From 64e90bb8e2e9784306af3b1af48ace92e68a4272 Mon Sep 17 00:00:00 2001 From: krasi Date: Fri, 15 Nov 2024 15:12:23 +0300 Subject: [PATCH] =?UTF-8?q?=D0=97=D0=B0=D0=B3=D1=80=D1=83=D0=B7=D0=B8?= =?UTF-8?q?=D1=82=D1=8C=20=D1=84=D0=B0=D0=B9=D0=BB=D1=8B=20=D0=B2=20=C2=AB?= =?UTF-8?q?src/content/blog=C2=BB?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- ...τﾑひｰﾐｽﾐｾﾐｲﾐｺﾐｰ ﾐｸ ﾐｽﾐｰﾑﾑびﾐｾﾐｹﾐｺﾐｰ.md | 299 ++++++++++++++++++ 1 file changed, 299 insertions(+) create mode 100644 src/content/blog/Django server ﾑτﾑひｰﾐｽﾐｾﾐｲﾐｺﾐｰ ﾐｸ ﾐｽﾐｰﾑﾑびﾐｾﾐｹﾐｺﾐｰ.md diff --git a/src/content/blog/Django server ﾑτﾑひｰﾐｽﾐｾﾐｲﾐｺﾐｰ ﾐｸ ﾐｽﾐｰﾑﾑびﾐｾﾐｹﾐｺﾐｰ.md b/src/content/blog/Django server ﾑτﾑひｰﾐｽﾐｾﾐｲﾐｺﾐｰ ﾐｸ ﾐｽﾐｰﾑﾑびﾐｾﾐｹﾐｺﾐｰ.md new file mode 100644 index 0000000..2fee82e --- /dev/null +++ b/src/content/blog/Django server ﾑτﾑひｰﾐｽﾐｾﾐｲﾐｺﾐｰ ﾐｸ ﾐｽﾐｰﾑﾑびﾐｾﾐｹﾐｺﾐｰ.md @@ -0,0 +1,299 @@ +## ﾐﾐｰﾐｱﾐｾﾑﾐｸﾐｵ ﾐｺﾐｾﾐｴﾑ + +```sh +sudo apt-get install -y zsh wget build-essential tree redis-server nginx zlib1g-dev libbz2-dev libreadline-dev llvm libncurses5-dev libncursesw5-dev xz-utils tk-dev liblzma-dev python3-dev python3-pip python3-venv python3-pil python3-lxml libxslt-dev python3-libxml2 libffi-dev libssl-dev python3-dev gnumeric libsqlite3-dev libpq-dev libxml2-dev libxslt1-dev libjpeg-dev libfreetype6-dev libcurl4-openssl-dev libgdbm-dev libc6-dev supervisor +``` +ﾐ｣ﾑﾑひｰﾐｽﾐｰﾐｲﾐｻﾐｸﾐｲﾐｰﾐｵﾐｼ ﾐｸ ﾐｲﾐｺﾐｻﾑ紗ﾐｰﾐｵﾐｼ ﾐｿﾐｾ ﾑσｼﾐｾﾐｻﾑﾐｰﾐｽﾐｸﾑ `Oh-my-zsh` +```sh +sh -c "$(curl -fsSL https://raw.githubusercontent.com/robbyrussell/oh-my-zsh/master/tools/install.sh)" +zsh +chsh -s $(which zsh) +sudo chsh -s $(which zsh) +``` +ﾐ｣ﾑﾑひｰﾐｽﾐｰﾐｲﾐｻﾐｸﾐｲﾐｰﾐｵﾐｼ ﾐｸ ﾐｲﾐｺﾐｻﾑ紗ﾐｰﾐｵﾐｼ ﾐｿﾐｾ ﾑσｼﾐｾﾐｻﾑﾐｰﾐｽﾐｸﾑ `neofetch` +```sh +# ﾐ渙ｵﾑﾐｲﾑ巾ｹ ﾐｷﾐｰﾐｿﾑτﾐｺ ﾐｴﾐｻﾑ ﾑﾐｾﾐｷﾐｴﾐｰﾐｽﾐｸﾑ ~/.config/neofetch/config.conf +neofetch +# ﾐ頒ｰﾐｻﾐｵﾐｵ ﾐｴﾐｾﾐｱﾐｰﾐｲﾐｻﾑ紹ｵﾐｼ ﾐｲ .bashrc ﾐｲ ﾑﾐｰﾐｼﾑ巾ｹ ﾐｺﾐｾﾐｽﾐｵﾑ ﾑﾐｰﾐｹﾐｻﾐｰ +echo "neofetch" >> ~/.zshrc +# ﾐ頒ｰﾐｻﾐｵﾐｵ ﾐｸﾐｴﾐｵﾐｼ ﾑﾐｵﾐｴﾐｰﾐｺﾑひｸﾑﾐｾﾐｲﾐｰﾑび ﾐｺﾐｾﾐｽﾑﾐｸﾐｳ +nano ~/.config/neofetch/config.conf +``` +[ﾐ斷ｰﾑﾑびﾐｾﾐｹﾐｺﾐｰ ﾐｾﾐｿﾐｸﾑﾐｰﾐｽﾐｰ ﾐｲﾐｾﾑ ﾐｲ ﾑ采ひｾﾐｹ ﾑﾑひｰﾑび糊ｵ](https://xn----7sbabksvrfvnenyr4r.xn--p1ai/blog/09-graylog/#:~:text=cmd%20%2D%2Dreload-,%D0%9D%D0%B0%D1%81%D1%82%D0%BE%D0%B9%D0%BA%D0%B0%20neofetch,-%23%20%D0%9F%D0%B5%D1%80%D0%B2%D1%8B%D0%B9%20%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%20%D0%B4%D0%BB%D1%8F) +ﾐﾐｵﾐｴﾐｰﾐｺﾑひｸﾑﾑσｵﾐｼ ﾑﾐｾﾐｾﾐｱﾑ禍ｵﾐｽﾐｸﾐｵ ﾐｿﾑﾐｸﾐｲﾐｵﾑびﾑひｲﾐｸﾑ +```sh +sudo nano /etc/motd +``` +## ﾐ頒ｾﾐｱﾐｰﾐｲﾐｻﾑ紹ｵﾐｼ ﾐｱﾐｵﾐｺﾑ災ｽﾐｴ ﾐｿﾑﾐｾﾐｵﾐｺﾑ +ﾐ湲ﾐｸﾑﾑびσｿﾐｰﾐｵﾐｼ ﾐｺ ﾑτﾑひｰﾐｽﾐｾﾐｲﾐｺﾐｸ ﾐｲﾐｸﾑﾑびσｰﾐｻﾑ糊ｽﾐｾﾐｳﾐｾ ﾐｾﾐｺﾑﾑσｶﾐｵﾐｽﾐｸﾑ +```sh +python3 -m venv env +source env/bin/activate +pip install django +``` +ﾐ｡ﾐｾﾐｷﾐｴﾐｰﾐｵﾐｼ ﾐｺﾐｰﾑひｰﾐｻﾐｾﾐｳ +```sh +mkdir /var/www/project +# ﾐｴﾐｰﾐｵﾐｼ ﾐｿﾑﾐｰﾐｲﾐｰ ﾐｽﾐｰ ﾐｳﾑﾑσｿﾐｿﾑ +sudo chown -R root:users /var/www/project +sudo chmod 775 /var/www/project +cd /var/www/project +``` +ﾐ｡ﾐｺﾐｰﾑﾐｸﾐｲﾐｰﾐｵﾐｼ ﾐｽﾑσｶﾐｽﾑτ ﾐｲﾐｵﾑﾑﾐｸﾑ python ﾐｸ ﾑﾐｰﾐｷﾐｲﾐｾﾑﾐｰﾑﾐｸﾐｲﾐｰﾐｵﾐｼ ﾐｵﾑ +```sh +wget https://www.python.org/ftp/python/3.11.10/Python-3.11.10.tgz ; \ +tar xvf Python-3.11.