ssh-keygen -t rsa -b 4096 -C "github actions" -f ~/.ssh/github_id_rsa

vi ./Python_Web_Development_2022/WTT/.env.prod
...
# 해당 변수에 도메인명 추가
DJANGO_ALLOWED_HOSTS=localhost 127.0.0.1 [::1] 3.x.x.x. waytothem.store www.waytothem.store
...

vi ./WTT/.dockerignore
.env.prod
.env.dev
.env.prod.db
Dockerfile
django_프로젝트생성.txt

version: '3.2'

services:
  nginx:
    build: ./nginx
    ...

  web:
    build:
      context: ./WTT
      dockerfile: Dockerfile
    ...

  db:
    image: postgres:12.0-alpine
    ...

version: '3.2'

services:
  nginx:
    image: <YourDockerUserName>/wtt-nginx:latest # 도커 허브에 배포된 이미지 사용
    ...

  web:
    image: <YourDockerUserName>/wtt-web:latest   # 도커 허브에 배포된 이미지 사용
    ...

  db:
    image: postgres:12.0-alpine
    ...

mkdir -p .github/workflows && touch .github/workflows/BlogDeploy.yaml

name: BlogDeploy
on:
  push:
    branches:
      - "main"

jobs:
  deploy_job:
    runs-on: ubuntu-22.04
    steps:
      - name: "[Checkout] 1. Checkout repository"
        uses: actions/checkout@v3

      - name: "[Docker Login] 2. Dockerhub Login"
        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
        with:
          username: ${{ secrets.DOCKER_HUB_USERNAME }} 
          password: ${{ secrets.DOCKER_HUB_PASSWORD }}

      - name: "[Build] 3. nginx image build & push"
        uses: docker/build-push-action@v2
        with:
          context: ./nginx # Dockerfile이 있는 디렉토리 지정
          push: true
          tags: |
            <YourDockerUserName>/wtt-nginx:latest
      
      - name: "[Build] 4. WTT image build & push"
        uses: docker/build-push-action@v2
        with:
          context: ./WTT
          push: true
          tags: |
            <YourDockerUserName>/wtt-web:latest

      - name: "[Deploy] 5. Set up SSH"
        run: |
          mkdir -p ~/.ssh/
          echo "${{ secrets.SSH_PRIVATE_KEY }}" | tee -a ~/.ssh/id_rsa
          chmod 600 ~/.ssh/id_rsa
      
      - name: "[Deploy] 6. Set up Known hosts"
        run: |
          echo "${{ secrets.SSH_KNOWN_HOST }}" | tee -a ~/.ssh/known_hosts
          chmod 644 ~/.ssh/known_hosts
      
      - name: "[Deploy] 7. SSH and Deploy"
        run: |
          ssh -i ~/.ssh/id_rsa ${{ secrets.SSH_USERNAME }}@${{ secrets.SSH_PUBLIC_IP }}"
          cd Python_Web_Development_2022
          docker-compose -f docker-compose.yml up -d --build
          "

git add .
git commit -m "Update BlogDeploy Workflow"
git push -u origin main

$ vi ./WTT/single_pages/templates/landing.html

<section id="body-wrapper">
    <div class="container">
        <div class="row justify-content-between">
            <div class="col-lg-6 text-muted">
                <h1 class="mt-5 text-center text-dark text">IT</br>코딩 블로그</h1>
                <div class="card mt-1">
                    <div class="card-body">
                        <p class="text-center" style="font-size: 150%;">
                            </br>파이썬과 도커</br>그리고 리눅스와 셸 스크립팅에</br>많은 관심이 있습니다!
                             </br>
                            <span style="font-size: 80%;">
                                </br>해당 블로그는 IT 실습 관련하여</br>많은 글이 쓰여질 예정입니다.
                            </span>
                        </p>
                    </div>
                </div>
            </div>
...
</section>

git add .
git commit -m "landing 페이지 대문 글 수정"
git push -u origin main

curl -L -O https://github.com/wmnnd/nginx-certbot/raw/master/init-letsencrypt.sh

#!/bin/bash

if ! [ -x "$(command -v docker-compose)" ]; then
  echo 'Error: docker-compose is not installed.' >&2
  exit 1
fi

domains=(waytothem.store www.waytothem.store) # 본인 도메인 주소 입력
rsa_key_size=4096
data_path="./data/certbot" # 인증서를 저장할 경로 기입 (필자는 기본 입력된 경로 그대로 사용함.)
email="내 이메일 주소 기입"

