Differences

This shows you the differences between two versions of the page.

--- odoo:deployment [2023/09/30 09:46] – aperez
+++ odoo:deployment [2023/09/30 10:40] (current) – aperez
@@ Line 3: / Line 3: @@
 [[https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-12.1.0-amd64-netinst.iso|Download debian-12.1.0-amd64-netinst.iso]]
-[[https://hub.docker.com/_/odoo/|Odoo installation]]
+[[https://hub.docker.com/_/odoo/|Odoo Dockerfile installation]]
+  install -m 0755 -d /etc/apt/keyrings
+  curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
+  chmod a+r /etc/apt/keyrings/docker.gpg
+  echo \
+  "deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
+  "$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | \
+tee /etc/apt/sources.list.d/docker.list > /dev/null
+  apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
+  [options]
+  proxy_mode = True
+  limit_memory_hard = 1677721600
+  limit_memory_soft = 629145600
+  limit_request = 8192
+  limit_time_cpu = 600
+  limit_time_real = 1200
+  max_cron_threads = 1
+  workers = 8
+  addons_path = /mnt/extra-addons
+  data_dir = /var/lib/odoo
+  driver: local
+    driver_opts:
+      type: none
+      device: /ruta/en/tu/host
+      o: bind
+  apt install snapd
+  snap install --classic certbot
+  ln -s /snap/bin/certbot /usr/bin/certbot
+  apt install nginx
+  upstream ubills-odoo {
+   server 127.0.0.1:8069;
+  }
+  upstream ubills-odoochat {
+   server 127.0.0.1:8072;
+  }
+  server {
+          server_name u-bills.com;
+          proxy_read_timeout 720s;
+          proxy_connect_timeout 720s;
+          proxy_send_timeout 720s;
+          # Add Headers for odoo proxy mode
+          proxy_set_header X-Forwarded-Host $host;
+          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+          proxy_set_header X-Forwarded-Proto $scheme;
+          proxy_set_header X-Real-IP $remote_addr;
+          # log
+          access_log /var/log/nginx/ubills-odoo.access.log;
+          error_log /var/log/nginx/ubills-odoo.error.log;
+          # Redirect longpoll requests to odoo longpolling port
+          location /longpolling {
+                  proxy_pass http://ubills-odoochat;
+          }
+          # Redirect requests to odoo backend server
+          location / {
+                  proxy_redirect off;
+                  proxy_pass http://ubills-odoo/;
+          }
+          # common gzip
+          gzip_types text/css text/less text/plain text/xml application/xml application/json application/javascript;
+          gzip on;
+  	listen 80;
+  }
+  [Unit]
+  Description=Odoo containers
+  Requires=docker.service
+  After=docker.service
+  [Service]
+  Restart=on-failure
+  ExecStart=/usr/local/bin/docker compose -f /home/odoo/docker-compose.yml up
+  ExecStop=/usr/local/bin/docker compose -f /home/odoo/docker-compose.yml down
+  [Install]
+  WantedBy=default.target
 [[https://certbot.eff.org/instructions?ws=nginx&os=debianbuster|Cerbot installation (SSL certificate generator)]]
+[[https://github.com/odoo/docker/blob/master/16.0/odoo.conf|Docker/16.0/odoo.conf]]
+  root@odoo:/home/odoo# rm -frv data/*
+  root@odoo:/home/odoo# docker compose up
+  [+] Running 3/3
+   ✔ Network odoo_default  Created
+.2s
+   ✔ Container odoo-db-1   Created
+.7s
+   ✔ Container odoo-web-1  Created
+.4s
+  Attaching to odoo-db-1, odoo-web-1
+  odoo-db-1   | The files belonging to this database system will be owned by user "postgres".
+  odoo-db-1   | This user must also own the server process.
+  odoo-db-1   |
+  odoo-db-1   |
+  odoo-db-1   | The database cluster will be initialized with locale "en_US.utf8".
+  odoo-db-1   | The default database encoding has accordingly been set to "UTF8".
+  odoo-db-1   | The default text search configuration will be set to "english".
+  odoo-db-1   |
+  odoo-db-1   | Data page checksums are disabled.
+  odoo-db-1   |
+  odoo-db-1   |
+  odoo-db-1   | fixing permissions on existing directory /var/lib/postgresql/data/pgdata ... ok
+  odoo-db-1   | creating subdirectories ...
