详解Django+uwsgi+Nginx上线最佳实战

~$ mkdir /etc/sysconfig/network-scripts/backup
~$ cp /etc/sysconfig/network-scripts/ifcfg-eth0 /etc/sysconfig/network-scripts/backup/ifcfg-eth0.backup

~$ mkdir /etc/yum.repos.d/old
~$ mv /etc/yum.repos.d/CentOS-* /etc/yum.repos.d/old/
~$ cd /etc/yum.repos.d/
~$ curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo
~$ yum clean all && yum repolist all && yum update -y
~$ reboot

~$ rz

yum install zlib* gcc openssl openssl-devel libffi-devel -y
yum install pcre pcre-devel pcre-static -y

~$ tar -xvf Python-3.6.0.tar.xz
~$ cd Python-3.6.0

~$ vim Modules/Setup.dist
# 将该文件的204到209行部分代码取消注释，完成后如下所示：
# Socket module helper for socket(2)
_socket socketmodule.c

# Socket module helper for SSL support; you must comment out the other
# socket line above, and possibly edit the SSL variable:
SSL=/usr/local/ssl
_ssl _ssl.c   -DUSE_SSL -I$(SSL)/include -I$(SSL)/include/openssl   -L$(SSL)/lib -lssl -lcrypto

# The crypt module is now disabled by default because it breaks builds

~$ ./configure
~$ make -j
~$ make install
~$ cd
~$ rm -rf Python-3.6.0

# 恢复默认配置
iptables -F
# 放通3306/8000/80端口
iptables -I INPUT -p tcp -m tcp --dport 3306 -j ACCEPT
iptables -I INPUT -p tcp -m tcp --dport 8000 -j ACCEPT
iptables -I INPUT -p tcp -m tcp --dport 80 -j ACCEPT
# 保存规则
/etc/init.d/iptables save

~$ vim /etc/selinux/config
# 修改配置为如下所示：
SELINUX=permissive

~$ reboot

# 查找相关旧文件并删除
find / -name mysql
find / -name mariadb
# 移除全部相关包
rpm -qa | grep mysql
rpm -qa | grep mariadb
# 添加用户
useradd mysql -s /sbin/nologin -M
# 解压移动文件
tar -xvf mysql-5.7.24-linux-glibc2.12-x86_64.tar.gz
mv mysql-5.7.24-linux-glibc2.12-x86_64 /applications/
ln -s /applications/mysql-5.7.24-linux-glibc2.12-x86_64/ /applications/mysql
# 创建配置文件
vim /etc/my.cnf
# 创建相关目录
mkdir -p /data/mysql/data
mkdir -p /data/mysql/log
# 手动创建日志文件
touch /data/mysql/log/mysqld.log
# 修改权限
chown -R mysql.mysql /applications/mysql
chown -R mysql.mysql /data/mysql

[client]
port=3306
socket=/data/mysql/mysql.sock

[mysqld]
port=3306
datadir=/data/mysql/data
basedir=/applications/mysql
pid-file=/data/mysql/mysqld.pid
socket=/data/mysql/mysql.sock
user=mysql
character-set-server=utf8mb4
default-storage-engine=INNODB
collation-server = utf8mb4_general_ci
init_connect='SET NAMES utf8mb4'
max_connections = 1000
max_connect_errors = 1200
max_allowed_packet = 128M
explicit_defaults_for_timestamp = true
query_cache_size = 0
query_cache_type = 0
log_error = /data/mysql/log/error.log
slow_query_log = 1
slow_query_log_file = /data/mysql/log/slow.log
log_queries_not_using_indexes = 1
log_throttle_queries_not_using_indexes = 5
long_query_time = 8
log_slow_slave_statements = 1
min_examined_row_limit = 100
expire_logs_days = 5
tmpdir = /tmp
innodb_buffer_pool_size = 128M

[mysqld_safe]
log-error=/data/mysql/log/mysqld.log
pid-file=/data/mysql/mysqld.pid

# 同步数据
/applications/mysql/bin/mysql_install_db --basedir=/applications/mysql/ --datadir=/data/mysql/data/ --user=mysql

cp /applications/mysql/support-files/mysql.server /etc/init.d/mysqld
chmod +x /etc/init.d/mysqld 
vim /etc/init.d/mysqld

# 修改以下两行
basedir=/applications/mysql
datadir=/data/mysql/data

# 查看是否启动
netstat -tunlap | grep mysql
# 添加服务并设置为开机自启动
chkconfig --add mysqld
chkconfig mysqld on

/applications/mysql/bin/mysql_secure_installation

-- 设置用户密码
alter user 'root'@'localhost' identified by '123456';
-- 允许root远程访问
GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' IDENTIFIED BY '123456' WITH GRANT OPTION;
FLUSH PRIVILEGES;

mkdir /root/.pip
touch /root/.pip/pip.conf
echo '[global]'  /root/.pip/pip.conf
echo 'trusted-host=mirrors.aliyun.com'  /root/.pip/pip.conf
echo 'index-url=https://mirrors.aliyun.com/pypi/simple/'  /root/.pip/pip.conf

