ConoHa VPS（CentOS 8.2）に Rails 6 + PostgreSQL + Nginx + Unicorn + Capistrano でデプロイする

ssh root@IPアドレス

The authenticity of host IPアドレス can't be established.
ECDSA key fingerprint is SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
Are you sure you want to continue connecting (yes/no/[fingerprint])?

adduser ユーザ名

passwd 作業用ユーザ名

visudo

## Allow root to run any commands anywhere
root    ALL=(ALL)   ALL

## Allow root to run any commands anywhere
root          ALL=(ALL)       ALL
作業用ユーザ名   ALL=(ALL)       ALL

visudo

## Same thing without a password
# %wheel        ALL=(ALL)       NOPASSWD: ALL

## Same thing without a password
# %wheel       ALL=(ALL)       NOPASSWD: ALL
%作業用ユーザ名   ALL=(ALL)       NOPASSWD: ALL

su 作成したユーザ名

sudo echo test

exit

exit

ssh 作成したユーザ名@IPアドレス

sudo vi /etc/ssh/sshd_config

# Authentication:

#LoginGraceTime 2m
PermitRootLogin yes
#StrictModes yes
#MaxAuthTries 6
#MaxSessions 10

# Authentication:

#LoginGraceTime 2m
PermitRootLogin no
#StrictModes yes
#MaxAuthTries 6
#MaxSessions 10

sudo systemctl restart sshd

su root

dnf -y install git

git --version

git clone https://github.com/rbenv/rbenv.git /usr/local/rbenv

vi /etc/profile.d/rbenv.sh

export RBENV_ROOT=/usr/local/rbenv
export PATH="$RBENV_ROOT/bin:$PATH"
eval "$(rbenv init -)"

source /etc/profile.d/rbenv.sh

rbenv --version

git clone https://github.com/rbenv/ruby-build.git /usr/local/rbenv/plugins/ruby-build

dnf -y groupinstall "Development Tools"

dnf -y install gcc gcc-c++ glibc-headers openssl-devel readline readline-devel zlib zlib-devel libffi-devel libxml2 libxml2-devel libxslt libxslt-devel mysql-devel bzip2

rbenv install -list

2.5.8
2.6.6
2.7.1
jruby-9.2.13.0
maglev-1.0.0
mruby-2.1.2
rbx-5.0
truffleruby-20.2.0
truffleruby+graalvm-20.2.0

rbenv install 2.7.1

rbenv versions

rbenv global 2.7.1

rbenv rehash

ruby -v

exit

cd /usr/local/rbenv/

ls -la

sudo chown 作業用ユーザ名 version

sudo chown 作業用ユーザ名 shims

ls -la

rbenv global 2.7.1

rbenv rehash

ruby -v

su root

rbenv exec gem install bundler

rbenv rehash

which bundler

dnf install -y nodejs

node -v

npm install -g yarn

yarn -v

dnf install -y postgresql postgresql-server postgresql-devel postgresql-contrib postgresql-docs

postgresql-setup initdb

systemctl enable postgresql

systemctl is-enabled postgresql

systemctl start postgresql

psql --version

systemctl status postgresql

vi /var/lib/pgsql/data/postgresql.conf

#listen_addresses = 'localhost'

listen_addresses = '*'

vi /var/lib/pgsql/data/pg_hba.conf

# TYPE  DATABASE        USER            ADDRESS                 METHOD

# "local" is for Unix domain socket connections only
local   all             all                                     peer
# IPv4 local connections:
host    all             all             127.0.0.1/32            ident
# IPv6 local connections:
host    all             all             ::1/128                 ident
# Allow replication connections from localhost, by a user with the
# replication privilege.
local   replication     all                                     peer
host    replication     all             127.0.0.1/32            ident
host    replication     all             ::1/128                 ident

# TYPE  DATABASE        USER            ADDRESS                 METHOD

# "local" is for Unix domain socket connections only
# local   all             all                                     peer
# IPv4 local connections:
# host    all             all             127.0.0.1/32            ident
# IPv6 local connections:
# host    all             all             ::1/128                 ident
# Allow replication connections from localhost, by a user with the
# replication privilege.
local   replication     all                                     peer
host    replication     all             127.0.0.1/32            ident
host    replication     all             ::1/128                 ident
local   all             all                                     trust
host    all             all             0.0.0.0/0               md5

systemctl restart postgresql

production:
  <<: *default
  database: test_production
  username: test
  password: <%= ENV['TEST_DATABASE_PASSWORD'] %>

psql -U postgres

CREATE ROLE "ロール名" WITH SUPERUSER LOGIN;

CREATE ROLE "test" WITH SUPERUSER LOGIN;

