Deployment guide for NodeJS apps with Nginx, PM2, and Certbot.
sudo apt update
sudo apt upgrade
Remote:
sudo ufw enable
sudo ufw app list
sudo ufw allow OpenSSH
sudo ufw status
Local:
ssh-copy-id user@host
ssh user@host
- NodeJS and NPM
curl -sL https://deb.nodesource.com/setup_12.x | sudo -E bash -
sudo apt install nodejs
node --version
- PM2 Process Manager
sudo npm install -g pm2
# Other pm2 commands
pm2 show app
pm2 status
pm2 restart app
pm2 stop app
pm2 logs (Show log stream)
pm2 flush (Clear logs)
- Nginx
sudo apt update
sudo apt install nginx
# Disable Default Site
cd /etc/nginx/sites-enabled
sudo unlink default
- Certbot
sudo add-apt-repository ppa:certbot/certbot
sudo apt install certbot
mkdir apps
- Sign up for NoIP
- Create a hostname
Install build-essential
sudo apt install build-essential
Install NoIP client
cd /usr/local/src
wget http://www.no-ip.com/client/linux/noip-duc-linux.tar.gz
tar xzf noip-duc-linux.tar.gz
cd noip-2.1.9-1
make
make install
Configure NoIP
sudo /usr/local/bin/noip2 -C
Create a new service
sudo nano /etc/systemd/system/noip2.service
noip2.service file content
[Unit]
Description=No-ip.com dynamic IP address updater
After=network.target
After=syslog.target
[Install]
WantedBy=multi-user.target
Alias=noip.service
[Service]
# Start main service
ExecStart=/usr/local/bin/noip2
Restart=always
Type=forking
Enable on startup
sudo systemctl daemon-reload
sudo systemctl enable noip2
sudo systemctl start noip2
sudo systemctl status noip2
sudo systemctl stop noip2
sudo reboot now
sudo systemctl status noip2
Quick Note:
- When adding new apps/projects, use port 5XXX
cd apps
git clone yourproject.git
- Set up application port. Make sure it is not in use
- Set up environment variables (if used)
- Install dependencies and test the app
cd yourproject
npm install
npm start
curl http://localhost:APP_PORT
ctrl + c
sudo pm2 start <app.js> --name <appname>
sudo pm2 startup systemd
sudo pm2 save
Configure subdomain records in cloudflare
- Add needed records in cloudflare
Issue SSL Certificate with cerbot
sudo certbot --manual -d domain.com -d www.domain.com --preferred-challenge dns certonly
# Add a txt record with the prompted config in cloudflare
Create a new firewall rule first
sudo ufw app list
sudo ufw allow 'Nginx Full'
sudo ufw status
Create a new server block
cd /etc/nginx/conf.d
sudo nano app_name.conf
Add the following to the file. Change and <APP_PORT>
server {
listen 80;
server_name yourdomain.com www.yourdomain.com;
return 301 https://$host$request_uri;
}
server {
server_name yourdomain.com www.yourdomain.com;
location / {
proxy_pass http://localhost:APP_PORT;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
}
listen 443 ssl;
ssl_certificate /etc/letsencrypt/live/yourdomain.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/yourdomain.com/privkey.pem;
}
Then check nginx config and restart nginx
sudo nginx -t
# If no error
sudo service nginx restart
Now visit https://yourdomain.com and you should see your Node app
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent