Open Build Service

Changes of Revision 27

rubygem-bender-vhng.changes Changed

rubygem-bender-vhng.spec Changed

bender-vhng-2.1.15.gem/checksums.yaml.gz -> bender-vhng-2.1.16.gem/checksums.yaml.gz Changed

bender-vhng-2.1.16.gem/data/.dockerignore Added

bender-vhng-2.1.16.gem/data/.gitignore Added

bender-vhng-2.1.16.gem/data/.rspec Added

bender-vhng-2.1.16.gem/data/Gemfile Added

bender-vhng-2.1.16.gem/data/Gemfile.lock Added

@@ -0,0 +1,120 @@
+PATH
+  remote: ../ygg_provisioner
+  specs:
+    ygg_provisioner (1.5.0)
+      eventmachine (~> 1.2.3)
+      publisher
+      tomte-agents
+
+PATH
+  remote: .
+  specs:
+    bender-vhng (0.3.0)
+      activerecord (~> 6.0)
+      bcrypt (>= 3.1.20)
+      mail (~> 2.7)
+      mysql2 (~> 0.4)
+      uuidtools (~> 3)
+      ygg_provisioner (~> 1.5, >= 1.5.0)
+
+GEM
+  remote: http://rubygems.org/
+  remote: http://gems.intercom.it/
+  specs:
+    activemodel (6.0.6.1)
+      activesupport (= 6.0.6.1)
+    activerecord (6.0.6.1)
+      activemodel (= 6.0.6.1)
+      activesupport (= 6.0.6.1)
+    activesupport (6.0.6.1)
+      concurrent-ruby (~> 1.0, >= 1.0.2)
+      i18n (>= 0.7, < 2)
+      minitest (~> 5.1)
+      tzinfo (~> 1.1)
+      zeitwerk (~> 2.2, >= 2.2.2)
+    amq-protocol (2.3.0)
+    amqp (1.8.0)
+      amq-protocol (>= 2.2.0)
+      eventmachine
+    awesome_print (1.9.2)
+    bcrypt (3.1.20)
+    bson (1.12.5)
+    bson_ext (1.12.5)
+      bson (~> 1.12.5)
+    byebug (11.1.3)
+    case (0.5.2.1)
+    coderay (1.1.3)
+    concurrent-ruby (1.3.5)
+    diff-lcs (1.3)
+    eventmachine (1.2.5)
+    i18n (1.14.7)
+      concurrent-ruby (~> 1.0)
+    json (2.7.6)
+    mail (2.7.1)
+      mini_mime (>= 0.1.1)
+    method_source (1.1.0)
+    mime-types (3.3.1)
+      mime-types-data (~> 3.2015)
+    mime-types-data (3.2016.0521)
+    mini_mime (1.0.0)
+    minitest (5.15.0)
+    mysql2 (0.5.6)
+    pry (0.14.2)
+      coderay (~> 1.1)
+      method_source (~> 1.0)
+    publisher (1.1.2)
+    rake (12.3.3)
+    rspec (3.10.0)
+      rspec-core (~> 3.10.0)
+      rspec-expectations (~> 3.10.0)
+      rspec-mocks (~> 3.10.0)
+    rspec-core (3.10.1)
+      rspec-support (~> 3.10.0)
+    rspec-expectations (3.10.1)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.10.0)
+    rspec-mocks (3.10.2)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.10.0)
+    rspec-support (3.10.2)
+    thor (0.20.3)
+    thread_safe (0.3.6)
+    tomte-agents (1.1.1)
+      tomte-core (>= 1.2.0)
+      tomte-protocol (>= 1.1.1)
+    tomte-core (1.2.2)
+      activesupport (>= 5.0.0)
+      bson (>= 1.12.5)
+      bson_ext (>= 1.12.5)
+      case (>= 0.5.2)
+      json (>= 2.2.0)
+      mime-types
+      pry (>= 0.12.2)
+      rake
+      thor (>= 0.20.3)
+      uuidtools (>= 2.1.5)
+      wml-compat (>= 0.8.6)
+    tomte-protocol (1.2.3)
+      amqp (>= 1.8.0)
+      tomte-core (>= 1.2.0)
+    tzinfo (1.2.7)
+      thread_safe (~> 0.1)
+    uuidtools (3.0.0)
+    wml-compat (0.8.13)
+      awesome_print (>= 1.1.0)
+      uuidtools (>= 2.1.0)
+    zeitwerk (2.2.2)
+
+PLATFORMS
+  x86_64-linux
+
+DEPENDENCIES
+  bender-vhng!
+  byebug
+  pry
+  rake
+  rspec
+  ygg_provisioner!
+
+BUNDLED WITH
+   2.2.34

bender-vhng-2.1.16.gem/data/bender-vhng.gemspec Added

@@ -0,0 +1,32 @@
+require File.expand_path('../lib/bender-vhng/version', __FILE__)
+
+Gem::Specification.new do |s|
+
+  s.name          = "bender-vhng"
+  s.version       = Bender::Vhng::VERSION
+  s.licenses      = 'MIT'
+
+  s.authors       = "Lele Forzani", 'Angelo Grossini'
+  s.email         = "angelo@intercom.it"
+  s.description   = %q{vhng provisioning tool}
+  s.summary       = %q{Tool for provisioning vhosts on the Intercom VHNG platform}
+  s.homepage      = 'https://intercom.it'
+
+  s.files         = `git ls-files`.split("\n")
+  s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
+  s.extra_rdoc_files = 'README'
+  s.require_paths = "lib"
+
+  s.add_dependency "mail", "~> 2.7", ">= 2.7.1"
+  s.add_dependency 'activerecord', '~> 6.0', ">= 6.0.6.1"
+  s.add_dependency 'mysql2', '~> 0.5', ">= 0.5.3"
+  s.add_dependency 'uuidtools', '~> 3', ">= 3.0.0"
+  s.add_dependency 'bcrypt', '~> 3.1', ">= 3.1.20"
+  s.add_dependency 'ygg_provisioner', '~> 1.5', '>= 1.5.0'
+
+  s.add_development_dependency "rake", '~> 12.3', ">= 12.3.3"
+  s.add_development_dependency "pry", '~> 0.14', ">= 0.14.2"
+  s.add_development_dependency "rspec", '~> 3.10', ">= 3.10.0"
+  s.add_development_dependency "byebug", '~> 11.1', ">= 11.1.3"
+end

