Skip to content

Instantly share code, notes, and snippets.

@salman0ansari

salman0ansari/node_nginx_ssl.md

Forked from bradtraversy/node_nginx_ssl.md
Last active March 19, 2024 09:48
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save salman0ansari/e6b72ccd0e6256130e4700ba035040d0 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save salman0ansari/e6b72ccd0e6256130e4700ba035040d0 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. salman0ansari revised this gist Mar 19, 2024. 1 changed file with 9 additions and 1 deletion.
    10 changes: 9 additions & 1 deletion node_nginx_ssl.md
    View file
    Original file line number Diff line number Diff line change
    @@ -11,12 +11,16 @@ sudo apt install npm
    ```

    ## 2. Setup PM2 process manager to keep your app running

    > [!NOTE]
    > Make sure to change `newtoken` to something else
    ```
    sudo npm i pm2 -g
    pm2 start "./wago -admintoken newtoken"
    ```
    ### You should now be able to access your app using your IP and port. Now we want to setup a firewall blocking that port and setup NGINX as a reverse proxy so we can access it directly using port 80 (http)
    ### You should now be able to access your app using your IP and port.

    ## 3. Setup ufw firewall
    ```
    @@ -34,6 +38,10 @@ sudo apt install nginx
    sudo nano /etc/nginx/sites-available/default
    ```
    Add the following to the location part of the server block

    > [!NOTE]
    > Make sure to change `ENTER_YOUR_IP_OR_DOMAIN_HERE` to your IP or Domain
    ```
    server_name ENTER_YOUR_IP_OR_DOMAIN_HERE;
  2. salman0ansari revised this gist Dec 13, 2023. 1 changed file with 2 additions and 0 deletions.
    2 changes: 2 additions & 0 deletions node_nginx_ssl.md
    View file
    Original file line number Diff line number Diff line change
    @@ -6,6 +6,8 @@ curl -sL https://deb.nodesource.com/setup_16.x | sudo -E bash -
    sudo apt install nodejs
    sudo apt install npm
    ```

    ## 2. Setup PM2 process manager to keep your app running
  3. salman0ansari revised this gist Dec 8, 2023. 1 changed file with 1 addition and 12 deletions.
    13 changes: 1 addition & 12 deletions node_nginx_ssl.md
    View file
    Original file line number Diff line number Diff line change
    @@ -6,24 +6,13 @@ curl -sL https://deb.nodesource.com/setup_16.x | sudo -E bash -
    sudo apt install nodejs
    node --version
    ```

    ## 2. Setup PM2 process manager to keep your app running
    ```
    sudo npm i pm2 -g
    pm2 start app (or whatever your file name)
    # Other pm2 commands
    pm2 show app
    pm2 status
    pm2 restart app
    pm2 stop app
    pm2 logs (Show log stream)
    pm2 flush (Clear logs)
    # To make sure app starts when reboot
    pm2 startup ubuntu
    pm2 start "./wago -admintoken newtoken"
    ```
    ### You should now be able to access your app using your IP and port. Now we want to setup a firewall blocking that port and setup NGINX as a reverse proxy so we can access it directly using port 80 (http)

  4. salman0ansari revised this gist Dec 8, 2023. 1 changed file with 10 additions and 66 deletions.
    76 changes: 10 additions & 66 deletions node_nginx_ssl.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,38 +1,15 @@
    # Node.js Deployment

    > Steps to deploy a Node.js app to DigitalOcean using PM2, NGINX as a reverse proxy and an SSL from LetsEncrypt

    ## 1. Sign up for Digital Ocean
    If you use the referal link below, you get $10 free (1 or 2 months)
    https://m.do.co/c/5424d440c63a

    ## 2. Create a droplet and log in via ssh
    I will be using the root user, but would suggest creating a new user

    ## 3. Install Node/NPM
    ## 1. Install Node/NPM
    ```
    curl -sL https://deb.nodesource.com/setup_12.x | sudo -E bash -
    curl -sL https://deb.nodesource.com/setup_16.x | sudo -E bash -
    sudo apt install nodejs
    node --version
    ```