... // 그 외에 설정은 건드릴게 없음. 디폴트로 냅두기

version: "3.3"

services:
  nginx:
    image: yshrim12/wtt-nginx:latest
    volumes:
      - type: volume
        source: "static_volume"
        target: "/usr/src/app/_static"
      - type: volume
        source: "media_volume"
        target: "/usr/src/app/_media"
      - "./data/certbot/conf:/etc/letsencrypt"
      - "./data/certbot/www:/var/www/certbot"
    ports:
      - "80:80"
      - "443:443"
    depends_on:
      - "web"
    container_name: nginx
    command: "/bin/sh -c 'while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g \"daemon off;\"'"

  certbot:
    image: certbot/certbot
    restart: always
    volumes:
      - "./data/certbot/conf:/etc/letsencrypt"
      - "./data/certbot/www:/var/www/certbot"
    container_name: certbot
    depends_on:
      - "nginx"
    networks:
      - "web-net"
    entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"

    # ... My Apps (web, db)...
    web:
      ...
    
    db:
      ...

upstream  greedy_jaehyo {
    server web:8000;

}

server {
    listen 80;
    location / {
        proxy_pass http://greedy_jaehyo;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
        proxy_redirect off;
    }

    location /static/ {
        alias /usr/src/app/_static/;
    }

    location /media/ {
        alias /usr/src/app/_media/;
    }
}

upstream wtt {
    server web:8000;
}

server {
    listen 80;
    server_name waytothem.store;

    location / {
        return 301 https://$host$request_uri;
    }

    location /.well-known/acme-challenge/ {
        root /var/www/certbot;
    }
}

server {
    listen 443 ssl;
    server_name waytothem.store;

    location / {
        proxy_pass http://wtt;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
        proxy_redirect off;
    }

    location /static/ {
        alias /usr/src/app/_static/;
    }

    location /media/ {
        alias /usr/src/app/_media/;
    }

    ssl_certificate /etc/letsencrypt/live/waytothem.store/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/waytothem.store/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
}

chmod +x ./init-letsencrypt.sh

sudo bash ./init-letsencrypt.sh

tree -L 2 .
.
├── WTT
│   ├── Dockerfile
│   ├── _media
│   ├── _static
│   ├── accountapp
│   ├── blog
│   ├── board
│   ├── django_프로젝트생성.txt
│   ├── do_it_django_prj
│   ├── manage.py
│   ├── profileapp
│   ├── requirements.txt
│   ├── single_pages
│   ├── .env.prod
│   ├── .env.prod.db
│   ├── .env.dev
│   └── templates
├── docker-compose.dev.yml
├── docker-compose.yml
├── migrate.sh
├── nginx
│   ├── Dockerfile
│   └── nginx.conf
└── venv
    ├── bin
    ├── include
    ├── lib
    ├── lib64 -> lib
    └── pyvenv.cfg

16 directories, 10 files

version: '3.2'

services:
  nginx:
    image: yshrim12/wtt-nginx:latest
    
  web:
    image: yshrim12/wtt-web:latest
    ...
    volumes:
      ...
      - type: bind
        source: "./WTT"
        target: "/usr/src/app"
    env_file:
      - "./WTT/.env.prod"
    ...

  db:
    image: postgres:12.0-alpine
    volumes:
      - type: volume
        source: "postgres_data"
        target: "/var/lib/postgresql/data"
    env_file:
      - "./WTT/.env.prod.db"
    container_name: postgresql
...

$ pwd
/home/ubuntu/Python_Web_Development_2022

$ mkdir .env

$ mv ./WTT/.env* .env/

...
  web:
    ...
    env_file:
      - ".env/.env.prod"

  db:
    ...
    env_file:
      - ".env/.env.prod.db"