如何在EC2中部署節點伺服器

在 AWS EC2 上部署 Node.js 伺服器可讓您利用 AWS 的可靠基礎架構、可擴充性和靈活性來高效託管您的應用程式。本指南將引導您逐步設定 EC2 執行個體、安裝 Nginx 和 PM2 等基本工具，以及使用 Let's Encrypt 透過 HTTPS 保護您的應用程式。在本指南結束時，您將擁有一個在安全的 EC2 環境上運行的功能齊全的 Node.js 伺服器，準備好處理生產流量。

大綱

• 要求
• 設定 EC2 執行個體
• 透過 SSH 或 Putty 連接到 EC2
• 安裝必要的軟體包和工具
• 為 Node.js 應用程式設定 PM2
• 將 Nginx 設定為反向代理
• 使用公網IP存取伺服器
• 了解 HTTPS 的需求
• 設定網域名稱和 SSL 憑證
• 使用 Nginx 安裝 SSL Certbot
• 將網域名稱對應到公用 IP
• 測試伺服器和最終檢查

要求

開始之前，請確保您具備以下條件：

• AWS 帳戶。
• Linux 命令列基礎知識。
• 註冊網域名稱（用於設定 HTTPS）。
• PuTTY（如果您使用的是 Windows，則用於透過 SSH 存取 EC2 執行個體）。

設定 EC2 和初始腳本以安裝 PM2 和 Nginx

• 登入您的 AWS 管理主控台。
• 導覽至 EC2 儀表板並點選啟動執行個體。
• 提供實例的名稱。
• 選擇 Ubuntu Server 22.04 LTS (HVM)、SSD 磁碟區類型。
• 選擇實例類型（例如，t2.micro 表示免費套餐）。
• 產生金鑰對（.pem）並儲存，稍後我們會用到。
• 設定安全群組以允許連接埠 22 (SSH)、80 (HTTP) 和 443 (HTTPS) 上的入站流量。

啟動實例時，您可以提供使用者資料腳本來自動安裝必要的軟體包。

• 在「進階詳細資料」部分中，找到「使用者資料」欄位。
• 選擇「作為文字」並在提供的文字區域中輸入您的使用者資料腳本。

#!/bin/bash
sudo apt update
sudo apt install nginx -y
sudo apt-get install curl
curl -sL https://deb.nodesource.com/setup_18.x | sudo -E bash -
sudo apt-get install -y nodejs
curl -sL https://dl.yarnpkg.com/debian/pubkey.gpg | sudo apt-key add -
echo "deb https://dl.yarnpkg.com/debian/ stable main" | sudo tee /etc/apt/sources.list.d/yarn.list
sudo apt-get update
sudo apt-get install yarn -y
sudo npm i -g pm2
sudo cp /etc/nginx/sites-available/default /etc/nginx/sites-available/default.bkp
sudo rm /etc/nginx/sites-available/default
sudo echo "server {
    listen 80 default_server;
    listen [::]:80 default_server;

    # The server_name can be changed to your domain or left as-is for IP-based access
    server_name YOUR_DOMAIN;  # Use your domain or public IP if no domain is configured

    # Proxy requests to the backend server running on port 3000
    location / {
        proxy_pass http://127.0.0.1:3000;  # Your backend port here
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
        proxy_redirect off;
    }

    # Optional: serve static files directly from a directory if needed
    # location /static {
    #     alias /path/to/static/files;  # Uncomment and set path if you have static files
    #     expires 30d;
    #     access_log off;
    # }

    # This is commented out because we are not serving any frontend files from /var/www/html
    # root /var/www/html;
    # index index.html index.htm index.nginx-debian.html;
}
" > /etc/nginx/sites-available/default
sudo rm /var/www/html/index.nginx-debian.html
sudo apt-get update

初始代碼說明

系統更新與安裝：

• sudo apt update：更新 Ubuntu 的軟體套件清單。
• sudo apt install nginx -y：安裝 Nginx，一個 Web 伺服器。
• sudo apt-get install curl：安裝curl，一個從伺服器傳輸資料或向伺服器傳輸資料的工具。

安裝 Node.js 和 Yarn：

• 捲曲-sL https://deb.nodesource.com/setup_18.x | sudo -E bash -：新增 Node.js 18 儲存庫。
• sudo apt-get install -y nodejs：安裝 Node.js。
• 捲曲-sL https://dl.yarnpkg.com/debian/pubkey.gpg | sudo apt-key add -：新增 Yarn 儲存庫金鑰。
• echo "deb https://dl.yarnpkg.com/debian/ stable main" | sudo tee /etc/apt/sources.list.d/yarn.list：新增 Yarn 儲存庫。
• sudo apt-get update：更新套件清單以包含 Yarn。
• sudo apt-get install yarn -y：安裝 Yarn，一個套件管理器。

安裝PM2：

• sudo npm i -g pm2：全域安裝 PM2 以管理 Node.js 應用程式。

Nginx 設定備份和設定：

• sudo cp /etc/nginx/sites-available/default /etc/nginx/sites-available/default.bkp：備份預設的 Nginx 設定檔。
• sudo rm /etc/nginx/sites-available/default：刪除原先預設的Nginx設定檔。
• sudo echo“伺服器{...}”> /etc/nginx/sites-available/default：建立新的 Nginx 設定：
  • 監聽埠 80。
  • 將 server_name 設定為網域或公用 IP。
  • 將請求代理程式到在 http://127.0.0.1:3000 上執行的後端伺服器。
  • 用於提供靜態文件和前端內容的註解部分。

