무중단 배포 맛보기

// main.ts ... import { SetResponseHeader } from "./middleware/zero-downtime-deploy/set-response-header.middleware"; import { GlobalService } from "./middleware/zero-downtime-deploy/is-disable-keep-alive.global"; async function bootstrap() { ... GlobalService.isDisableKeepAlive = false; app.use(SetResponseHeader); // Starts listening to shutdown hooks app.enableShutdownHooks(); await app.listen(PORT as string, () => { process.send("ready"); console.log(`application is listening on port ${PORT}`); }); } bootstrap();

// set-response-header.middleware.ts import { NextFunction, Request, Response } from "express"; import { GlobalService } from "./is-disable-keep-alive.global"; export function SetResponseHeader(req: Request, res: Response, next: NextFunction) { if (GlobalService.isDisableKeepAlive) { res.set("Connection", "close"); } next(); }

// graceful-shutdown.ts import { Injectable, OnApplicationShutdown } from "@nestjs/common"; import { GlobalService } from "./is-disable-keep-alive.global"; @Injectable() export class GracefulShutdown implements OnApplicationShutdown { onApplicationShutdown(signal: string) { if (signal === "SIGINT") { GlobalService.isDisableKeepAlive = true; console.log("server closed"); } } }

// ecosystem.config.js module.exports = { apps: [{ name: "server", script: "dist/main.js", cwd: "/root/Web04-Fitory/server", instances: 0, exec_mode: "cluster", wait_ready: true, listen_timeout: 50000, kill_timeout: 5000 }] }

module.exports = { apps: [{ name: "server", script: "dist/main.js", cwd: "/root/Web04-Fitory/server", env: { PORT: "8080", } }] };

# www.fitory.ga 또는 fitory.ga로 들어올 경우 강제로 https로 redirect 해준다. server { listen 80 default_server; listen [::]:80 default_server; server_name fitory.ga www.fitory.ga; if ($host = www.fitory.ga) { return 301 https://$host$request_uri; } # managed by Certbot if ($host = fitory.ga) { return 301 https://$host$request_uri; } # managed by Certbot return 404; } # https 설정 부분이다. letsencrypt와 certbot을 이용했다. server { listen [::]:443 ssl ipv6only=on; # managed by Certbot listen 443 ssl; # managed by Certbot ssl_certificate /etc/letsencrypt/live/fitory.ga/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/fitory.ga/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot root /var/www/html; charset utf-8; underscores_in_headers on; add_header Strict-Transport-Security "max-age=31536000" always; location / { proxy_pass http://localhost:3000/; proxy_http_version 1.1; proxy_cache_bypass $http_upgrade; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Port $server_port; } location /api { proxy_pass http://localhost:8080/api; proxy_http_version 1.1; proxy_cache_bypass $http_upgrade; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Port $server_port; } gzip on; gzip_comp_level 2; gzip_proxied any; gzip_min_length 1000; gzip_disable "MSIE [1-6]\." gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript; }