Serious Seeds

sudo apt update
sudo apt upgrade
sudo apt install git -y
git --version

git config --global user.name [NAME]
git config --global user.email [EMAIL]
ssh-keygen -t ed25519 -C [EMAIL]
cat ~/.ssh/id_ed25519.pub

Schlüssel kopieren und bei Codeberg unter Profilbild → Settings → SSH- / GPG-Keys → Add Key

mkdir sese_project

git clone ssh://git@codeberg.org/faeunin/serious-seeds.git

cd sese_project/serious-seeds
python3 -m venv env
source env/bin/activate

pip install -r app/requirements.txt

nano .env

mit folgendem Inhalt:

DJANGO_ENV=production

SECRET_KEY=[KEY]

DEBUG=False

POSTGRES_DB=[DB_NAME]
POSTGRES_USER=[DB_USER]
POSTGRES_PASSWORD=[DB_PW]
POSTGRES_HOST=localhost
POSTGRES_PORT=5432

sudo apt install postgresql postgresql-contrib libpq-dev -y

sudo -i -u postgres psql

CREATE DATABASE [DB_NAME];

CREATE USER [DB_USER] WITH PASSWORD '[DB_PW]';

ALTER ROLE [DB_USER] SET client_encoding TO 'utf8';
ALTER ROLE [DB_USER] SET default_transaction_isolation TO 'read committed';
ALTER ROLE [DB_USER] SET timezone TO 'UTC';

GRANT ALL PRIVILEGES ON DATABASE [DB_NAME] TO [DB_USER];

ALTER DATABASE [DB_NAME] OWNER TO [DB_USER];

\q

scp /pfad/zur/datei/auf/dem/laptop/dump.sql benutzername@IP_DES_PI:/pfad/auf/dem/pi/

pg_restore -h localhost -p 5432 -U [DB_USER] -d [DB_NAME] --no-owner --no-acl /path/to/dump.sql

python manage.py collectstatic

sudo apt install nginx -y

sudo nano /etc/nginx/sites-available/seriousseeds

with following content:

server {
    listen 80;
    server_name <Raspberry_Pi_IP>;

    location / {
        proxy_pass http://unix:/run/gunicorn/gunicorn.sock:/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location /static/ {
        alias </path/to/staticfiles/>;
    }
}

Next, enable the configuration:

sudo ln -s /etc/nginx/sites-available/seriousseeds /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl restart nginx

Check:

sudo nginx -T | sed -n '1,200p' | grep -n 'proxy_pass\|upstream'

sudo nano /etc/systemd/system/gunicorn.service

content:

[Unit]

Description=gunicorn daemon for Django
After=network.target

[Service]
User=[SYSTEMUSER]
Group=www-data
RuntimeDirectory=gunicorn
WorkingDirectory=[...]/sese_project/serious-seeds/app
ExecStart=[...]/sese_project/serious-seeds/env/bin/gunicorn --workers 5 --threads 2 --timeout 60 --max-requests 1000 --max-requests-jitter 100 --bind unix:/run/gunicorn/gunicorn.sock seriousseeds.wsgi:application

[Install]
WantedBy=multi-user.target

Start and enable the service:

sudo systemctl start gunicorn
sudo systemctl enable gunicorn