bender-vhng-2.1.16.gem/data/bin/shell Added

bender-vhng-2.1.16.gem/data/build/bender.cron Added

bender-vhng-2.1.16.gem/data/build/rubygem-bender-vhng.changes Added

@@ -0,0 +1,97 @@
+-------------------------------------------------------------------
+Wed Nov  5 21:40:09 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- fix typo
+
+-------------------------------------------------------------------
+Wed Nov  5 14:39:46 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- Add placement configuration for performance in WebHosts and 
+  update Docker plugin constraints handling
+
+-------------------------------------------------------------------
+Fri Oct 31 13:07:30 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- Enhance access rules handling in Docker plugin by adding rule 
+  types ('allow_all' and 'deny_all') and improving label 
+  organization for deny, allow, and auth entries.
+
+-------------------------------------------------------------------
+Fri Oct 31 07:57:41 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- Refactor access rules handling in Docker plugin to store each 
+  rule with an index in labels, improving organization and 
+  retrieval.
+
+-------------------------------------------------------------------
+Thu Oct 30 11:06:59 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- Add bcrypt dependency, and implement access rules handling in 
+  Docker plugin and WebHosts model.
+
+-------------------------------------------------------------------
+Wed Oct 29 14:57:24 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- Add cache size configuration for Varnish in WebHosts and update 
+  Varnish plugin to utilize it. 
+
+-------------------------------------------------------------------
+Wed Oct 29 13:07:29 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- Refactor port handling in Apache2 and Varnish plugins to use 
+  service.httpPort method, ensuring consistent port configuration 
+  across webserver components.
+
+-------------------------------------------------------------------
+Wed Oct 29 11:18:09 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- remove varnish acl configuration
+
+-------------------------------------------------------------------
+Wed Oct 29 10:54:22 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- Enhance Varnish configuration by adding multiple template files 
+  and updating the webserver.xml to support new configuration 
+  paths for Varnish components.
+
+-------------------------------------------------------------------
+Tue Oct 28 16:11:39 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- Refactor Varnish configuration path handling in Webserver plugin
+- Add memcached support to WebHosts configuration
+
+-------------------------------------------------------------------
+Tue Oct 28 10:16:56 UTC 2025 - Angelo Grossini <angelo@intercom.it>
+
+- add varnish support
+
+-------------------------------------------------------------------
+Fri Dec 15 09:09:58 UTC 2023 -  <rottame@intercom.it>
+
+- depend from activerecord 6
+
+-------------------------------------------------------------------
+Tue Sep 12 15:24:28 UTC 2023 - Angelo Grossini <rottame@intercom.it>
+
+- add 10% of fs over quota
+
+-------------------------------------------------------------------
+Tue Sep 12 15:19:42 UTC 2023 - Angelo Grossini <rottame@intercom.it>
+
+- fix typo
+
+-------------------------------------------------------------------
+Mon Sep 11 15:50:11 UTC 2023 - Angelo Grossini <rottame@intercom.it>
+
+- kill awstats for good
+
+-------------------------------------------------------------------
+Mon Sep 11 09:53:38 UTC 2023 - Angelo Grossini <rottame@intercom.it>
+
+- remove awstats
+
+-------------------------------------------------------------------
+Mon Sep 11 06:53:13 UTC 2023 - Angelo Grossini <rottame@intercom.it>
+
+- migrate ftp server to sftpgo
+- explicit quotas from backend

bender-vhng-2.1.16.gem/data/build/rubygem-bender-vhng.spec Added

bender-vhng-2.1.15.gem/data/lib/bender/classes/Models/Webserver/WebHosts.rb -> bender-vhng-2.1.16.gem/data/lib/bender/classes/Models/Webserver/WebHosts.rb Changed

@@ -27,102 +27,100 @@
 #
 
 require 'bender/tools/ConfigObject'
-require 'kyotocabinet'
 require 'uuidtools'
 
+
+require 'ygg/provisioner/model'
+
+module Ygg
+  module Vhosts
+    module Provisioner
+      class Vhost < Ygg::Provisioner::Model
+        self.state_persistant_keys = :state
+      end
+    end
+  end
+end
+
 module Webserver
   class WebHost
     BENDER_NAMESPACE = UUIDTools::UUID.sha1_create(UUIDTools::UUID_URL_NAMESPACE, "https://www.intercom.it/ns/bender")
     class RecordNotFound < StandardError; end
 
     class << self
-      def open(path)
-        unless @database
-          if File::exists?(path)
-            db = KyotoCabinet::DB.new
-            unless db.open(path, KyotoCabinet::DB::OREADER)
-              raise "Cannot open database '#{path}': #{db.error}"
-            end
-            @database = db
-          else
-            raise "Cannot open database '#{path}': file not found"
-          end
-        end
+      def open(db)
+        Ygg::Vhosts::Provisioner::Vhost.db_path = db
+        Ygg::Vhosts::Provisioner::Vhost.store = nil
       end
 
       def find(id)
-        raise 'No database open' unless @database
-        data = @database.get(id)
-        unless data
-          raise "Cannot read record #{id}: #{@database.error}"
+        raise 'No database open' unless Ygg::Vhosts::Provisioner::Vhost.db_path
+        begin
+          record = Ygg::Vhosts::Provisioner::Vhost.find id
+          self.new record.serialize
+        rescue
+          raise "Cannot read record #{id}: #{$!.message}"
         end
-        self.new data
       end
 
       def find_all
-        raise 'No database open' unless @database
+        raise 'No database open' unless Ygg::Vhosts::Provisioner::Vhost.db_path
         ret = 
-        @database.each do |k, data|
-          ret << self.new(data)
+        Ygg::Vhosts::Provisioner::Vhost.each do |record|
+          ret << self.new(record.serialize)
         end
         ret
       end
 
       def find_by_username(username)
-        raise 'No database open' unless @database
+        raise 'No database open' unless Ygg::Vhosts::Provisioner::Vhost.db_path
         ret = nil
-        @database.each do |k, data|
-          record = self.new(data)
-          if record.username == username
-            ret = record
-            break
-          end
+        Ygg::Vhosts::Provisioner::Vhost.each do |record|
+          next unless record.username == username
+          ret = self.new(record.serialize)
+          break
         end
         raise RecordNotFound.new("Vhost \"#{username}\" not found") unless ret
         ret
       end
 
       def find_all_active
-        raise 'No database open' unless @database
+        raise 'No database open' unless Ygg::Vhosts::Provisioner::Vhost.db_path
         find_all.select(&:active?)
       end
 
       def find_active_by_username(username)
-        raise 'No database open' unless @database
+        raise 'No database open' unless Ygg::Vhosts::Provisioner::Vhost.db_path
         ret = nil
-        @database.each do |k, data|
-          record = self.new(data)
-          if record.username == username && record.active?
-            ret = record
-            break
-          end
+        find_all_active.each do |record|
+          next unless record.username == username
+          ret = record
+          break
         end
         raise RecordNotFound.new("Vhost \"#{username}\" not found") unless ret
         ret
       end
 
       def find_all_not_active
-        raise 'No database open' unless @database
+        raise 'No database open' unless Ygg::Vhosts::Provisioner::Vhost.db_path
         find_all.reject(&:active?)
       end
 
       def find_not_active_by_username(username)
-        raise 'No database open' unless @database
+        raise 'No database open' unless Ygg::Vhosts::Provisioner::Vhost.db_path
         ret = nil
-        @database.each do |k, data|
-          record = self.new(data)
-          if record.username == username && !record.active?
-            ret = record
-            break
-          end
+        find_all_not_active.each do |record|
+          next unless record.username == username
+          ret = record
+          break
         end
         raise RecordNotFound.new("Vhost \"#{username}\" not found") unless ret
         ret
       end
     end
 
