Basic chef and capistrano configuration for a Rails 4/Spree app

We're using DigitalOcean for VPS, DNSimple for DNS. Amazon S3 for storage. OS can be CentOS 7 x64 or Ubuntu 14.04 x64. Database is Postgres 9.3. Web server can be Passenger or Unicorn+nginx - whichever is multi-tenant friendly, as we have several websites that will be on the same VPS. There are dozens of slightly different tutorials out there for this exact use case - it's extremely common. However, some of these are slightly out-of-date, others use mysql. I'm new to both Chef and Capistrano, and I'm looking for an expert who already knows these tools well. The resulting configuration and scripts need to be able to produce a secure, working server. Provisioning: - provision 1GB droplet with backups and pubkey auth - Install security updates, fully patch server - bootstrap chef, etc - install ruby 2.0.0 with rbenv or rvm (rbenv preferred) - set up deployers security group and 'deployer' user account - with pubkey auth, no passwords. [login to view URL] is one of the deployers; there will be 2 authorized_keys - install and secure the web server - install and secure the database - setup monitoring, logging, and e-mail notifications - setup regular database backups to S3 - install the SSL certificate provided Decommissioning: - Verify that DNS records do not point to the server. - Perform a database backup - Delete and scrub VPS. App deployment and synchronization: - Update the DNS records to point to the target server - Deploy app, generate assets, and migrate database - Backup database - Restore database to specific snapshot - Sync local database (restore/backup against local) - Roll-back to previous release There will be 1 staging server and 1 production server. It's a small, low-traffic e-commerce app, so load balancing is not needed. Helpful resources: [login to view URL] [login to view URL] [login to view URL] [login to view URL] [login to view URL] [login to view URL] [login to view URL] [login to view URL]