    ## 4. Clone your project from Github
    There are a few ways to get your files on to the server, I would suggest using Git
    ```
    git clone yourproject.git
    ```

    ### 5. Install dependencies and test app
    ```
    cd yourproject
    npm install
    npm start (or whatever your start command)
    # stop app
    ctrl+C
    ```
    ## 6. Setup PM2 process manager to keep your app running
    ## 2. Setup PM2 process manager to keep your app running
    ```
    sudo npm i pm2 -g
    pm2 start app (or whatever your file name)
    @@ -50,27 +27,27 @@ pm2 startup ubuntu
    ```
    ### You should now be able to access your app using your IP and port. Now we want to setup a firewall blocking that port and setup NGINX as a reverse proxy so we can access it directly using port 80 (http)

    ## 7. Setup ufw firewall
    ## 3. Setup ufw firewall
    ```
    sudo ufw enable
    sudo ufw status
    sudo ufw allow ssh (Port 22)
    sudo ufw allow http (Port 80)
    sudo ufw allow https (Port 443)
    sudo ufw allow ssh
    sudo ufw allow http
    sudo ufw allow https
    ```

    ## 8. Install NGINX and configure
    ## 4. Install NGINX and configure
    ```
    sudo apt install nginx
    sudo nano /etc/nginx/sites-available/default
    ```
    Add the following to the location part of the server block
    ```
    server_name yourdomain.com www.yourdomain.com;
    server_name ENTER_YOUR_IP_OR_DOMAIN_HERE;
    location / {
    proxy_pass http://localhost:5000; #whatever port your app runs on
    proxy_pass http://localhost:1337;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection 'upgrade';
    @@ -85,36 +62,3 @@ sudo nginx -t
    # Restart NGINX
    sudo service nginx restart
    ```

    ### You should now be able to visit your IP with no port (port 80) and see your app. Now let's add a domain

    ## 9. Add domain in Digital Ocean
    In Digital Ocean, go to networking and add a domain

    Add an A record for @ and for www to your droplet


    ## Register and/or setup domain from registrar
    I prefer Namecheap for domains. Please use this affiliate link if you are going to use them
    https://namecheap.pxf.io/c/1299552/386170/5618

    Choose "Custom nameservers" and add these 3

    * ns1.digitalocean.com
    * ns2.digitalocean.com
    * ns3.digitalocean.com

    It may take a bit to propogate

    10. Add SSL with LetsEncrypt
    ```
    sudo add-apt-repository ppa:certbot/certbot
    sudo apt-get update
    sudo apt-get install python-certbot-nginx
    sudo certbot --nginx -d yourdomain.com -d www.yourdomain.com
    # Only valid for 90 days, test the renewal process with
    certbot renew --dry-run
    ```

    Now visit https://yourdomain.com and you should see your Node app
  5. @bradtraversy bradtraversy revised this gist Oct 2, 2019. 1 changed file with 3 additions and 3 deletions.
    6 changes: 3 additions & 3 deletions node_nginx_ssl.md
    View file
    Original file line number Diff line number Diff line change
    @@ -54,9 +54,9 @@ pm2 startup ubuntu
    ```
    sudo ufw enable
    sudo ufw status
    sudo ufw enable ssh (Port 22)
    sudo ufw enable http (Port 80)
    sudo ufw enable https (Port 443)
    sudo ufw allow ssh (Port 22)
    sudo ufw allow http (Port 80)
    sudo ufw allow https (Port 443)
    ```

    ## 8. Install NGINX and configure
  6. @bradtraversy bradtraversy revised this gist Sep 25, 2019. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion node_nginx_ssl.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,6 +1,6 @@
    # Node.js Deployment