-    def initialize(marshalled)
-      @_data = Marshal.load marshalled
+    def initialize(data)
+      @_data = data
     end
 
     def active?
@@ -288,7 +286,7 @@
       end
 
       ret = ConfigObject.new(ret)
-      ret.service.environment = Hashdata:env_vars.map{|e| e:key, e:value}
+      ret.service.environment = environment
       ret
     end

bender-vhng-2.1.16.gem/data/lib/bender/classes/Plugins/Docker/.gitkeep Added

bender-vhng-2.1.16.gem/data/lib/bender/classes/Plugins/Letsencrypt/.keep Added

bender-vhng-2.1.16.gem/data/lib/bender/classes/Plugins/Mysql/.keep Added

bender-vhng-2.1.16.gem/data/lib/bender/classes/Plugins/native/Webserver/.keep Added

bender-vhng-2.1.16.gem/data/lib/bender/services/.keep Added

bender-vhng-2.1.16.gem/data/spec/bender/classes/Models/Webserver/WebHosts_spec.rb Added

@@ -0,0 +1,1157 @@
+require 'spec_helper'
+require 'active_support/core_ext'
+require 'bender/classes/Models/Webserver/WebHosts'
+require_relative '../../../../support/db_helper_kyoto'
+require_relative '../../../../support/db_helper_sqlite3'
+
+DbHelper = DbHelperSqlite3
+
+RSpec.describe Webserver::WebHost do
+  let(:test_data) do
+    {
+      cfg: {
+        id: 'test-id-1',
+        username: 'testuser1',
+        password: 'testpass1',
+        created_at: '2023-01-01',
+        updated_at: '2023-01-02',
+        node_perf: 'standard',
+        quota: 'basic',
+        quota_name: 'basic',
+        enforce_quota: true,
+        quota_cpu: 100,
+        quota_mem: 512,
+        quota_fs: 1024,
+        php_enabled: true,
+        php_version: '8.1',
+        php_num_instances: 2,
+        php_show_errors: 'N',
+        php_memory_limit: 128,
+        upload_max_size: 10,
+        php_additional: '',
+        php_extensions: 'mbstring,curl,gd',
+        php_legacy_writable_storage: '',
+        ssl_enabled: true,
+        ssl_allow_http: false,
+        ssl_letsencrypt: true,
+        ssl_certs: ,
+        httpd_compat: 'Y',
+        httpd_modules: 'rewrite,headers',
+        httpd_global_options: 'Indexes,FollowSymLinks',
+        httpd_allow_override: 'All',
+        httpd_additional: '',
+        varnish_enabled: false,
+        varnish_vcl: nil,
+        varnish_cache_size: nil,
+        memcached_enabled: false,
+        memcached_memory_size: nil,
+        is_docker: false,
+        docker_image: nil,
+        names: 
+          { name: 'example.com' },
+          { name: 'www.example.com' }
+        ,
+        env_vars: 
+          { key: 'APP_ENV', value: 'production' },
+          { key: 'DEBUG', value: 'false' }
+        ,
+        services: ,
+        ftp_accesses: ,
+        access_rules: nil
+      },
+      state: {
+        state: 'active'
+      }
+    }
+  end
+
+  let(:test_data_inactive) do
+    data = test_data.dup
+    data:cfg = data:cfg.dup
+    data:cfg:id = 'test-id-2'
+    data:cfg:username = 'testuser2'
+    data:state = { state: 'inactive' }
+    data
+  end
+
+  let(:db_path) do
+    DbHelper.create_test_database(
+      'test-id-1' => test_data,
+      'test-id-2' => test_data_inactive
+    )
+  end
+
+  after do
+    DbHelper.cleanup(db_path)
+  end
+
+  describe '.open' do
+    context 'when database file exists' do
+      it 'opens the database successfully' do
+        expect { described_class.open(db_path) }.not_to raise_error
+      end
+
+      it 'does not raise error when called multiple times' do
+        described_class.open(db_path)
+        expect { described_class.open(db_path) }.not_to raise_error
+      end
+    end
+  end
+
+  describe '.find' do
+    before do
+      described_class.open(db_path)
+    end
+
+    context 'when record exists' do
+      subject { described_class.find('test-id-1') }
+
+      it 'returns a WebHost instance' do
+        expect(subject).to be_a(Webserver::WebHost)
+      end
+
+      it 'returns a host with correct username' do
+        expect(subject.username).to eq('testuser1')
+      end
+
+      it 'returns a host with correct active status' do
+        expect(subject.active?).to be true
+      end
+    end
+
+    context 'when record does not exist' do
+      it 'raises an error' do
+        expect {
+          described_class.find('nonexistent-id')
+        }.to raise_error(/Cannot read record/)
+      end
+    end
+
+    context 'when database is not open' do
+      before do
+        described_class.open nil
+      end
+
+      it 'raises an error' do
+        expect {
+          described_class.find('test-id-1')
+        }.to raise_error('No database open')
+      end
+    end
+  end
+
+  describe '.find_all' do
+    before do
+      described_class.open(db_path)
+    end
+
+    subject { described_class.find_all }
+
+    it 'returns an array of WebHost instances' do
+      expect(subject).to be_an(Array)
+      expect(subject.all? { |h| h.is_a?(Webserver::WebHost) }).to be true
+    end
+
+    it 'returns all records from the database' do
+      expect(subject.length).to eq(2)
+    end
+
+    it 'returns hosts with correct usernames' do
+      usernames = subject.map(&:username).sort
+      expect(usernames).to contain_exactly('testuser1', 'testuser2')
+    end
+
+    context 'when database is not open' do
+      before do
+        described_class.open nil
+      end
+
+      it 'raises an error' do
+        expect {
+          described_class.find_all
+        }.to raise_error('No database open')
+      end
+    end
+  end
+
+  describe '.find_by_username' do
+    before do
+      described_class.open(db_path)
+    end
+
+    context 'when username exists' do
+      subject { described_class.find_by_username('testuser1') }
+
+      it 'returns a WebHost instance' do
+        expect(subject).to be_a(Webserver::WebHost)
+      end
+
+      it 'returns the correct host' do
+        expect(subject.username).to eq('testuser1')
+      end
+
+      it 'finds inactive hosts as well' do
+        inactive_host = described_class.find_by_username('testuser2')
+        expect(inactive_host.username).to eq('testuser2')
+        expect(inactive_host.active?).to be false
+      end
+    end
+
+    context 'when username does not exist' do
+      it 'raises RecordNotFound error' do
+        expect {
+          described_class.find_by_username('nonexistent')
+        }.to raise_error(Webserver::WebHost::RecordNotFound, /Vhost "nonexistent" not found/)
+      end
+    end
+
+    context 'when database is not open' do
+      before do
+        described_class.open nil
+      end
+
+      it 'raises an error' do
+        expect {
+          described_class.find_by_username('testuser1')
+        }.to raise_error('No database open')
+      end
+    end
+  end
+
+  describe '.find_all_active' do
+    before do
+      described_class.open(db_path)
+    end
+
+    subject { described_class.find_all_active }
+
+    it 'returns only active hosts' do
+      expect(subject.all?(&:active?)).to be true
+    end
+
+    it 'returns the correct number of active hosts' do
+      expect(subject.length).to eq(1)
+    end
+
+    it 'returns hosts with correct usernames' do
+      expect(subject.first.username).to eq('testuser1')
+    end
+
+    context 'when database is not open' do
+      before do
+        described_class.open nil
+      end
+
+      it 'raises an error' do
+        expect {
+          described_class.find_all_active
+        }.to raise_error('No database open')
+      end
+    end
+  end
+
+  describe '.find_active_by_username' do
+    before do
+      described_class.open(db_path)
+    end
+
+    context 'when active username exists' do
+      subject { described_class.find_active_by_username('testuser1') }
+
+      it 'returns a WebHost instance' do
+        expect(subject).to be_a(Webserver::WebHost)
+      end
+
+      it 'returns an active host' do
+        expect(subject.active?).to be true
+      end
+
+      it 'returns the correct host' do
+        expect(subject.username).to eq('testuser1')
+      end
+    end
+
+    context 'when username exists but is inactive' do
+      it 'raises RecordNotFound error' do
+        expect {
+          described_class.find_active_by_username('testuser2')
