dictio

install

yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
yum install vim mc ruby bash-completion git htop screen wget
group add dictio

view

yum install nginx ruby-devel make gcc redhat-rpm-config certbot python3-certbot-apache mod_ssl
gem install puma -v '4.3.12'
gem install bson -v '4.15.0'
gem install sinatra slim mongo i18n json net-scp ed25519 bcrypt_pbkdf resolv sinatra-contrib maxmind-geoip2

certifikát

certbot certonly -d beta.dictio.info

mongo

https://docs.mongodb.com/manual/tutorial/install-mongodb-on-red-hat/

yum install ruby-devel make gcc redhat-rpm-config
gem install mongo json bson

config

view

mkdir /srv/dictio
chgrp dictio /srv/dictio/
chmod g+w /srv/dictio/
cd /srv/dictio 
git clone git@github.com:rambousek/dictio.git /srv/dictio

/etc/nginx/conf.d/dictio.conf

upstream sinatra {
    server unix:/srv/dictio/tmp/puma.sock;
}

server {
   listen 80;
   listen [::]:80;
   server_name beta.dictio.info;
   return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    root /srv/dictio/public;
    server_name beta.dictio.info;
    ssl_certificate_key /etc/letsencrypt/live/beta.dictio.info/privkey.pem;
    ssl_certificate /etc/letsencrypt/live/beta.dictio.info/fullchain.pem;
    keepalive_timeout 70;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;


    location / {
        try_files $uri $uri/index.html @puma;
    }

    location ~* ^/video/([^/]*)/([^/]*) {
        proxy_pass http://147.251.22.156/media/$1/$2;
    }
    location ~* ^/thumb/([^/]*)/([^/]*) {
        proxy_pass http://147.251.22.156/media/$1/thumb/$2/thumb.jpg;
    }
    location ~* /sw/(.*) {
        proxy_set_header Host znaky.zcu.cz;
        proxy_pass http://147.228.43.30/proxy/tts/$1?$args;
    }


    location @puma {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://sinatra;
    }

    error_page 502 /502.html;
    location = /502.html {
        root /srv/dictio/public/;
        internal;
    }
}

files

/etc/nginx/conf.d/dictio.conf

server {
   listen 80;
   listen [::]:80;      
   server_name files.dictio.info;
   return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    listen [::]:443 ssl;
    root /data/video;
    server_name files.dictio.info;
    ssl_certificate_key /etc/letsencrypt/live/files.dictio.info/privkey.pem;
    ssl_certificate /etc/letsencrypt/live/files.dictio.info/fullchain.pem;
    keepalive_timeout 70;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;

    location / {
        autoindex on;
    }
}

mongo

systemctl enable mongod

/etc/mongod.conf - net: bindIp:

crontab: mongo-counts.sh mongo-media.sh cleancomment.rb

sign

https://github.com/sutton-signwriting/font-db

/etc/systemd/system/signwriting.service

[Unit]
After=network.target

[Service]
ExecStart=/usr/bin/node /opt/font-db/server/server.js
WorkingDirectory=/opt/font-db
#Type=forking
Restart=always
StandardOutput=syslog
TimeoutSec=90
SyslogIdentifier=signwriting
User=nobody
Group=wheel
Environment=PATH=/usr/bin:/usr/local/bin
Environment=NODE_ENV=production

[Install]
WantedBy=multi-user.target

systemctl enable signwriting