流水账式记录一下我部署 Python 环境的过程
安装 Python 虚拟环境 pyenv
- 通过 yum 安装相应依赖
yum update
yum install @development zlib-devel bzip2 bzip2-devel readline-devel sqlite sqlite-devel openssl-devel xz xz-devel libffi-devel findutils git -y
- pyenv 官方文档方法安装 pyenv，并安装 python 3.6.5
curl https://pyenv.run | bash
pyenv install -l # Choose you python version
pyenv install 3.6.5
安装 Caddy
- 安装与开启防火墙相应端口
yum install yum-plugin-copr
yum copr enable @caddy/caddy
yum install caddy
firewall-cmd --permanent --add-service=http
firewall-cmd --permanent --add-service=https
firewall-cmd --reload
- 配置 Caddyfile
/etc/caddy/caddyfile:
[you_domain]
root * /usr/share/caddy/[git_name]/[django_project_name]/
file_server
# except django static files
@notStatic {
not path /static/*
}
reverse_proxy @notStatic unix//run/gunicorn.sock
安装 MariaDb
- yum 安装
yum install mariadb-server mariadb-devel
- 配置安全选项与 root 密码
mysql_secure_installation
- 导入数据库，先登陆创建数据表后导入
mysql -u root -p
CREATE DATABASE [database_name] CHARACTER SET UTF8;
mysql -u root -p [database_name] < /path/to/you/sql/file.sql
克隆网站源码并设定虚拟环境
git clone --recurse-submodules -j8 git@github.com:[username]/[git_name].git
mv [git_name] /usr/share/caddy
cd /usr/share/caddy/[git_name]
pyenv lcoal bgp
Python 依赖安装与配置
- 安装依赖
cd /usr/share/caddy/[git_name]
pip install -r requirements.txt
- 配置 gunicorn 用 systemd 运行
/etc/systemd/system/gunicorn.service:
Description=gunicorn daemon
Requires=gunicorn.socket
After=network.target
[Service]
Type=notify
# the specific user that our service will run as
User=root
Group=caddy
# another option for an even more restricted service is
# DynamicUser=yes
# see http://0pointer.net/blog/dynamic-users-with-systemd.html
RuntimeDirectory=gunicorn
WorkingDirectory=/usr/share/caddy/[git_name]
ExecStart=/root/.pyenv/shims/gunicorn [applicationname].wsgi
ExecReload=/bin/kill -s HUP $MAINPID
KillMode=mixed
TimeoutStopSec=5
PrivateTmp=true
[Install]
WantedBy=multi-user.target
/etc/systemd/system/gunicorn.socket:
[Unit]
Description=gunicorn socket
[Socket]
ListenStream=/run/gunicorn.sock
# Our service won't need permissions for the socket, since it
# inherits the file descriptor by socket activation
# only the nginx daemon will need access to the socket
SocketUser=caddy
# Optionally restrict the socket permissions even more.
# SocketMode=600
[Install]
WantedBy=sockets.target
最后配置
- 生成 Django 静态文件
python manage.py collectstatic
- 设置开机启动
systemctl daemon-reload
systemctl enable gunicorn.service
systemctl enable gunicorn.socket
systemctl enable mariadb
systemctl enable caddy.service
- 启动所有程序
systemctl start mariadb
systemctl start caddy.service
systemctl start gunicorn.service
systemctl start gunicorn.socket