bachir/glitchtip-install
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5 Commits 1 Branch 0 Tags 54 KiB
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
bach d1d15323e8 gunicorn nginx ssl
2025-03-18 16:28:04 +01:00
Readme.md
gunicorn nginx ssl
2025-03-18 16:28:04 +01:00

Readme.md

glicthtip 2.4.5 on debian 12 bookworm

python 3.13

this is probably unecessary

apt update && apt upgrade -y
apt install wget build-essential libreadline-dev libncursesw5-dev libssl-dev libsqlite3-dev tk-dev libgdbm-dev libc6-dev libbz2-dev libffi-dev zlib1g-dev -y
wget https://www.python.org/ftp/python/3.13.1/Python-3.13.1.tar.xz
tar -xvf Python-3.13.1.tar.xz
cd Python-3.13.1
./configure --enable-optimizations
make altinstall
# make it default
update-alternatives --install /usr/bin/python3 python3 /usr/local/bin/python3.13 1

system packages

apt install -y acl build-essential libpq-dev libsasl2-dev libssl-dev nginx nodejs postgresql redis-server

postgresql

su - postgres
postgres@:~$ psql
postgres=# CREATE DATABASE glitchtip WITH ENCODING 'UTF8' TEMPLATE template0;
postgres=# CREATE USER glitchtip WITH ENCRYPTED PASSWORD '<PGSQL_PASSWORD>';
postgres=# GRANT ALL PRIVILEGES ON DATABASE glitchtip TO glitchtip;
postgres=# ALTER DATABASE glitchtip OWNER TO "glitchtip";
postgres=# \c glitchtip
postgres=# ALTER SCHEMA public OWNER TO "glitchtip";

glitchtip

su -
useradd -m -s /bin/bash glitchtip
mkdir /opt/glitchtip
chown glitchtip:glitchtip /opt/glitchtip
su - glitchtip

frontend

cd /opt/glitchtip
git clone https://gitlab.com/glitchtip/glitchtip-frontend.git
cd /opt/glitchtip/glitchtip-frontend
git checkout tags/v4.2.5
npm install
npm run build-prod

backend

cd /opt/glitchtip
git clone https://gitlab.com/glitchtip/glitchtip-backend.git
cd /opt/glitchtip/glitchtip-backend
git checkout tags/v4.2.5
python3 -m venv .venv
source .venv/bin/activate
pip install --upgrade setuptools pip wheel cython uv
uv sync

set the env variables

https://glitchtip.com/documentation/install#configuration

vim .env

DATABASE_HOST="127.0.0.1"
DATABASE_PORT="5432"
DATABASE_PASSWORD="<PGSQL_PASSWORD>"
DATABASE_NAME="glitchtip"
DATABASE_USER="glitchtip"
SECRET_KEY="<yourrandomlygeneratedsecretkey>"
REDIS_HOST="127.0.0.1"
EMAIL_URL="smtp://glitchtip@yourdomain.net"
DEFAULT_FROM_EMAIL="glitchtip@yourdomain.net"
GLITCHTIP_DOMAIN="http://yourdomain.net"

migrate db

export $(cat .env | xargs)
./manage.py migrate

collect static

ln -s /opt/glitchtip/glitchtip-frontend/dist/glitchtip-frontend/ dist
mkdir /opt/glitchtip/glitchtip-backend/{static,media}
./manage.py collectstatic

gunicorn

mkdir /opt/glitchtip/runtime
vim /opt/glitchtip/gunicon.py

pidfile = "/opt/glitchtip/runtime/pid"
bind = "unix:/opt/glitchtip/runtime/socket"
proc_name = "glitchtip"
worker_tmp_dir = "/dev/shm"
workers = 3

systemd service

su -
vim /etc/systemd/system/glitchtip.service

[Unit]
Description=glitchtip daemon
After=network.target

[Service]
PIDFile=/opt/glitchtip/runtime/pidfile
EnvironmentFile=/opt/glitchtip/glitchtip-backend/.env
User=glitchtip
Group=glitchtip
RuntimeDirectory=glitchtip
WorkingDirectory=/opt/glitchtip/glitchtip-backend
ExecStart=/opt/glitchtip/glitchtip-backend/.venv/bin/gunicorn glitchtip.wsgi --config /opt/glitchtip/gunicorn.py
ExecReload=/bin/kill -s HUP $MAINPID
ExecStop=/bin/kill -s TERM $MAINPID
PrivateTmp=true
Restart=always

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload
sudo systemctl start glitchtip
sudo journalctl -u glitchtip
sudo systemctl enable glitchtip

nginx

letsencrypt

because of the mess with python 3.13 i use special venv for certbot

cd /root
python3.11 -m venv certbot-venv
source certbot-venv/bin/activate
pip install certbot
systemctl stop nginx
./certbot-venv/bin/certbot certonly --standalone -d your.domin.tld --cert-name your.domin.tld
systemctl start nginx
deactivate
mkdir -p /etc/nginx/ssl/certs/your.domain.tld
openssl dhparam -out /etc/nginx/ssl/certs/your.domain.tld/dhparam.pem 2048
# renewing
# touch /var/spool/cron/crontabs/root
# crontab -l > mycron
# echo "0 3 * * * certbot renew --pre-hook 'systemctl stop nginx' --post-hook 'systemctl start nginx' --cert-name $_domain" >> mycron
# crontab mycron
# rm mycron

vhost

vim /etc/nginx/sites-available/your.domain.tld.conf

server {
  listen 80;
  listen [::]:80;
  server_name your.domain.tld;
  return 301 https://$server_name$request_uri;
}

server {
  listen [::]:443 ssl http2;
  listen 443 ssl http2;
  server_name your.domain.tld;
  access_log /var/log/nginx/your.domain.tld.access.log;
  error_log /var/log/nginx/your.domain.tld.error.log;

  ssl_certificate /etc/letsencrypt/live/your.domain.tld/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/your.domain.tld/privkey.pem;
  ssl_dhparam /etc/nginx/ssl/certs/your.domain.tld/dhparam.pem;

  add_header Strict-Transport-Security max-age=15768000;

  location ~ /\.git {
          deny all;
  }

  location / {
          alias /opt/glitchtip/glitchtip-backend/static/;
          try_files $uri $uri/index.html /index.html;
          expires 1h;
          add_header Pragma public;
          add_header Cache-Control "public";
  }
  location /media/ {
          alias /opt/glitchtip/glitchtip-backend/media/;
  }

  location ~ ^/(api|admin|_health|rest-auth)/ {
          proxy_pass         http://unix:/opt/glitchtip/runtime/socket;
          proxy_redirect     off;
          proxy_set_header   Host                 $host;
          proxy_set_header   X-Real-IP            $remote_addr;
          proxy_set_header   X-Forwarded-For      $proxy_add_x_forwarded_for;
          proxy_set_header   X-Forwarded-Proto    $scheme;
  }
}


ln -s /etc/nginx/sites-available/your.domain.tld.conf /etc/nginx/sites-enabled/
nginx -t
systemctl restart nginx

sources

Description
No description provided
Readme