Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #!/bin/bash
- export LC_ALL=C
- #Settings
- APP="flask-app"
- SOURCE_FOLDER_NAME="app"
- CODE_PATH=~/$APP
- REPO_URL="[email protected]:PROJEKT"
- cat ~/.ssh/id_rsa.pub || (ssh-keygen && cat ~/.ssh/id_rsa.pub)
- sleep 5
- #Local scripts
- UWSGI_LOGFILE=$CODE_PATH/uwsgi.log
- DEPLOY=$CODE_PATH/deploy
- RUN_SERVER=$DEPLOY/run_server.sh
- FLASK_ENV=~/venv
- #Conf file location
- NGINX_CONF=/etc/nginx/sites-enabled/flask-nginx
- UWSGI_HANDLER=/etc/init.d/uwsgi
- sudo apt-get install -y python-pip git python-dev gcc nginx cron libxslt1-dev libxml2-dev libfreetype6-dev libjpeg8-dev
- #Remove default nginx conf
- sudo rm /etc/nginx/sites-enabled/default
- sudo pip install virtualenv
- virtualenv $FLASK_ENV
- git clone $REPO_URL $CODE_PATH
- cd $CODE_PATH
- git submodule init && git submodule update
- #Prepare virtualenv
- . $FLASK_ENV/bin/activate
- pip install uwsgi
- #Generate repo update file
- cat > $DEPLOY/repo_update.sh << EOF
- #!/bin/sh
- cd $CODE_PATH && git stash && git pull origin master
- . $FLASK_ENV/bin/activate
- pip install -r requirements.txt
- service uwsgi reload && date > last_update
- EOF
- #Generate uwsgi running script
- cat > $RUN_SERVER << EOF
- #!/bin/sh
- . $FLASK_ENV/bin/activate
- echo "" > $UWSGI_LOGFILE && cd $CODE_PATH && uwsgi -s 127.0.0.1:9005 -M 4 -t 30 -A 4 -p 4 -w $SOURCE_FOLDER_NAME:app -d $UWSGI_LOGFILE
- EOF
- #Generate server config
- cat << EOF | sudo tee $NGINX_CONF
- server {
- server_name localhost;
- location / {rewrite ^ https://\$http_host\$request_uri? permanent;}
- }
- server {
- listen 443 ssl;
- ssl_certificate ssl.crt;
- ssl_certificate_key ssl.key;
- add_header Strict-Transport-Security max-age=31536000;
- ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
- ssl_ciphers HIGH:!aNULL:!MD5;
- server_name localhost;
- location / {try_files \$uri @app; }
- location @app{
- include uwsgi_params;
- uwsgi_pass 127.0.0.1:9005;
- }
- }
- EOF
- SSL_PATH=/etc/nginx
- sudo cp $DEPLOY/server.pem $SSL_PATH/ssl.crt
- sudo cp $DEPLOY/server.pem $SSL_PATH/ssl.key
- #Generate uwsgi handler
- cat << EOF | sudo tee $UWSGI_HANDLER
- #!/bin/sh
- ### BEGIN INIT INFO
- # Provides: uwsgi
- # Required-Start: \$all
- # Required-Stop: \$all
- # Default-Start: 2 3 4 5
- # Default-Stop: 0 1 6
- # Short-Description: starts the uwsgi app server
- # Description: starts uwsgi app server using start-stop-daemon
- ### END INIT INFO
- PATH=/opt/uwsgi:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin
- DAEMON=$FLASK_ENV/bin/uwsgi
- OWNER=$(whoami)
- NAME=uwsgi
- DESC=uwsgi
- test -x \$DAEMON || exit 0
- # Include uwsgi defaults if available
- if [ -f /etc/default/uwsgi ] ; then
- . /etc/default/uwsgi
- fi
- set -e
- DAEMON_COMMAND=$RUN_SERVER
- case "\$1" in
- start)
- echo -n "Starting \$DESC: "
- start-stop-daemon --start --chuid \$OWNER:\$OWNER --user \$OWNER \\
- --exec \$DAEMON_COMMAND
- echo "\$NAME."
- ;;
- stop)
- echo -n "Stopping \$DESC: "
- start-stop-daemon --signal 3 --user \$OWNER --quiet --retry 2 --stop \\
- --exec \$DAEMON
- echo "\$NAME."
- ;;
- reload)
- killall -1 \$DAEMON
- ;;
- force-reload)
- killall -15 \$DAEMON
- ;;
- restart)
- echo -n "Restarting \$DESC: "
- start-stop-daemon --signal 3 --user \$OWNER --quiet --retry 2 --stop \\
- --exec \$DAEMON
- sleep 1
- start-stop-daemon --user \$OWNER --start --quiet --chuid \$OWNER:\$OWNER \\
- --exec \$DAEMON_COMMAND
- echo "\$NAME."
- ;;
- status)
- killall -10 \$DAEMON
- ;;
- *)
- N=/etc/init.d/\$NAME
- echo "Usage: \$N {start|stop|restart|reload|force-reload|status}" >&2
- exit 1
- ;;
- esac
- exit 0
- EOF
- #Prepare crontab
- cat > tempcron << EOF
- */15 * * * * $DEPLOY/repo_update.sh > ~/update_state
- EOF
- crontab tempcron
- #App update
- chmod +x $DEPLOY/repo_update.sh
- $DEPLOY/repo_update.sh
- #Give premissions
- sudo chmod +x $UWSGI_HANDLER
- chmod +x $RUN_SERVER
- sudo update-rc.d uwsgi defaults
- #Update submodule
- cd $CODE_PATH && git submodule update
- #Restart webservices
- sudo service nginx restart
- service uwsgi start
- service uwsgi restart
- echo "OK"
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement