python项目上线实操

上线前检查项目还存在的问题：python manage.py check --deploy

配置文件(settings.py)：

#所有关于debug的都注释掉
DEBUG = False
# 允许所有主机访问
ALLOWED_HOSTS = ['*']
#指定静态文件在服务器位置
STATIC_ROOT = '/root/project/stat/'

# HTTP和HTTPS相关配置

# # 保持HTTPS连接的时间
# SECURE_HSTS_SECONDS = 3600
# SECURE_HSTS_INCLUDE_SUBDOMAINS = True
# SECURE_HSTS_PRELOAD = True
#
# # 自动重定向到安全连接
# SECURE_SSL_REDIRECT = True
#
# # 避免浏览器自作聪明推断内容类型（避免跨站脚本攻击风险）
# SECURE_CONTENT_TYPE_NOSNIFF = True
#
# # 避免跨站脚本攻击
# SECURE_BROWSER_XSS_FILTER = True
#
# # COOKIE只能通过HTTPS进行传输
# SESSION_COOKIE_SECURE = True
# CSRF_COOKIE_SECURE = True
#
# # 防止点击劫持攻击手段 - 修改HTTP协议响应头
# # 当前网站是不允许使用<iframe>标签进行加载的
# X_FRAME_OPTIONS = 'DENY'

上线（打开阿里云服务器）
创建项目文件夹（配置文件、代码文件、日志文件、静态资源文件）

[root@izuf6hgznqeh3d0hgxzyrqz ~]# mkdir project_school
[root@izuf6hgznqeh3d0hgxzyrqz ~]# mkdir -p project_school/conf
[root@izuf6hgznqeh3d0hgxzyrqz ~]# mkdir -p project_school/code
[root@izuf6hgznqeh3d0hgxzyrqz ~]# mkdir -p project_school/logs
[root@izuf6hgznqeh3d0hgxzyrqz ~]# mkdir -p project_school/stat
[root@izuf6hgznqeh3d0hgxzyrqz project_school]# ls
code  conf  logs  stat

克隆码云项目(code文件夹)

[root@izuf6hgznqeh3d0hgxzyrqz code]# git clone https://gitee.com/weejoo/school.git
[root@izuf6hgznqeh3d0hgxzyrqz code]# ls
school

创建环境，添加依赖项

[root@izuf6hgznqeh3d0hgxzyrqz project_school]# python3 -m venv venv
[root@izuf6hgznqeh3d0hgxzyrqz project_school]# source venv/bin/activate
(venv) [root@izuf6hgznqeh3d0hgxzyrqz project_school]# ls
code  conf  logs  stat  venv
(venv) [root@izuf6hgznqeh3d0hgxzyrqz project_school]# pip install -r code/school/requirements.txt

创建python3 -m venv venv
启动source venv/bin/activate
更新pip pip install -U pip
安装依赖项　pip install -r code/fangtx/requirements.txt

uwsgi相关

配置uwsgi

(venv) [root@izuf6hgznqeh3d0hgxzyrqz project]# vim conf/uwsgi.conf

  1[uwsgi]
  2 # 配置项目前导路径
  3 base=/root/project
  4 # 配置项目名称
  5 name=fangtx
  6 # 守护进程
  7 master=true
  8 # 进程个数（CPU个数）
  9 processes=4
 10 # 虚拟环境地址
 11 pythonhome=%(base)/venv
 12 # 项目地址
 13 chdir=%(base)/code/fangtx
 14 # 指定python解释器
 15 pythonpath=%(pythonhome)/bin/python
 16 # 指定uwsgi文件
 17 module=%(name).wsgi
 18 # 通信的地址和端口(自己服务器内网的IP地址和端口)
 19 http=172.19.169.61:80
 20 # 日志文件地址
 21 # logto=%(base)/logs/uwsgi.log

安装uwsgi

(venv) [root@izuf6hgznqeh3d0hgxzyrqz project]# pip install uwsgi

启动uwsgi

(venv) [root@izuf6hgznqeh3d0hgxzyrqz project]# uwsgi --ini conf/uwsgi.conf

如果80端口被占用（nginx）

(venv) [root@izuf6hgznqeh3d0hgxzyrqz project_school]# netstat -nap | grep 80
(venv) [root@izuf6hgznqeh3d0hgxzyrqz project_school]# systemctl stop nginx

