Nginx/Passenger

From Chorke Wiki
Jump to navigation Jump to search
Source 
cat <<'EXE' | sudo bash
apt-get update;echo
apt-get install -y apt-transport-https ca-certificates gnupg build-essential
apt-get install -y software-properties-common git curl file procps libfuse2
apt-get clean;sleep 5
EXE

curl -fsSL https://oss-binaries.phusionpassenger.com/auto-software-signing-gpg-key-2025.txt \
 | sudo tee /etc/apt/keyrings/phusion.asc >/dev/null

cat << APT | sudo tee /etc/apt/sources.list.d/passenger.list >/dev/null
deb [arch=$(dpkg --print-architecture)\
 signed-by=/etc/apt/keyrings/phusion.asc]\
 https://oss-binaries.phusionpassenger.com/apt/passenger noble main
APT

cat <<'EXE' | sudo bash
apt-get update;echo
apt-get install -y nginx libnginx-mod-http-passenger
/usr/bin/passenger_free_ruby -v
which passenger;echo
passenger version
apt-get clean
EXE
PlantUML

Passenger » Why

Passenger » Why

Feature Nginx + Passenger Nginx + Puma
Ease of Setup High (Single config file) Medium (Need to manage Puma service)
Process Management Automatic (Spawns/restarts apps) Manual (Requires Systemd or Monit)
Memory Management Excellent (Auto-kills bloated processes) Good (Manual tuning required)
Multi-Language Supports Ruby, Python, Node.js Ruby only

Passenger » How

Passenger » How

How » Install 

lxc launch ubuntu:24.04 passenger   || true  && sleep 5
lxc delete   passenger/ubuntu:24.04 || true

lxc snapshot passenger ubuntu:24.04 && sleep 1
lxc restore  passenger ubuntu:24.04 && sleep 5
lxc exec     passenger -- uname -r

lxc restore  passenger ubuntu:24.04 && sleep 5
lxc delete   passenger/nginx:1.24.0 || true

cat <<'INI' | \
lxc exec     passenger -- bash
cat <<'EXE' | sudo bash
apt-get update;echo
apt-get install -y nginx
nginx -v;echo ;apt-get clean;sleep 5
EXE
INI

lxc snapshot passenger nginx:1.24.0 && sleep 1
lxc restore  passenger nginx:1.24.0 && sleep 5
lxc exec     passenger -- nginx -v

lxc restore  passenger nginx:1.24.0 && sleep 5
lxc delete   passenger/passenger:6.1.2 || true

cat <<'INI' | \
lxc exec     passenger -- bash
cat <<'EXE' | sudo bash
apt-get update;echo
apt-get install -y apt-transport-https ca-certificates gnupg build-essential
apt-get install -y software-properties-common git curl file procps libfuse2
apt-get clean;sleep 5
EXE

curl -fsSL https://oss-binaries.phusionpassenger.com/auto-software-signing-gpg-key-2025.txt \
 | sudo tee /etc/apt/keyrings/phusion.asc >/dev/null

cat << APT | sudo tee /etc/apt/sources.list.d/passenger.list >/dev/null
deb [arch=$(dpkg --print-architecture)\
 signed-by=/etc/apt/keyrings/phusion.asc]\
 https://oss-binaries.phusionpassenger.com/apt/passenger noble main
APT

cat <<'EXE' | sudo bash
apt-get update;echo
apt-get install -y libnginx-mod-http-passenger
which passenger;echo
passenger version
apt-get clean
EXE
INI

lxc snapshot passenger passenger:6.1.2 && sleep 1
lxc restore  passenger passenger:6.1.2 && sleep 5
lxc exec     passenger -- passenger version

