Site-wide Configuration Management for Debian GNU/Linux

apt-get install nginx reprepro

useradd -d /home/repo -m -G www-data -s /usr/bin/zsh repo
mkdir -p /home/repo/public/debian/{conf,dists,incoming,indices,logs,pool,project,tmp}
chown -R repo:www-data /home/repo/public

apt-get install rng-tools gnupg

rngd -r /dev/urandom

/home/repo/.gnupg/secring.gpg
------------------------
sec   2048R/013CFE9D 2011-10-12
uid                  Nicole Reid (Debian repository signing key for Dashie) <nreid@engauge.com>
ssb   2048R/42AC4BBC 2011-10-12

gpg --armor --export 013CFE9D --output > /home/repo/public/debian/dashie.gpg.key

Origin: Nicole Reid
Label: Dashie
Codename: squeeze
Architectures: i386 amd64 source
Components: main extra
Description: Engauge.com Debian Squeeze configurations and packaged software.
SignWith: 013CFE9D

verbose
basedir /home/repo/public/debian
ask-passphrase

server {
	listen 80;
	server_name apt.engauge.com;
	rewrite ^ https://apt.engauge.com$request_uri? permanent;
}

server {
	listen [::]:443 default ssl ipv6only=on;
	listen 443 default ssl;

	server_name apt.engauge.com;

	ssl_certificate /etc/ssl/certs/wildcard.engauge.com.crt;
	ssl_certificate_key /etc/ssl/private/wildcard.engauge.com.key;

	access_log  /var/log/nginx/apt.access.log;
	autoindex on;

	location / {
		root   /home/repo/public;
		index  index.html;
	}

	location ~ /(.*)/conf {
		deny all;
	}

	location ~ /(.*)/db {
		deny all;
	}
}

ln -s /etc/nginx/sites-available/apt.engauge.com /etc/nginx/sites-enabled/apt.engauge.com
service nginx reload

apt-get install config-package-dev build-essential cdbs debhelper wdiff debian-el \
devscripts devscripts-el dh-make dpatch dpkg-awk dpkg-dev dpkg-dev-el equivs \
fakeroot lintian quilt sbuild

mkdir -p dashie-openssh-server-config/debian

Source: dashie-openssh-server-config
Section: admin
Priority: extra
Maintainer: Nicole Reid <nreid@engauge.com>
Build-Depends: openssh-server, cdbs (>= 0.4.23-1.1), debhelper (>= 6), config-package-dev (>= 4.5~)
Standards-Version: 3.9.2

Package: dashie-openssh-server-config
Architecture: all
Priority: extra
Depends: openssh-server, ${misc:Depends}
Provides: ${diverted-files}
Conflicts: ${diverted-files}
Description: OpenSSH server site configuration
 This package installs Engauge site configuration for OpenSSH
 server, a slightly more restricted configuration than stock.
 /!\ Will prevent remote root logins. Make sure you have /!\
 /!\ console access or a user that can su!               /!\

#!/usr/bin/make -f

DEB_DIVERT_EXTENSION = .dashie
DEB_TRANSFORM_FILES_dashie-openssh-server-config += \
	/etc/ssh/sshd_config.dashie
include /usr/share/cdbs/1/rules/debhelper.mk
include /usr/share/cdbs/1/rules/config-package.mk

#!/usr/bin/perl -0p
s/^PermitRootLogin.*$/PermitRootLogin no/m or die;
s/^Protocol.*$/Protocol 2/m or die;
s/^HostbasedAuthentication.*$/HostbasedAuthentication no/m or die;
s/^PermitEmptyPasswords.*$/PermitEmptyPasswords no/m or die;

#! /bin/sh
set -e

#DEBHELPER#

case "$1" in
	configure)
		service ssh restart
	;;
	*)
		echo "$0: didn't understand being called with \`$1'" 1>&2
		exit
	;;
esac

dashie-openssh-server-config (1.1) unstable; urgency=low

  * Include postinst to restart OpenSSHd after installation.

 -- Nicole Reid <nreid@engauge.com>  Tue, 29 Nov 2011 10:17:42 -0500

dashie-openssh-server-config (1.0) unstable; urgency=low

  * Initial release.

