The config files for the server.

Author: mikeckennedy

app/ch15_deploy/final/server/pypi.nginx

@@ -0,0 +1,32 @@
+server {
+    listen 80;
+    server_name fake_pypi.com;
+    server_tokens off;
+    charset utf-8;
+    client_max_body_size 150M;
+
+    ___location /static {
+        gzip            on;
+        gzip_buffers    8 256k;
+        uwsgi_buffers   8 256k;
+
+        alias /apps/app_repo/app/ch15_deploy/final/pypi_org/static;
+        expires 365d;
+    }
+    ___location / {
+        try_files $uri @yourapplication;
+    }
+    ___location @yourapplication {
+        include uwsgi_params;
+
+        gzip            on;
+        gzip_buffers    8 256k;
+        uwsgi_buffers   8 256k;
+        uwsgi_read_timeout 300;
+
+        proxy_pass http://127.0.0.1:5000;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Protocol $scheme;
+    }
+}

app/ch15_deploy/final/server/pypi.service

@@ -0,0 +1,15 @@
+[Unit]
+Description=uWSGI PyPI server instance
+After=syslog.target
+
+[Service]
+ExecStart=/apps/venv/bin/uwsgi -H /apps/venv --master --processes 4 --threads 2 --http :5000 --manage-script-name --python-path /apps/app_repo/app/ch15_deploy/final --mount /=wsgi:app
+RuntimeDirectory=/apps/app_repo/app/ch15_deploy/final/
+Restart=always
+KillSignal=SIGQUIT
+Type=notify
+StandardError=syslog
+NotifyAccess=all
+
+[Install]
+WantedBy=multi-user.target

app/ch15_deploy/final/server/server_setup.sh

@@ -0,0 +1,74 @@
+#!/usr/bin/env bash
+
+# Consider running these two commands separately
+# Do a reboot before continuing.
+apt update
+apt upgrade -y
+
+apt install zsh
+sh -c "$(curl -fsSL https://raw.github.com/robbyrussell/oh-my-zsh/master/tools/install.sh)"
+
+# Install some OS dependencies:
+sudo apt-get install -y -q build-essential git unzip zip nload tree
+sudo apt-get install -y -q python3-pip python3-dev python3-venv
+sudo apt-get install -y -q nginx
+# for gzip support in uwsgi
+sudo apt-get install --no-install-recommends -y -q libpcre3-dev libz-dev
+
+# Stop the hackers
+sudo apt install fail2ban -y
+
+ufw allow 22
+ufw allow 80
+ufw allow 443
+ufw enable
+
+# Basic git setup
+git config --global credential.helper cache
+git config --global credential.helper 'cache --timeout=720000'
+
+# Be sure to put your info here:
+git config --global user.email "[email protected]"
+git config --global user.name "Your name"
+
+# Web app file structure
+mkdir /apps
+chmod 777 /apps
+mkdir /apps/logs
+mkdir /apps/logs/pypi
+mkdir /apps/logs/pypi/app_log
+cd /apps
+
+# Create a virtual env for the app.
+cd /apps
+python3 -m venv venv
+source /apps/venv/bin/activate
+pip install --upgrade pip setuptools
+pip install --upgrade httpie glances
+pip install --upgrade uwsgi
+
+
+# clone the repo:
+cd /apps
+git clone https://github.com/talkpython/data-driven-web-apps-with-flask app_repo
+
+# Setup the web app:
+cd cd /apps/app_repo/app/ch15_deploy/final/
+pip install -r requirements.txt
+
+# Copy and enable the daemon
+cp /apps/app_repo/app/ch15_deploy/final/server/pypi.service /etc/systemd/system/pypi.service
+
+systemctl start pypi
+systemctl status pypi
+systemctl enable pypi
+
+# Setup the public facing server (NGINX)
+apt install nginx
+
+# CAREFUL HERE. If you are using default, maybe skip this
+rm /etc/nginx/sites-enabled/default
+
+cp /apps/app_repo/app/ch15_deploy/final/server/pypi.nginx /etc/nginx/sites-enabled/pypi.nginx
+update-rc.d nginx enable
+service nginx restart