如何利用DigitalOcean托管数据库和空间建立可扩展的Django应用程序

1sudo apt update
2sudo apt install python3-pip python3-dev libpq-dev curl postgresql-client

1psql -U username -h host -p port -d database -set=sslmode=require

1CREATE DATABASE polls;

1\c polls;

1CREATE USER myprojectuser WITH PASSWORD 'password';

1ALTER ROLE myprojectuser SET client_encoding TO 'utf8';
2ALTER ROLE myprojectuser SET default_transaction_isolation TO 'read committed';
3ALTER ROLE myprojectuser SET timezone TO 'UTC';

1GRANT ALL PRIVILEGES ON DATABASE polls TO myprojectuser;

1\q

1sudo -H pip3 install --upgrade pip
2sudo -H pip3 install virtualenv

1mkdir envs
2cd envs

1virtualenv polls

1source polls/bin/activate

1pip install django gunicorn psycopg2-binary

1cd
2mkdir django-polls
3cd django-polls

1cd
2git clone https://github.com/do-community/django-polls.git

1cd django-polls
2ls

1[secondary_label Output]
2LICENSE README.md manage.py mysite polls templates

1nano ~/django-polls/mysite/settings.py

 1[label ~/django-polls/mysite/settings.py]
 2. . .
 3
 4# The simplest case: just add the domain name(s) and IP addresses of your Django server
 5# ALLOWED_HOSTS = [ 'example.com', '203.0.113.5']
 6# To respond to 'example.com' and any subdomains, start the domain with a dot
 7# ALLOWED_HOSTS = ['.example.com', '203.0.113.5']
 8ALLOWED_HOSTS = ['your_server_domain_or_IP', 'second_domain_or_IP', . . ., 'localhost']
 9
10. . .

 1[label ~/django-polls/mysite/settings.py]
 2. . .
 3
 4DATABASES = {
 5    'default': {
 6        'ENGINE': 'django.db.backends.postgresql_psycopg2',
 7        'NAME': 'polls',
 8        'USER': 'myprojectuser',
 9        'PASSWORD': 'password',
10        'HOST': 'managed_db_host',
11        'PORT': 'managed_db_port',
12    }
13}
14
15. . .

1[label ~/django-polls/mysite/settings.py]
2. . .
3
4STATIC_URL = '/static/'
5STATIC_ROOT = os.path.join(BASE_DIR, 'static/')

1python

1[secondary_label Output]
2Python 3.6.7 (default, Oct 22 2018, 11:32:17)
3[GCC 8.2.0] on linux
4Type "help", "copyright", "credits" or "license" for more information.
5>>>

1from django.core.management.utils import get_random_secret_key
2get_random_secret_key()

1nano ~/django-polls/mysite/settings.py

1[label ~/django-polls/mysite/settings.py]
2. . .
3
4# SECURITY WARNING: keep the secret key used in production secret!
5SECRET_KEY = 'your_secret_key_here'
6
7. . .

1cd django-polls
2./manage.py makemigrations
3./manage.py migrate

1./manage.py createsuperuser

1./manage.py collectstatic

1sudo ufw allow 8000

1./manage.py runserver 0.0.0.0:8000

1http://server_domain_or_IP:8000/polls

1http://server_domain_or_IP:8000/admin

1gunicorn --bind 0.0.0.0:8000 mysite.wsgi

1pip install django-storages boto3

1nano ~/django-polls/mysite/settings.py

 1[label ~/django-polls/mysite/settings.py]
 2. . .
 3
 4INSTALLED_APPS = [
 5    . . .
 6    'django.contrib.staticfiles',
 7    'storages',
 8]
 9
10. . .

 1[label ~/django-polls/mysite/settings.py]
 2. . .
 3
 4# Static files (CSS, JavaScript, Images)
 5# https://docs.djangoproject.com/en/2.1/howto/static-files/
 6
 7AWS_ACCESS_KEY_ID = 'your_spaces_access_key'
 8AWS_SECRET_ACCESS_KEY = 'your_spaces_secret_key'
 9
10AWS_STORAGE_BUCKET_NAME = 'your_space_name'
11AWS_S3_ENDPOINT_URL = 'spaces_endpoint_URL'
12AWS_S3_OBJECT_PARAMETERS = {
13    'CacheControl': 'max-age=86400',
14}
15AWS_LOCATION = 'static'
16AWS_DEFAULT_ACL = 'public-read'
17
18STATICFILES_STORAGE = 'storages.backends.s3boto3.S3Boto3Storage'
19
20STATIC_URL = '{}/{}/'.format(AWS_S3_ENDPOINT_URL, AWS_LOCATION)
21STATIC_ROOT = 'static/'

