Mark Dickson ideaoforder

Basic Server Setup

NOTE: The default firewall setup uses ufw, so we'll need OpenSSH, HTTP, HTTPS, 6379 (redis), and possibly something for our MySQL connection): https://www.digitalocean.com/community/tutorials/ufw-essentials-common-firewall-rules-and-commands

I like binstubs, since we don't have gemsets in rbenv https://github.com/ianheggie/rbenv-binstubs

In each app's directory, just do this once:

$ bundle install --binstubs .bundle/bin
$ rbenv rehash

cd ~/.rbenv/plugins/ruby-build
git pull
rbenv install 2.2.2

locate mysql_config

gem install mysql2 -- --with-mysql-config=/usr/local/MYSQL_PATH/bin/mysql_config

sudo nano /etc/postfix/main.cf

Add this to bottom of file

# Gmail SMTP
relayhost=[smtp.gmail.com]:587
smtp_tls_loglevel=1
smtp_tls_security_level=encrypt
smtp_sasl_auth_enable=yes

	Using Mac's XML-RPC app
	https://itunes.apple.com/us/app/xml-rpc-client/id424424203?mt=12

	Get your session key
	Endpoint URI: https://www.yourstore.com/index.php/api/xmlrpc/
	Method: login
	Params: 'username', 'password'

	Using that session key, you can get a product's stock, for instance
	Endpoint URI: https://www.yourstore.com/index.php/api/xmlrpc/

	First and foremost: DON'T USE THE AMAZON MASTER KEY/SECRET
	Use an IAM USER for each site/repo, with its own creds, so you can reset them easily and limit access

	Secondly, use .env/secrets.yml--either using Heroku/Foreman, dot-env (Rails 3), or secrets.yml (Rails 4)
	https://devcenter.heroku.com/articles/config-vars

	Last thing, you'll need to scrub sensitive data out of your app's history (even if you reset/deleted those passwords, best to remove them from the history as well--you want to seem like a pro, don't you?)

	https://help.github.com/articles/remove-sensitive-data/
	https://rtyley.github.io/bfg-repo-cleaner/

	Install XCode tools
	https://developer.apple.com/downloads/index.action

	OR OS X GCC
	https://github.com/kennethreitz/osx-gcc-installer

	Install Homebrew
	ruby -e "$(curl -fsSL https://raw.github.com/Homebrew/homebrew/go/install)"
	brew install git

	openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

	http://support.godaddy.com/help/article/3601/generating-a-certificate-signing-request-nginx
	http://support.godaddy.com/help/article/4976/rekeying-an-ssl-certificate

	# Be sure to remember to chain them!
	cat gd_bundle-g2-g1.crt >> yourdomain.crt

	# Move 'em
	sudo mv yourdomain.crt /etc/ssl/certs/yourdomain.crt

	Fonts installed by this method will be accessible to all users of the system.
	(1) Copy fonts to be installed in /usr/share/fonts ( create a subdirectory in the directory to store the .ttf files)
	(2) Type: fc-cache -fv

	Grab the barcode font here:
	http://www.free-barcode-font.com/