刪除預設的 Nginx 內容：

• sudo rm /var/www/html/index.nginx-debian.html：刪除預設的 Nginx 歡迎頁面。

再次更新包列表：

• sudo apt-get update：執行另一個更新以確保所有軟體包清單都是最新的。

此腳本設定一個包含 Nginx、Node.js、Yarn 和 PM2 的環境，並將 Nginx 配置為充當在連接埠 3000 上執行的後端伺服器的反向代理。

之後點選啟動實例按鈕來建立實例。

使用 PuTTY 或終端透過 SSH 連接到 EC2 並克隆您的 Node.js 儲存庫

執行個體運作後，使用終端透過 SSH 連線到您的 EC2 執行個體（適用於 macOS/Linux）：

ssh -i path/to/your-key.pem ubuntu@<your-ec2-public-ip>

如果您使用的是 Windows，您可以使用 putty 登入 - 登入步驟。

After that it may ask for username which is usually by default - "ubuntu" if not set anything else.

Next use the following command to switch to the root user:

sudo su

Clone your Node.js application from GitHub or any other repository:

git clone <your-repo-url>
cd <your-repo-directory>

Switch to your prodution branch, pull the latest code and install node_modules.

Once done return back to the main directory using cd..

Setting Up ecosystem.config.js and Starting the Server with PM2

PM2 is a popular process manager for Node.js that keeps your application running in the background and helps with load balancing and monitoring.

Create ecosystem.config.js file in your project root:

touch ecosystem.config.js

Open the file in a text editor and add your configuration:

nano ecosystem.config.js

Add the configuration and save the file:

module.exports = {
  apps: [{
    name: "project_name",
    script: "npm start",
    cwd: "/home/ubuntu/repo",
    env: {
      "MONGO_URL": "mongodb+srv://<credentials>",
      "PORT": 3000,
      "NODE_ENV": "prod",
    }
  }]
};

Save and exit the editor (for nano, press Ctrl + X, then Y to confirm saving, and Enter to exit).

Explanation of ecosystem.config.js File

The ecosystem.config.js file is a configuration file for PM2, a process manager for Node.js applications. It defines how the application should be managed, including its environment variables, working directory, and startup script.

Breakdown of the Configuration:

• module.exports: Exports the configuration object so that PM2 can use it to manage the application.

• apps: An array of application configurations. This allows PM2 to manage multiple applications using a single configuration file.

  • name: "project_name" The name of the application, as it will appear in PM2's process list. You can set this to your project name.
  • script: "npm start" The command to run the application. Here, it uses npm start to start the application, which typically runs the start script defined in your package.json.
  • cwd: "/home/ubuntu/repo" The "Current Working Directory" where PM2 will look for the application. This is the directory path where your Node.js application code (repository) is located.
  • env: An object defining environment variables that will be available to the application when it is running. These variables can be accessed in your Node.js code using process.env.

Let's move next to starting our server:

Start the Application Using PM2:

pm2 start ecosystem.config.js

You can check the logs using:

pm2 logs

Accessing the Server by Changing Security Rules Using Public IP

Ensure your security group allows inbound traffic on port 3000 (or any port your server is running on). Access your server using:

http://<your-ec2-public-ip>:3000

The Problem with HTTP Server and the Need for HTTPS

HTTP is not secure for transmitting sensitive data. HTTPS, on the other hand, ensures that all data transmitted between the server and client is encrypted. Therefore, it's essential to secure your Node.js server with HTTPS, especially for production environments.

Requirements for HTTPS: Domain and SSL

To set up HTTPS, you need:

• A domain name pointing to your EC2 public IP.
• SSL certificate to encrypt the traffic.

SSL Using Certbot and Setting Up Nginx

Install Certbot on EC2:

sudo apt install certbot python3-certbot-nginx -y

Run Certbot to Obtain SSL Certificate:

sudo certbot --nginx -d YOUR_DOMAIN

Follow the prompts to complete the certificate installation. Certbot will automatically update your Nginx configuration to redirect HTTP traffic to HTTPS.

You can check your updated nginx config. Go to this directory:

cd /etc/nginx/sites-available/

Open the default file using nano, and it should look something like this:

server {
    listen 80;
    server_name YOUR_DOMAIN;

    # Redirect HTTP to HTTPS
    location / {
        return 301 https://$host$request_uri;
    }
}

server {
    listen 443 ssl;
    server_name YOUR_DOMAIN;

    ssl_certificate /etc/letsencrypt/live/YOUR_DOMAIN/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/YOUR_DOMAIN/privkey.pem;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers HIGH:!aNULL:!MD5;

    location / {
        proxy_pass http://127.0.0.1:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
}

After SSL setup it should reload Nginx server automatically but you can manually reload using:

nginx -s reload

Domain Mapping to Public IP

Ensure that your domain/subdomain is correctly mapped to your EC2 instance's public IP using A records in your domain DNS settings.

Testing the Server and Finishing Up

Visit https://YOUR_DOMAIN in your browser to verify the HTTPS setup. Your Node.js server should now be accessible securely via HTTPS.

以上是如何在EC2中部署節點伺服器的詳細內容。更多資訊請關注PHP中文網其他相關文章！