在 ubuntu 20.04 部署 rails production

# /etc/nginx/site-available/app.conf
upstream myapp {
  # your app puma.socket file
  server unix:///home/deploy/app/your-app/shared/tmp/sockets/puma.sock;
}

server {
  listen 80;
  server_name your-domain.com;
  return 301 https://$host$request_uri;
}

server {
  listen 443 ssl http2;

  server_name your-domain.com;
  root /home/deploy/app/your-app/current/public;
  index  index.html index.htm;

  access_log /home/deploy/app/your-app/shared/log/nginx.access.log;
  error_log /home/deploy/app/your-app/shared/log/nginx.error.log warn; # only record warn or higher level log

  # tencent cloud ssl cerification files location
  ssl_certificate /etc/nginx/conf.d/ssl/1_your-app_bundle.crt;
  ssl_certificate_key /etc/nginx/conf.d/ssl/2_your-app.key;
  ssl_session_timeout 5m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
  ssl_prefer_server_ciphers on;

  location / {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $host;

    # If the file exists as a static file serve it directly without
    # running all the other rewrite tests on it
    if (-f $request_filename) {
      break;
    }

    # check for index.html for directory index
    # if it's there on the filesystem then rewrite
    # the url to add /index.html to the end of it
    # and then break to send it to the next config rules.
    if (-f $request_filename/index.html) {
      rewrite (.*) $1/index.html break;
    }

    # this is the meat of the rack page caching config
    # it adds .html to the end of the url and then checks
    # the filesystem for that file. If it exists, then we
    # rewrite the url to have explicit .html on the end
    # and then send it on its way to the next config rule.
    # if there is no file on the fs then it sets all the
    # necessary headers and proxies to our upstream pumas
    if (-f $request_filename.html) {
      rewrite (.*) $1.html break;
    }

    if (!-f $request_filename) {
      proxy_pass http://myapp;
      break;
    }
  }

  location ~* \.(ico|css|gif|jpe?g|png|js)(\?[0-9]+)?$ {
     expires max;
     break;
  }

  # Error pages
  # error_page 500 502 503 504 /500.html;
  location = /500.html {
    root /home/deploy/app/your-app/current/public;
  }

}

[Unit]
Description=Puma HTTP Server
After=network.target

# Uncomment for socket activation (see below)
# Requires=puma.socket

[Service]
Type=simple

# always failed with watchdog, doesn't know why
# Type=notify
# WatchdogSec=15

Environment=RAILS_ENV=production

WorkingDirectory=/home/deploy/app/your-app/current

# your puma production configuration file location
ExecStart=/home/deploy/.rbenv/shims/bundle exec puma -C /home/deploy/app/your-app/shared/config/puma/production.rb

ExecReload=/home/deploy/.rbenv/shims/bundle exec pumactl -S /home/deploy/app/your-app/shared/tmp/pids/puma.state restart

ExecStop=/home/deploy/.rbenv/shims/bundle exec pumactl -S /home/deploy/app/your-app/shared/tmp/pids/puma.state stop

Restart=always

[Install]
WantedBy=multi-user.target

# sudo /etc/logrotate.d/your-app

/home/ubuntu/app/your-app/shared/log/*.log {
  daily
  missingok
  rotate 14
  compress
  delaycompress
  dateext
  notifempty
  copytruncate
  create 0640 ubuntu ubuntu
  sharedscripts
  postrotate
    kill -HUP `cat /home/deploy/app/your-app/shared/tmp/pids/puma.pid`
    invoke-rc.d nginx rotate >/dev/null 2>&1
  endscript
}