Restructure omni services and add Chatwoot research snapshot

research/chatwoot/deployment/chatwoot

@@ -0,0 +1,6 @@
+# give chatwoot user permission to start/stop/restart chatwoot systemd service
+
+%chatwoot ALL=NOPASSWD: /bin/systemctl start chatwoot.target
+%chatwoot ALL=NOPASSWD: /bin/systemctl stop chatwoot.target
+%chatwoot ALL=NOPASSWD: /bin/systemctl restart chatwoot.target
+%chatwoot ALL=NOPASSWD: /usr/local/bin/cwctl

research/chatwoot/deployment/chatwoot-web.1.service

@@ -0,0 +1,25 @@
+[Unit]
+Requires=network.target
+PartOf=chatwoot.target
+
+[Service]
+Type=simple
+User=chatwoot
+WorkingDirectory=/home/chatwoot/chatwoot
+
+ExecStart=/bin/bash -lc 'bin/rails server -p $PORT -e $RAILS_ENV'
+
+Restart=always
+RestartSec=1
+TimeoutStopSec=30
+KillMode=mixed
+StandardInput=null
+SyslogIdentifier=%p
+
+Environment="PATH=/home/chatwoot/.rvm/gems/ruby-3.4.4/bin:/home/chatwoot/.rvm/gems/ruby-3.4.4@global/bin:/home/chatwoot/.rvm/rubies/ruby-3.4.4/bin:/home/chatwoot/.rvm/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/home/chatwoot/.rvm/bin:/home/chatwoot/.rvm/bin"
+Environment="PORT=3000"
+Environment="RAILS_ENV=production"
+Environment="NODE_ENV=production"
+Environment="RAILS_LOG_TO_STDOUT=true"
+Environment="GEM_HOME=/home/chatwoot/.rvm/gems/ruby-3.4.4"
+Environment="GEM_PATH=/home/chatwoot/.rvm/gems/ruby-3.4.4:/home/chatwoot/.rvm/gems/ruby-3.4.4@global"

research/chatwoot/deployment/chatwoot-web.target

@@ -0,0 +1,6 @@
+[Unit]
+Description=Chatwoot Web Server
+Wants=chatwoot-web.1.service
+
+[Install]
+WantedBy=multi-user.target

research/chatwoot/deployment/chatwoot-worker.1.service

@@ -0,0 +1,30 @@
+[Unit]
+Requires=network.target
+PartOf=chatwoot.target
+
+[Service]
+Type=simple
+User=chatwoot
+WorkingDirectory=/home/chatwoot/chatwoot
+
+ExecStart=/bin/bash -lc 'dotenv bundle exec sidekiq -C config/sidekiq.yml'
+
+Restart=always
+RestartSec=1
+TimeoutStopSec=30
+KillMode=mixed
+StandardInput=null
+SyslogIdentifier=%p
+
+MemoryMax=1.2G
+MemoryHigh=infinity
+MemorySwapMax=0
+OOMPolicy=stop
+
+Environment="PATH=/home/chatwoot/.rvm/gems/ruby-3.4.4/bin:/home/chatwoot/.rvm/gems/ruby-3.4.4@global/bin:/home/chatwoot/.rvm/rubies/ruby-3.4.4/bin:/home/chatwoot/.rvm/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/home/chatwoot/.rvm/bin:/home/chatwoot/.rvm/bin"
+Environment="PORT=3000"
+Environment="RAILS_ENV=production"
+Environment="NODE_ENV=production"
+Environment="RAILS_LOG_TO_STDOUT=true"
+Environment="GEM_HOME=/home/chatwoot/.rvm/gems/ruby-3.4.4"
+Environment="GEM_PATH=/home/chatwoot/.rvm/gems/ruby-3.4.4:/home/chatwoot/.rvm/gems/ruby-3.4.4@global"

research/chatwoot/deployment/chatwoot-worker.target

@@ -0,0 +1,6 @@
+[Unit]
+Description=Chatwoot Background Worker
+Wants=chatwoot-worker.1.service
+
+[Install]
+WantedBy=multi-user.target

research/chatwoot/deployment/chatwoot.target

@@ -0,0 +1,5 @@
+[Unit]
+Wants=chatwoot-web.1.service chatwoot-worker.1.service
+
+[Install]
+WantedBy=multi-user.target

