Chef scripts for installing full VPS server

• Project ID:

  789749

• Project Type:

  Fixed

• Budget:

  $30-$250 USD
  

Project Description:

I am looking for somebody who can write a couple of chef-solo scripts (opscode chef) to install a VPS server to do the following:

1) change ssh port to 8022
2) configure ssh to only allow logins based on certificates
3) nginx with passenger, enterprise ruby, tomcat and php support for multiple domains
4) imap mail with clamAv and roundcube webmail for multiple users in multiple domains
5) webdav and scp access (latter using jail for some users)
6) certificates for users to allow 1-to-1 access to things like phpmyadmin, roundcube, webdav, ssh etc
7) backup scheme
8) regular updates
9) support for both MySql and Postgres
10) hardened using faillog (amongst others, please advise)
11) different user roles
12) provide easy way to manage certificates for different users and roles

As I consider you an expert I expect you - as part of delivery - to comment on the choices above and suggest better alternative where necessary/possible.

I require transfer of full copyright of the script code. If you don't agree to this then please refrain from bidding.

Additional Project Description:

09/12/2010 at 18:33 EDT:
In the above, certificates should be read as: public/private keys. Sorry for the confusion ;-)

The scripts should be chef-solo scripts (aka Cookbooks), see http://wiki.opscode.com/display/chef/Chef+Solo

A script should contain a rationale ('why is it working like it is?'). This can be a short text or a link to some howto explaining a smart setup.

The VPS server is used for the following:
1) www server
Multiple domains (about 10), some php, some ruby (on rails), some tomcat java. Should be possible to install either a self signed or a real certificate
2) email
Sending, receiving and providing user access through (secure) IMAP and Roundcube over https. Involves users 1) members of my family + {webmaster, postmaster, *} of each domain
3) storage
A couple of users get server space accessible through scp and webdav over https.

* The server has Ubuntu 8.04 LTS installed, which cannot be upgraded due to provider-specific tools.
* Using another installation to compile packages is ok and need not be scripted (don't want dev tools on VPS).
* The VPS is low on resources. This is the reason I want script-based configuration and not web-based.
* Attention must be given to security: automatic (virus) updates, faillog (or alternative), firewall, openSSH, ... belong to the basic requirements. Advice regarding this is highly appreciated.
* A backup scheme is also important
* preferably automated tests are part of the delivery

PROCESS
========
Before coding I want to see (and approve) the rationale of the scripts, see above.

The project must be finished within 2 weeks. I will take max 1 week to do the testing.

Final payment occurs when the formal transfer of copyright is in my possession.

Skills required:

Linux, Script Install