 -- Nicole Reid <nreid@engauge.com>  Fri, 07 Oct 2011 11:37:03 -0400

6

Linux server site configuration package

Author: Nicole Reid <nreid@engauge.com>

Copyright © 2011 Nicole Reid <nreid@engauge.com>

Permission is hereby granted, free of charge, to any person obtaining
a copy of this software and associated documentation files (the
"Software"), to deal in the Software without restriction, including
without limitation the rights to use, copy, modify, merge, publish,
distribute, sublicense, and/or sell copies of the Software, and to
permit persons to whom the Software is furnished to do so, subject to
the following conditions:

The above copyright notice and this permission notice shall be
included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Source: dashie-zsh-config
Section: admin
Priority: extra
Maintainer: Nicole Reid <nreid@engauge.com>
Build-Depends: zsh, cdbs (>= 0.4.23-1.1), debhelper (>= 6), config-package-dev (>= 4.5~)
Standards-Version: 3.9.2

Package: dashie-zsh-config
Architecture: all
Priority: extra
Depends: zsh, ${misc:Depends}
Provides: ${diverted-files}
Conflicts: ${diverted-files}
Description: ZSH site configuration
 This package installs Engauge site configuration for ZSH, Nicole's
 favourite shell. This configuration provides some nice defaults for
 anybody who cares to use ZSH.

files/* /

#!/usr/bin/make -f

DEB_DIVERT_EXTENSION = .dashie
DEB_DIVERT_FILES_dashie-zsh-config += \
	/etc/zsh/zshrc.dashie

include /usr/share/cdbs/1/rules/debhelper.mk
include /usr/share/cdbs/1/rules/config-package.mk

/home/repo/dashie/squeeze/dashie-zsh-config/files
├── etc
│   ├── skel
│   │   └── .zshrc
│   └── zsh
│       └── zshrc.dashie
└── usr
    └── share
        └── zsh
            └── functions
                └── Prompts
                    └── prompt_nicole_setup

8 directories, 2 files

export DEBEMAIL="nreid@engauge.com"
export DEBFULLNAME="Nicole Reid"
dch -i -m 'Hot new stuff for this version'
debuild -us -uc

reprepro --basedir ~/public/debian -C extra includedeb squeeze ~/dashie/squeeze/dashie-openssh-server-config_1.1_all.deb

echo 'deb https://apt.engauge.com/debian squeeze main extra
deb-src https://apt.engauge.com/debian squeeze main extra' >> /etc/apt/sources.list.d/dashie.list

apt-get install apt-transport-https

wget https://apt.engauge.com/dashie.gpg.key -O - | apt-key add -

p   apache-activemq                - Apache ActiveMQ message broker.          
p   dashie-atlhttp1-role           - atlhttp1 role configuration              
p   dashie-atlhttpdev1-role        - atlhttpdev1 role configuration           
p   dashie-atljenkins1-role        - atljenkins1 role configuration           
p   dashie-atlsql1-role            - atlsql1 role configuration               
p   dashie-atlsqldev1-role         - atlhttp1 role configuration              
p   dashie-kerberos-config         - Kerberos 5 site configuration            
p   dashie-ldap-config             - OpenLDAP site configuration              
p   dashie-mpt-status-config       - mpt-status site configuration            
p   dashie-nss-config              - Name Service Switch site configuration   
i   dashie-ntp-config              - NTP site configuration                   
i   dashie-openssh-server-config   - OpenSSH server site configuration        
p   dashie-pam-config              - PAM site configuration                   
p   dashie-samba-config            - Samba server site configuration          
p   dashie-sudo-config             - Sudo site configuration                  
i   dashie-vim-config              - Vim site configuration                   
p   dashie-wildcard.dev.engauge.co - *.dev.engauge.com SSL certificate        
p   dashie-wildcard.engauge.com-ce - *.engauge.com SSL certificate            
i   dashie-zsh-config              - ZSH site configuration   
p   gitorious                      - Gitorious git repository manager
p   ruby-enterprise                - Ruby Enterprise Edition.   

export DEBEMAIL="nreid@engauge.com"
export DEBFULLNAME="Nicole Reid"
alias reprepro="reprepro --basedir ~/public/debian"

DEBUILD_DPKG_BUILDPACKAGE_OPTS="-us -uc"

eval `keychain --eval --agents gpg 013CFE9D`