Add deployment scripts and documentation
This commit is contained in:
m3mo
parent
9e9287e66c
commit
5fbce08f96
223
DEPLOYMENT.md
Normal file
223
DEPLOYMENT.md
Normal file
@ -0,0 +1,223 @@
|
||||
# Deployment Guide for Postaci
|
||||
|
||||
This guide outlines how to deploy the Postaci application on a Ubuntu server.
|
||||
|
||||
## Prerequisites
|
||||
|
||||
- Ubuntu server (preferably 20.04 LTS or newer)
|
||||
- Root or sudo access
|
||||
- Domain name (optional but recommended for production)
|
||||
|
||||
## Manual Deployment Steps
|
||||
|
||||
### 1. Server Setup
|
||||
|
||||
Connect to your server:
|
||||
|
||||
```bash
|
||||
ssh root@your-server-ip
|
||||
```
|
||||
|
||||
Update the system:
|
||||
|
||||
```bash
|
||||
apt update && apt upgrade -y
|
||||
```
|
||||
|
||||
Install required packages:
|
||||
|
||||
```bash
|
||||
# Add NodeJS repository
|
||||
curl -fsSL https://deb.nodesource.com/setup_18.x | bash -
|
||||
|
||||
# Install dependencies
|
||||
apt install -y nodejs postgresql postgresql-contrib nginx git
|
||||
```
|
||||
|
||||
### 2. Database Setup
|
||||
|
||||
Start and enable PostgreSQL:
|
||||
|
||||
```bash
|
||||
systemctl start postgresql
|
||||
systemctl enable postgresql
|
||||
```
|
||||
|
||||
Create database and user:
|
||||
|
||||
```bash
|
||||
sudo -u postgres psql -c "CREATE USER postaci WITH PASSWORD 'your_secure_password';"
|
||||
sudo -u postgres psql -c "CREATE DATABASE postaci OWNER postaci;"
|
||||
sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE postaci TO postaci;"
|
||||
```
|
||||
|
||||
### 3. Application Setup
|
||||
|
||||
Clone the repository:
|
||||
|
||||
```bash
|
||||
git clone https://gitea.oezdag.io/m3mo/POSTERAPP_V1.git /opt/postaci
|
||||
cd /opt/postaci
|
||||
```
|
||||
|
||||
Install dependencies:
|
||||
|
||||
```bash
|
||||
npm install
|
||||
cd validation-service && npm install && cd ..
|
||||
```
|
||||
|
||||
Set up environment variables:
|
||||
|
||||
```bash
|
||||
# Create production env file
|
||||
cat > .env.production << EOF
|
||||
# Next Auth
|
||||
NEXTAUTH_SECRET=$(openssl rand -base64 32)
|
||||
NEXTAUTH_URL=http://your-server-ip
|
||||
|
||||
# Database
|
||||
DATABASE_URL="postgresql://postaci:your_secure_password@localhost:5432/postaci"
|
||||
|
||||
# API Services
|
||||
API_URL="http://localhost:8000/api"
|
||||
EOF
|
||||
```
|
||||
|
||||
Initialize the database:
|
||||
|
||||
```bash
|
||||
npx prisma generate
|
||||
npx prisma migrate deploy
|
||||
```
|
||||
|
||||
Build the Next.js application:
|
||||
|
||||
```bash
|
||||
npm run build
|
||||
```
|
||||
|
||||
### 4. Service Setup
|
||||
|
||||
Create a service for the validation service:
|
||||
|
||||
```bash
|
||||
cat > /etc/systemd/system/validation-service.service << EOF
|
||||
[Unit]
|
||||
Description=Address Validation Service for Postaci
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
WorkingDirectory=/opt/postaci/validation-service
|
||||
ExecStart=/usr/bin/node server.js
|
||||
Restart=on-failure
|
||||
Environment=NODE_ENV=production
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
```
|
||||
|
||||
Create a service for the Next.js application:
|
||||
|
||||
```bash
|
||||
cat > /etc/systemd/system/nextjs.service << EOF
|
||||
[Unit]
|
||||
Description=Next.js Application for Postaci
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
WorkingDirectory=/opt/postaci
|
||||
ExecStart=/usr/bin/npm start
|
||||
Restart=on-failure
|
||||
Environment=NODE_ENV=production
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
```
|
||||
|
||||
Start and enable the services:
|
||||
|
||||
```bash
|
||||
systemctl enable validation-service
|
||||
systemctl start validation-service
|
||||
systemctl enable nextjs
|
||||