1nano ~/django-polls/mysite/settings.py

 1[label ~/django-polls/mysite/settings.py]
 2. . .
 3
 4# Static files (CSS, JavaScript, Images)
 5# https://docs.djangoproject.com/en/2.1/howto/static-files/
 6
 7# Moving static assets to DigitalOcean Spaces as per:
 8# https://andsky.com/tech/tutorials/how-to-set-up-object-storage-with-django
 9AWS_ACCESS_KEY_ID = 'your_spaces_access_key'
10AWS_SECRET_ACCESS_KEY = 'your_spaces_secret_key'
11
12AWS_STORAGE_BUCKET_NAME = 'your_space_name'
13AWS_S3_ENDPOINT_URL = 'spaces_endpoint_URL'
14AWS_S3_CUSTOM_DOMAIN = 'spaces_edge_endpoint_URL'
15AWS_S3_OBJECT_PARAMETERS = {
16    'CacheControl': 'max-age=86400',
17}
18AWS_LOCATION = 'static'
19AWS_DEFAULT_ACL = 'public-read'
20
21STATICFILES_STORAGE = 'storages.backends.s3boto3.S3Boto3Storage'
22
23STATIC_URL = '{}/{}/'.format(AWS_S3_CUSTOM_DOMAIN, AWS_LOCATION)
24STATIC_ROOT = 'static/'

1cd ~/django-polls

1python manage.py collectstatic

1[secondary_label Output]
2You have requested to collect static files at the destination
3location as specified in your settings.
4
5This will overwrite existing files!
6Are you sure you want to do this?
7
8Type 'yes' to continue, or 'no' to cancel:

1[secondary_label Output]
2121 static files copied.

1gunicorn --bind 0.0.0.0:8000 mysite.wsgi

1http://server_domain_or_IP:8000/admin

1deactivate

1sudo nano /etc/systemd/system/gunicorn.socket

1[label /etc/systemd/system/gunicorn.socket]
2[Unit]
3Description=gunicorn socket
4
5[Socket]
6ListenStream=/run/gunicorn.sock
7
8[Install]
9WantedBy=sockets.target

1sudo nano /etc/systemd/system/gunicorn.service

1[label /etc/systemd/system/gunicorn.service]
2[Unit]
3Description=gunicorn daemon
4Requires=gunicorn.socket
5After=network.target

 1[label /etc/systemd/system/gunicorn.service]
 2[Unit]
 3Description=gunicorn daemon
 4Requires=gunicorn.socket
 5After=network.target
 6
 7[Service]
 8User=sammy
 9Group=www-data
10WorkingDirectory=/home/sammy/django-polls
11ExecStart=/home/sammy/envs/polls/bin/gunicorn \
12          --access-logfile - \
13          --workers 3 \
14          --bind unix:/run/gunicorn.sock \
15          mysite.wsgi:application

 1[label /etc/systemd/system/gunicorn.service]
 2[Unit]
 3Description=gunicorn daemon
 4Requires=gunicorn.socket
 5After=network.target
 6
 7[Service]
 8User=sammy
 9Group=www-data
10WorkingDirectory=/home/sammy/django-polls
11ExecStart=/home/sammy/envs/polls/bin/gunicorn \
12          --access-logfile - \
13          --workers 3 \
14          --bind unix:/run/gunicorn.sock \
15          mysite.wsgi:application
16
17[Install]
18WantedBy=multi-user.target

1sudo systemctl start gunicorn.socket
2sudo systemctl enable gunicorn.socket

1sudo systemctl status gunicorn.socket

1[secondary_label Output]
2Failed to dump process list, ignoring: No such file or directory
3● gunicorn.socket - gunicorn socket
4   Loaded: loaded (/etc/systemd/system/gunicorn.socket; enabled; vendor preset: enabled)
5   Active: active (running) since Tue 2019-03-05 19:19:16 UTC; 1h 22min ago
6   Listen: /run/gunicorn.sock (Stream)
7   CGroup: /system.slice/gunicorn.socket
8
9Mar 05 19:19:16 django systemd[1]: Listening on gunicorn socket.