* ; \ +cd Python-3.11.10 ; \ +mkdir ~/.python ; \ +./configure --enable-optimizations --prefix=/home//.python ; \ +make -j8 ; \ +sudo make altinstall +### +sudo /home//.python/bin/python3.11 -m pip install -U pip +``` +ﾐﾐｰﾐｷﾐｲﾐｾﾑﾐｰﾑﾐｸﾐｲﾐｰﾐｵﾐｼ ﾐｲﾐｸﾑﾑびσｰﾐｻﾑ糊ｽﾑτ ﾑﾑﾐｵﾐｴﾑ ﾐｸ ﾐｾﾐｱﾐｽﾐｾﾐｲﾐｻﾑ紹ｵﾐｼ ﾐｵﾐｳﾐｾ +```sh +/home//.python/bin/python3 -m venv env +source env/bin/activate +git clone https://github.com/Project1.git +pip install -U pip +pip install -r requirements.txt +``` +ﾐ｡ﾐｾﾐｷﾐｴﾐｰﾑ岱ｼ ﾑﾐｲﾑ紹ｷﾑ ﾑ ﾐ岱 +```shell +python.exe manage.py makemigrations accounts media main articles todos tenants teams properties goods documentsflow contracts techfeatures histories comments editors functionaldiagram +python manage.py migrate +python manage.py createsuperuser +### ﾐ｣ﾐｶﾐｵ ﾐｼﾐｾﾐｶﾐｵﾐｼ ﾐｿﾑﾐｾﾐｲﾐｵﾑﾐｸﾑび ﾑﾑひｰﾑﾑ ﾐｿﾑﾐｸﾐｻﾐｾﾐｶﾐｵﾐｽﾐｸﾑ +python manage.py runserver 0.0.0.0:8000 +``` +ﾐ頒ｾﾐｱﾐｰﾐｲﾐｻﾑ紹ｵﾐｼ ﾐｴﾐｾﾑﾑびσｿ ﾐｺ ﾐｿﾐｾﾑﾑ ﾐｵﾑﾐｻﾐｸ ﾐｵﾑﾑび ﾑﾐｰﾐｵﾑﾐｲﾐｾﾐｻ +```sh +sudo firewall-cmd --permanent --add-port=8000/tcp +sudo firewall-cmd --permanent --add-port=8001/tcp +sudo firewall-cmd --permanent --add-service=https +sudo firewall-cmd --permanent --add-service=http +sudo firewall-cmd --reload +``` +ﾐ｣ﾑﾑひｰﾐｽﾐｰﾐｲﾐｻﾐｸﾐｲﾐｰﾐｵﾐｼ ﾐｸ ﾐｽﾐｰﾑﾑびﾐｰﾐｸﾐｲﾐｰﾐｵﾐｼ `gunicorn` +ﾐ旃σｶﾐｽﾐｾ ﾑﾐｾﾐｷﾐｴﾐｰﾑび 2 ﾑﾐｰﾐｹﾐｻﾐｰ ﾐｾﾐｴﾐｸﾐｽ ﾐｲ ﾐｴﾐｸﾑﾐｵﾐｺﾑひｾﾑﾐｸﾐｸ ﾐｿﾑﾐｾﾐｵﾐｺﾑひｰ, ﾐｲﾑひｾﾑﾐｾﾐｹ ﾐｽﾐｰ ﾑτﾐｾﾐｲﾐｽﾐｵ env +ﾐ渙ｵﾑﾐｲﾑ巾ｹ ﾑﾐｰﾐｹﾐｻ `/var/www/project1/gunicorn_config.py` +```python +command = '/var/www/env/bin/gunicorn' +pythonpath = '/var/www/project1' +bind = '127.0.0.1:8001' +workers = 5 +user = '' +limit_request_fields = 32000 +limit_request_field_size = 0 +raw_env = 'DJANGO_SETTINGS_MODULE=project1.settings' +``` +ﾐ柘ひｾﾑﾐｾﾐｹ ﾑﾐｰﾐｹﾐｻ +```sh +#!