fix(tubearchivist): add nginx reverse proxy + celery services
TubeArchivist requires nginx to serve the frontend SPA and proxy API requests to Django. Without nginx, only API routes work. Changes: - Add nginx with config matching Docker's nginx.conf (port 8000) - Add TA_APP_DIR, TA_CACHE_DIR, TA_MEDIA_DIR env vars for bare-metal paths - Run Django migrate, collectstatic, ta_envcheck, ta_connection, ta_startup - Add celery worker + beat scheduler as separate systemd services - Fix interface port from 8080 to 8000 (nginx) - Add migrations step to update script
This commit is contained in:
CanbiZ (MickLesk)
@@ -31,9 +31,9 @@ function update_script() {
|
||||
fi
|
||||
|
||||
if check_for_gh_release "tubearchivist" "tubearchivist/tubearchivist"; then
|
||||
msg_info "Stopping Service"
|
||||
systemctl stop tubearchivist
|
||||
msg_ok "Stopped Service"
|
||||
msg_info "Stopping Services"
|
||||
systemctl stop tubearchivist tubearchivist-celery tubearchivist-beat
|
||||
msg_ok "Stopped Services"
|
||||
|
||||
msg_info "Backing up Data"
|
||||
cp /opt/tubearchivist/.env /opt/tubearchivist_env.bak
|
||||
@@ -59,9 +59,19 @@ function update_script() {
|
||||
mv /opt/tubearchivist_env.bak /opt/tubearchivist/.env
|
||||
msg_ok "Restored Configuration"
|
||||
|
||||
msg_info "Starting Service"
|
||||
systemctl start tubearchivist
|
||||
msg_ok "Started Service"
|
||||
msg_info "Running Migrations"
|
||||
set -a
|
||||
source /opt/tubearchivist/.env
|
||||
set +a
|
||||
cd /opt/tubearchivist/backend
|
||||
$STD /opt/tubearchivist/.venv/bin/python manage.py migrate
|
||||
$STD /opt/tubearchivist/.venv/bin/python manage.py collectstatic --noinput -c
|
||||
msg_ok "Ran Migrations"
|
||||
|
||||
msg_info "Starting Services"
|
||||
systemctl start tubearchivist tubearchivist-celery tubearchivist-beat
|
||||
systemctl reload nginx
|
||||
msg_ok "Started Services"
|
||||
msg_ok "Updated successfully!"
|
||||
fi
|
||||
exit
|
||||
@@ -74,7 +84,7 @@ description
|
||||
msg_ok "Completed Successfully!\n"
|
||||
echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
|
||||
echo -e "${INFO}${YW} Access it using the following URL:${CL}"
|
||||
echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
|
||||
echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8000${CL}"
|
||||
echo -e "${INFO}${YW} Credentials:${CL}"
|
||||
echo -e "${TAB}${BGN}Username: admin${CL}"
|
||||
echo -e "${TAB}${BGN}Password: see ~/tubearchivist.creds${CL}"
|
||||
|
||||
@@ -17,6 +17,7 @@ msg_info "Installing Dependencies"
|
||||
$STD apt install -y \
|
||||
build-essential \
|
||||
git \
|
||||
nginx \
|
||||
redis-server \
|
||||
atomicparsley \
|
||||
python3-dev \
|
||||
@@ -80,11 +81,15 @@ if [[ -f /opt/tubearchivist/backend/requirements.plugins.txt ]]; then
|
||||
fi
|
||||
TA_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
|
||||
ES_PASSWORD=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
|
||||
mkdir -p /opt/tubearchivist/{cache,media}
|
||||
cat <<EOF >/opt/tubearchivist/.env
|
||||
TA_HOST=http://${LOCAL_IP}:8080
|
||||
TA_HOST=http://${LOCAL_IP}:8000
|
||||
TA_USERNAME=admin
|
||||
TA_PASSWORD=${TA_PASSWORD}
|
||||
TA_BACKEND_PORT=8080
|
||||
TA_APP_DIR=/opt/tubearchivist
|
||||
TA_CACHE_DIR=/opt/tubearchivist/cache
|
||||
TA_MEDIA_DIR=/opt/tubearchivist/media
|
||||
ELASTIC_PASSWORD=${ES_PASSWORD}
|
||||
REDIS_CON=redis://localhost:6379
|
||||
ES_URL=http://localhost:9200
|
||||
@@ -102,10 +107,97 @@ EOF
|
||||
$STD systemctl enable --now redis-server
|
||||
msg_ok "Set up Tube Archivist"
|
||||
|
||||
msg_info "Creating Service"
|
||||
msg_info "Configuring Nginx"
|
||||
sed -i 's/^user www-data;$/user root;/' /etc/nginx/nginx.conf
|
||||
cat <<'EOF' >/etc/nginx/sites-available/default
|
||||
server {
|
||||
listen 8000;
|
||||
|
||||
location /cache/videos/ {
|
||||
auth_request /api/ping/;
|
||||
alias /opt/tubearchivist/cache/videos/;
|
||||
}
|
||||
|
||||
location /cache/channels/ {
|
||||
auth_request /api/ping/;
|
||||
alias /opt/tubearchivist/cache/channels/;
|
||||
}
|
||||
|