1file /run/gunicorn.sock

1[secondary_label Output]
2/run/gunicorn.sock: socket

1sudo journalctl -u gunicorn.socket

1sudo systemctl status gunicorn

1[secondary_label Output]
2● gunicorn.service - gunicorn daemon
3   Loaded: loaded (/etc/systemd/system/gunicorn.service; disabled; vendor preset: enabled)
4   Active: inactive (dead)

1curl --unix-socket /run/gunicorn.sock localhost

1sudo systemctl status gunicorn

 1[secondary_label Output]
 2● gunicorn.service - gunicorn daemon
 3   Loaded: loaded (/etc/systemd/system/gunicorn.service; disabled; vendor preset: enabled)
 4   Active: active (running) since Tue 2019-03-05 20:43:56 UTC; 1s ago
 5 Main PID: 19074 (gunicorn)
 6    Tasks: 4 (limit: 4915)
 7   CGroup: /system.slice/gunicorn.service
 8           ├─19074 /home/sammy/envs/polls/bin/python3 /home/sammy/envs/polls/bin/gunicorn --access-logfile - --workers 3 --bind unix:/run/gunicorn.sock mysite.wsgi:application
 9           ├─19098 /home/sammy/envs/polls/bin/python3 /home/sammy/envs/polls/bin/gunicorn 
10. . .
11
12Mar 05 20:43:56 django systemd[1]: Started gunicorn daemon.
13Mar 05 20:43:56 django gunicorn[19074]: [2019-03-05 20:43:56 +0000] [19074] [INFO] Starting gunicorn 19.9.0
14. . .
15Mar 05 20:44:15 django gunicorn[19074]:  - - [05/Mar/2019:20:44:15 +0000] "GET / HTTP/1.1" 301 0 "-" "curl/7.58.0"

1sudo journalctl -u gunicorn

1sudo systemctl daemon-reload
2sudo systemctl restart gunicorn

1sudo rm /etc/nginx/sites-enabled/default

1sudo nano /etc/nginx/sites-available/example.com

 1[label /etc/nginx/sites-available/example.com]
 2server {
 3
 4        root /var/www/example.com/html;
 5        index index.html index.htm index.nginx-debian.html;
 6
 7        server_name example.com www.example.com;
 8
 9        location / {
10                try_files $uri $uri/ =404;
11        }
12
13    listen [::]:443 ssl ipv6only=on; # managed by Certbot
14    listen 443 ssl; # managed by Certbot
15    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem; # managed by Certbot
16    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem; # managed by Certbot
17    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
18    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
19
20}
21
22server {
23    if ($host = example.com) {
24        return 301 https://$host$request_uri;
25    } # managed by Certbot
26
27        listen 80;
28        listen [::]:80;
29
30        server_name example.com www.example.com;
31    return 404; # managed by Certbot
32
33}

1sudo cp /etc/nginx/sites-available/example.com /etc/nginx/sites-available/example.com.old

1[label /etc/nginx/sites-available/example.com]
2server {
3    listen 80 default_server;
4    listen [::]:80 default_server;
5    server_name _;
6    return 301 https://example.com$request_uri;
7}

 1[label /etc/nginx/sites-available/example.com]
 2. . . 
 3server {
 4    listen [::]:443 ssl ipv6only=on;
 5    listen 443 ssl;
 6    server_name example.com www.example.com;
 7    
 8    # Let's Encrypt parameters
 9    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
10    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
11    include /etc/letsencrypt/options-ssl-nginx.conf;
12    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
13    
14    location = /favicon.ico { access_log off; log_not_found off; }
15
16    location / {
17        proxy_pass http://unix:/run/gunicorn.sock;
18        proxy_redirect off;
19
20        proxy_set_header Host              $http_host;
21        proxy_set_header X-Real-IP         $remote_addr;
22        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
23        proxy_set_header X-Forwarded-Proto https;
24    }
25}

 1[label /etc/nginx/sites-available/example.com]
 2server {
 3    listen 80 default_server;
 4    listen [::]:80 default_server;
 5    server_name _;
 6    return 301 https://example.com$request_uri;
 7}
 8server {
 9        listen [::]:443 ssl ipv6only=on;
10        listen 443 ssl;
11        server_name example.com www.example.com;
12
13        # Let's Encrypt parameters
14        ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
15        ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
16        include /etc/letsencrypt/options-ssl-nginx.conf;
17        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
18
19        location = /favicon.ico { access_log off; log_not_found off; }
20
21        location / {
22          proxy_pass http://unix:/run/gunicorn.sock;
23          proxy_redirect off;
24
25          proxy_set_header Host              $http_host;
26          proxy_set_header X-Real-IP         $remote_addr;
27          proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
28          proxy_set_header X-Forwarded-Proto https;
29        }
30}

1sudo nginx -t

1sudo systemctl restart nginx

1nano ~/django-polls/mysite/settings.py

1[label ~/django-polls/mysite/settings.py]
2. . .
3
4SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
5SESSION_COOKIE_SECURE = True
6CSRF_COOKIE_SECURE = True
7SECURE_SSL_REDIRECT = True

1sudo systemctl restart gunicorn