1. 上线前的检查
   python [图片上传失败...(image-d41cc-1579252119950)]

manage.py check --deploy

保持HTTPS连接的时间

SECURE_HSTS_SECONDS = 3600

SECURE_HSTS_INCLUDE_SUBDOMAINS = True

SECURE_HSTS_PRELOAD = True

自动重定向到安全连接

SECURE_SSL_REDIRECT = True

避免浏览器自作聪明推断内容类型

SECURE_CONTENT_TYPE_NOSNIFF = True

避免跨站脚本攻击

SECURE_BROWSER_XSS_FILTER = True

COOKIE只能通过HTTPS进行传输

SESSION_COOKIE_SECURE = True

CSRF_COOKIE_SECURE = True

防止点击劫持攻击手段 - 修改HTTP协议响应头

当前网站是不允许使用<iframe>标签进行加载的

X_FRAME_OPTIONS = 'DENY'

2. 创建项目文件夹
   mkdir -p ~/project/{code, conf, logs, stat}
   cd project

3. 克隆项目到code文件夹
   cd code
   git clone --depth=1 git@gitee.com:jackfrued/blog.git

4. 创建虚拟环境重建依赖项
   cd ..
   pip3 install virtualenv
   virtualenv --python=/usr/bin/python3 venv
   source venv/bin/activate
   pip install -r code/blog/requirements.txt
   pip install uwsgi

5. 编写uWSGI的配置文件 - conf/uwsgi.ini
   [uwsgi]

配置前导路径

base=/root/project

配置守护进程

master=true

配置进程数

processes=4

虚拟环境路径

pythonhome=%(base)/venv

项目路径

chdir=%(base)/code/blog

指定python解释器

pythonpath=%(pythonhome)/bin/python

指定wsgi文件对应的模块

module=blog.wsgi

通信的地址和端口(自己服务器的IP地址和端口)

socket=[图片上传失败...(image-ab35dd-1579252119949)]

172.18.61.250:80

日志文件地址

logto=%(base)/logs/uwsgi.log

6. 启动uWSGI
   uwsgi --ini conf/uwsgi.ini &

7. 动静分离部署
   yum install -y nginx
   vim /etc/nginx/nginx.conf

全局Nginx配置文件 - /etc/nginx/nginx.conf
user root;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
include /usr/share/nginx/modules/.conf;
events {
worker_connections 1024;
}
http {
log_format main 'remote_user [request" '
'body_bytes_sent "http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 30;
types_hash_max_size 2048;
include /etc/nginx/mime.types;
default_type application/octet-stream;
include /etc/nginx/conf.d/.conf;

include /root/project/conf/nginx.conf;

}

局部配置 - conf/nginx.conf
server {
listen 80;
server_name _;

root /root/project/stat/html;

location /api/ {
    include uwsgi_params;
    uwsgi_pass [图片上传失败...(image-a33e0d-1579252119948)]

172.18.61.250:8000;
}

location /upload/ {
    include uwsgi_params;
    uwsgi_pass [图片上传失败...(image-daf6ac-1579252119948)]

172.18.61.250:8000;
}

location /media/ {
    alias /root/project/code/blog/media/;
    expires 30d;
}

location /static/ {
    alias /root/project/stat/;
    expires 30d;
}

}

修改配置文件 - code/blog/blog/[图片上传失败...(image-9143b1-1579252119948)]

settings.py
STATIC_ROOT = '/root/project/stat/'

收集静态资源 - code/blog
python [图片上传失败...(image-68283-1579252119948)]

manage.py collectstatic

启动Nginx
systemctl start nginx

8. 部署HTTPS
   server {
   listen 443 ssl;
   server_name _;

   ssl_certificate /root/project/cert/jackfrued.top.pem;
   ssl_certificate_key /root/project/cert/jackfrued.top.key;
   ssl_session_timeout 5m;
   ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
   ssl_prefer_server_ciphers on;

   root /root/project/stat/html;

   location /api/ {
   include uwsgi_params;
   uwsgi_pass [图片上传失败...(image-5eea52-1579252119947)]

172.18.61.250:8000;
}

location /upload/ {
    include uwsgi_params;
    uwsgi_pass [图片上传失败...(image-978528-1579252119947)]

172.18.61.250:8000;
}

location /media/ {
    alias /root/project/code/blog/media/;
    expires 30d;
}

location /static/ {
    alias /root/project/stat/;
    expires 30d;
}

}