    > Steps to deploy a Node.js app to Digital Ocean using PM2, NGINX as a reverse proxy and an SSL from LetsEncrypt
    > Steps to deploy a Node.js app to DigitalOcean using PM2, NGINX as a reverse proxy and an SSL from LetsEncrypt
    ## 1. Sign up for Digital Ocean
    If you use the referal link below, you get $10 free (1 or 2 months)
  7. @bradtraversy bradtraversy revised this gist Sep 24, 2019. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion node_nginx_ssl.md
    View file
    Original file line number Diff line number Diff line change
    @@ -83,7 +83,7 @@ Add the following to the location part of the server block
    sudo nginx -t
    # Restart NGINX
    sudo service restart nginx
    sudo service nginx restart
    ```

    ### You should now be able to visit your IP with no port (port 80) and see your app. Now let's add a domain
  8. @bradtraversy bradtraversy created this gist Sep 20, 2019.
    120 changes: 120 additions & 0 deletions node_nginx_ssl.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,120 @@
    # Node.js Deployment

    > Steps to deploy a Node.js app to Digital Ocean using PM2, NGINX as a reverse proxy and an SSL from LetsEncrypt
    ## 1. Sign up for Digital Ocean
    If you use the referal link below, you get $10 free (1 or 2 months)
    https://m.do.co/c/5424d440c63a

    ## 2. Create a droplet and log in via ssh
    I will be using the root user, but would suggest creating a new user

    ## 3. Install Node/NPM
    ```
    curl -sL https://deb.nodesource.com/setup_12.x | sudo -E bash -
    sudo apt install nodejs
    node --version
    ```

    ## 4. Clone your project from Github
    There are a few ways to get your files on to the server, I would suggest using Git
    ```
    git clone yourproject.git
    ```

    ### 5. Install dependencies and test app
    ```
    cd yourproject
    npm install
    npm start (or whatever your start command)
    # stop app
    ctrl+C
    ```
    ## 6. Setup PM2 process manager to keep your app running
    ```
    sudo npm i pm2 -g
    pm2 start app (or whatever your file name)
    # Other pm2 commands
    pm2 show app
    pm2 status
    pm2 restart app
    pm2 stop app
    pm2 logs (Show log stream)
    pm2 flush (Clear logs)
    # To make sure app starts when reboot
    pm2 startup ubuntu
    ```
    ### You should now be able to access your app using your IP and port. Now we want to setup a firewall blocking that port and setup NGINX as a reverse proxy so we can access it directly using port 80 (http)

    ## 7. Setup ufw firewall
    ```
    sudo ufw enable
    sudo ufw status
    sudo ufw enable ssh (Port 22)
    sudo ufw enable http (Port 80)
    sudo ufw enable https (Port 443)
    ```

    ## 8. Install NGINX and configure
    ```
    sudo apt install nginx
    sudo nano /etc/nginx/sites-available/default
    ```
    Add the following to the location part of the server block
    ```
    server_name yourdomain.com www.yourdomain.com;
    location / {
    proxy_pass http://localhost:5000; #whatever port your app runs on
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection 'upgrade';
    proxy_set_header Host $host;
    proxy_cache_bypass $http_upgrade;
    }
    ```
    ```
    # Check NGINX config
    sudo nginx -t
    # Restart NGINX
    sudo service restart nginx
    ```

    ### You should now be able to visit your IP with no port (port 80) and see your app. Now let's add a domain

    ## 9. Add domain in Digital Ocean
    In Digital Ocean, go to networking and add a domain

    Add an A record for @ and for www to your droplet


    ## Register and/or setup domain from registrar
    I prefer Namecheap for domains. Please use this affiliate link if you are going to use them
    https://namecheap.pxf.io/c/1299552/386170/5618

    Choose "Custom nameservers" and add these 3

    * ns1.digitalocean.com
    * ns2.digitalocean.com
    * ns3.digitalocean.com

    It may take a bit to propogate

    10. Add SSL with LetsEncrypt
    ```
    sudo add-apt-repository ppa:certbot/certbot
    sudo apt-get update
    sudo apt-get install python-certbot-nginx
    sudo certbot --nginx -d yourdomain.com -d www.yourdomain.com
    # Only valid for 90 days, test the renewal process with
    certbot renew --dry-run
    ```

    Now visit https://yourdomain.com and you should see your Node app