For Docker

Build Vue app

docker run --rm --name web --volume "$(pwd)/trackingCoinsVue:/app" -it node:latest bash -c "cd /app && npm install --global npm@latest && npm install && npm run build"

Other

# Change credentials
docker-compose run app bundle exec rails credentials:edit

# Remove directory
rm -rf mydir

# Copy file
cp /var/www/coins/nginx.conf .

# Copy directory
cp -r /var/www/coins/site/letsencrypt/ .

Docker clean

# Stop all containers
docker stop $(docker ps -a -q)
# Delete all containers
docker rm $(docker ps -a -q)
# Delete all network
docker network rm $(docker network ls --quiet)
# Delete all images
docker rmi $(docker images -q)
# Remove all system volumes
docker volume rm $(docker volume ls -q)

First step

docker-compose build
docker-compose run app bash -c 'bundle check || bundle install --clean'
docker-compose run app bundle exec rails db:create db:migrate db:seed

Additional command

docker-compose up --build
docker-compose up --detach
docker-compose down
docker-compose run app bash

Create service file

vim /lib/systemd/system/coins.service

[Unit]
Description=Docker compose for services
After=docker.service
Conflicts=shutdown.target reboot.target halt.target

[Service]
Restart=always
RestartSec=10
WorkingDirectory=/root/trackingCoins
ExecStart=/usr/local/bin/docker-compose up
ExecStop=/usr/local/bin/docker-compose down
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
TimeoutStartSec=10
TimeoutStopSec=30
StartLimitBurst=3
StartLimitInterval=60s
NotifyAccess=all

[Install]
WantedBy=multi-user.target

Run docker

sudo systemctl enable docker
sudo systemctl start docker
sudo systemctl status docker

Run docker-compose project

sudo systemctl daemon-reload
sudo systemctl enable coins
sudo systemctl start coins
sudo systemctl status coins
sudo systemctl restart coins

Docker certbot

Add certificate

sudo docker run --rm --name certbot --volume "$(pwd)/letsencrypt:/etc/letsencrypt" certbot/certbot certonly --webroot --agree-tos --manual-public-ip-logging-ok --domains domain.name --email [email protected] --webroot-path /etc/letsencrypt

Update certificate

sudo docker run --rm --name certbot --volume "/root/trackingCoins/letsencrypt:/etc/letsencrypt" certbot/certbot renew

nginx.conf

# disable when not https
ssl_certificate ssl/coins/live/cryptonot.io/fullchain.pem;
ssl_certificate_key ssl/coins/live/cryptonot.io/privkey.pem;

server {
  listen 80;
  listen [::]:80; #Added IPv6 here too

  # for certbot
  location ^~ /.well-known/acme-challenge/ {
    root /etc/nginx/ssl/coins;
  }

  # disable when not https
  return 301 https://cryptonot.io$request_uri;
}

server {
  listen 8090 ssl;
  listen [::]:8090 ssl;

  # for telegram bot
  listen 8443 ssl;

  location / {
    proxy_pass http://app:8080;
  }
}

server {
  listen 443 ssl;
  listen [::]:443 ssl;

  root /var/www/coins;

  # for SPA
  location / {
    try_files $uri $uri/ /index.html;
  }
}

Add to cron certbot_renew.sh. Readme inside file

Telegram bot

For more information, see: https://www.rubydoc.info/gems/telegram-bot/0.4.2 https://github.com/telegram-bot-rb/telegram-bot

Add row in /config/environments/production.rb

routes.default_url_options = { host: ENV['TELEGRAM_BOT_HOST_PORT'], protocol: :https }

Add file /config/initializers/telegram_bot.rb

Telegram.bots_config = { default: ENV['TELEGRAM_BOT_TOKEN'] }

Setup webhooks, check after setup https://api.telegram.org/bot[TOKEN]/getWebhookInfo

docker-compose run app bundle exec rake telegram:bot:set_webhook RAILS_ENV=production

Run bot for test - poller-mode

docker-compose run app bundle exec rake telegram:bot:poller

Vue Build dist

# Set execute permission on your script
# chmod +x build_web.sh

docker run --rm --name web --volume "$(pwd)/trackingCoinsVue:/app" -it node:latest bash -c "cd /app && npm install --global npm@latest && npm install && npm run build"

Delete file from all commits

https://help.github.com/articles/removing-sensitive-data-from-a-repository/

git filter-branch --force --index-filter \
'git rm --cached --ignore-unmatch PATH-TO-YOUR-FILE-WITH-SENSITIVE-DATA' \
--prune-empty --tag-name-filter cat -- --all

git commit -am 'Bla-bla-bla'

git push origin --force

SSH public-key authentication

sudo chown root:root -R /root
sudo chmod 700 ~/.ssh/
sudo chmod 600 ~/.ssh/authorized_keys

Travis SSH deploy only LINUX

https://oncletom.io/2016/travis-ssh-deploy/

https://www.rusiczki.net/2018/01/25/use-travis-to-build-and-deploy-your-jekyll-site-through-ssh/

https://github.com/dwyl/learn-travis/blob/master/encrypted-ssh-keys-deployment.md

Create a new SSH Key

ssh-keygen -t rsa -b 4096 -C "TravisCIDeployKey"

Encrypt file

touch .travis.yml && travis encrypt-file ./.travis/id_rsa ./.travis/id_rsa.enc --add

If .travis.yml is not add decrypt command, you run command

travis login --org