确认uwsgi可运行后，恢复配置文件中注释的日志,uwsgi用8000端口,nginx用80端口

(venv) [root@izuf6hgznqeh3d0hgxzyrqz project_school]# vim conf/uwsgi.conf

    19 通信的地址和端口(自己服务器的IP地址和端口)
    socket=服务器内网IP:8000
    20 # 日志文件地址
    21 logto=%(base)/logs/uwsgi.log

配置Nginx

静态文件夹转移

（先在pycharm中指定静态资源位置）

STATIC_ROOT = '/root/project_school/stat/'
(venv) [root@izuf6hgznqeh3d0hgxzyrqz school]# git pull
(venv) [root@izuf6hgznqeh3d0hgxzyrqz fangtx]# python manage.py collectstatic
(venv) [root@izuf6hgznqeh3d0hgxzyrqz stat]# ls
admin  css  images  js  rest_framework

项目更新pull(不是必须的)

(venv) [root@izuf6hgznqeh3d0hgxzyrqz fangtx]# git pull

配置nginx（动静分离）
- 后台运行uwsgi

(venv) [root@izuf6hgznqeh3d0hgxzyrqz project]# uwsgi --ini conf/uwsgi.conf &
(venv) [root@izuf6hgznqeh3d0hgxzyrqz project]# jobs
[1]+  运行中               uwsgi --ini conf/uwsgi.conf &

安装nginx(不是必须)

(venv) [root@izuf6hgznqeh3d0hgxzyrqz project_school]# yum install nginx

配置nginx文件(nginx官方)－让官方的包含自己项目的nginx文件

(venv) [root@izuf6hgznqeh3d0hgxzyrqz project]# vim /etc/nginx/nginx.conf

# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/

user root;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

 10 # Load dynamic modules. See /usr/share/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;

events {
    worker_connections 1024;
}

http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                       '$status $body_bytes_sent "$http_referer" '
                       '"$http_user_agent" "$http_x_forwarded_for"';
 
     access_log  /var/log/nginx/access.log  main;
 
     sendfile            on;
     tcp_nopush          on;
     tcp_nodelay         on;
     keepalive_timeout   65;
     types_hash_max_size 2048;
 
     include             /etc/nginx/mime.types;
      default_type        application/octet-stream;
 
     # Load modular configuration files from the /etc/nginx/conf.d directory.
     # See http://nginx.org/en/docs/ngx_core_module.html#include
     # for more information.
     include /etc/nginx/conf.d/*.conf;
     include /root/project_school/conf/nginx.conf;
 }

配置nginx文件(nginx自己)(locatin动态走uwsgi，静态走nginx)

server{
  2     listen 80;
  3     server_name _;
  4     access_log /root/project_school/logs/access.log;
  5     error_log /root/project_school/logs/error.log;
  6 
  7     location / {
  8         include uwsgi_params;
  9         uwsgi_pass 服务器内网IP:8000;
 10     }
 11 
 12     location /static/ {
 13         alias /root/project_school/stat/;
 14         expires 30d;
 15     }
 16 
 17 }

HTTPS相关

sftp传安全访问证书到服务器(project>conf>cert>)：2248813_weejoo.cn.key 2248813_weejoo.cn.pem

(venv) [root@izuf6hgznqeh3d0hgxzyrqz cert]# ls
2248813_weejoo.cn.key  2248813_weejoo.cn.pem

配置HTTPS

(venv) [root@izuf6hgznqeh3d0hgxzyrqz project]# vim conf/nginx.conf

server {
 19     listen 443;
 20     server_name _;
 21     access_log /root/project/logs/access.log;
 22     error_log /root/project/logs/error.log;
 23 
 24     ssl on;
 25     ssl_certificate   /root/project/conf/cert/2248813_weejoo.cn.pem;
 26     ssl_certificate_key  /root/project/conf/cert/2248813_weejoo.cn.key;
 27     ssl_session_timeout 5m;
 28     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
 29     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
 30     ssl_prefer_server_ciphers on;
 31 
 32     location / {
 33         include uwsgi_params;
 34         uwsgi_pass 服务器内网IP:8000;
 35     }
 36 
 37     location /static/ {
 38         alias /root/project/stat/;
 39         expires 30d;
 40     }
 41 }

保存退出/重启nginx　
systemctl restart nginx
设置云解析DNS
记录类型： A
主机记录：@
记录值：服务器公网地址

python项目上线实操

推荐阅读更多精彩内容