Deploy - zhaw-timetable/zhawo GitHub Wiki

git remote add deploy ssh://[email protected]/srv/git/zhawo.git/

git push deploy master

# add user to users group
sudo adduser <your-name> users

# Create the directories and set the permissions
sudo mkdir -p /srv/tmp/
sudo chgrp -R users /srv/tmp/
sudo chmod g+w /srv/tmp/

sudo mkdir -p /srv/www/
sudo chgrp -R users /srv/www/
sudo chmod g+w /srv/www/

sudo mkdir -p /srv/git/zhawo.git

# Init the repo as an empty git repository
cd /srv/git/zhawo.git
sudo git init --bare

cd /srv/git/zhawo.git

# Define group recursively to "users", on the directories
sudo chgrp -R users .

# Define permissions recursively, on the sub-directories
# g = group, + add rights, r = read, w = write, X = directories only
# . = curent directory as a reference
sudo chmod -R g+rwX .

# Sets the setgid bit on all the directories
sudo find . -type d -exec chmod g+s '{}' +

# Make the directory a Git shared repo
sudo git config core.sharedRepository group

cd /srv/git/zhawo.git/hooks

# create a post-receive file
sudo touch post-receive

# make it executable
sudo chmod +x post-receive

#!/bin/sh

# The production directory
TARGET="/srv/www/zhawo"

# A temporary directory for deployment
TEMP="/srv/tmp/zhawo"

# The Git repo
REPO="/srv/git/zhawo.git"

# Deploy the content to the temporary directory
echo "Checking out new files on production"
mkdir -p $TEMP
git --work-tree=$TEMP --git-dir=$REPO checkout -f

cd $TEMP

# Install dependencies and build
npm install
npm run install-both
npm run build

# Replace the production directory
# with the temporary directory
cd /
rm -rf $TARGET
mv $TEMP/source/backend  $TARGET

# Start Server
echo "Restarting app"
cd
sudo ./startZhawo.sh

git remote add deploy ssh://<user-name>@<server-ip>/srv/git/zhawo.git/

[Unit]
Description=Node.js Server ZhaWo

[Service]
PIDFile=/tmp/zhawo-99.pid
User=<user-name>
Group=users
Restart=always
KillSignal=SIGQUIT
WorkingDirectory=/srv/www/zhawo
ExecStart=/usr/bin/node /srv/www/zhawo/dist/index.js

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload

sudo systemctl start zhawo.service
sudo systemctl stop zhawo.service
sudo systemctl restart zhawo.service

# view logs
journalctl -u zhawo.service

sudo systemctl enable zhawo.service

#!/bin/bash
sudo systemctl stop zhawo.service
sudo systemctl start zhawo.service

chmod +x startZhawo.sh

sudo visudo

<user-name> ALL=(ALL) NOPASSWD: /home/<user-name>/startZhawo.sh

sudo apt-get update
sudo apt-get install -y nginx

# If port 80 is open, redirects all traffic to https
server {
  listen 80 default_server;
  server_name _;
  return 301 https://$host$request_uri;
}

server {
  listen 443 ssl default_server;
  listen [::]:443 ssl default_server;

  ssl_certificate /etc/letsencrypt/live/zhawo.ml/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/zhawo.ml/privkey.pem;

  server_name zhawo.ml;

  location / {
    proxy_pass http://localhost:4000/;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header Host $host;
    proxy_cache_bypass $http_upgrade;
  }
}

sudo nginx -t

sudo systemctl restart nginx
sudo systemctl enable nginx

certbot -d zhawo.ml --manual --preferred-challenges dns certonly

sudo ssl-cert-check -c /etc/letsencrypt/live/zhawo.ml/cert.pem

certbot -d zhawo.ml --manual --preferred-challenges dns certonly

sudo ssl-cert-check -c /etc/letsencrypt/live/zhawo.ml/cert.pem