Antonio Perez

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
**Odoo 16 - Deployment**

[[https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-12.1.0-amd64-netinst.iso|Download debian-12.1.0-amd64-netinst.iso]]

[[https://hub.docker.com/_/odoo/|Odoo Dockerfile installation]]

  install -m 0755 -d /etc/apt/keyrings
  curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
  chmod a+r /etc/apt/keyrings/docker.gpg

  echo \
  "deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
  "$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | \
tee /etc/apt/sources.list.d/docker.list > /dev/null

  apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
  
  [options]
  proxy_mode = True
  limit_memory_hard = 1677721600
  limit_memory_soft = 629145600
  limit_request = 8192
  limit_time_cpu = 600
  limit_time_real = 1200
  max_cron_threads = 1
  workers = 8

  addons_path = /mnt/extra-addons
  data_dir = /var/lib/odoo


  driver: local
    driver_opts:
      type: none
      device: /ruta/en/tu/host
      o: bind

  apt install snapd

  snap install --classic certbot
      
  ln -s /snap/bin/certbot /usr/bin/certbot

  apt install nginx


  upstream ubills-odoo {
   server 127.0.0.1:8069;
  }
  upstream ubills-odoochat {
   server 127.0.0.1:8072;
  }
  server {
          server_name u-bills.com;
          proxy_read_timeout 720s;
          proxy_connect_timeout 720s;
          proxy_send_timeout 720s;
          # Add Headers for odoo proxy mode
          proxy_set_header X-Forwarded-Host $host;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header X-Forwarded-Proto $scheme;
          proxy_set_header X-Real-IP $remote_addr;
          # log
          access_log /var/log/nginx/ubills-odoo.access.log;
          error_log /var/log/nginx/ubills-odoo.error.log;
          # Redirect longpoll requests to odoo longpolling port
          location /longpolling {
                  proxy_pass http://ubills-odoochat;
          }
          # Redirect requests to odoo backend server
          location / {
                  proxy_redirect off;
                  proxy_pass http://ubills-odoo/;
          }
          # common gzip
          gzip_types text/css text/less text/plain text/xml application/xml application/json application/javascript;
          gzip on;
  	listen 80;
  }


  [Unit]
  Description=Odoo containers
  Requires=docker.service
  After=docker.service
  [Service]
  Restart=on-failure
  ExecStart=/usr/local/bin/docker compose -f /home/odoo/docker-compose.yml up
  ExecStop=/usr/local/bin/docker compose -f /home/odoo/docker-compose.yml down
  [Install]
  WantedBy=default.target


[[https://certbot.eff.org/instructions?ws=nginx&os=debianbuster|Cerbot installation (SSL certificate generator)]]

[[https://github.com/odoo/docker/blob/master/16.0/odoo.conf|Docker/16.0/odoo.conf]]

