Django + React 電商專案練習 [18] - 透過 Nginx 部署 Django 至私有主機(No PaaS)

nslookup niceshop.akebee.com

Server:		1.1.1.1
Address:	1.1.1.1#53

Non-authoritative answer:
Name:	niceshop.akebee.com
Address: 61.xx.xx.xx

#
pip install uwsgi

# /home/httpd/niceshop/uwsgi_params
uwsgi_param  QUERY_STRING       $query_string;
uwsgi_param  REQUEST_METHOD     $request_method;
uwsgi_param  CONTENT_TYPE       $content_type;
uwsgi_param  CONTENT_LENGTH     $content_length;
uwsgi_param  REQUEST_URI        $request_uri;
uwsgi_param  PATH_INFO          $document_uri;
uwsgi_param  DOCUMENT_ROOT      $document_root;
uwsgi_param  SERVER_PROTOCOL    $server_protocol;
uwsgi_param  REQUEST_SCHEME     $scheme;
uwsgi_param  HTTPS              $https if_not_empty;
uwsgi_param  REMOTE_ADDR        $remote_addr;
uwsgi_param  REMOTE_PORT        $remote_port;
uwsgi_param  SERVER_PORT        $server_port;
uwsgi_param  SERVER_NAME        $server_name;

# /etc/nginx/sites-available/niceshop
server {
    listen 443 ssl;
    server_name niceshop.akebee.com;

    root /home/httpd/niceshop/frontend/build;
    index index.html;

    location / {
      # 允許特定 IP
      allow 192.168.1.0/24; # 表示 192.168.1.0 到 192.168.1.255
      ...
      # 拒絕其他所有 IP
      deny all;
          try_files $uri /index.html;
    }

    location /static/ {
        alias /home/httpd/niceshop/frontend/build/static/;
    }

    location /media/ {
      # alias /home/httpd/niceshop/backend/media/;
        alias /home/httpd/niceshop/backend/media/;
    }

    # uWSGI 代理（讓 /api/ 請求 Django 後端）
    location /api/ {
        proxy_pass http://127.0.0.1:8000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

    }
    # SSL 設置
    include /etc/nginx/snippets/ssl-params-yang.conf;

    # 日誌
    access_log /var/log/nginx/niceshop.access.log;
    error_log /var/log/nginx/niceshop.error.log;

}

server {
    if ($host = niceshop.akebee.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen 80;
    listen [::]:80;
    server_name niceshop.akebee.com;
    return 404; # managed by Certbot
}

location /api/ {
    proxy_pass http://127.0.0.1:8000;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
}

location /api/ {
    include /home/httpd/niceshop/uwsgi_params;
    uwsgi_pass unix:/home/httpd/niceshop/niceshop.sock;

    uwsgi_read_timeout 30;
    uwsgi_send_timeout 30;
    uwsgi_connect_timeout 30;

    uwsgi_param SCRIPT_NAME "";
    uwsgi_modifier1 30;
}

# 新增這一段 (代理 Django Admin)
location /django-admin/ {
    include /home/httpd/niceshop/uwsgi_params;
    uwsgi_pass unix:/home/httpd/niceshop/niceshop.sock;

    uwsgi_read_timeout 30;
    uwsgi_send_timeout 30;

    uwsgi_param SCRIPT_NAME "";
    uwsgi_modifier1 30;
}

cd /home/httpd/niceshop
uwsgi --ini uwsgi.ini

sudo vim /etc/systemd/system/uwsgi.service

# 重新載入 systemd
sudo systemctl daemon-reload

# 啟動 uWSGI 服務
sudo systemctl start uwsgi

# 設定開機自動啟動
sudo systemctl enable uwsgi

# 確認 uWSGI 是否正在運行
sudo systemctl status uwsgi

source /home/httpd/django_venv/bin/activate
which python
which uwsgi
python -c "import pymysql; print('pymysql 載入成功')"

/home/httpd/django_venv/bin/python
/usr/local/bin/uwsgi

python3 -m pip install pymysql --upgrade

sudo chown -R www-data:www-data /home/httpd/niceshop
sudo chmod -R 755 /home/httpd/niceshop

# 重新啟用 uwsgi
sudo systemctl restart uwsgi

# 檢查 uwsig 錯誤日誌
sudo journalctl -u uwsgi --no-pager --lines=50

# 若啟用虛擬環境還是顯示 /usr/local/bin/uwsgi，代表沒啟用成功，可能就是 venv 權限的問題
source /home/httpd/django_venv/bin/activate
which uwsgi

# 為 uwsgi 添加執行權限
sudo chmod +x /home/httpd/django_venv/bin/uwsgi

# 去 django_venv 目錄下新增 vassals 資料夾
cd /home/httpd/django_venv
mkdir vassals
# 將 uwsgi.ini 檔 link 至 vassals 下
sudo ln -s /home/httpd/niceshop/uwsgi.ini /home/httpd/django_venv/vassals/
# 用 emperor mode 執行 uWSGI
uwsgi --emperor /home/httpd/django_venv/vassals/ --uid www-data --gid www-data

# 編輯 uwsgi.ini
vim /home/httpd/niceshop/uwsgi.ini
# uwsgi.ini 內容
# enable uwsgi master process
.........
vacuum          = true
# 將這邊路徑改成新的地方
daemonize       = /home/httpd/django_venv/vassals/uwsgi-emperor.log

# 原本的權限狀態
-rw-r----- 1 root root 2.6K  3月 10 09:52 uwsgi-emperor.log
# 更改目錄所有權為 www-data 用戶和組
sudo chown -R www-data:www-data /home/httpd/django_venv/vassals/
# 再次用 ll 指令察看更改後的權限狀態
-rw-r----- 1 www-data www-data 5.2K  3月 10 10:04 uwsgi-emperor.log