+        }.to raise_error(Webserver::WebHost::RecordNotFound, /Vhost "testuser2" not found/)
+      end
+    end
+
+    context 'when username does not exist' do
+      it 'raises RecordNotFound error' do
+        expect {
+          described_class.find_active_by_username('nonexistent')
+        }.to raise_error(Webserver::WebHost::RecordNotFound, /Vhost "nonexistent" not found/)
+      end
+    end
+
+    context 'when database is not open' do
+      before do
+        described_class.open nil
+      end
+
+      it 'raises an error' do
+        expect {
+          described_class.find_active_by_username('testuser1')
+        }.to raise_error('No database open')
+      end
+    end
+  end
+
+  describe '.find_all_not_active' do
+    before do
+      described_class.open(db_path)
+    end
+
+    subject { described_class.find_all_not_active }
+
+    it 'returns only inactive hosts' do
+      expect(subject.none?(&:active?)).to be true
+    end
+
+    it 'returns the correct number of inactive hosts' do
+      expect(subject.length).to eq(1)
+    end
+
+    it 'returns hosts with correct usernames' do
+      expect(subject.first.username).to eq('testuser2')
+    end
+
+    context 'when database is not open' do
+      before do
+        described_class.open nil
+      end
+
+      it 'raises an error' do
+        expect {
+          described_class.find_all_not_active
+        }.to raise_error('No database open')
+      end
+    end
+  end
+
+  describe '.find_not_active_by_username' do
+    before do
+      described_class.open(db_path)
+    end
+
+    context 'when inactive username exists' do
+      subject { described_class.find_not_active_by_username('testuser2') }
+
+      it 'returns a WebHost instance' do
+        expect(subject).to be_a(Webserver::WebHost)
+      end
+
+      it 'returns an inactive host' do
+        expect(subject.active?).to be false
+      end
+
+      it 'returns the correct host' do
+        expect(subject.username).to eq('testuser2')
+      end
+    end
+
+    context 'when username exists but is active' do
+      it 'raises RecordNotFound error' do
+        expect {
+          described_class.find_not_active_by_username('testuser1')
+        }.to raise_error(Webserver::WebHost::RecordNotFound, /Vhost "testuser1" not found/)
+      end
+    end
+
+    context 'when username does not exist' do
+      it 'raises RecordNotFound error' do
+        expect {
+          described_class.find_not_active_by_username('nonexistent')
+        }.to raise_error(Webserver::WebHost::RecordNotFound, /Vhost "nonexistent" not found/)
+      end
+    end
+
+    context 'when database is not open' do
+      before do
+        described_class.open nil
+      end
+
+      it 'raises an error' do
+        expect {
+          described_class.find_not_active_by_username('testuser2')
+        }.to raise_error('No database open')
+      end
+    end
+  end
+
+  describe '#active?' do
+    before do
+      described_class.open(db_path)
+    end
+
+    context 'when host is active' do
+      subject { described_class.find('test-id-1') }
+
+      it 'returns true' do
+        expect(subject.active?).to be true
+      end
+    end
+
+    context 'when host is inactive' do
+      subject { described_class.find('test-id-2') }
+
+      it 'returns false' do
+        expect(subject.active?).to be false
+      end
+    end
+  end
+
+  describe '#username' do
+    before do
+      described_class.open(db_path)
+    end
+
+    subject { described_class.find('test-id-1') }
+
+    it 'returns the username' do
+      expect(subject.username).to eq('testuser1')
+    end
+
+    it 'returns different usernames for different hosts' do
+      host2 = described_class.find('test-id-2')
+      expect(subject.username).not_to eq(host2.username)
+    end
+  end
+
+  describe '#data' do
+    before do
+      described_class.open(db_path)
+    end
+
+    subject { described_class.find('test-id-1').data }
+
+    it 'returns a ConfigObject' do
+      expect(subject).to respond_to(:service)
+      expect(subject).to respond_to(:quota)
+      expect(subject).to respond_to(:php)
+      expect(subject).to respond_to(:ssl)
+      expect(subject).to respond_to(:http)
+    end
+
+    it 'includes service information' do
+      expect(subject.service.id).to eq('test-id-1')
+      expect(subject.service.login).to eq('testuser1')
+      expect(subject.service.active).to be true
+      expect(subject.service.state).to be true
+    end
+
+    it 'includes quota information' do
+      expect(subject.quota.quota_name).to eq('basic')
+      expect(subject.quota.enforce).to be true
+      expect(subject.quota.quotas.cpu).to eq(100)
+      expect(subject.quota.quotas.mem).to eq(512)
+      expect(subject.quota.quotas.fs).to eq(1024)
+    end
+
+    it 'includes PHP configuration' do
+      expect(subject.php.enabled).to be true
+      expect(subject.php.version).to eq('8.1')
+      expect(subject.php.instances).to eq(2)
+      expect(subject.php.show_errors).to be false
+      expect(subject.php.memory_limit).to eq(128)
+    end
+
+    it 'includes SSL configuration' do
+      expect(subject.ssl.enabled).to be true
+      expect(subject.ssl.allow_http).to be false
+      expect(subject.ssl.letsencrypt).to be true
+    end
+
+    it 'includes HTTP configuration' do
+      expect(subject.http.enabled).to be true
+      expect(subject.http.apache2.compat).to be true
+      expect(subject.http.apache2.modules).to include('rewrite', 'headers')
+    end
+
+    it 'includes servername and aliases' do
+      expect(subject.service.servername).to eq('example.com')
+      expect(subject.service.aliases).to include('www.example.com')
+    end
+
+    it 'includes environment variables' do
+      expect(subject.service.environment).to be_a(Hash)
+      expect(subject.service.environment'APP_ENV').to eq('production')
+      expect(subject.service.environment'DEBUG').to eq('false')
+    end
+
+    it 'includes FTP configuration' do
+      expect(subject.ftp).to be_an(Array)
+      expect(subject.ftp.first.login).to eq('testuser1')
+      expect(subject.ftp.first.enabled).to be true
+      expect(subject.ftp.first.path).to eq('/')
+    end
+
+    it 'includes varnish configuration' do
+      expect(subject.varnish.enabled).to be false
+      expect(subject.varnish.cache_size).to eq('1G')
+    end
+
+    it 'includes memcached configuration' do
+      expect(subject.memcached.enabled).to be false
+      expect(subject.memcached.memory).to eq('64m')
+    end
+
+    it 'includes proxy configuration' do
+      expect(subject.proxy.max_body_size).to eq(10)
+    end
+
+    it 'includes SMTP configuration when PHP is enabled' do
+      expect(subject.smtp).not_to be_nil
+      expect(subject.smtp.username).to eq('testuser1')
+    end
+
+    it 'reflects active status in service data' do
+      active_data = described_class.find('test-id-1').data
+      inactive_data = described_class.find('test-id-2').data
+
+      expect(active_data.service.active).to be true
+      expect(inactive_data.service.active).to be false
+    end
+
+    context 'with SSL certificates' do
+      let(:test_data_with_ssl) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-ssl'
+        data:cfg:username = 'ssluser'
+        data:cfg:ssl_certs = 
+          {
+            id: 'cert1',
+            domains: 'example.com, www.example.com',
+            ssl_cert: 'cert1.pem',
+            ssl_key: 'key1.pem',
+            ssl_cert_data: 'CERT_DATA_1',
+            ssl_key_data: 'KEY_DATA_1'
+          }
+        
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-ssl', test_data_with_ssl)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-ssl').data }
+
+      it 'includes SSL certificate data' do
+        expect(subject.ssl.certs).to be_an(Array)
+        expect(subject.ssl.certs.length).to eq(1)
+        expect(subject.ssl.certs.first:domains).to include('example.com', 'www.example.com')
+        expect(subject.ssl.certs.first:crt).to eq('CERT_DATA_1')
+        expect(subject.ssl.certs.first:key).to eq('KEY_DATA_1')
+        expect(subject.ssl.certs.first:crt_id).to be_a(String)
+      end
