Nginx Deployment Overview on Server¶

Prerequisites¶

The following parameters and conditions are required for the web server to function correctly:

FQDN of the final panel on hostkey.in domain¶

A dynamic domain name template based on the server ID is used for the service operation.

File and Directory Structure¶

The following directories are created during the deployment process to store data and configurations:

• /etc/nginx/sites-available/ — storage for available site configuration files.

• /etc/nginx/sites-enabled/ — symbolic links to active configurations.

• /var/www/html — web content root directory (owner www-data).

• /var/www/letsencrypt — directory for ACME challenge validation (owner www-data).

• /etc/nginx/user_conf.d — user-defined Nginx configuration files.

• /etc/letsencrypt/live/ — storage for SSL certificates.

Application Installation Process¶

Deployment is performed by installing packages via the system package manager and configuring the web server:

1. Update apt repository cache.

2. Install components: nginx, certbot, python3-certbot-nginx, and openssl.

3. Create necessary directories with appropriate access permissions.

4. Configure a temporary HTTP server for Let's Encrypt validation.

5. Obtain SSL certificates via Certbot in --webroot mode.

6. Redirect traffic from HTTP to HTTPS.

Access Rights and Security¶

System security is ensured by the following mechanisms:

• Use of the www-data user for web content directories.

• Restricted access permissions for configuration files (0644).

• Automatic Nginx reload after certificate renewal via a script in /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh.

Docker Containers and Execution¶

Docker containers are not used in this configuration; the application is deployed directly into the operating system as a system service.

Application Update Instructions¶

Updates are performed by updating packages or by rerunning the installation script: apt update && apt upgrade nginx certbot

Permission Settings¶

Access rights for the main directories are set as follows:

Configuration Files and Data Location¶

The web server configuration is divided into standard and user parts:

• Main site file: /etc/nginx/sites-available/{FQDN}.conf.

• User settings: /etc/nginx/user_conf.d/*.conf.

• Certificates: /etc/letsencrypt/live/{FQDN}/.

Available Connection Ports¶

Starting and Stopping the Application¶

Service management is performed via systemd:

• Start: systemctl start nginx

• Stop: systemctl stop nginx

• Reload configuration: systemctl reload nginx

• Test config syntax: nginx -t