CREATE DATABASE "データベース名"

CREATE DATABASE "test_production";

\q

systemctl restart postgresql

dnf -y install nginx

nginx -v

systemctl enable nginx

systemctl is-enabled nginx

systemctl start nginx

systemctl status nginx

firewall-cmd --add-service=http --permanent

firewall-cmd --reload

exit

cd

ssh-keygen -t rsa

Enter file in which to save the key (/home/devsup/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:

cat ~/.ssh/id_rsa.pub

ssh-rsa XXXX...= ユーザ名@IPアドレス

cd /var

sudo mkdir www

sudo chown -R 作業用ユーザ名:作業用ユーザ名 www

ls -l

gem 'dotenv-rails'
gem 'unicorn'
gem 'mini_racer', platforms: :ruby

group :development, :test do
  gem 'capistrano'
  gem 'capistrano-bundler'
  gem 'capistrano-rails'
  gem 'capistrano-rbenv'
  gem 'capistrano3-unicorn'
end

bundle install

bundle exec cap install

require 'capistrano/setup'
require 'capistrano/deploy'
require 'capistrano/rbenv'
require 'capistrano/bundler'
require 'capistrano/rails/assets'
require 'capistrano/rails/migrations'
require 'capistrano3/unicorn'

server 'サーバのIPアドレス', user: 'サーバの作業用ユーザ名', roles: %w{app db web}
set :ssh_options, keys: 'ローカルの秘密鍵のパス'

capistrano (3.14.1)
  airbrussh (>= 1.0.0)
  i18n
  rake (>= 10.0.0)
  sshkit (>= 1.9.0)

# config valid only for current version of Capistrano

lock "~> 3.14.1" # Capistranoのバージョン

set :application, 'アプリケーション名' # アプリケーション名
set :repo_url, 'https://github.com/xxxx/yyyy' # クローンするGitHubリポジトリ（xxxxはユーザ名、yyyyはアプリ名）
set :deploy_to, '/var/www/アプリケーション名' # デプロイ先のディレクトリ
set :linked_files, %w{.env config/secrets.yml} # シンボリックリンクを貼るファイル
set :linked_dirs, %w{log tmp/pids tmp/cache tmp/sockets public/uploads} # シンボリックリンクを貼るディレクトリ
set :keep_releases, 3 # 保持するバージョンの数
set :rbenv_ruby, '2.7.1' # Rubyのバージョン
set :rbenv_type, :system
set :log_level, :debug # 出力するログのレベル 概要レベルにしたければ :info とする

namespace :deploy do
  desc 'Restart application'
  task :restart do
    invoke 'unicorn:restart'
  end
  desc 'Create database'
  task :db_create do
    on roles(:db) do |host|
      with rails_env: fetch(:rails_env) do
        within current_path do
          execute :bundle, :exec, :rails, 'db:create'
        end
      end
    end
  end
  desc 'Run seed'
  task :seed do
    on roles(:app) do
      with rails_env: fetch(:rails_env) do
        within current_path do
          execute :bundle, :exec, :rails, 'db:seed'
        end
      end
    end
  end
  after :publishing, :restart
  after :restart, :clear_cache do
    on roles(:web), in: :groups, limit: 3, wait: 10 do
    end
  end
end

$worker  = 2
$timeout = 30
$app_dir = "/var/www/アプリケーション名/current"
$listen  = File.expand_path 'tmp/sockets/unicorn.sock', $app_dir
$pid     = File.expand_path 'tmp/pids/unicorn.pid', $app_dir
$std_log = File.expand_path 'log/unicorn.log', $app_dir
worker_processes  $worker
working_directory $app_dir
stderr_path $std_log
stdout_path $std_log
timeout $timeout
listen  $listen
pid $pid
preload_app true
before_fork do |server, worker|
  defined?(ActiveRecord::Base) and ActiveRecord::Base.connection.disconnect!
  old_pid = "#{server.config[:pid]}.oldbin"
  if old_pid != server.pid
    begin
      Process.kill "QUIT", File.read(old_pid).to_i
    rescue Errno::ENOENT, Errno::ESRCH
    end
  end
end
after_fork do |server, worker|
  defined?(ActiveRecord::Base) and ActiveRecord::Base.establish_connection
end

sudo vi /usr/lib/systemd/system/unicorn_アプリケーション名.service

[Unit]
Description=unicorn アプリケーション名 service
After=network.target

[Service]
User=作業用ユーザ名
Environment=RAILS_ENV=production
WorkingDirectory=/var/www/アプリケーション名/current
PIDFile=/var/www/アプリケーション名/current/tmp/pids/unicorn.pid
ExecStart=/usr/local/rbenv/shims/bundle exec unicorn -c /var/www/アプリケーション名/current/config/unicorn/production.rb -D
Restart=always