+    end
+
+    context 'with access rules' do
+      let(:test_data_with_access) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-access'
+        data:cfg:username = 'accessuser'
+        data:cfg:access_rules = 
+          {
+            location: '/admin',
+            allow_from_all: false,
+            allow_from: '192.168.1.0/24',
+            deny_from: nil,
+            auth_credentials: nil
+          },
+          {
+            location: '/public',
+            allow_from_all: true,
+            allow_from: nil,
+            deny_from: '10.0.0.0/8',
+            auth_credentials: 'user:pass'
+          }
+        
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-access', test_data_with_access)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-access').data }
+
+      it 'includes access rules' do
+        expect(subject.http.access_rules).to be_an(Array)
+        expect(subject.http.access_rules.length).to eq(2)
+        expect(subject.http.access_rules.first:location).to eq('/admin')
+        expect(subject.http.access_rules.first:allow_from_all).to be false
+        expect(subject.http.access_rules.first:allow_from).to eq('192.168.1.0/24')
+        expect(subject.http.access_rules.last:allow_from_all).to be true
+        expect(subject.http.access_rules.last:deny_from).to eq('10.0.0.0/8')
+      end
+    end
+
+    context 'with FTP accesses' do
+      let(:test_data_with_ftp) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-ftp'
+        data:cfg:username = 'ftpuser'
+        data:cfg:ftp_accesses = 
+          {
+            username: 'ftpuser1',
+            password: 'ftppass1',
+            path: '/var/www',
+            enabled: true
+          },
+          {
+            username: 'ftpuser2',
+            password: 'ftppass2',
+            path: '/tmp',
+            enabled: false
+          }
+        
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-ftp', test_data_with_ftp)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-ftp').data }
+
+      it 'includes additional FTP accesses' do
+        expect(subject.ftp.length).to eq(3) # 1 default + 2 additional
+        expect(subject.ftp1:login).to eq('ftpuser1')
+        expect(subject.ftp1:path).to eq('/var/www')
+        expect(subject.ftp1:enabled).to be true
+        expect(subject.ftp2:login).to eq('ftpuser2')
+        expect(subject.ftp2:enabled).to be false
+      end
+    end
+
+    context 'with database services' do
+      let(:test_data_with_db) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-db'
+        data:cfg:username = 'dbuser'
+        data:cfg:services = 
+          {
+            service_type: 'mysql',
+            name: 'mydb',
+            username: 'dbuser',
+            password: 'dbpass',
+            is_destroyed: false
+          },
+          {
+            service_type: 'postgresql',
+            name: 'mydb2',
+            username: 'dbuser2',
+            password: 'dbpass2',
+            is_destroyed: true
+          }
+        
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-db', test_data_with_db)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-db').data }
+
+      it 'includes database services' do
+        expect(subject.databases).to be_an(Array)
+        expect(subject.databases.length).to eq(2)
+        expect(subject.databases.first:type).to eq('mysql')
+        expect(subject.databases.first:name).to eq('mydb')
+        expect(subject.databases.first:enabled).to be true
+        expect(subject.databases.last:enabled).to be false
+      end
+    end
+
+    context 'with Docker configuration' do
+      let(:test_data_docker) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-docker'
+        data:cfg:username = 'dockeruser'
+        data:cfg:is_docker = true
+        data:cfg:docker_image = 'myapp:latest'
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-docker', test_data_docker)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-docker').data }
+
+      it 'includes Docker configuration' do
+        expect(subject.service.docker_image).to eq('myapp:latest')
+        expect(subject.php.enabled).to be false
+        expect(subject.http.enabled).to be false
+        expect(subject.smtp).not_to be_nil
+      end
+    end
+
+    context 'with varnish enabled via environment variable' do
+      let(:test_data_varnish_env) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-varnish-env'
+        data:cfg:username = 'varnishuser'
+        data:cfg:varnish_enabled = nil
+        data:cfg:env_vars = 
+          { key: 'ENABLE_VARNISH', value: 'true' }
+        
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-varnish-env', test_data_varnish_env)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-varnish-env').data }
+
+      it 'enables varnish from environment variable' do
+        expect(subject.varnish.enabled).to be true
+        expect(subject.service.environment'ENABLE_VARNISH').to eq('true')
+      end
+    end
+
+    context 'with memcached enabled via environment variable' do
+      let(:test_data_memcached_env) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-memcached-env'
+        data:cfg:username = 'memcacheduser'
+        data:cfg:memcached_enabled = nil
+        data:cfg:env_vars = 
+          { key: 'ENABLE_MEMCACHED', value: 'true' }
+        
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-memcached-env', test_data_memcached_env)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-memcached-env').data }
+
+      it 'enables memcached from environment variable' do
+        expect(subject.memcached.enabled).to be true
+        expect(subject.service.environment'ENABLE_MEMCACHED').to eq('true')
+      end
+    end
+
+    context 'with PHP show errors enabled' do
+      let(:test_data_php_errors) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-php-errors'
+        data:cfg:username = 'phperrorsuser'
+        data:cfg:php_show_errors = 'Y'
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-php-errors', test_data_php_errors)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-php-errors').data }
+
+      it 'sets show_errors to true' do
+        expect(subject.php.show_errors).to be true
+      end
+    end
+
+    context 'with empty PHP extensions' do
+      let(:test_data_no_ext) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-no-ext'
+        data:cfg:username = 'noextuser'
+        data:cfg:php_extensions = ''
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-no-ext', test_data_no_ext)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-no-ext').data }
+
+      it 'returns empty array for extensions' do
+        expect(subject.php.extensions).to eq()
+      end
+    end
+
+    context 'with PHP instances set to AUTO' do
+      let(:test_data_auto_instances) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-auto'
+        data:cfg:username = 'autouser'
+        data:cfg:php_num_instances = nil
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-auto', test_data_auto_instances)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-auto').data }
+
+      it 'defaults to AUTO' do
+        expect(subject.php.instances).to eq('AUTO')
+      end
+    end
+
+    context 'with varnish explicitly enabled' do
+      let(:test_data_varnish_explicit) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-varnish-explicit'
+        data:cfg:username = 'varnishexplicit'
+        data:cfg:varnish_enabled = true
+        data:cfg:varnish_cache_size = '2G'
+        data:cfg:varnish_vcl = 'custom-vcl-content'
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-varnish-explicit', test_data_varnish_explicit)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-varnish-explicit').data }
+
+      it 'enables varnish with custom configuration' do
+        expect(subject.varnish.enabled).to be true
+        expect(subject.varnish.cache_size).to eq('2G')
+        expect(subject.varnish.vcl).to eq('custom-vcl-content')
+        expect(subject.service.environment'ENABLE_VARNISH').to eq('true')
+      end
+    end
+
+    context 'with memcached explicitly enabled' do