research/chatwoot/deployment/nginx_chatwoot.conf

@@ -0,0 +1,63 @@
+upstream backend {
+  zone upstreams 64K;
+  server 127.0.0.1:3000;
+  keepalive 32;
+}
+
+map $http_upgrade $connection_upgrade {
+  default upgrade;
+  '' close;
+}
+
+server {
+  listen 80;
+  listen [::]:80;
+  server_name chatwoot.domain.com www.chatwoot.domain.com;
+
+  access_log /var/log/nginx/chatwoot_access_80.log;
+  error_log /var/log/nginx/chatwoot_error_80.log;
+
+  return 301 https://chatwoot.domain.com$request_uri;
+}
+
+server {
+  listen 443 ssl http2 reuseport;
+  listen [::]:443 ssl http2 reuseport;
+  server_name chatwoot.domain.com www.chatwoot.domain.com;
+
+  underscores_in_headers on;
+
+  access_log /var/log/nginx/chatwoot_access_443.log;
+  error_log /var/log/nginx/chatwoot_error_443.log;
+
+  location / {
+    proxy_pass http://backend;
+    proxy_redirect off;
+
+    proxy_pass_header Authorization;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Forwarded-Ssl on; # Optional
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection $connection_upgrade;
+
+    client_max_body_size 0;
+    proxy_read_timeout 36000s;
+  }
+
+  ssl_certificate /etc/letsencrypt/live/chatwoot.domain.com/fullchain.pem; # managed by Certbot
+  ssl_certificate_key /etc/letsencrypt/live/chatwoot.domain.com/privkey.pem; # managed by Certbot
+  ssl_protocols TLSv1.2 TLSv1.3;
+  ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+  ssl_prefer_server_ciphers off;
+  ssl_dhparam /etc/ssl/dhparam;
+  ssl_early_data on;
+  ssl_buffer_size 4k;
+  ssl_session_cache shared:SSL:10m;
+  ssl_session_timeout 1d;
+  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+}

research/chatwoot/deployment/setup_18.04.sh

@@ -0,0 +1,84 @@
+#!/usr/bin/env bash
+
+# Description: Chatwoot installation script
+# OS: Ubuntu 18.04 LTS
+# Script Version: 0.2
+
+apt update && apt upgrade -y
+apt install -y curl
+curl -sL https://deb.nodesource.com/setup_12.x | bash -
+curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add -
+echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list
+apt update
+
+apt install -y \
+	git software-properties-common imagemagick libpq-dev \
+    libxml2-dev libxslt1-dev file g++ gcc autoconf build-essential \
+    libssl-dev libyaml-dev libreadline-dev gnupg2 nginx redis-server \
+    redis-tools postgresql postgresql-contrib certbot \
+    python-certbot-nginx nodejs yarn patch ruby-dev zlib1g-dev liblzma-dev \
+    libgmp-dev libncurses5-dev libffi-dev libgdbm5 libgdbm-dev sudo
+
+adduser --disabled-login --gecos "" chatwoot
+
+sudo -i -u chatwoot bash << EOF
+gpg --keyserver hkp://keyserver.ubuntu.com  --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB
+curl -sSL https://get.rvm.io | bash -s stable
+EOF
+
+pg_pass=$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 15 ; echo '')
+sudo -i -u postgres psql << EOF
+\set pass `echo $pg_pass`
+CREATE USER chatwoot CREATEDB;
+ALTER USER chatwoot PASSWORD :'pass';
+ALTER ROLE chatwoot SUPERUSER;
+EOF
+
+systemctl enable redis-server.service
+systemctl enable postgresql
+
+secret=$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 63 ; echo '')
+RAILS_ENV=production
+
+sudo -i -u chatwoot << EOF
+rvm --version
+rvm autolibs disable
+rvm install "ruby-3.0.4"
+rvm use 3.0.4 --default
+
+git clone https://github.com/chatwoot/chatwoot.git
+cd chatwoot
+if [[ -z "$1" ]]; then
+  git checkout master;
+else
+  git checkout $1;
+fi
+bundle
+yarn
+
+cp .env.example .env
+sed -i -e "/SECRET_KEY_BASE/ s/=.*/=$secret/" .env
+sed -i -e '/REDIS_URL/ s/=.*/=redis:\/\/localhost:6379/' .env
+sed -i -e '/POSTGRES_HOST/ s/=.*/=localhost/' .env
+sed -i -e '/POSTGRES_USERNAME/ s/=.*/=chatwoot/' .env
+sed -i -e "/POSTGRES_PASSWORD/ s/=.*/=$pg_pass/" .env
+sed -i -e '/RAILS_ENV/ s/=.*/=$RAILS_ENV/' .env
+echo -en "\nINSTALLATION_ENV=linux_script" >> ".env"
+
+RAILS_ENV=production bundle exec rake db:create
+RAILS_ENV=production bundle exec rake db:reset
+rake assets:precompile RAILS_ENV=production
+EOF
+
+cp /home/chatwoot/chatwoot/deployment/chatwoot-web.1.service /etc/systemd/system/chatwoot-web.1.service
+cp /home/chatwoot/chatwoot/deployment/chatwoot-worker.1.service /etc/systemd/system/chatwoot-worker.1.service
+cp /home/chatwoot/chatwoot/deployment/chatwoot.target /etc/systemd/system/chatwoot.target
+
+systemctl enable chatwoot.target
+systemctl start chatwoot.target
+
+echo "Woot! Woot!! Chatwoot server installation is complete"
+echo "The server will be accessible at http://<server-ip>:3000"
+echo "To configure a domain and SSL certificate, follow the guide at https://www.chatwoot.com/docs/deployment/deploy-chatwoot-in-linux-vm"
+
+# TODO: Auto-configure Nginx with SSL certificate