\"cd {{{config.global.approot}}}/current || true\" owner={{{config.global.ssh.user}}} group={{{config.global.ssh.user}}} mode=0644 backup=yes"
      name       = "Common | Install login"
    }
    tasks {
      name = "Common | Set motd"
      copy = "content='Welcome to {{lookup('env', 'FREY_DOMAIN')}}' dest=/etc/motd owner=root group=root mode=0644 backup=yes"
    }
    tasks {
      name   = "Common | Set timezone variables"
      copy   = "content='Etc/UTC' dest=/etc/timezone owner=root group=root mode=0644 backup=yes"
      notify = ["Common | Update timezone"]
    }
    handlers {
      name    = "Common | Update timezone"
      command = "dpkg-reconfigure --frontend noninteractive tzdata"
    }
  }
}

setup {
  playbooks {
    hosts = "tusd"
    name  = "Setup tusd"
    roles {
      role                  = "{{{init.paths.roles_dir}}}/upstart/1.0.0"
      upstart_command       = "./tusd -port=8080 -dir=/mnt/tusd-data -max-size=1000000000 -behind-proxy"
      upstart_description   = "tusd server"
      upstart_name          = "{{{config.global.appname}}}"
      upstart_pidfile_path  = "{{{config.global.approot}}}/shared/{{{config.global.appname}}}.pid"
      upstart_respawn       = true
      upstart_respawn_limit = true
      upstart_runtime_root  = "{{{config.global.approot}}}/current/tusd_linux_amd64"
      upstart_user          = "www-data"
    }
    roles {
      role = "{{{init.paths.roles_dir}}}/rsyslog/3.1.1"
      rsyslog_rsyslog_d_files "49-tusd" {
        directives = ["& stop"]
        rules {
          rule    = ":programname, startswith, \"{{{config.global.appname}}}\""
          logpath = "{{{config.global.approot}}}/shared/logs/{{{config.global.appname}}}.log"
        }
      }
    }
    roles {
      role = "{{{init.paths.roles_dir}}}/fqdn/1.2.1"
    }
    tasks {
      file = "path=/mnt/tusd-data state=directory owner=www-data group=ubuntu mode=ug+rwX,o= recurse=yes"
      name = "tusd | Create tusd data dir"
    }
    tasks {
      name = "tusd | Create purger crontab (clean up >24h (1400minutes) files)"
      cron {
        name         = "purger"
        special_time = "hourly"
        job          = "find /mnt/tusd-data -type f -mmin +1440 -print0 | xargs -n 200 -r -0 rm || true"
      }
    }
  }

  playbooks {
    hosts = "tusd"
    name  = "Setup nginx"
    tasks {
      name           = "nginx | Add nginx PPA"
      apt_repository = "repo='ppa:ondrej/nginx'"
    }
    tasks {
      name = "nginx | Create public www directory"
      file = "path=/mnt/nginx-www state=directory owner=www-data group=ubuntu mode=ug+rwX,o= recurse=yes"
    }
  }
}

deploy {
  playbooks {
    hosts = "tusd"
    name  = "Deploy tusd"
    roles {
      role                   = "{{{init.paths.roles_dir}}}/deploy/2.0.0"
      ansistrano_deploy_from = "./files/tusd_linux_amd64.tar.gz"
      ansistrano_deploy_to   = "{{{config.global.approot}}}"
      ansistrano_deploy_via  = "copy_unarchive"
      ansistrano_group       = "ubuntu"
    }
    tasks {
      file = "path=/srv/tusd/shared/logs state=directory owner=syslog group=ubuntu mode=ug+rwX,o= recurse=yes"
      name = "tusd | Create and chown shared log dir"
    }
    tasks {
      name = "tusd | Set file attributes"
      file = "path={{{config.global.approot}}}/current/tusd_linux_amd64/tusd mode=0755 owner=www-data group=www-data"
    }
  }
  playbooks {
    hosts = "tusd"
    name  = "Deploy nginx"
    roles {
      role        = "{{{init.paths.roles_dir}}}/apt/1.4.0"
      apt_install = ["nginx-light"]
    }
    tasks {
      name = "nginx | Create nginx configuration"
      copy = "src=./files/nginx.conf dest=/etc/nginx/sites-enabled/default"
    }
    tasks {
      name    = "nginx | Create DH parameters"
      command = "openssl dhparam -out /etc/nginx/dhparams.pem 2048 creates=/etc/nginx/dhparams.pem"
    }
    tasks {
      name = "nginx | Start service"
      service = "name=nginx state=started"
    }
  }
}

restart {
  playbooks {
    hosts = "tusd"
    name  = "Restart tusd"
    tasks {
      action = "service name=tusd state=restarted"
      name   = "tusd | Restart"
    }
  }
  playbooks {
    hosts = "tusd"
    name  = "Restart nginx"
    tasks {
      name    = "nginx | Restart"
      service = "name=nginx state=restarted"
    }
  }
}