+      let(:test_data_memcached_explicit) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-memcached-explicit'
+        data:cfg:username = 'memcachedexplicit'
+        data:cfg:memcached_enabled = true
+        data:cfg:memcached_memory_size = '128m'
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-memcached-explicit', test_data_memcached_explicit)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-memcached-explicit').data }
+
+      it 'enables memcached with custom memory' do
+        expect(subject.memcached.enabled).to be true
+        expect(subject.memcached.memory).to eq('128m')
+        expect(subject.service.environment'ENABLE_MEMCACHED').to eq('true')
+      end
+    end
+
+    context 'with quota using quota field instead of quota_name' do
+      let(:test_data_quota_field) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-quota-field'
+        data:cfg:username = 'quotauser'
+        data:cfg:quota = 'premium'
+        data:cfg:quota_name = nil
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-quota-field', test_data_quota_field)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-quota-field').data }
+
+      it 'uses quota field when quota_name is nil' do
+        expect(subject.quota.quota_name).to eq('premium')
+      end
+    end
+
+    context 'with PHP memory_limit default' do
+      let(:test_data_php_memory_default) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-php-memory-default'
+        data:cfg:username = 'phpmemoryuser'
+        data:cfg:php_memory_limit = nil
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-php-memory-default', test_data_php_memory_default)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-php-memory-default').data }
+
+      it 'defaults memory_limit to 64' do
+        expect(subject.php.memory_limit).to eq(64)
+      end
+    end
+
+    context 'with PHP additional configuration' do
+      let(:test_data_php_additional) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-php-additional'
+        data:cfg:username = 'phpadditionaluser'
+        data:cfg:php_additional = 'custom php.ini settings'
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-php-additional', test_data_php_additional)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-php-additional').data }
+
+      it 'includes PHP additional configuration' do
+        expect(subject.php.additional).to eq('custom php.ini settings')
+      end
+    end
+
+    context 'with PHP legacy writable storage' do
+      let(:test_data_php_legacy) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-php-legacy'
+        data:cfg:username = 'phplegacyuser'
+        data:cfg:php_legacy_writable_storage = "/var/www\n/tmp\n/uploads"
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-php-legacy', test_data_php_legacy)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-php-legacy').data }
+
+      it 'includes PHP legacy writable storage paths' do
+        expect(subject.php.legacy.writable_storage).to eq('/var/www', '/tmp', '/uploads')
+      end
+    end
+
+    context 'with PHP version in different format' do
+      let(:test_data_php_version) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-php-version'
+        data:cfg:username = 'phpversionuser'
+        data:cfg:php_version = '8.2'
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-php-version', test_data_php_version)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-php-version').data }
+
+      it 'converts PHP version to lowercase string' do
+        expect(subject.php.version).to eq('8.2')
+      end
+    end
+
+    context 'with SSL disabled' do
+      let(:test_data_ssl_disabled) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-ssl-disabled'
+        data:cfg:username = 'ssldisableduser'
+        data:cfg:ssl_enabled = false
+        data:cfg:ssl_allow_http = true
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-ssl-disabled', test_data_ssl_disabled)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-ssl-disabled').data }
+
+      it 'allows HTTP when SSL is disabled' do
+        expect(subject.ssl.enabled).to be false
+        expect(subject.ssl.allow_http).to be true
+        expect(subject.ssl.letsencrypt).to be false
+      end
+    end
+
+    context 'with SSL enabled but letsencrypt disabled' do
+      let(:test_data_ssl_no_letsencrypt) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-ssl-no-letsencrypt'
+        data:cfg:username = 'ssluser'
+        data:cfg:ssl_enabled = true
+        data:cfg:ssl_letsencrypt = false
+        data:cfg:ssl_allow_http = true
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-ssl-no-letsencrypt', test_data_ssl_no_letsencrypt)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-ssl-no-letsencrypt').data }
+
+      it 'has SSL enabled but letsencrypt disabled' do
+        expect(subject.ssl.enabled).to be true
+        expect(subject.ssl.letsencrypt).to be false
+        expect(subject.ssl.allow_http).to be true
+      end
+    end
+
+    context 'with HTTP additional configuration' do
+      let(:test_data_http_additional) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-http-additional'
+        data:cfg:username = 'httpadditionaluser'
+        data:cfg:httpd_additional = 'Custom Apache config'
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-http-additional', test_data_http_additional)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-http-additional').data }
+
+      it 'includes HTTP additional configuration' do
+        expect(subject.http.apache2.additional).to eq('Custom Apache config')
+      end
+    end
+
+    context 'with HTTP global_options and allow_override edge cases' do
+      let(:test_data_http_options) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-http-options'
+        data:cfg:username = 'httpoptionsuser'
+        data:cfg:httpd_global_options = 'Indexes,FollowSymLinks,ExecCGI'
+        data:cfg:httpd_allow_override = 'None,All'
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-http-options', test_data_http_options)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-http-options').data }
+
+      it 'joins HTTP options with spaces' do
+        expect(subject.http.apache2.global_options).to eq('Indexes FollowSymLinks ExecCGI')
+        expect(subject.http.apache2.allow_override).to eq('None All')
+      end
+    end
+
+    context 'with SMTP disabled (no PHP, no Docker)' do
+      let(:test_data_no_smtp) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-no-smtp'
+        data:cfg:username = 'nosmtpuser'
+        data:cfg:php_enabled = false
+        data:cfg:is_docker = false
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-no-smtp', test_data_no_smtp)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-no-smtp').data }
+
+      it 'does not include SMTP configuration' do
+        expect(subject.smtp).to be_nil
+      end
+    end
+
+    context 'with HTTP compat disabled' do
+      let(:test_data_http_compat) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-http-compat'
+        data:cfg:username = 'httpcompatuser'
+        data:cfg:httpd_compat = 'N'
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-http-compat', test_data_http_compat)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-http-compat').data }
+
+      it 'sets compat to false' do
+        expect(subject.http.apache2.compat).to be false
+      end
+    end
+
+    context 'with empty HTTP modules' do
+      let(:test_data_no_modules) do
+        data = test_data.dup
+        data:cfg = data:cfg.dup
+        data:cfg:id = 'test-id-no-modules'
+        data:cfg:username = 'nomodulesuser'
+        data:cfg:httpd_modules = ''
+        data
+      end
+
+      before do
+        DbHelper.add_record(db_path, 'test-id-no-modules', test_data_no_modules)
+        described_class.open(db_path)
+      end
+
+      subject { described_class.find('test-id-no-modules').data }
+
+      it 'returns empty array for modules' do
+        expect(subject.http.apache2.modules).to eq()
+      end
+    end
+  end
+
+  describe 'RecordNotFound exception' do
+    it 'is a StandardError' do
+      expect(Webserver::WebHost::RecordNotFound).to be < StandardError
+    end
+  end
+end