  root@odoo:/home/odoo# rm -frv data/*
  root@odoo:/home/odoo# docker compose up
  [+] Running 3/3
   ✔ Network odoo_default  Created                                                                                                                                 
  0.2s
   ✔ Container odoo-db-1   Created                                                                                                                                 
  0.7s
   ✔ Container odoo-web-1  Created                                                                                                                                 
  0.4s
  Attaching to odoo-db-1, odoo-web-1
  odoo-db-1   | The files belonging to this database system will be owned by user "postgres".
  odoo-db-1   | This user must also own the server process.
  odoo-db-1   |
  odoo-db-1   |
  odoo-db-1   | The database cluster will be initialized with locale "en_US.utf8".
  odoo-db-1   | The default database encoding has accordingly been set to "UTF8".
  odoo-db-1   | The default text search configuration will be set to "english".
  odoo-db-1   |
  odoo-db-1   | Data page checksums are disabled.
  odoo-db-1   |
  odoo-db-1   |
  odoo-db-1   | fixing permissions on existing directory /var/lib/postgresql/data/pgdata ... ok
  odoo-db-1   | creating subdirectories ...
  odoo-db-1   | ok
  odoo-db-1   | selecting dynamic shared memory implementation ... posix
  odoo-db-1   | selecting default max_connections ...
  odoo-db-1   | 100
  odoo-db-1   | selecting default shared_buffers ...
  odoo-db-1   | 128MB
  odoo-db-1   | selecting default time zone ...
  odoo-db-1   | Etc/UTC
  odoo-db-1   | creating configuration files ...
  odoo-db-1   | ok
  odoo-db-1   | running bootstrap script ...
  odoo-db-1   | ok
  odoo-db-1   | performing post-bootstrap initialization ...
  odoo-db-1   | ok
  odoo-db-1   | syncing data to disk ...
  ^CGracefully stopping... (press Ctrl+C again to force)
  Aborting on container exit...
  [+] Stopping 2/2
   ✔ Container odoo-web-1  Stopped                                                                                                                                
  11.3s
   ✔ Container odoo-db-1   Stopped                                                                                                                                 
  1.4s
  canceled
  root@odoo:/home/odoo# docker compose up -d
  [+] Running 2/2
   ✔ Container odoo-db-1   Started                                                                                                                                 
  0.8s
   ✔ Container odoo-web-1  Started                                                                                                                                 
  1.8s
  root@odoo:/home/odoo# down
  -bash: down: command not found
  root@odoo:/home/odoo# docker compose down
  [+] Running 3/3
   ✔ Container odoo-web-1  Removed                                                                                                                                 
  2.1s
   ✔ Container odoo-db-1   Removed                                                                                                                                 
  7.6s
   ✔ Network odoo_default  Removed                                                                                                                                 
  0.4s
  root@odoo:/home/odoo#


