2 # You can have redis on a different box
3 RAILS_ENV: 'production'
6 # this gives us very good cache coverage, 96 -> 99
7 # in practice it is 1-2% perf improvement
8 RUBY_GLOBAL_METHOD_CACHE_SIZE: 131072
10 DISCOURSE_DB_SOCKET: /var/run/postgresql
16 # SSH key is required for remote access into the container
19 home: /var/www/discourse
23 # see: https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588
25 filename: /usr/local/etc/ImageMagick-6/policy.xml
29 <policy domain="coder" rights="none" pattern="EPHEMERAL" />
30 <policy domain="coder" rights="none" pattern="URL" />
31 <policy domain="coder" rights="none" pattern="HTTPS" />
32 <policy domain="coder" rights="none" pattern="MVG" />
33 <policy domain="coder" rights="none" pattern="MSL" />
34 <policy domain="coder" rights="none" pattern="TEXT" />
35 <policy domain="coder" rights="none" pattern="SHOW" />
36 <policy domain="coder" rights="none" pattern="WIN" />
37 <policy domain="coder" rights="none" pattern="PLT" />
39 - exec: /usr/local/bin/ruby -e 'if ENV["DISCOURSE_SMTP_ADDRESS"] == "smtp.example.com"; puts "Aborting! Mail is not configured!"; exit 1; end'
40 - exec: /usr/local/bin/ruby -e 'if ENV["DISCOURSE_HOSTNAME"] == "discourse.example.com"; puts "Aborting! Domain is not configured!"; exit 1; end'
41 - exec: chown -R discourse /home/discourse
43 path: /etc/runit/1.d/copy-env
48 conf=/var/www/discourse/config/discourse.conf
50 # find DISCOURSE_ env vars, strip the leader, lowercase the key
51 /usr/local/bin/ruby -e 'ENV.each{|k,v| puts "#{$1.downcase} = #{v}" if k =~ /^DISCOURSE_(.*)/}' > $conf
53 path: /etc/runit/1.d/fix-log-permissions
57 # TODO this should be moved into the base image
58 chown -fR www-data:adm /var/log/nginx
59 chown -f syslog:syslog /var/log/syslog*
60 chown -f syslog:syslog /var/log/auth.log*
61 chown -f syslog:adm /var/log/kern.log*
64 path: /etc/runit/1.d/enable-brotli
68 [ ! -z "$COMPRESS_BROTLI" ] && sed -i "s/. brotli/ brotli/" /etc/nginx/conf.d/discourse.conf || sed -i "s/. brotli/# brotli/" /etc/nginx/conf.d/discourse.conf
71 path: /etc/runit/1.d/ensure-web-nginx-read
75 mkdir -p /var/log/nginx
76 chgrp -R www-data /var/log/nginx
77 chgrp www-data /var/log/nginx
80 path: /etc/service/unicorn/run
88 chown -R discourse:www-data /shared/log/rails
89 LD_PRELOAD=/usr/lib/libjemalloc.so.1 HOME=/home/discourse USER=discourse exec chpst -u discourse:www-data -U discourse:www-data bundle exec config/unicorn_launcher -E production -c config/unicorn.conf.rb
92 path: /etc/service/nginx/run
100 path: /etc/runit/3.d/01-nginx
107 path: /etc/runit/3.d/02-unicorn
119 - git remote set-branches --add origin master
121 - git fetch origin $version
122 - git checkout $version
124 - mkdir -p tmp/sockets
126 - mkdir -p /shared/log/rails
127 - bash -c "touch -a /shared/log/rails/{production,production_errors,unicorn.stdout,unicorn.stderr}.log"
128 - bash -c "ln -s /shared/log/rails/{production,production_errors,unicorn.stdout,unicorn.stderr}.log $home/log"
129 - bash -c "mkdir -p /shared/{uploads,backups}"
130 - bash -c "ln -s /shared/{uploads,backups} $home/public"
131 - chown -R discourse:www-data /shared/log/rails /shared/uploads /shared/backups
135 - "cp $home/config/nginx.sample.conf /etc/nginx/conf.d/discourse.conf"
136 - "rm /etc/nginx/sites-enabled/default"
137 - "mkdir -p /var/nginx/cache"
140 filename: /etc/nginx/nginx.conf
141 from: pid /run/nginx.pid;
145 filename: "/etc/nginx/conf.d/discourse.conf"
146 from: /upstream[^\}]+\}/m
147 to: "upstream discourse {
148 server 127.0.0.1:3000;
152 filename: "/etc/nginx/conf.d/discourse.conf"
153 from: /server_name.+$/
157 filename: "/etc/nginx/conf.d/discourse.conf"
158 from: /client_max_body_size.+$/
159 to: client_max_body_size $upload_size ;
162 cmd: echo "done configuring web"
169 # ensure we are on latest bundler
171 - chown -R discourse $home
177 - su discourse -c 'bundle install --deployment --verbose --without test --without development'
178 - su discourse -c 'bundle exec rake db:migrate'
179 - su discourse -c 'bundle exec rake assets:precompile'
182 path: /usr/local/bin/discourse
186 (cd /var/www/discourse && RAILS_ENV=production sudo -H -E -u discourse bundle exec script/discourse "$@")
189 path: /usr/local/bin/rails
193 # If they requested a console, load pry instead
194 if [ "$*" == "c" -o "$*" == "console" ]
196 (cd /var/www/discourse && RAILS_ENV=production sudo -H -E -u discourse bundle exec pry -r ./config/environment)
198 (cd /var/www/discourse && RAILS_ENV=production sudo -H -E -u discourse bundle exec script/rails "$@")
202 path: /usr/local/bin/rake
206 (cd /var/www/discourse && RAILS_ENV=production sudo -H -E -u discourse bundle exec bin/rake "$@")
209 path: /etc/update-motd.d/10-web
214 echo Use: rails, rake or discourse to execute commands in production
218 path: /etc/logrotate.d/rails
220 /shared/log/rails/*.log
235 path: /etc/logrotate.d/nginx
237 /var/log/nginx/*.log {
244 create 0640 www-data www-data
251 # move state out of the container this fancy is done to support rapid rebuilds of containers,
252 # we store anacron and logrotate state outside the container to ensure its maintained across builds
253 # later move this snipped into an intialization script
254 # we also ensure all the symlinks we need to /shared are in place in the correct structure
255 # this allows us to bootstrap on one machine and then run on another
257 path: /etc/runit/1.d/00-ensure-links
261 if [[ ! -L /var/lib/logrotate ]]; then
262 rm -fr /var/lib/logrotate
263 mkdir -p /shared/state/logrotate
264 ln -s /shared/state/logrotate /var/lib/logrotate
266 if [[ ! -L /var/spool/anacron ]]; then
267 rm -fr /var/spool/anacron
268 mkdir -p /shared/state/anacron-spool
269 ln -s /shared/state/anacron-spool /var/spool/anacron
271 if [[ ! -d /shared/log/rails ]]; then
272 mkdir -p /shared/log/rails
273 chown -R discourse:www-data /shared/log/rails
275 if [[ ! -d /shared/uploads ]]; then
276 mkdir -p /shared/uploads
277 chown -R discourse:www-data /shared/uploads
279 if [[ ! -d /shared/backups ]]; then
280 mkdir -p /shared/backups
281 chown -R discourse:www-data /shared/backups
284 # change login directory to Discourse home
286 path: /root/.bash_profile