+  odoo-db-1   | ok
+  odoo-db-1   | selecting dynamic shared memory implementation ... posix
+  odoo-db-1   | selecting default max_connections ...
+  odoo-db-1   | 100
+  odoo-db-1   | selecting default shared_buffers ...
+  odoo-db-1   | 128MB
+  odoo-db-1   | selecting default time zone ...
+  odoo-db-1   | Etc/UTC
+  odoo-db-1   | creating configuration files ...
+  odoo-db-1   | ok
+  odoo-db-1   | running bootstrap script ...
+  odoo-db-1   | ok
+  odoo-db-1   | performing post-bootstrap initialization ...
+  odoo-db-1   | ok
+  odoo-db-1   | syncing data to disk ...
+  ^CGracefully stopping... (press Ctrl+C again to force)
+  Aborting on container exit...
+  [+] Stopping 2/2
+   ✔ Container odoo-web-1  Stopped
+.3s
+   ✔ Container odoo-db-1   Stopped
+.4s
+  canceled
+  root@odoo:/home/odoo# docker compose up -d
+  [+] Running 2/2
+   ✔ Container odoo-db-1   Started
+.8s
+   ✔ Container odoo-web-1  Started
+.8s
+  root@odoo:/home/odoo# down
+  -bash: down: command not found
+  root@odoo:/home/odoo# docker compose down
+  [+] Running 3/3
+   ✔ Container odoo-web-1  Removed
+.1s
+   ✔ Container odoo-db-1   Removed
+.6s
+   ✔ Network odoo_default  Removed
+.4s
+  root@odoo:/home/odoo#
+  root@odoo:~# apt install snapd
+  Reading package lists... Done
+  Building dependency tree... Done
+  Reading state information... Done
+  The following additional packages will be installed:
+    liblzo2-2 squashfs-tools
+  Suggested packages:
+    zenity | kdialog
+  The following NEW packages will be installed:
+    liblzo2-2 snapd squashfs-tools
+upgraded, 3 newly installed, 0 to remove and 0 not upgraded.
+  Need to get 15.1 MB of archives.
+  After this operation, 62.0 MB of additional disk space will be used.
+  Do you want to continue? [Y/n] y
+  Get:1 http://ftp.us.debian.org/debian bookworm/main amd64 liblzo2-2 amd64 2.10-2 [56.9 kB]
+  Get:2 http://ftp.us.debian.org/debian bookworm/main amd64 squashfs-tools amd64 1:4.5.1-1 [183 kB]
+  Get:3 http://ftp.us.debian.org/debian bookworm/main amd64 snapd amd64 2.57.6-1+b5 [14.9 MB]
+  Fetched 15.1 MB in 18s (823 kB/s)
+  Selecting previously unselected package liblzo2-2:amd64.
+  (Reading database ... 35560 files and directories currently installed.)
+  Preparing to unpack .../liblzo2-2_2.10-2_amd64.deb ...
+  Unpacking liblzo2-2:amd64 (2.10-2) ...
+  Selecting previously unselected package squashfs-tools.
+  Preparing to unpack .../squashfs-tools_1%3a4.5.1-1_amd64.deb ...
+  Unpacking squashfs-tools (1:4.5.1-1) ...
+  Selecting previously unselected package snapd.
+  Preparing to unpack .../snapd_2.57.6-1+b5_amd64.deb ...
+  Unpacking snapd (2.57.6-1+b5) ...
+  Setting up liblzo2-2:amd64 (2.10-2) ...
+  Setting up squashfs-tools (1:4.5.1-1) ...
+  Setting up snapd (2.57.6-1+b5) ...
+  Created symlink /etc/systemd/system/multi-user.target.wants/snapd.aa-prompt-listener.service →
+  /lib/systemd/system/snapd.aa-prompt-listener.service.
+  Created symlink /etc/systemd/system/multi-user.target.wants/snapd.apparmor.service →
+  /lib/systemd/system/snapd.apparmor.service.
+  Created symlink /etc/systemd/system/multi-user.target.wants/snapd.recovery-chooser-trigger.service →
+  /lib/systemd/system/snapd.recovery-chooser-trigger.service.
+  Created symlink /etc/systemd/system/multi-user.target.wants/snapd.seeded.service →
+  /lib/systemd/system/snapd.seeded.service.
+  Created symlink /etc/systemd/system/cloud-final.service.wants/snapd.seeded.service →
+  /lib/systemd/system/snapd.seeded.service.
