Setting Thin up behind Nginx & with Lets Encrypt certificates

Part of Booko’s infrastructure includes a Sinatra application served by Thin. This application takes CSV / XML / JSONL files containing product pricing data, loads it into PostgreSQL and presents it via an API. Thin is perfectly capable of being internet facing, but I have a preference for reverse proxying it behind Nginx. There are …

Update: Webpacker v5, -= Coffeescript

Today I’ve updated webpacker to v5 and have started to remove Coffeescript. To remove Coffeescript, remove it from your Gemfile, then find app -iname ‘*.coffee’ and convert each file back into Javascript. You can plonk the coffeescript into the Try CoffeeScript web app. Once you’ve done and are moving the changes to production, it’s important …

Note To Past Self: Use Certbot

Free, ubiquitous SSL certificates as provided by Let’s Encrypt have helped make the Internet a safer place by ensuring your personal details, passwords, internet searches and even which URL on any site you visit are un-snoopable. Booko’s used SSL for most of its time on the Internet. In the bad old days, it was a …

Yahoo! EOLs OpenID 2, migrates to OpenID Connect

Early in July, I got some bug report emails about Booko’s login via Yahoo! no longer working. A quick investigation confirmed it. Unfortunately, I missed that announcement and so migrating to Yahoo’s OIDC (OpenID Connect) was at the top of my todo list. OIDC is an identity service which runs on top of OAuth 2.0. …

Web Server Updates

A perfectly miserable rainy day of stage 3 lock downs here in 3055. Perfect time for some boring updates. Ubuntu from 16.0.4 -> 18.0.4 via do-release-upgrade Nginx 1.16.1 -> 1.18.0 Passenger from 6.0.4 -> 6.0.5 Ruby required recompilation due to shared library updates. Passenger upgrade fixed a compilation error when building Nginx 1.18.0. Next time …