||||
location /cache/playlists/ {
|
||||
auth_request /api/ping/;
|
||||
alias /opt/tubearchivist/cache/playlists/;
|
||||
}
|
||||
|
||||
location /media/ {
|
||||
auth_request /api/ping/;
|
||||
alias /opt/tubearchivist/media/;
|
||||
types {
|
||||
text/vtt vtt;
|
||||
}
|
||||
}
|
||||
|
||||
location /youtube/ {
|
||||
auth_request /api/ping/;
|
||||
alias /opt/tubearchivist/media/;
|
||||
types {
|
||||
video/mp4 mp4;
|
||||
}
|
||||
}
|
||||
|
||||
location /api {
|
||||
include proxy_params;
|
||||
proxy_pass http://localhost:8080;
|
||||
}
|
||||
|
||||
location /admin {
|
||||
include proxy_params;
|
||||
proxy_pass http://localhost:8080;
|
||||
}
|
||||
|
||||
location /static/ {
|
||||
alias /opt/tubearchivist/backend/staticfiles/;
|
||||
}
|
||||
|
||||
root /opt/tubearchivist/backend/static;
|
||||
index index.html;
|
||||
|
||||
location ~* ^/(?!static/|cache/).*\.(?:css|js|png|jpg|jpeg|gif|ico|svg|woff2?)$ {
|
||||
try_files $uri $uri/ /index.html =404;
|
||||
}
|
||||
|
||||
location = /index.html {
|
||||
add_header Cache-Control "no-store, no-cache, must-revalidate";
|
||||
add_header Pragma "no-cache";
|
||||
expires 0;
|
||||
}
|
||||
|
||||
location / {
|
||||
add_header Cache-Control "no-store, no-cache, must-revalidate";
|
||||
add_header Pragma "no-cache";
|
||||
expires 0;
|
||||
try_files $uri $uri/ /index.html =404;
|
||||
}
|
||||
}
|
||||
EOF
|
||||
systemctl enable -q --now nginx
|
||||
msg_ok "Configured Nginx"
|
||||
|
||||
msg_info "Initializing Application"
|
||||
set -a
|
||||
source /opt/tubearchivist/.env
|
||||
set +a
|
||||
cd /opt/tubearchivist/backend
|
||||
$STD /opt/tubearchivist/.venv/bin/python manage.py migrate
|
||||
$STD /opt/tubearchivist/.venv/bin/python manage.py collectstatic --noinput -c
|
||||
$STD /opt/tubearchivist/.venv/bin/python manage.py ta_envcheck
|
||||
$STD /opt/tubearchivist/.venv/bin/python manage.py ta_connection
|
||||
$STD /opt/tubearchivist/.venv/bin/python manage.py ta_startup
|
||||
msg_ok "Initialized Application"
|
||||
|
||||
msg_info "Creating Services"
|
||||
cat <<EOF >/etc/systemd/system/tubearchivist.service
|
||||
[Unit]
|
||||
Description=Tube Archivist
|
||||
Description=Tube Archivist Backend
|
||||
After=network.target elasticsearch.service redis-server.service
|
||||
|
||||
[Service]
|
||||
@@ -121,8 +213,45 @@ RestartSec=5
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
systemctl enable -q --now tubearchivist
|
||||
msg_ok "Created Service"
|
||||
cat <<EOF >/etc/systemd/system/tubearchivist-celery.service
|
||||
[Unit]
|
||||
Description=Tube Archivist Celery Worker
|
||||
After=tubearchivist.service redis-server.service elasticsearch.service
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
WorkingDirectory=/opt/tubearchivist/backend
|
||||
EnvironmentFile=/opt/tubearchivist/.env
|
||||
Environment=PATH=/opt/tubearchivist/.venv/bin:/usr/local/bin:/usr/bin:/bin
|
||||
ExecStart=/opt/tubearchivist/.venv/bin/celery -A task worker --loglevel=error --concurrency=4 --max-tasks-per-child=5 --max-memory-per-child=150000
|
||||
Restart=on-failure
|
||||
RestartSec=5
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
cat <<EOF >/etc/systemd/system/tubearchivist-beat.service
|
||||
[Unit]
|
||||
Description=Tube Archivist Celery Beat
|
||||
After=tubearchivist.service redis-server.service
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
WorkingDirectory=/opt/tubearchivist/backend
|
||||
EnvironmentFile=/opt/tubearchivist/.env
|
||||
Environment=PATH=/opt/tubearchivist/.venv/bin:/usr/local/bin:/usr/bin:/bin
|
||||
ExecStart=/opt/tubearchivist/.venv/bin/celery -A task beat --loglevel=error --scheduler django_celery_beat.schedulers:DatabaseScheduler
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
RuntimeMaxSec=3600
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
systemctl enable -q --now tubearchivist tubearchivist-celery tubearchivist-beat
|
||||
msg_ok "Created Services"
|
||||
|
||||
motd_ssh
|
||||
customize
|
||||
|
||||
Reference in New Issue
Block a user