# PublisherPro，一个支持MD轻量级的CMS程式.
git clone https://gitee.com/bluemiaomiao/PublisherPro.git
pip3 install virtualenv
cd PROJECT_DIR
virtualenv venv
source venv/bin/activate
pip3 install -r requestments.txt
pip3 install uwsgi
mkdir log
mkdir script
touch PublisherPro/script/uwsgi.pid
touch PublisherPro/script/uwsgi.status
vim uwsgi.ini

# PROJECT_DIR/PROJECT_NAME/settings.py
# 设置为生产环境
DEBUG = False
# 配置数据库
DATABASES = {
 'default': {
  'ENGINE': 'django.db.backends.mysql',
  'NAME': 'publisher_pro',
  'USER': 'pubpro',
  'PASSWORD': 'bluemiaomiao',
  'HOST': '192.168.1.203',
  'PORT': '3306',
  'OPTIONS': {'init_command': 'SET default_storage_engine=INNODB;'},
 }
}
# 配置静态文件相关
# STATICFILES_DIRS = [os.path.join(BASE_DIR, 'static')]
STATIC_ROOT = os.path.join(BASE_DIR, 'static')

CREATE DATABASE `publisher_pro` CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';
CREATE USER `pubpro`@`localhost` IDENTIFIED BY 'bluemiaomiao' PASSWORD EXPIRE NEVER;
CREATE USER `pubpro`@`%` IDENTIFIED BY 'bluemiaomiao' PASSWORD EXPIRE NEVER;
GRANT All ON `publisher\_pro`.* TO `pubpro`@`%`;

./venv/bin/python3 manage.py makemigrations
./venv/bin/python3 manage.py migrate
./venv/bin/python3 manage.py createsuperuser
./venv/bin/python3 manage.py collectstatic

# uwsig使用配置文件启动
[uwsgi]
# 项目目录
chdir=/applications/website/PublisherPro
# 指定项目的application
module=PublisherPro.wsgi:application
# 指定sock的文件路径  
socket=/applications/website/PublisherPro/script/uwsgi.sock
# 进程个数  
workers=5
pidfile=/applications/website/PublisherPro/script/uwsgi.pid
# 状态文件
stats=/applications/website/PublisherPro/script/uwsgi.status
# 指定IP端口  
http=0.0.0.0:8000
# 指定静态文件
static-map=/static=/applications/website/PublisherPro/static
# 启动uwsgi的用户名和用户组
uid=pubpro
gid=pubpro
# 启用主进程
master=true
# 自动移除unix Socket和pid文件当服务停止的时候
vacuum=true
# 序列化接受的内容，如果可能的话
thunder-lock=true
# 启用线程
enable-threads=true
# 设置自中断时间
harakiri=30
# 设置缓冲
post-buffering=4096
# 设置日志目录
daemonize=/applications/website/PublisherPro/log/uwsgi.log

# 创建用户
useradd pubpro -s /sbin/nologin -M
# 检查结果
id pubpro
# 修改权限
chown -R pubpro.pubpro /applications/website/PublisherPro/
# 检查结果
ll -d /applications/website/PublisherPro/

# 启动应用
uwsgi --ini uwsgi.ini
# 重载应用
uwsgi --reload script/uwsgi.pid
# 状态信息
uwsgi --connect-and-read script/uwsgi.status
# 停止应用
uwsgi --stop script/uwsgi.pid

server {
 listen 80;
 server_name 192.168.2.108;
 access_log /var/log/nginx/access.log main;
 charset utf-8;
 gzip_types text/plain application/x-javascript text/css text/javascript application/x-httpd-php application/json text/json image/jpeg image/gif image/png application/octet-stream;
 error_page 404 /404.html;
 error_page 500 502 503 504 /50x.html;

 # 指定项目路径uwsgi
 location / {
    # 导入一个Nginx模块他是用来和uWSGI进行通讯的
  include uwsgi_params; 
    # 设置连接uWSGI超时时间
  uwsgi_connect_timeout 30; 
    # 指定uwsgi的sock文件所有动态请求就会直接丢给他
  uwsgi_pass unix:/data/PublisherPro/script/uwsgi.sock; 
 }

 # 指定静态文件路径
 location /static/ {
  alias /data/PublisherPro/static;
  index index.html index.htm;
 }
}