bender-vhng-2.1.16.gem/data/spec/spec_helper.rb Added

@@ -0,0 +1,103 @@
+# This file was generated by the `rspec --init` command. Conventionally, all
+# specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
+# The generated `.rspec` file contains `--require spec_helper` which will cause
+# this file to always be loaded, without a need to explicitly require it in any
+# files.
+#
+# Given that it is always loaded, you are encouraged to keep this file as
+# light-weight as possible. Requiring heavyweight dependencies from this file
+# will add to the boot time of your test suite on EVERY test run, even for an
+# individual file that may not need all of that loaded. Instead, consider making
+# a separate helper file that requires the additional dependencies and performs
+# the additional setup, and require it from the spec files that actually need
+# it.
+#
+# See http://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
+
+require 'byebug'
+
+RSpec.configure do |config|
+  # rspec-expectations config goes here. You can use an alternate
+  # assertion/expectation library such as wrong or the stdlib/minitest
+  # assertions if you prefer.
+  config.expect_with :rspec do |expectations|
+    # This option will default to `true` in RSpec 4. It makes the `description`
+    # and `failure_message` of custom matchers include text for helper methods
+    # defined using `chain`, e.g.:
+    #     be_bigger_than(2).and_smaller_than(4).description
+    #     # => "be bigger than 2 and smaller than 4"
+    # ...rather than:
+    #     # => "be bigger than 2"
+    expectations.include_chain_clauses_in_custom_matcher_descriptions = true
+  end
+
+  # rspec-mocks config goes here. You can use an alternate test double
+  # library (such as bogus or mocha) by changing the `mock_with` option here.
+  config.mock_with :rspec do |mocks|
+    # Prevents you from mocking or stubbing a method that does not exist on
+    # a real object. This is generally recommended, and will default to
+    # `true` in RSpec 4.
+    mocks.verify_partial_doubles = true
+  end
+
+  # This option will default to `:apply_to_host_groups` in RSpec 4 (and will
+  # have no way to turn it off -- the option exists only for backwards
+  # compatibility in RSpec 3). It causes shared context metadata to be
+  # inherited by the metadata hash of host groups and examples, rather than
+  # triggering implicit auto-inclusion in groups with matching metadata.
+  config.shared_context_metadata_behavior = :apply_to_host_groups
+
+# The settings below are suggested to provide a good initial experience
+# with RSpec, but feel free to customize to your heart's content.
+=begin
+  # This allows you to limit a spec run to individual examples or groups
+  # you care about by tagging them with `:focus` metadata. When nothing
+  # is tagged with `:focus`, all examples get run. RSpec also provides
+  # aliases for `it`, `describe`, and `context` that include `:focus`
+  # metadata: `fit`, `fdescribe` and `fcontext`, respectively.
+  config.filter_run_when_matching :focus
+
+  # Allows RSpec to persist some state between runs in order to support
+  # the `--only-failures` and `--next-failure` CLI options. We recommend
+  # you configure your source control system to ignore this file.
+  config.example_status_persistence_file_path = "spec/examples.txt"
+
+  # Limits the available syntax to the non-monkey patched syntax that is
+  # recommended. For more details, see:
+  #   - http://rspec.info/blog/2012/06/rspecs-new-expectation-syntax/
+  #   - http://www.teaisaweso.me/blog/2013/05/27/rspecs-new-message-expectation-syntax/
+  #   - http://rspec.info/blog/2014/05/notable-changes-in-rspec-3/#zero-monkey-patching-mode
+  config.disable_monkey_patching!
+
+  # This setting enables warnings. It's recommended, but in some cases may
+  # be too noisy due to issues in dependencies.
+  config.warnings = true
+
+  # Many RSpec users commonly either run the entire suite or an individual
+  # file, and it's useful to allow more verbose output when running an
+  # individual spec file.
+  if config.files_to_run.one?
+    # Use the documentation formatter for detailed output,
+    # unless a formatter has already been configured
+    # (e.g. via a command-line flag).
+    config.default_formatter = "doc"
+  end
+
+  # Print the 10 slowest examples and example groups at the
+  # end of the spec run, to help surface which specs are running
+  # particularly slow.
+  config.profile_examples = 10
+
+  # Run specs in random order to surface order dependencies. If you find an
+  # order dependency and want to debug it, you can fix the order by providing
+  # the seed, which is printed after each run.
+  #     --seed 1234
+  config.order = :random
+
+  # Seed global randomization in this process using the `--seed` CLI option.
+  # Setting this allows you to use `--seed` to deterministically reproduce
+  # test failures related to randomization by passing the same `--seed` value
+  # as the one that triggered the failure.
+  Kernel.srand config.seed
+=end
+end