/bin/bash +source /var/www/env/bin/activate +source /var/www/env/bin/postactivate +exec gunicorn -c "/var/www/project1/gunicorn_config.py" project1.wsgi +``` +ﾐ頒ｵﾐｻﾐｰﾐｵﾐｼ ﾑﾐｰﾐｹﾐｻ ﾐｸﾑﾐｿﾐｾﾐｻﾐｽﾑ紹ｵﾐｼﾑ巾ｼ +```sh +chmod +x gunicorn_start.sh +``` +ﾐ｣ﾑﾑひｰﾐｽﾐｰﾐｲﾐｻﾐｸﾐｲﾐｰﾐｵﾐｼ ﾐｸ ﾐｽﾐｰﾑﾑびﾐｰﾐｸﾐｲﾐｰﾐｵﾐｼ `supervisior` +ﾐ｡ﾐｾﾐｷﾐｴﾐｰﾐｵﾐｼ ﾑﾐｰﾐｹﾐｻ ﾐｺﾐｾﾐｽﾑﾐｸﾐｳﾑτﾐｰﾑﾐｸﾐｸ `/etc/supervisior/conf.d/project1.conf` +```sh +[program:project1_gunicorn] +command=/var/www/gunicorn_start.sh +user= +process_name=%(program_name)s +numprocs=1 +autostart=true +autorestart=true +redirect_stderr=true +``` +ﾐ頒ｰﾐｻﾐｵﾐｵ ﾐｽﾐｰﾑﾑびﾐｾﾐｹﾐｺﾐｰ nginx `/etc/nginx/sites-available/default` +```sh +server { + server_name example.com; + # ﾐ榧ｿﾑひｸﾐｼﾐｸﾐｷﾐｰﾑﾐｸﾑ SSL + ssl_session_cache shared:SSL:10m; + ssl_session_timeout 10m; + ssl_protocols TLSv1.2 TLSv1.3; + ssl_prefer_server_ciphers on; + ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384"; + # HTTP ﾐｷﾐｰﾐｳﾐｾﾐｻﾐｾﾐｲﾐｺﾐｸ ﾐｴﾐｻﾑ ﾐｱﾐｵﾐｷﾐｾﾐｿﾐｰﾑﾐｽﾐｾﾑﾑひｸ + add_header X-Content-Type-Options nosniff; + add_header X-Frame-Options DENY; + add_header X-XSS-Protection "1; mode=block"; + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; + # ﾐ樮ﾐｽﾐｾﾐｲﾐｽﾐｾﾐｹ ﾐｺﾐｾﾑﾐｽﾐｵﾐｲﾐｾﾐｹ ﾐｺﾐｰﾑひｰﾐｻﾐｾﾐｳ + root /var/www/html; + index index.html index.htm index.nginx-debian.html; + # ﾐ湲ﾐｾﾐｺﾑﾐｸ ﾐｴﾐｻﾑ backend + location / { + proxy_pass http://127.0.0.1:8001; + proxy_set_header X-Forwarded-Host $server_name; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + add_header P3P 'CP="ALL DSP COR PSAa PSDa OUR NOR ONL UNI COM NAV"'; + # ﾐ｣ﾐｱﾐｵﾐｴﾐｸﾑひｵﾑﾑ, ﾑﾑひｾ ﾐｲﾐｰﾐｼ ﾐｴﾐｵﾐｹﾑﾑひｲﾐｸﾑひｵﾐｻﾑ糊ｽﾐｾ ﾐｽﾑσｶﾐｽﾐｾ ﾑﾐｰﾐｷﾑﾐｵﾑ威ｸﾑび ﾐｴﾐｾﾑﾑびσｿ ﾑ ﾐｻﾑ社ｱﾐｾﾐｳﾐｾ ﾐｴﾐｾﾐｼﾐｵﾐｽﾐｰ + add_header Access-Control-Allow-Origin *; + } + # ﾐ榧ｱﾑﾐｰﾐｱﾐｾﾑひｺﾐｰ ﾐｼﾐｵﾐｴﾐｸﾐｰ ﾑﾐｰﾐｹﾐｻﾐｾﾐｲ + location /media/ { + alias /var/www/project1/media/; + expires max; + access_log on; + } + # ﾐ嶢ｾﾐｳﾐｸ + error_log /var/log/nginx/backend-error.log; + access_log /var/log/nginx/backend-access.log; + # ﾐ慴ｰﾐｺﾑﾐｸﾐｼﾐｰﾐｻﾑ糊ｽﾑ巾ｹ ﾑﾐｰﾐｷﾐｼﾐｵﾑ ﾐｷﾐｰﾐｳﾑﾑσｶﾐｰﾐｵﾐｼﾐｾﾐｳﾐｾ ﾑﾐｰﾐｹﾐｻﾐｰ + client_max_body_size 100M; + # ﾐ厘ｰﾑ禍ｸﾑひｰ ﾐｾﾑ ﾐｼﾐｵﾐｴﾐｻﾐｵﾐｽﾐｽﾑ錦 ﾐｰﾑひｰﾐｺ (slowloris) + client_body_timeout 10s; + client_header_timeout 10s; + #send_timeout 10s; + keepalive_timeout 65; +} +# ﾐﾐｵﾐｴﾐｸﾑﾐｵﾐｺﾑ ﾑ HTTP ﾐｽﾐｰ HTTPS +server { + listen 80; + listen [::]:80; + server_name example.com; + return 301 https://$host$request_uri; +} +``` +ﾐ頒ｰﾐｻﾐｵﾐｵ ﾐｿﾐｵﾑﾐｵﾐｷﾐｰﾐｳﾑﾑσｶﾐｰﾐｵﾐｼ nginx +```sh +sudo service nginx restart +``` +ﾐ頒ｰﾐｻﾐｵﾐｵ ﾐｴﾐｻﾑ ﾐｺﾐｾﾑﾑﾐｵﾐｺﾑひｽﾐｾﾐｹ ﾑﾐｰﾐｱﾐｾﾑび ﾐｽﾑσｶﾐｽﾐｾ ﾑτﾑひｰﾐｽﾐｾﾐｲﾐｸﾑび ﾑﾐｵﾑﾑひｸﾑﾐｸﾐｺﾐｰﾑ LetsEncrypt ssl, ﾑτﾑひｰﾐｽﾐｾﾐｲﾐｺﾐｰ ﾐｱﾑσｴﾐｵﾑ ﾑ ﾐｿﾐｾﾐｼﾐｾﾑ禾袴 `certbot` +[ﾐ侑ｽﾑﾑびﾑσｺﾑﾐｸﾑ ﾑ ﾐｾﾑﾐｸﾑﾐｸﾐｰﾐｻﾑ糊ｽﾐｾﾐｳﾐｾ ﾑﾐｰﾐｹﾑひｰ]([ﾐ侑ｽﾑﾑびﾑσｺﾑﾐｸﾐｸ Certbot | Certbot](https://certbot.eff.org/instructions?ws=nginx&os=pip)) +```sh +sudo apt update +sudo apt install python3 python3-venv libaugeas0 +sudo /home//.python/bin/python3 -m venv /opt/certbot/ +sudo /opt/certbot/bin/pip install --upgrade pip +sudo /opt/certbot/bin/pip install certbot certbot-nginx +sudo ln -s /opt/certbot/bin/certbot /usr/bin/certbot +sudo certbot --nginx +``` +ﾐ頒ｰﾐｻﾐｵﾐｵ ﾐｾﾑひｲﾐｵﾑﾐｰﾐｵﾐｼ ﾐｽﾐｰ ﾐｲﾑﾐｵ ﾐｲﾐｾﾐｿﾑﾐｾﾑﾑ, ﾐｲﾐｾﾑ ﾑﾐｿﾐｸﾑﾐｾﾐｺ ﾐｾﾑﾐｾﾐｱﾐｾ ﾐｸﾐｽﾑひｵﾑﾐｵﾑﾐｽﾑ錦 +ﾐ頒ｾﾐｱﾐｰﾐｲﾐｻﾑ紹ｵﾐｼ ﾐｰﾐｲﾑひｾ ﾐｿﾐｵﾑﾐｵﾐｲﾑ巾ｿﾑτﾐｺ ﾑﾐｵﾑﾑひｸﾑﾐｸﾐｺﾐｰﾑひｰ +``` +echo "0 0,12 * * * root /opt/certbot/bin/python -c 'import random; import time; time.sleep(random.random() * 3600)' && sudo certbot renew -q" | sudo tee -a /etc/crontab > /dev/null +``` +## ﾐｴﾐｾﾐｱﾐｰﾐｲﾐｻﾑ紹ｵﾐｼ ﾑﾑﾐｾﾐｽﾑひｵﾐｽﾐｴ ﾐｿﾑﾐｾﾐｵﾐｺﾑ +```sh +git clone https://github.com/Project2.git +cd project2 +``` +ﾐ｣ﾑﾑひｰﾐｽﾐｰﾐｲﾐｻﾐｸﾐｲﾐｰﾐｵﾐｼ `npm` +```sh +sudo apt install -y npm +``` +ﾐ｣ﾑﾑひｰﾐｽﾐｰﾐｲﾐｻﾐｸﾐｲﾐｰﾐｵﾐｼ ﾐｱﾐｸﾐｱﾐｻﾐｸﾐｾﾑひｵﾐｺﾐｸ ﾐｸﾐｷ ﾐｿﾑﾐｾﾐｵﾐｺﾑひｰ +```sh +npm install +``` +ﾐ｡ﾑひｰﾑﾑびσｵﾐｼ ﾐｿﾑﾐｾﾐｵﾐｺﾑ ﾐｲ ﾑﾐｵﾐｶﾐｸﾐｼﾐｵ ﾑﾐｰﾐｷﾑﾐｰﾐｱﾐｾﾑびﾐｸﾐｺﾐｰ +```sh +npm run dev +``` +ﾐ ﾐｾﾐｿﾑ肖び ﾐｲﾐｾﾐｷﾐｲﾑﾐｰﾑ禍ｰﾐｵﾐｼﾑﾑ ﾐｺ ﾑ威ｰﾐｳﾑ ﾐｴﾐｾﾐｱﾐｰﾐｲﾐｻﾐｵﾐｽﾐｸﾑ ﾐｿﾐｾﾑﾑひｰ ﾐｲ ﾑﾐｰﾐｵﾑﾐｲﾐｾﾐｻ +```sh +sudo firewall-cmd --permanent --add-port=8002/tcp +sudo firewall-cmd --reload +``` +ﾐ｡ﾐｾﾐｷﾐｴﾐｰﾐｵﾐｼ ﾐｽﾐｾﾐｲﾑ巾ｹ ﾑﾐｰﾐｹﾐｻ ﾐｺﾐｾﾐｽﾑﾐｸﾐｳﾑτﾐｰﾑﾐｸﾐｸ ﾐｴﾐｻﾑ nginx + `/etc/nginx/sites-available/example` +```sh +server { + listen 443; + server_name example2.com; + charset utf-8; + + # ﾐ榧ｿﾑひｸﾐｼﾐｸﾐｷﾐｰﾑﾐｸﾑ SSL + #ssl_session_cache shared:SSL:10m; + #ssl_session_timeout 10m; + #ssl_protocols TLSv1.2 TLSv1.3; + #ssl_prefer_server_ciphers on; + #ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384"; + + # HTTP headers ﾐｴﾐｻﾑ ﾐｱﾐｵﾐｷﾐｾﾐｿﾐｰﾑﾐｽﾐｾﾑﾑひｸ + add_header X-Content-Type-Options nosniff; + add_header X-Frame-Options DENY; + add_header X-XSS-Protection "1; mode=block"; + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; + + } + # ﾐ榧ｱﾑﾐｰﾐｱﾐｾﾑひｺﾐｰ ﾐｷﾐｰﾐｿﾑﾐｾﾑﾐｾﾐｲ + location / { + proxy_pass http://127.0.0.1:8002; + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection 'upgrade'; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_cache_bypass $http_upgrade; + + # ﾐ厘ｰﾑ禍ｸﾑひｰ ﾐｾﾑ ﾐｼﾐｵﾐｴﾐｻﾐｵﾐｽﾐｽﾑ錦 ﾐｰﾑひｰﾐｺ (slowloris) + client_body_timeout 10s; + #client_header_timeout 10s; + send_timeout 10s; + } + + # ﾐ嶢ｾﾐｳﾐｸ + error_log /var/log/nginx/frontend-error.log; + access_log /var/log/nginx/frontend-access.log; + + # ﾐ慴ｰﾐｺﾑﾐｸﾐｼﾐｰﾐｻﾑ糊ｽﾑ巾ｹ ﾑﾐｰﾐｷﾐｼﾐｵﾑ ﾐｷﾐｰﾐｳﾑﾑσｶﾐｰﾐｵﾐｼﾐｾﾐｳﾐｾ ﾑﾐｰﾐｹﾐｻﾐｰ (ﾐｽﾐｰﾐｿﾑﾐｸﾐｼﾐｵﾑ, 100MB) + client_max_body_size 100M; + + # ﾐ厘ｰﾑ禍ｸﾑひｰ ﾐｾﾑ ﾑﾐｻﾐｸﾑ威ｺﾐｾﾐｼ ﾐｴﾐｾﾐｻﾐｳﾐｸﾑ ﾑﾐｾﾐｵﾐｴﾐｸﾐｽﾐｵﾐｽﾐｸﾐｹ + keepalive_timeout 65; +} + +# ﾐﾐｵﾐｴﾐｸﾑﾐｵﾐｺﾑ ﾑ HTTP ﾐｽﾐｰ HTTPS +server { + listen 80; + server_name example2.com; + return 301 https://$host$request_uri; +} + +``` +ﾐ頒ｰﾐｻﾐｵﾐｵ ﾐｾﾐｿﾑﾐｵﾐｴﾐｵﾐｻﾑ紹ｵﾐｼ ﾐｾﾐｱﾐｰ ﾑﾐｰﾐｹﾐｻﾐｰ ﾐｽﾐｰﾑﾑびﾐｾﾐｹﾐｺﾐｰ nginx +```sh +sudo ln -s /etc/nginx/sites-available/example.com /etc/nginx/sites-enabled/example.com +sudo ln -s /etc/nginx/sites-available/sample.org /etc/nginx/sites-enabled/sample.org +sudo nginx -t && sudo nginx -s reload +# ﾐ頒ｾﾐｱﾐｰﾐｲﾐｻﾑ紹ｵﾐｼ ﾑﾐｵﾑﾑひｸﾑﾐｸﾐｺﾐｰﾑ ﾐｽﾐｰ ﾐｽﾐｾﾐｲﾑ巾ｹ ﾐｴﾐｾﾐｼﾐｵﾐｽ +sudo certbot --nginx +``` +ﾐ｣ﾑﾑひｰﾐｽﾐｰﾐｲﾐｻﾐｸﾐｲﾐｰﾐｵﾐｼ ﾐｿﾑﾐｸﾐｻﾐｾﾐｶﾐｵﾐｽﾐｸﾑ ﾐｴﾐｻﾑ ﾐｿﾐｾﾑﾑひｾﾐｹﾐｽﾐｾﾐｳﾐｾ ﾐｾﾐｱﾐｽﾐｾﾐｲﾐｻﾐｵﾐｽﾐｸﾑ pm2 +```sh +sudo npm i pm2 -g +``` +ﾐ｡ﾐｾﾐｷﾐｴﾐｰﾐｵﾐｼ ﾑﾐｰﾐｹﾐｻ ﾐｺﾐｾﾐｽﾑﾐｸﾐｳﾑτﾐｰﾑﾐｸﾐｸ ﾐｲﾐｼﾐｵﾑﾑひｵ ﾑ ﾐｿﾑﾐｾﾐｵﾐｺﾑひｾﾐｼ +```js +module.exports = { + apps: [ + { + name: 'project2', + port: '8002', + exec_mode: 'cluster', + instances: 'max', + script: './project2/.output/server/index.mjs' + } + ] +} +``` +ﾐｧﾑひｾ ﾐｱﾑ ﾐｿﾐｾﾑﾐｻﾐｵ ﾐｿﾐｵﾑﾐｵﾐｷﾐｰﾐｳﾑﾑσｷﾐｺﾐｸ ﾐｿﾑﾐｾﾐｵﾐｺﾑ ﾑﾐｰﾐｼ ﾐｲﾐｺﾐｻﾑ紗ﾐｰﾐｻﾑﾑ ﾐｽﾑσｶﾐｽﾐｾ ﾐｴﾐｾﾐｱﾐｰﾐｲﾐｸﾑび ﾐｺﾐｾﾐｼﾐｰﾐｽﾐｴﾑ +```sh +pm2 startup +``` +