  root@odoo:~# apt install snapd
  Reading package lists... Done
  Building dependency tree... Done
  Reading state information... Done
  The following additional packages will be installed:
    liblzo2-2 squashfs-tools
  Suggested packages:
    zenity | kdialog
  The following NEW packages will be installed:
    liblzo2-2 snapd squashfs-tools
  0 upgraded, 3 newly installed, 0 to remove and 0 not upgraded.
  Need to get 15.1 MB of archives.
  After this operation, 62.0 MB of additional disk space will be used.
  Do you want to continue? [Y/n] y
  Get:1 http://ftp.us.debian.org/debian bookworm/main amd64 liblzo2-2 amd64 2.10-2 [56.9 kB]
  Get:2 http://ftp.us.debian.org/debian bookworm/main amd64 squashfs-tools amd64 1:4.5.1-1 [183 kB]
  Get:3 http://ftp.us.debian.org/debian bookworm/main amd64 snapd amd64 2.57.6-1+b5 [14.9 MB]
  Fetched 15.1 MB in 18s (823 kB/s)
  Selecting previously unselected package liblzo2-2:amd64.
  (Reading database ... 35560 files and directories currently installed.)
  Preparing to unpack .../liblzo2-2_2.10-2_amd64.deb ...
  Unpacking liblzo2-2:amd64 (2.10-2) ...
  Selecting previously unselected package squashfs-tools.
  Preparing to unpack .../squashfs-tools_1%3a4.5.1-1_amd64.deb ...
  Unpacking squashfs-tools (1:4.5.1-1) ...
  Selecting previously unselected package snapd.
  Preparing to unpack .../snapd_2.57.6-1+b5_amd64.deb ...
  Unpacking snapd (2.57.6-1+b5) ...
  Setting up liblzo2-2:amd64 (2.10-2) ...
  Setting up squashfs-tools (1:4.5.1-1) ...
  Setting up snapd (2.57.6-1+b5) ...
  Created symlink /etc/systemd/system/multi-user.target.wants/snapd.aa-prompt-listener.service → 
  /lib/systemd/system/snapd.aa-prompt-listener.service.
  Created symlink /etc/systemd/system/multi-user.target.wants/snapd.apparmor.service → 
  /lib/systemd/system/snapd.apparmor.service.
  Created symlink /etc/systemd/system/multi-user.target.wants/snapd.recovery-chooser-trigger.service → 
  /lib/systemd/system/snapd.recovery-chooser-trigger.service.
  Created symlink /etc/systemd/system/multi-user.target.wants/snapd.seeded.service → 
  /lib/systemd/system/snapd.seeded.service.
  Created symlink /etc/systemd/system/cloud-final.service.wants/snapd.seeded.service → 
  /lib/systemd/system/snapd.seeded.service.
  Unit /lib/systemd/system/snapd.seeded.service is added as a dependency to a non-existent unit cloud-final.service.
  Created symlink /etc/systemd/system/multi-user.target.wants/snapd.service → /lib/systemd/system/snapd.service.
  Created symlink /etc/systemd/system/sockets.target.wants/snapd.socket → /lib/systemd/system/snapd.socket.
  Processing triggers for man-db (2.11.2-2) ...
  Processing triggers for dbus (1.14.8-2~deb12u1) ...
  Processing triggers for mailcap (3.70+nmu1) ...
  Processing triggers for libc-bin (2.36-9+deb12u1) ...
  root@odoo:~# snap install --classic certbot
  2023-09-02T19:47:01-04:00 INFO Waiting for automatic snapd restart...
  Warning: /snap/bin was not found in your $PATH. If you've not restarted your session since you
           installed snapd, try doing that. Please see https://forum.snapcraft.io/t/9469 for more
           details.
  certbot 2.6.0 from Certbot Project (certbot-eff✓) installed
  root@odoo:~# ln -s /snap/bin/certbot /usr/bin/certbot
  root@odoo:~# apt install nginx
  Reading package lists... Done
  Building dependency tree... Done
  Reading state information... Done
  The following additional packages will be installed:
    nginx-common
  Suggested packages:
    fcgiwrap nginx-doc ssl-cert
  The following NEW packages will be installed:
    nginx nginx-common
  0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
  Need to get 640 kB of archives.
  After this operation, 1,696 kB of additional disk space will be used.
  Do you want to continue? [Y/n] y
  Get:1 http://ftp.us.debian.org/debian bookworm/main amd64 nginx-common all 1.22.1-9 [112 kB]
  Get:2 http://ftp.us.debian.org/debian bookworm/main amd64 nginx amd64 1.22.1-9 [527 kB]
  Fetched 640 kB in 2s (285 kB/s)
  Preconfiguring packages ...
  Selecting previously unselected package nginx-common.
  (Reading database ... 35664 files and directories currently installed.)
  Preparing to unpack .../nginx-common_1.22.1-9_all.deb ...
  Unpacking nginx-common (1.22.1-9) ...
  Selecting previously unselected package nginx.
  Preparing to unpack .../nginx_1.22.1-9_amd64.deb ...
  Unpacking nginx (1.22.1-9) ...
  Setting up nginx-common (1.22.1-9) ...
  Created symlink /etc/systemd/system/multi-user.target.wants/nginx.service → /lib/systemd/system/nginx.service.
  Setting up nginx (1.22.1-9) ...
  Upgrading binary: nginx.
  Processing triggers for man-db (2.11.2-2) ...
  root@odoo:~# nano /etc/nginx/sites-enabled/default
  root@odoo:~# echo "" > /etc/n
  nanorc         netconfig      network/       networks       nftables.conf  nginx/         nsswitch.conf
  root@odoo:~# echo "" > /etc/nginx/sites-enabled/default
  root@odoo:~# nano /etc/nginx/sites-enabled/default
  root@odoo:~# cat /etc/nginx/sites-enabled/default
  upstream ubills-odoo {
   server 127.0.0.1:8069;
  }
  upstream ubills-odoochat {
   server 127.0.0.1:8072;
  }
  server {
          server_name u-bills.com;
          proxy_read_timeout 720s;
          proxy_connect_timeout 720s;
          proxy_send_timeout 720s;
          # Add Headers for odoo proxy mode
          proxy_set_header X-Forwarded-Host $host;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header X-Forwarded-Proto $scheme;
          proxy_set_header X-Real-IP $remote_addr;
          # log
          access_log /var/log/nginx/ubills-odoo.access.log;
          error_log /var/log/nginx/ubills-odoo.error.log;
          # Redirect longpoll requests to odoo longpolling port
          location /longpolling {
                  proxy_pass http://ubills-odoochat;
          }
          # Redirect requests to odoo backend server
          location / {
                  proxy_redirect off;
                  proxy_pass http://ubills-odoo/;
          }
          # common gzip
          gzip_types text/css text/less text/plain text/xml application/xml application/json application/javascript;
            gzip on;
          listen 80;
  }
  root@odoo:~# nginx -t
  nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
  nginx: configuration file /etc/nginx/nginx.conf test is successful
  root@odoo:~# systemctl restart  nginx
  root@odoo:~# cd /home/odoo/
  root@odoo:/home/odoo# docker compose up -d
  [+] Running 3/3
   ✔ Network odoo_default  Created                                                                                                                                                                                                  
  0.2s
   ✔ Container odoo-db-1   Started                                                                                                                                                                                                  
  2.1s
   ✔ Container odoo-web-1  Started                                                                                                                                                                                                  
  2.4s
  root@odoo:/home/odoo#

