centos.conf

@@ -35,7 +35,7 @@ SERVICE="app.service"
 
 # Descrição do serviço no Systemctl
 # Systemctl service description
-DESCRIPTION="Django VPS"
+DESCRIPTION="Django VPS uWSGI Emperor"
 
 # Adicionar o certificado digital na aplicação com Certbot. Escreva sim, se já possuir um domínio na internet
 # Apply certbot ssl certificate, hit yes if you already have a domain

run.sh

@@ -47,7 +47,7 @@ SERVICE="app.service"
 
 # Descrição do serviço no Systemctl
 # Systemctl service description
-DESCRIPTION="Django VPS"
+DESCRIPTION="Django VPS uWSGI Emperor"
 
 # Adicionar o certificado digital na aplicação com Certbot. Escreva sim, se já possuir um domínio na internet
 # Apply certbot ssl certificate, hit yes if you already have a domain
@@ -290,7 +290,7 @@ update_debug() {
 # Install required packages
 install_packages() {
 	dnf config-manager --set-enabled crb
-	dnf update -y &&
+	dnf update &&
 	yum -y install vim &&
 	yum -y install epel-release &&
 	yum -y install bind-utils &&
@@ -319,6 +319,7 @@ create_venv() {
 # Install project dependencies
 install_dependencies() {
 	/home/$USERNAME/$APP/$VENV/bin/pip3 install --upgrade pip &&
+	/home/$USERNAME/$APP/$VENV/bin/pip3 install uwsgi &&
 	/home/$USERNAME/$APP/$VENV/bin/pip3 install -r /home/$USERNAME/$APP/requirements.txt
 	if [[ $? -ge 1 ]]; then
 		update_step_error "$x"
@@ -364,22 +365,57 @@ enable_ports() {
 	fi
 }
 
+# Corrigir a configuração inicial do nginx
+# Manage default nginx config file
+manage_default_nginx_file() {
+	mv /etc/nginx/nginx.conf /etc/nginx/nginx.conf~ &&
+	cat > /etc/nginx/nginx.conf <<EOF
+user nginx;
+worker_processes auto;
+error_log /var/log/nginx/error.log;
+pid /run/nginx.pid;
+
+
+include /usr/share/nginx/modules/*.conf;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile            on;
+    tcp_nopush          on;
+    tcp_nodelay         on;
+    keepalive_timeout   65;
+    types_hash_max_size 2048;
+
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+    include /etc/nginx/conf.d/*.conf;
+}
+EOF
+}
+
 # Criar o arquivo de configurações do NGINX
 # Create nginx config file
 create_nginx_file() {
 	cat > /etc/nginx/conf.d/$APP.conf <<EOF
+upstream django {
+	server unix:///home/$USERNAME/$APP/mysite.sock;
+}
 
 server {
 	listen					80;
 	server_name				$PUB_IP;
 	charset					utf-8;
 	client_max_body_size	75M;
-	server_tokens           off;
-
-	access_log                /var/log/nginx/$APP.access.log;
-	error_log                 /var/log/nginx/$APP.error.log;
-
-	location = /favicon.ico { access_log off; log_not_found off;}
 	location /media {
 		alias /home/$USERNAME/$APP/media;
 	}
@@ -387,7 +423,8 @@ server {
 		alias /home/$USERNAME/$APP/static;
 	}
 	location / {
-		proxy_pass http://unix:/home/$USERNAME/$APP/$APP.sock;
+		uwsgi_pass django;
+		include /etc/nginx/uwsgi_params;
 	}
 }
 EOF
@@ -396,6 +433,37 @@ if [[ $? -ge 1 ]]; then
 fi
 }
 
+# Criar o arquivo de inicialização do uWSGI
+# Create uwsgi ini file
+create_uwsgi_ini_file() {
+	cat > /home/$USERNAME/$APP/uwsgi.ini <<EOF
+[uwsgi]
+chdir			= /home/$USERNAME/$APP
+module			= $WSGI_FOLDER_NAME.wsgi
+pythonpath		= /home/$USERNAME/$APP/$VENV
+master			= true
+processes		= 10
+socket			= /home/$USERNAME/$APP/mysite.sock
+vacuum			= true
+chmod-socket	= 666
+EOF
+if [[ $? -ge 1 ]]; then
+	update_step_error "$x"
+fi
+}
+
+# Criar o modo Emperor do uWSGI
+# Create uWSGI Emperor mode
+criar_emperor_uwsgi() {
+	mkdir -p /etc/uwsgi/vassals &&
+	if [[ ! -f /etc/uwsgi/vassals/uwsgi.ini ]]; then
+		ln -s /home/$USERNAME/$APP/uwsgi.ini /etc/uwsgi/vassals
+	fi
+	if [[ $? -ge 1 ]]; then
+		update_step_error "$x"
+	fi
+}
+
 # Cria um serviço no systemctl
 # Create a systemctl service
 create_service_file() {
@@ -403,12 +471,17 @@ create_service_file() {
 ======
 [Unit]
 Description=$DESCRIPTION
-After=network.target
+After=syslog.target
 
 [Service]
-User=$USERNAME
-WorkingDirectory=/home/$USERNAME/$APP
 ExecStart=/usr/local/bin/$SERVICE.sh
+RuntimeDirectory=uwsgi
+Restart=always
+KillSignal=SIGQUIT
+Type=notify
+StandardError=syslog
+NotifyAccess=all
+User=$USERNAME
 
 [Install]
 WantedBy=multi-user.target
@@ -421,10 +494,10 @@ fi
 
 # Criar o script que executa o modo Emperor do uWSGI
 # Create the script called by systemctl service
-create_script_executor() {
+create_script_emperor() {
 	cat > /usr/local/bin/$SERVICE.sh <<EOF
 #!/bin/bash
-/home/$USERNAME/$APP/$VENV/bin/gunicorn --access-logfile - --workers 3 --bind unix:/home/$USERNAME/$APP/$APP.sock $WSGI_FOLDER_NAME.wsgi:application
+/home/$USERNAME/$APP/$VENV/bin/uwsgi --emperor /etc/uwsgi/vassals --uid centos --gid centos
 EOF
 chmod +x /usr/local/bin/$SERVICE.sh
 if [[ $? -ge 1 ]]; then
@@ -481,9 +554,12 @@ declare -a commands=(
 	"execute_collec_mig_createsup"
 	"install_firewall"
 	"enable_ports"
+	"manage_default_nginx_file"
 	"create_nginx_file"
+	"create_uwsgi_ini_file"
+	"criar_emperor_uwsgi"
 	"create_service_file"
-	"create_script_executor"
+	"create_script_emperor"
 	"run_service"
 )