[Install]
WantedBy=multi-user.target

sudo systemd-analyze verify /usr/lib/systemd/system/unicorn_アプリケーション名.service

sudo systemctl enable unicorn_アプリケーション名.service

sudo systemctl is-enabled unicorn_アプリケーション名.service

sudo vi /etc/nginx/conf.d/アプリケーション名.conf

upstream unicorn_アプリケーション名 {
  server unix:/var/www/アプリケーション名/current/tmp/sockets/unicorn.sock;
}
server {
  listen 80;
  server_name サーバのIPアドレス;
  root /var/www/アプリケーション名/current/public;
  access_log /var/log/nginx/アプリケーション名_access.log;
  error_log /var/log/nginx/アプリケーション名_error.log;
  location / {
    try_files $uri @unicorn;
  }
  location @unicorn {
    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-Host $host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_pass http://unicorn_アプリケーション名;
  }
}

sudo nginx -t

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

sudo systemctl restart nginx

bundle exec cap production deploy:check

ERROR linked file /var/www/アプリケーション名/shared/.env does not exist on IPアドレス

bundle exec rake secret

sudo vi /var/www/アプリケーション名/shared/config/secrets.yml

production:
  secret_key_base: 生成した乱数

sudo vi /var/www/アプリケーション名/shared/.env

bundle exec cap production deploy:check

bundle exec cap production deploy

su root

getenforce

vi /etc/ssh/sshd_config

# If you want to change the port on a SELinux system, you have to tell
# SELinux about this change.
# semanage port -a -t ssh_port_t -p tcp #PORTNUMBER
#
#Port 22
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::</code></pre>

# If you want to change the port on a SELinux system, you have to tell
# SELinux about this change.
# semanage port -a -t ssh_port_t -p tcp #PORTNUMBER
#
Port 50022
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::

cp /usr/lib/firewalld/services/ssh.xml /etc/firewalld/services/ssh.xml

vi /etc/firewalld/services/ssh.xml

<port protocol="tcp" port="22"/>

<port protocol="tcp" port="50022"/>

firewall-cmd --reload

systemctl restart sshd

ssh 作業用ユーザ名@IPアドレス

ssh: connect to host IPアドレス port 22: Operation timed out

ssh 作業用ユーザ名@IPアドレス -p 50022

server 'サーバのIPアドレス', user: 'サーバの作業用ユーザ名', roles: %w{app db web}
set :ssh_options, keys: 'ローカルの秘密鍵のパス'

server 'サーバのIPアドレス', user: 'サーバの作業用ユーザ名', port: '50022', roles: %w{app db web}
set :ssh_options, keys: 'ローカルの秘密鍵のパス'

bundle exec cap production deploy:check

set :repo_url, 'https://github.com/xxxx/yyyy' # クローンするGitHubリポジトリ（xxxxはユーザ名、yyyyはアプリ名）

set :repo_url, 'https://トークン:@github.com/xxxx/yyyy' # クローンするGitHubリポジトリ（xxxxはユーザ名、yyyyはアプリ名）

bundle exec cap production deploy:check

timedatectl set-timezone Asia/Tokyo

timedatectl status

psql -U postgres

\l

\q

psql -U postgres -d DB名

ALTER DATABASE "DB名" SET timezone TO 'Asia/Tokyo';

SELECT CURRENT_TIMESTAMP;

\q

module XXXX
  class Application < Rails::Application
    .........
    ......
    ...
    config.time_zone = 'Tokyo' # 追記
    config.active_record.default_timezone = :local # 追記
  end
end

vim /etc/logrotate.d/アプリケーション名_unicorn

/var/www/アプリケーション名/current/log/*unicorn.log {
  create 0664 作業用ユーザ名 作業用ユーザ名
  daily
  rotate 10
  missingok
  notifempty
  compress
  postrotate
    pid=/var/www/アプリケーション名/current/tmp/pids/unicorn.pid
    test -s $pid && kill -USR1 "$(cat $pid)"
  endscript
}

# production.0, production.1, production.2 の３世代保持 10Mを超えるとローテーション
config.logger = Logger.new('log/production.log', 3, 10 * 1024 * 1024)

bundle exec cap production deploy

var/www/アプリケーション名/current

bundle exec rails console -e production

Rails.env

var/www/アプリケーション名/current

bundle exec rails db:seed RAILS_ENV=production

bundle exec rails db:reset RAILS_ENV=production

bundle exec rails db:reset RAILS_ENV=production DISABLE_DATABASE_ENVIRONMENT_CHECK=1

/var/log/nginx/

/var/www/アプリケーション名/shared/log/