bender-vhng-2.1.16.gem/data/spec/support/db_helper_kyoto.rb Added

bender-vhng-2.1.16.gem/data/spec/support/db_helper_sqlite3.rb Added

bender-vhng-2.1.16.gem/data/spec/support/sanitize_kch.rb Added

@@ -0,0 +1,106 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pp'
+require 'logger'
+require 'digest'
+require 'active_support/core_ext'
+require 'kyotocabinet'
+
+def anonymize_record(object)
+  case object
+  when Hash
+    if object'_type' == 'Ygg::SimpleService::Server::NewHostings::SslCert'
+      anonymize_certificate(object)
+    elsif object'_type' == 'Ygg::SimpleService::Server::NewHostings::EnvVar'
+      anonymize_env_var(object)
+    else
+      object.each_with_object({}) do |(key, value), acc|
+        acckey = anonymize_entry(key, value)
+      end
+    end
+  when Array
+    object.map { |item| anonymize_record(item) }
+  else
+    object
+  end
+end
+
+def anonymize_entry(key, value)
+  key_name = key.to_s.downcase
+
+  case key_name
+  when /username/
+    anonymize_token('user', value)
+  when /password/
+    anonymize_token('pass', value)
+  when /(quick_search|name)/
+    anonymize_token('foobar', value)
+  else
+    anonymize_record(value)
+  end
+end
+
+def anonymize_token(prefix, value)
+  return value if value.nil?
+
+  digest = Digest::SHA256.hexdigest(value.to_s)
+  "#{prefix}-#{digest0, 12}"
+end
+
+def anonymize_certificate(value)
+  return value if value.nil?
+
+  fingerprint = Digest::SHA256.hexdigest(value.to_s)0, 16
+  value'ssl_cert_data' = "CERT-#{fingerprint}"
+  value'ssl_key_data' = "KEY-#{fingerprint}"
+  value'ssl_cert' = "CERT-#{fingerprint}"
+  value'ssl_key' = "KEY-#{fingerprint}"
+  value'domains' = "www.doma.in"
+  value
+end
+
+def anonymize_env_var(value)
+  return value if value.nil?
+
+  fingerprint = Digest::SHA256.hexdigest(value.to_s)0, 16
+  value'key' = "KEY-#{fingerprint}"
+  value'value' = "VALUE-#{fingerprint}"
+  value
+end
+
+db_path = ARGV0 || File.expand_path('test.kch', __dir__)
+
+unless File.exist?(db_path)
+  warn "Database not found: #{db_path}"
+  exit 1
+end
+
+db = KyotoCabinet::DB.new
+flags = KyotoCabinet::DB::OREADER | KyotoCabinet::DB::OWRITER
+unless db.open(db_path, flags)
+  warn "Unable to open #{db_path}: #{db.error}"
+  exit 1
+end
+
+begin
+  entries = 
+  db.each do |key, raw|
+    entries << key, raw
+  end
+
+  entries.each do |key, raw|
+    puts "== key: #{key}"
+    begin
+      data = Marshal.load(raw)
+      sanitized = anonymize_record(data)
+      db.set(key, Marshal.dump(sanitized))
+    rescue StandardError => e
+      warn "!! failed to load #{key}: #{e.class} #{e.message}"
+      warn e.backtrace.join("\n  ")
+    end
+    puts
+  end
+ensure
+  db.close
+end

bender-vhng-2.1.16.gem/data/spec/support/test.kch Added

bender-vhng-2.1.15.gem/metadata.gz -> bender-vhng-2.1.16.gem/metadata.gz Changed

@@ -1,14 +1,15 @@
 --- !ruby/object:Gem::Specification
 name: bender-vhng
 version: !ruby/object:Gem::Version
-  version: 2.1.15
+  version: 2.1.16
 platform: ruby
 authors:
+- Lele Forzani
 - Angelo Grossini
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: 
-date: 2025-11-05 00:00:00.000000000 Z
+date: 2025-12-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: mail
@@ -17,6 +18,9 @@
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.7'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.7.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -24,86 +28,210 @@
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.7'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.7.1
 - !ruby/object:Gem::Dependency
-  name: kyotocabinet
+  name: activerecord
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '6.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.0.6.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '6.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.0.6.1
 - !ruby/object:Gem::Dependency
-  name: activerecord
+  name: mysql2
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '6.0'
+        version: '0.5'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.5.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '6.0'
+        version: '0.5'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.5.3
 - !ruby/object:Gem::Dependency
-  name: mysql2
+  name: uuidtools
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.4'
+        version: '3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.4'
+        version: '3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.0.0
 - !ruby/object:Gem::Dependency
-  name: uuidtools
+  name: bcrypt
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.1'
+        version: '3.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.1.20
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.1'
+        version: '3.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.1.20
 - !ruby/object:Gem::Dependency
-  name: bcrypt
+  name: ygg_provisioner
   requirement: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.20
+        version: 1.5.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.20
-description: vhosts-ng provisioning tool
+        version: 1.5.0
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '12.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 12.3.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '12.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 12.3.3
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.14'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.14.2
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.14'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.14.2
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.10'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.10.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.10'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.10.0
+- !ruby/object:Gem::Dependency
+  name: byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '11.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 11.1.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '11.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 11.1.3
+description: vhng provisioning tool
 email: angelo@intercom.it
 executables:
 - bender
+- shell
 extensions: 
 extra_rdoc_files:
 - README
 files:
+- ".dockerignore"
+- ".gitignore"
+- ".rspec"
+- Gemfile
+- Gemfile.lock
 - README
+- bender-vhng.gemspec
 - bin/bender
+- bin/shell
+- build/bender.cron
+- build/rubygem-bender-vhng.changes
+- build/rubygem-bender-vhng.spec
 - config/baseconfig.xml
 - config/mysql.xml
 - config/sql/000-cluebringer.sql
@@ -118,6 +246,9 @@
 - lib/bender/classes/Models/Webserver/SMTPLogin.rb
 - lib/bender/classes/Models/Webserver/WebHosts.rb
 - lib/bender/classes/Plugin.rb
+- lib/bender/classes/Plugins/Docker/.gitkeep
+- lib/bender/classes/Plugins/Letsencrypt/.keep
+- lib/bender/classes/Plugins/Mysql/.keep
 - lib/bender/classes/Plugins/Webserver/01-Filesystems.rb
 - lib/bender/classes/Plugins/Webserver/05-Mail.rb
 - lib/bender/classes/Plugins/Webserver/05-MySQL.rb
@@ -128,8 +259,10 @@
 - lib/bender/classes/Plugins/Webserver/50-Proxy.rb
 - lib/bender/classes/Plugins/Webserver/90-Logrotate.rb
 - lib/bender/classes/Plugins/Webserver/95-Docker.rb
+- lib/bender/classes/Plugins/native/Webserver/.keep
 - lib/bender/classes/ServicesBackend/Mysql.rb
 - lib/bender/classes/ServicesBackend/Webserver.rb
+- lib/bender/services/.keep
 - lib/bender/templates/webserver/403.html
 - lib/bender/templates/webserver/500.html
 - lib/bender/templates/webserver/apache24-compat.erb
@@ -192,12 +325,17 @@
 - lib/bender/xternal/xml-configfile-0.9.7/test/tc_to_hash.rb
 - lib/bender/xternal/xml-configfile-0.9.7/test/tc_writeaccess.rb
 - lib/bender/xternal/xml-configfile-0.9.7/xmlconfigfile.gemspec
+- spec/bender/classes/Models/Webserver/WebHosts_spec.rb
+- spec/spec_helper.rb
+- spec/support/db_helper_kyoto.rb
+- spec/support/db_helper_sqlite3.rb
+- spec/support/sanitize_kch.rb
+- spec/support/test.kch
 homepage: https://intercom.it
 licenses:
 - MIT
-metadata:
-  source_code_uri: https://lab.intercom.it
-post_install_message:
+metadata: {}
+post_install_message: 
 rdoc_options: 
 require_paths:
 - lib
@@ -212,8 +350,15 @@
     - !ruby/object:Gem::Version
       version: '0'
 requirements: 
-rubygems_version: 3.5.22
-signing_key:
+rubyforge_project: 
+rubygems_version: 2.7.6.3
+signing_key: 
 specification_version: 4
-summary: vhng provisioning tool
-test_files: 
+summary: Tool for provisioning vhosts on the Intercom VHNG platform
+test_files:
+- spec/bender/classes/Models/Webserver/WebHosts_spec.rb
+- spec/spec_helper.rb
+- spec/support/db_helper_kyoto.rb
+- spec/support/db_helper_sqlite3.rb
+- spec/support/sanitize_kch.rb
+- spec/support/test.kch