How » Config 

lxc restore  passenger passenger:6.1.2 && sleep 5
lxc exec     passenger -- passenger version

echo
lxc exec     passenger -- cat /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini;echo
lxc exec     passenger -- cat /etc/nginx/conf.d/mod-http-passenger.conf
lxc exec     passenger -- sh -c 'ls -alh /var/run/passenger-instreg/*'
lxc exec     passenger -- /usr/bin/passenger_free_ruby -v

echo
lxc exec     passenger -- cat /usr/share/nginx/modules-available/mod-http-passenger.load;echo
lxc exec     passenger -- cat /etc/nginx/modules-enabled/50-mod-http-passenger.conf

cat <<'INI' | \
lxc exec     passenger -- bash
cat <<'EXE' | sudo bash
if [ ! -f /etc/nginx/modules-enabled/50-mod-http-passenger.conf ]; then 
  ln -s   /usr/share/nginx/modules-available/mod-http-passenger.load \
          /etc/nginx/modules-enabled/50-mod-http-passenger.conf
fi
ls -lah   /etc/nginx/conf.d/mod-http-passenger.conf
EXE
INI

cat <<'INI' | \
lxc exec     passenger -- bash
cat <<'EXE' | sudo bash
systemctl restart nginx;echo
passenger-config validate-install --auto;echo
passenger-memory-stats  --no-apache;echo
passenger-config about ruby-command
EXE

INI

How » Server 

cat <<'INI' | tee /etc/nginx/sites-available/academia.chorke.org >/dev/null
server {
  listen      80;
  server_name academia.chorke.org;

  # allow letsencrypt http validation
  location /.well-known/acme-challenge/ {
    root /var/www/html;
  }

  return 301 https://academia.chorke.org$request_uri;
}

server {
  listen      443 ssl;
  server_name academia.chorke.org;

  ssl_certificate     /etc/letsencrypt/live/academia.chorke.org/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/academia.chorke.org/privkey.pem;
  ssl_protocols       TLSv1.2 TLSv1.3;
  
  passenger_spawn_method  smart;
  passenger_min_instances 3;

  gzip_comp_level   3;
  gzip              on;
  gzip_vary         on;
  gzip_proxied      any;
  gzip_http_version 1.0;
  gzip_min_length   1100;
  gzip_buffers      64 8k;
  gzip_disable      "msie6";
  gzip_types        text/css text/xml application/x-javascript application/atom+xml text/mathml text/plain text/vnd.sun.j2me.app-descriptor text/vnd.wap.wml text/x-component image/bmp image/svg+xml image/x-icon;

  root       /home/deploy/sites/academia.chorke.org/production/current/public;
  access_log /home/deploy/sites/academia.chorke.org/production/current/log/nginx.access.log;
  error_log  /home/deploy/sites/academia.chorke.org/production/current/log/nginx.error.log info;

  # allow letsencrypt https validation
  location /.well-known/acme-challenge/ {
    root /var/www/html;
  }

  location ~ / {
    alias          /home/deploy/sites/academia.chorke.org/production/current/public;
    passenger_ruby /home/deploy/.rbenv/versions/3.3.5/bin/ruby;
    passenger_app_env                production;
    passenger_max_request_queue_size 200;
    passenger_enabled                on;
  }

  location ~* ^.+\.(ico|pdf|flv|jpg|jpeg|png|gif|js|css|swf)$ {
    add_header Cache-Control "public, max-age=31536000, must-revalidate";
  }

  location ~* \.(jpg|jpeg|png|gif|ico|css|js)$ {
    add_header Cache-Control public;
    expires    max;
  }

  location ^~ /assets/ {
    add_header  Cache-Control public;
    expires     max;
    gzip_static on;
  }
  
  location /mfa/otp {
   limit_req           zone=otp-zone burst=1 nodelay;
   limit_req_log_level error;
   limit_req_status    429;
  }

  keepalive_timeout    10;
  client_max_body_size 10M;

  try_files            $uri/index.html $uri;
  error_page           500 502 503 504 /500.html;
}
INI

References

References

Retrieved from "https://wiki.chorke.org/index.php?title=Nginx/Passenger&oldid=16593"