systemctl start nextjs
|
||||
```
|
||||
|
||||
### 5. Nginx Setup
|
||||
|
||||
Create an Nginx configuration:
|
||||
|
||||
```bash
|
||||
cat > /etc/nginx/sites-available/postaci << EOF
|
||||
server {
|
||||
listen 80;
|
||||
server_name your-server-ip; # Replace with your domain if available
|
||||
|
||||
location / {
|
||||
proxy_pass http://localhost:3000;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade \$http_upgrade;
|
||||
proxy_set_header Connection 'upgrade';
|
||||
proxy_set_header Host \$host;
|
||||
proxy_cache_bypass \$http_upgrade;
|
||||
}
|
||||
}
|
||||
EOF
|
||||
```
|
||||
|
||||
Enable the configuration:
|
||||
|
||||
```bash
|
||||
ln -s /etc/nginx/sites-available/postaci /etc/nginx/sites-enabled/
|
||||
rm /etc/nginx/sites-enabled/default
|
||||
systemctl restart nginx
|
||||
```
|
||||
|
||||
### 6. Firewall Setup
|
||||
|
||||
Configure the firewall:
|
||||
|
||||
```bash
|
||||
ufw allow 22
|
||||
ufw allow 80
|
||||
ufw allow 443
|
||||
ufw enable
|
||||
```
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
### Check Service Status
|
||||
|
||||
```bash
|
||||
systemctl status nextjs
|
||||
systemctl status validation-service
|
||||
```
|
||||
|
||||
### View Logs
|
||||
|
||||
```bash
|
||||
journalctl -u nextjs -f
|
||||
journalctl -u validation-service -f
|
||||
```
|
||||
|
||||
### Nginx Logs
|
||||
|
||||
```bash
|
||||
tail -f /var/log/nginx/access.log
|
||||
tail -f /var/log/nginx/error.log
|
||||
```
|
||||
|
||||
## Security Recommendations
|
||||
|
||||
1. Set up SSL/TLS with Let's Encrypt
|
||||
2. Create a non-root user for running the application
|
||||
3. Regularly update dependencies with `npm audit fix`
|
||||
4. Configure server firewall properly
|
||||
5. Set up regular backups of the database
|
||||
150
deploy.sh
Executable file
150
deploy.sh
Executable file
@ -0,0 +1,150 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Colors for terminal output
|
||||
GREEN='\033[0;32m'
|
||||
BLUE='\033[0;34m'
|
||||
YELLOW='\033[1;33m'
|
||||
NC='\033[0m' # No Color
|
||||
|
||||
echo -e "${BLUE}=== Setting up Postaci on Ubuntu Server ===${NC}"
|
||||
|
||||
# Update system
|
||||
echo -e "${YELLOW}Updating system packages...${NC}"
|
||||
sudo apt update && sudo apt upgrade -y
|
||||
|
||||
# Install Node.js, npm, and other dependencies
|
||||
echo -e "${YELLOW}Installing Node.js and dependencies...${NC}"
|
||||
curl -fsSL https://deb.nodesource.com/setup_18.x | sudo -E bash -
|
||||
sudo apt install -y nodejs postgresql postgresql-contrib nginx git
|
||||
|
||||
# Check Node.js and npm versions
|
||||
echo -e "${GREEN}Installed Node.js version:${NC}"
|
||||
node -v
|
||||
echo -e "${GREEN}Installed npm version:${NC}"
|
||||
npm -v
|
||||
|
||||
# Start and enable PostgreSQL
|
||||
echo -e "${YELLOW}Setting up PostgreSQL...${NC}"
|
||||
sudo systemctl start postgresql
|
||||
sudo systemctl enable postgresql
|
||||
|
||||
# Create PostgreSQL user and database
|
||||
echo -e "${YELLOW}Creating PostgreSQL user and database...${NC}"
|
||||
sudo -u postgres psql -c "CREATE USER postaci WITH PASSWORD 'postaci_password';"
|
||||
sudo -u postgres psql -c "CREATE DATABASE postaci OWNER postaci;"
|
||||
sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE postaci TO postaci;"
|
||||
|
||||
# Clone the repository
|
||||
echo -e "${YELLOW}Cloning repository...${NC}"
|
||||
git clone https://gitea.oezdag.io/m3mo/POSTERAPP_V1.git /home/ubuntu/postaci
|
||||
|
||||
# Set up the application
|
||||
echo -e "${YELLOW}Setting up the application...${NC}"
|
||||
cd /home/ubuntu/postaci
|
||||
|
||||
# Install dependencies
|
||||
echo -e "${YELLOW}Installing npm dependencies...${NC}"
|
||||
npm install
|
||||
cd validation-service && npm install && cd ..