+  Unit /lib/systemd/system/snapd.seeded.service is added as a dependency to a non-existent unit cloud-final.service.
+  Created symlink /etc/systemd/system/multi-user.target.wants/snapd.service → /lib/systemd/system/snapd.service.
+  Created symlink /etc/systemd/system/sockets.target.wants/snapd.socket → /lib/systemd/system/snapd.socket.
+  Processing triggers for man-db (2.11.2-2) ...
+  Processing triggers for dbus (1.14.8-2~deb12u1) ...
+  Processing triggers for mailcap (3.70+nmu1) ...
+  Processing triggers for libc-bin (2.36-9+deb12u1) ...
+  root@odoo:~# snap install --classic certbot
+-09-02T19:47:01-04:00 INFO Waiting for automatic snapd restart...
+  Warning: /snap/bin was not found in your $PATH. If you've not restarted your session since you
+           installed snapd, try doing that. Please see https://forum.snapcraft.io/t/9469 for more
+           details.
+  certbot 2.6.0 from Certbot Project (certbot-eff✓) installed
+  root@odoo:~# ln -s /snap/bin/certbot /usr/bin/certbot
+  root@odoo:~# apt install nginx
+  Reading package lists... Done
+  Building dependency tree... Done
+  Reading state information... Done
+  The following additional packages will be installed:
+    nginx-common
+  Suggested packages:
+    fcgiwrap nginx-doc ssl-cert
+  The following NEW packages will be installed:
+    nginx nginx-common
+upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
+  Need to get 640 kB of archives.
+  After this operation, 1,696 kB of additional disk space will be used.
+  Do you want to continue? [Y/n] y
+  Get:1 http://ftp.us.debian.org/debian bookworm/main amd64 nginx-common all 1.22.1-9 [112 kB]
+  Get:2 http://ftp.us.debian.org/debian bookworm/main amd64 nginx amd64 1.22.1-9 [527 kB]
+  Fetched 640 kB in 2s (285 kB/s)
+  Preconfiguring packages ...
+  Selecting previously unselected package nginx-common.
+  (Reading database ... 35664 files and directories currently installed.)
+  Preparing to unpack .../nginx-common_1.22.1-9_all.deb ...
+  Unpacking nginx-common (1.22.1-9) ...
+  Selecting previously unselected package nginx.
+  Preparing to unpack .../nginx_1.22.1-9_amd64.deb ...
+  Unpacking nginx (1.22.1-9) ...
+  Setting up nginx-common (1.22.1-9) ...
+  Created symlink /etc/systemd/system/multi-user.target.wants/nginx.service → /lib/systemd/system/nginx.service.
+  Setting up nginx (1.22.1-9) ...
+  Upgrading binary: nginx.
+  Processing triggers for man-db (2.11.2-2) ...
+  root@odoo:~# nano /etc/nginx/sites-enabled/default
+  root@odoo:~# echo "" > /etc/n
+  nanorc         netconfig      network/       networks       nftables.conf  nginx/         nsswitch.conf
+  root@odoo:~# echo "" > /etc/nginx/sites-enabled/default
+  root@odoo:~# nano /etc/nginx/sites-enabled/default
+  root@odoo:~# cat /etc/nginx/sites-enabled/default
+  upstream ubills-odoo {
+   server 127.0.0.1:8069;
+  }
+  upstream ubills-odoochat {
+   server 127.0.0.1:8072;
+  }
+  server {
+          server_name u-bills.com;
+          proxy_read_timeout 720s;
+          proxy_connect_timeout 720s;
+          proxy_send_timeout 720s;
+          # Add Headers for odoo proxy mode
+          proxy_set_header X-Forwarded-Host $host;
+          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+          proxy_set_header X-Forwarded-Proto $scheme;
+          proxy_set_header X-Real-IP $remote_addr;
+          # log
+          access_log /var/log/nginx/ubills-odoo.access.log;
+          error_log /var/log/nginx/ubills-odoo.error.log;
+          # Redirect longpoll requests to odoo longpolling port
+          location /longpolling {
+                  proxy_pass http://ubills-odoochat;
+          }
+          # Redirect requests to odoo backend server
+          location / {
+                  proxy_redirect off;
+                  proxy_pass http://ubills-odoo/;
+          }
+          # common gzip
+          gzip_types text/css text/less text/plain text/xml application/xml application/json application/javascript;
+            gzip on;
+          listen 80;
+  }
+  root@odoo:~# nginx -t
+  nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
+  nginx: configuration file /etc/nginx/nginx.conf test is successful
+  root@odoo:~# systemctl restart  nginx
+  root@odoo:~# cd /home/odoo/
+  root@odoo:/home/odoo# docker compose up -d
+  [+] Running 3/3
+   ✔ Network odoo_default  Created
+.2s
+   ✔ Container odoo-db-1   Started
+.1s
+   ✔ Container odoo-web-1  Started
+.4s
+  root@odoo:/home/odoo#
+  root@odoo:/home/odoo# certbot --nginx
+  Saving debug log to /var/log/letsencrypt/letsencrypt.log
+  Enter email address (used for urgent renewal and security notices)
+   (Enter 'c' to cancel): gm@itclatam.com
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  Please read the Terms of Service at
+  https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf. You must
+  agree in order to register with the ACME server. Do you agree?
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  (Y)es/(N)o: y
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  Would you be willing, once your first certificate is successfully issued, to
+  share your email address with the Electronic Frontier Foundation, a founding
+  partner of the Let's Encrypt project and the non-profit organization that
+  develops Certbot? We'd like to send you email about our work encrypting the web,
+  EFF news, campaigns, and ways to support digital freedom.
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  (Y)es/(N)o: y
+  Account registered.
+  Which names would you like to activate HTTPS for?
+  We recommend selecting either all domains, or all domains in a VirtualHost/server block.
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+: u-bills.com
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  Select the appropriate numbers separated by commas and/or spaces, or leave input
+  blank to select all options shown (Enter 'c' to cancel): 1
+  Requesting a certificate for u-bills.com
+  Successfully received certificate.
+  Certificate is saved at: /etc/letsencrypt/live/u-bills.com/fullchain.pem
+  Key is saved at:         /etc/letsencrypt/live/u-bills.com/privkey.pem
+  This certificate expires on 2023-12-01.
+  These files will be updated when the certificate renews.
+  Certbot has set up a scheduled task to automatically renew this certificate in the background.
+  Deploying certificate
+  Successfully deployed certificate for u-bills.com to /etc/nginx/sites-enabled/default
+  Congratulations! You have successfully enabled HTTPS on https://u-bills.com
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  If you like Certbot, please consider supporting our work by:
+   * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
+   * Donating to EFF:                    https://eff.org/donate-le
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  root@odoo:/home/odoo#
+  root@odoo:/home/odoo# certbot --nginx
+  Saving debug log to /var/log/letsencrypt/letsencrypt.log
+  Enter email address (used for urgent renewal and security notices)
+   (Enter 'c' to cancel): gm@itclatam.com
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  Please read the Terms of Service at
+  https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf. You must
+  agree in order to register with the ACME server. Do you agree?
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  (Y)es/(N)o: y
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  Would you be willing, once your first certificate is successfully issued, to
+  share your email address with the Electronic Frontier Foundation, a founding
+  partner of the Let's Encrypt project and the non-profit organization that
+  develops Certbot? We'd like to send you email about our work encrypting the web,
+  EFF news, campaigns, and ways to support digital freedom.
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  (Y)es/(N)o: y
+  Account registered.
+  Which names would you like to activate HTTPS for?
+  We recommend selecting either all domains, or all domains in a VirtualHost/server block.
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+: u-bills.com
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  Select the appropriate numbers separated by commas and/or spaces, or leave input
+  blank to select all options shown (Enter 'c' to cancel): 1
+  Requesting a certificate for u-bills.com
+  Successfully received certificate.
+  Certificate is saved at: /etc/letsencrypt/live/u-bills.com/fullchain.pem
+  Key is saved at:         /etc/letsencrypt/live/u-bills.com/privkey.pem
+  This certificate expires on 2023-12-01.
+  These files will be updated when the certificate renews.
+  Certbot has set up a scheduled task to automatically renew this certificate in the background.
+  Deploying certificate
+  Successfully deployed certificate for u-bills.com to /etc/nginx/sites-enabled/default
+  Congratulations! You have successfully enabled HTTPS on https://u-bills.com
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  If you like Certbot, please consider supporting our work by:
+   * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
+   * Donating to EFF:                    https://eff.org/donate-le
+  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+  root@odoo:/home/odoo# docker compose down
+  [+] Running 3/3