|
@@ -9,6 +9,10 @@ authorisation. This needs special support from the web server
|
|
The following assumes Debian wheezy, with either Apache or Nginx as
|
|
The following assumes Debian wheezy, with either Apache or Nginx as
|
|
frontend.
|
|
frontend.
|
|
|
|
|
|
|
|
+For the complete deployment configuration used by Illyse, see:
|
|
|
|
+
|
|
|
|
+ https://www.illyse.org/projects/ils-si/wiki/Mise_en_place_production
|
|
|
|
+
|
|
|
|
|
|
## Gunicorn configuration
|
|
## Gunicorn configuration
|
|
|
|
|
|
@@ -74,16 +78,21 @@ get any traceback.
|
|
proxy_redirect off;
|
|
proxy_redirect off;
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
-
|
|
|
|
|
|
+
|
|
|
|
+ location /static/ {
|
|
|
|
+ alias /home/coin/coin/coin/static/;
|
|
|
|
+ }
|
|
|
|
+ # Invoices, see SENDFILE_* options in coin
|
|
|
|
+ location /protected/ {
|
|
|
|
+ internal;
|
|
|
|
+ alias /home/coin/coin/smedia/;
|
|
|
|
+ }
|
|
location / {
|
|
location / {
|
|
proxy_pass http://localhost:8484;
|
|
proxy_pass http://localhost:8484;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
|
|
|
|
-TODO: sendfile support for invoices
|
|
|
|
-
|
|
|
|
-
|
|
|
|
## Apache configuration
|
|
## Apache configuration
|
|
|
|
|
|
<VirtualHost *:80>
|
|
<VirtualHost *:80>
|
|
@@ -128,7 +137,9 @@ TODO: sendfile support for invoices
|
|
SSLEngine On
|
|
SSLEngine On
|
|
SSLCertificateFile /etc/ssl/certs/illyse-coin-cert.pem
|
|
SSLCertificateFile /etc/ssl/certs/illyse-coin-cert.pem
|
|
SSLCertificateKeyFile /etc/ssl/private/illyse-coin-privkey.pem
|
|
SSLCertificateKeyFile /etc/ssl/private/illyse-coin-privkey.pem
|
|
|
|
+
|
|
|
|
+ # Directly send invoices, avoid Django to do it
|
|
|
|
+ XSendFile On
|
|
|
|
+ XSendFilePath /home/myuser/coin/smedia/
|
|
|
|
|
|
</VirtualHost>
|
|
</VirtualHost>
|
|
-
|
|
|
|
-TODO: sendfile support for invoices
|
|
|