Nginxを使用してUbuntu 14.04にMeteor.jsアプリケーションをデプロイする方法

apt-get install nginx

server_tokens off; # for security-by-obscurity: stop displaying nginx version

# this section is needed to proxy web-socket connections
map $http_upgrade $connection_upgrade {
   default upgrade;
   ''      close;
}

# HTTP
server {
   listen 80 default_server; # if this is not a default server, remove "default_server"
   listen [::]:80 default_server ipv6only=on;

   root /usr/share/nginx/html; # root is irrelevant
   index index.html index.htm; # this is also irrelevant

   server_name ; # the domain on which we want to host the application. Since we set "default_server" previously, nginx will answer all hosts anyway.

   # redirect non-SSL to SSL
   location / {
       rewrite     ^ https://$server_name$request_uri? permanent;
   }
}

# HTTPS server
server {
   listen 443 ssl spdy; # we enable SPDY here
   server_name ; # this domain must match Common Name (CN) in the SSL certificate

   root html; # irrelevant
   index index.html; # irrelevant

   ssl_certificate /etc/nginx/ssl/; # full path to SSL certificate and CA certificate concatenated together
   ssl_certificate_key /etc/nginx/ssl/; # full path to SSL key

   # performance enhancement for SSL
   ssl_stapling on;
   ssl_session_cache shared:SSL:10m;
   ssl_session_timeout 5m;

   # safety enhancement to SSL: make sure we actually use a safe cipher
   ssl_prefer_server_ciphers on;
   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
   ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:RC4-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK';

   # config to enable HSTS(HTTP Strict Transport Security) https://developer.mozilla.org/en-US/docs/Security/HTTP_Strict_Transport_Security
   # to avoid ssl stripping https://en.wikipedia.org/wiki/SSL_stripping#SSL_stripping
   add_header Strict-Transport-Security "max-age=31536000;";

   # If your application is not compatible with IE <= 10, this will redirect visitors to a page advising a browser update
   # This works because IE 11 does not present itself as MSIE anymore
   if ($http_user_agent ~ "MSIE" ) {
       return 303 https://browser-update.org/update.html;
   }

   # pass all requests to Meteor
   location / {
       proxy_pass http://127.0.0.1:8080;
       proxy_http_version 1.1;
       proxy_set_header Upgrade $http_upgrade; # allow websockets
       proxy_set_header Connection $connection_upgrade;
       proxy_set_header X-Forwarded-For $remote_addr; # preserve client IP

       # this setting allows the browser to cache the application in a way compatible with Meteor
       # on every applicaiton update the name of CSS and JS file is different, so they can be cache infinitely (here: 30 days)
       # the root path (/) MUST NOT be cached
       if ($uri != '/') {
           expires 30d;
       }
   }
}

mkdir /etc/nginx/ssl
chmod 0700 /etc/nginx/ssl

rm /etc/nginx/sites-enabled/default

ln -s /etc/nginx/sites-available/ /etc/nginx/sites-enabled/

nginx -t

nginx -s reload

apt-get install mongodb-server

netstat -ln | grep -E '27017|28017'

tcp        0      0 127.0.0.1:27017         0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:28017         0.0.0.0:*               LISTEN
unix  2      [ ACC ]     STREAM     LISTENING     6091441  /tmp/mongodb-27017.sock

@daily root mkdir -p /var/backups/mongodb; mongodump --db  --out /var/backups/mongodb/$(date +'\%Y-\%m-\%d')

add-apt-repository ppa:chris-lea/node.js

Evented I/O for V8 javascript. Node's goal is to provide an easy way to build scalable network programs
More info: https://launchpad.net/~chris-lea/+archive/ubuntu/node.js
Press [ENTER] to continue or ctrl-c to cancel adding it