  root@odoo:/home/odoo# certbot --nginx
  Saving debug log to /var/log/letsencrypt/letsencrypt.log
  Enter email address (used for urgent renewal and security notices)
   (Enter 'c' to cancel): gm@itclatam.com
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Please read the Terms of Service at
  https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf. You must
  agree in order to register with the ACME server. Do you agree?
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  (Y)es/(N)o: y
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Would you be willing, once your first certificate is successfully issued, to
  share your email address with the Electronic Frontier Foundation, a founding
  partner of the Let's Encrypt project and the non-profit organization that
  develops Certbot? We'd like to send you email about our work encrypting the web,
  EFF news, campaigns, and ways to support digital freedom.
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  (Y)es/(N)o: y
  Account registered.
  Which names would you like to activate HTTPS for?
  We recommend selecting either all domains, or all domains in a VirtualHost/server block.
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  1: u-bills.com
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Select the appropriate numbers separated by commas and/or spaces, or leave input
  blank to select all options shown (Enter 'c' to cancel): 1
  Requesting a certificate for u-bills.com
  Successfully received certificate.
  Certificate is saved at: /etc/letsencrypt/live/u-bills.com/fullchain.pem
  Key is saved at:         /etc/letsencrypt/live/u-bills.com/privkey.pem
  This certificate expires on 2023-12-01.
  These files will be updated when the certificate renews.
  Certbot has set up a scheduled task to automatically renew this certificate in the background.
  Deploying certificate
  Successfully deployed certificate for u-bills.com to /etc/nginx/sites-enabled/default
  Congratulations! You have successfully enabled HTTPS on https://u-bills.com
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  If you like Certbot, please consider supporting our work by:
   * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   * Donating to EFF:                    https://eff.org/donate-le
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  root@odoo:/home/odoo#

  root@odoo:/home/odoo# certbot --nginx
  Saving debug log to /var/log/letsencrypt/letsencrypt.log
  Enter email address (used for urgent renewal and security notices)
   (Enter 'c' to cancel): gm@itclatam.com
  
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Please read the Terms of Service at
  https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf. You must
  agree in order to register with the ACME server. Do you agree?
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  (Y)es/(N)o: y
  
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Would you be willing, once your first certificate is successfully issued, to
  share your email address with the Electronic Frontier Foundation, a founding
  partner of the Let's Encrypt project and the non-profit organization that
  develops Certbot? We'd like to send you email about our work encrypting the web,
  EFF news, campaigns, and ways to support digital freedom.
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  (Y)es/(N)o: y
  Account registered.
  
  Which names would you like to activate HTTPS for?
  We recommend selecting either all domains, or all domains in a VirtualHost/server block.
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  1: u-bills.com
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Select the appropriate numbers separated by commas and/or spaces, or leave input
  blank to select all options shown (Enter 'c' to cancel): 1
  Requesting a certificate for u-bills.com
  
  Successfully received certificate.
  Certificate is saved at: /etc/letsencrypt/live/u-bills.com/fullchain.pem
  Key is saved at:         /etc/letsencrypt/live/u-bills.com/privkey.pem
  This certificate expires on 2023-12-01.
  These files will be updated when the certificate renews.
  Certbot has set up a scheduled task to automatically renew this certificate in the background.
  
  Deploying certificate
  Successfully deployed certificate for u-bills.com to /etc/nginx/sites-enabled/default
  Congratulations! You have successfully enabled HTTPS on https://u-bills.com
  
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  If you like Certbot, please consider supporting our work by:
   * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   * Donating to EFF:                    https://eff.org/donate-le
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  root@odoo:/home/odoo# docker compose down
  [+] Running 3/3