|
||||
|
||||
# Create production environment file
|
||||
echo -e "${YELLOW}Creating environment configuration...${NC}"
|
||||
cat > .env.production << EOL
|
||||
# Next Auth
|
||||
NEXTAUTH_SECRET=$(openssl rand -base64 32)
|
||||
NEXTAUTH_URL=http://$(curl -s ifconfig.me)
|
||||
|
||||
# Database
|
||||
DATABASE_URL="postgresql://postaci:postaci_password@localhost:5432/postaci"
|
||||
|
||||
# API Services
|
||||
API_URL="http://localhost:8000/api"
|
||||
EOL
|
||||
|
||||
# Generate Prisma client and run migrations
|
||||
echo -e "${YELLOW}Setting up database...${NC}"
|
||||
npx prisma generate
|
||||
npx prisma migrate deploy
|
||||
|
||||
# Build Next.js app
|
||||
echo -e "${YELLOW}Building Next.js application...${NC}"
|
||||
npm run build
|
||||
|
||||
# Create service files for validation service
|
||||
echo -e "${YELLOW}Creating validation service...${NC}"
|
||||
cat > /etc/systemd/system/validation-service.service << EOL
|
||||
[Unit]
|
||||
Description=Address Validation Service for Postaci
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=ubuntu
|
||||
WorkingDirectory=/home/ubuntu/postaci/validation-service
|
||||
ExecStart=/usr/bin/node server.js
|
||||
Restart=on-failure
|
||||
Environment=NODE_ENV=production
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOL
|
||||
|
||||
# Create service file for Next.js app
|
||||
echo -e "${YELLOW}Creating Next.js service...${NC}"
|
||||
cat > /etc/systemd/system/nextjs.service << EOL
|
||||
[Unit]
|
||||
Description=Next.js Application for Postaci
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=ubuntu
|
||||
WorkingDirectory=/home/ubuntu/postaci
|
||||
ExecStart=/usr/bin/npm start
|
||||
Restart=on-failure
|
||||
Environment=NODE_ENV=production
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOL
|
||||
|
||||
# Configure Nginx
|
||||
echo -e "${YELLOW}Configuring Nginx...${NC}"
|
||||
cat > /etc/nginx/sites-available/postaci << EOL
|
||||
server {
|
||||
listen 80;
|
||||
server_name _;
|
||||
|
||||
location / {
|
||||
proxy_pass http://localhost:3000;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade \$http_upgrade;
|
||||
proxy_set_header Connection 'upgrade';
|
||||
proxy_set_header Host \$host;
|
||||
proxy_cache_bypass \$http_upgrade;
|
||||
}
|
||||
}
|
||||
EOL
|
||||
|
||||
# Enable the Nginx configuration
|
||||
ln -s /etc/nginx/sites-available/postaci /etc/nginx/sites-enabled/
|
||||
rm /etc/nginx/sites-enabled/default
|
||||
systemctl restart nginx
|
||||
|
||||
# Start and enable the services
|
||||
echo -e "${YELLOW}Starting services...${NC}"
|
||||
systemctl enable validation-service
|
||||
systemctl start validation-service
|
||||
systemctl enable nextjs
|
||||
systemctl start nextjs
|
||||
|
||||
# Set up firewall
|
||||
echo -e "${YELLOW}Configuring firewall...${NC}"
|
||||
ufw allow 22
|
||||
ufw allow 80
|
||||
ufw allow 443
|
||||
echo "y" | ufw enable
|
||||
|
||||
echo -e "${GREEN}=== Deployment complete! ===${NC}"
|
||||
echo -e "Your application should be available at http://$(curl -s ifconfig.me)"
|
||||
echo -e "Make sure to set up HTTPS for production use."
|
||||
Loading…
x
Reference in New Issue
Block a user