#Python Git Post Receive Hook This a skeliton git post receive hook using Python, Flask and deployed using uWSGI on Nginx.

###Setup

#Install needed software
sudo aptitude install build-essential python python-pip python-dev supervisor
sudo pip install Flask
sudo pip install http://projects.unbit.it/downloads/uwsgi-lts.tar.gz
sudo pip install simplejson


#Setup Logging directories
sudo mkdir /var/log/uwsgi
sudo chmod 755 /var/log/uwsgi

##Configuration ###uWSGI We are using githook.ini to configure uWSGI's behaviour.

###Nginx This configuration is part of the server block. Current configuration is in

/etc/nginx/sites-enabled/usclug.deterlab.net.conf

server {
        
        #
        # Actual server configuration
        #

        location = /git { rewrite ^ /git/; }
        location /git { try_files $uri @git; }
        location @git {
                include uwsgi_params;
                uwsgi_param SCRIPT_NAME /git;
                uwsgi_modifier1 30;
                uwsgi_pass unix:/tmp/uwsgi-githook.sock;
        }
}

###Supervisor Configuration Supervisor is an application used to monitor and control your Flask app. Your webserver, for example, is setup to start after a machine crash or reboot. Supervisor will take care to restarting uWSGI and in turn your Flask app.

In debian-based systems, you install application configuration in the /etc/supervisor/conf.d directory. The configuration for our githook app would look like:

[program:githook]
command=/usr/local/bin/uwsgi --ini /opt/git_hook/githook.ini
directory=/opt/git_hook
numprocs=1
autostart=true
autorestart=true
stdout_logfile=/var/log/supervisor/githook-supervisord.log
redirect_stderr=true
stopsignal=INT

###One Time Configuration To run scripts triggered by the GitHub post-receive hook, the www-data user needs to be setup to properly connect to remote servers and run scripts. The process is as follows:

#Turn off www-data apps
sudo supervisor stop
sudo service nginx stop

#Change $HOME
sudo usermod -d /home/www www-data

#Generate SSH keys
sudo su - www-data -s /bin/bash -c 'ssh-keygen -t rsa -b 4096 -C "www-data@$(hostname -f)"'
echo "**** Add Key to GitHub Settings ****"
sudo cat /home/www/.ssh/id_rsa.pub

#Setup SSH
echo "Host *" | sudo tee /home/www/.ssh/config
echo -e "\tCompression yes" | sudo tee -a /home/www/.ssh/config
echo -e "\tCompressionLevel 7" | sudo tee -a /home/www/.ssh/config
echo -e "\tStrictHostKeyChecking no" | sudo tee -a /home/www/.ssh/config
sudo chown www-data:www-data /home/www/.ssh/config

#Clone the Website
sudo rm -rf /home/www/usclug.deterlab.net/public_html/*
sudo su - www-data -s /bin/bash -c 'git clone [email protected]:usclug/linux.usc.edu.git /home/www/usclug.deterlab.net/public_html'

cd /home/www/usclug.deterlab.net/public_html
sudo su - www-data -s /bin/bash -c 'cd /home/www/usclug.deterlab.net/public_html && git checkout -b gh-pages remotes/origin/gh-pages'

sudo service nginx start
sudo service supervisor start

##Running

sudo service nginx restart
sudo service supervisor stop
sudo service supervisor start