gpg: keyring `/tmp/tmphsbizg3u/secring.gpg' created
gpg: keyring `/tmp/tmphsbizg3u/pubring.gpg' created
gpg: requesting key C7917B12 from hkp server keyserver.ubuntu.com
gpg: /tmp/tmphsbizg3u/trustdb.gpg: trustdb created
gpg: key C7917B12: public key "Launchpad chrislea" imported
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
OK

apt-get update
apt-get install nodejs

adduser --disabled-login

Adding user `todos' ...
Adding new group `todos' (1001) ...
Adding new user `todos' (1001) with group `todos' ...
Creating home directory `/home/todos' ...
Copying files from `/etc/skel' ...
Changing the user information for todos
Enter the new value, or press ENTER for the default
       Full Name []:
       Room Number []:
       Work Phone []:
       Home Phone []:
       Other []:
Is the information correct? [Y/n]

# upstart service file at /etc/init/
description "Meteor.js (NodeJS) application"
author "Daniel Speichert <[email protected]>"

# When to start the service
start on started mongodb and runlevel [2345]

# When to stop the service
stop on shutdown

# Automatically restart process if crashed
respawn
respawn limit 10 5

# we don't use buil-in log because we use a script below
# console log

# drop root proviliges and switch to mymetorapp user
setuid
setgid

script
   export PATH=/opt/local/bin:/opt/local/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
   export NODE_PATH=/usr/lib/nodejs:/usr/lib/node_modules:/usr/share/javascript
   # set to home directory of the user Meteor will be running as
   export PWD=/home/
   export HOME=/home/
   # leave as 127.0.0.1 for security
   export BIND_IP=127.0.0.1
   # the port nginx is proxying requests to
   export PORT=8080
   # this allows Meteor to figure out correct IP address of visitors
   export HTTP_FORWARDED_COUNT=1
   # MongoDB connection string using  as database name
   export MONGO_URL=mongodb://localhost:27017/
   # The domain name as configured previously as server_name in nginx
   export ROOT_URL=https://
   # optional JSON config - the contents of file specified by passing "--settings" parameter to meteor command in development mode
   export METEOR_SETTINGS='{ "somesetting": "someval", "public": { "othersetting": "anothervalue" } }'
   # this is optional: http://docs.meteor.com/#email
   # commented out will default to no email being sent
   # you must register with MailGun to have a username and password there
   # export MAIL_URL=smtp://[email protected]:[email protected]
   # alternatively install "apt-get install default-mta" and uncomment:
   # export MAIL_URL=smtp://localhost
   exec node /home//bundle/main.js >> /home//.log
end script

cd ~

curl https://install.meteor.com | /bin/sh

meteor create --example todos

cd todos

cd

meteor build .

scp .tar.gz root@:~

mkdir /home/
mv .tar.gz /home/

cd /home/
tar -zxf .tar.gz

cat /home//bundle/README

This is a Meteor application bundle. It has only one external dependency:
Node.js 0.10.29 or newer. To run the application:

 $ (cd programs/server && npm install)
 $ export MONGO_URL='mongodb://user:password@host:port/databasename'
 $ export ROOT_URL='http://example.com'
 $ export MAIL_URL='smtp://user:password@mailhost:port/'
 $ node main.js

Use the PORT environment variable to set the port where the
application will listen. The default is 80, but that will require
root on most systems.

Find out more about Meteor at meteor.com.

apt-get install g++ make
cd /home//bundle/programs/server
npm install

npm WARN package.json [email protected] No description
npm WARN package.json [email protected] No repository field.
npm WARN package.json [email protected] No README data

> [email protected] install /home/todos/bundle/programs/server/node_modules/fibers
> node ./build.js

`linux-x64-v8-3.14` exists; testing
Binary is fine; exiting
[email protected] node_modules/underscore

[email protected] node_modules/semver

[email protected] node_modules/source-map-support
└── [email protected] ([email protected])

[email protected] node_modules/fibers

chown : /home/ -R

start

meteor build

scp .tar.gz root@:/home/

tar -zxf /home//.tar.gz

cd /home//bundle/programs/server

npm install

restart