Pemeliharaan instalasi Odoo 8¶

#
sudo lsof -Pi | grep :8069
#
ps ax | grep open-server | kill -9 $1
#

#
nohup /opt/odoo/odoo/openerp-server &

[options]
; This is the password that allows database operations:
; admin_passwd = admin
db_host = False
db_port = False
db_user = odoo
db_password = Zikra#2016
addons_path = /opt/odoo/odoo/addons
logfile = /var/log/odoo/odoo-server.log

[options]
addons_path = /mnt/extra-addons,/usr/lib/python2.7/dist-packages/openerp/addons
data_dir = /var/lib/odoo
auto_reload = True
; admin_passwd = admin
; csv_internal_sep = ,
; db_maxconn = 64
; db_name = False
; db_template = template1
; dbfilter = .*
; debug_mode = False
; email_from = False
; limit_memory_hard = 2684354560
; limit_memory_soft = 2147483648
; limit_request = 8192
; limit_time_cpu = 60
; limit_time_real = 120
; list_db = True
; log_db = False
; log_handler = [':INFO']
; log_level = info
; logfile = None
; longpolling_port = 8072
; max_cron_threads = 2
; osv_memory_age_limit = 1.0
; osv_memory_count_limit = False
; smtp_password = False
; smtp_port = 25
; smtp_server = localhost
; smtp_ssl = False
; smtp_user = False
; workers = 0
; xmlrpc = True
; xmlrpc_interface =
; xmlrpc_port = 8069
; xmlrpcs = True
; xmlrpcs_interface =
; xmlrpcs_port = 8071

[options]
db_port = False
db_user = odoo
db_password = Zikra#2016
addons_path = /opt/odoo/odoo/addons
log_handler = [':INFO']
log_level = info
logfile = /var/log/odoo/odoo-server.log
max_cron_threads = 2
workers = 4
xmlrpc = True
xmlrpc_interface = 127.0.0.1
xmlrpc_port = 8069

sudo apt install nginx

cd /tmp
openssl genrsa -des3 -out server.pkey 2048
openssl rsa -in server.pkey -out server.key
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
sudo chown root:www-data server.crt server.key
sudo chmod 640 server.crt server.key
sudo mkdir /etc/ssl/nginx
sudo chown www-data:root /etc/ssl/nginx
sudo chmod 710 /etc/ssl/nginx
sudo mv server.crt server.key /etc/ssl/nginx/

sudo nano /etc/nginx/sites-available/office

upstream office {
    server 127.0.0.1:8069 weight=1 fail_timeout=0;
}

upstream office-im {
    server 127.0.0.1:8072 weight=1 fail_timeout=0;
}

## http redirects to https ##
server {
    listen 80;
    server_name _;

    # Strict Transport Security
    add_header Strict-Transport-Security max-age=2592000;
    # rewrite ^/.*$ https://$host$request_uri? permanent;
}

server {
    # server port and name
    listen 443;
    server_name _;

    # Specifies the maximum accepted body size of a client request,
    # as indicated by the request header Content-Length.
    client_max_body_size 200m;

    # add ssl specific settings
    keepalive_timeout 60;
    # ssl on;
    ssl_certificate /etc/ssl/nginx/server.crt;
    ssl_certificate_key /etc/ssl/nginx/server.key;

    # limit ciphers
    ssl_ciphers HIGH:!ADH:!MD5;
    ssl_protocols SSLv3 TLSv1;
    ssl_prefer_server_ciphers on;

    # increase proxy buffer to handle some OpenERP web requests
    proxy_buffers 16 64k;
    proxy_buffer_size 128k;

    #general proxy settings
    # force timeouts if the backend dies
    proxy_connect_timeout 600s;
    proxy_send_timeout 600s;
    proxy_read_timeout 600s;
    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;

    # set headers
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;

    # Let the OpenERP web service know that we’re using HTTPS, otherwise
    # it will generate URL using http:// and not https://
    proxy_set_header X-Forwarded-Proto https;

    # by default, do not forward anything
    proxy_redirect off;
    proxy_buffering off;

    location / {
        proxy_pass http://office;
    }

    location /longpolling {
        proxy_pass http://office-im;
    }

    # cache some static data in memory for 60mins.
    # under heavy load this should relieve stress on the OpenERP web interface a bit.
    location /web/static/ {
        proxy_cache_valid 200 60m;
        proxy_buffering on;
        expires 864000;
        proxy_pass http://office;
    }
    access_log /var/log/nginx/office.access.log;
    error_log  /var/log/nginx/office.error.log;
}

server {
    listen 80;
    listen [::]:80;
    server_name office.proxsis.com;

    # Strict Transport Security
    add_header Strict-Transport-Security max-age=2592000;

    # Redirect 301 to HTTPS
    return 301 http://$host$request_uri;

    access_log /var/log/nginx/default.access.log;
    error_log  /var/log/nginx/default.error.log;
}

sudo ln -s /etc/nginx/sites-available/office /etc/nginx/sites-enabled/office

[options]
addons_path = /opt/odoo/odoo/addons
db_port = False
db_user = odoo
db_password = Zikra#2016
limit_memory_hard = 2684354560
limit_memory_soft = 2147483648
limit_request = 8192
limit_time_cpu = 60
limit_time_real = 120
log_handler = [':INFO']
log_level = info
logfile = /var/log/odoo/odoo-server.log
longpolling_port = 8072
max_cron_threads = 2
workers = 4
xmlrpc = True
xmlrpc_interface = 127.0.0.1
xmlrpc_port = 8069
netrpc_interface = 127.0.0.1
; proxy_mode = 1
proxy_mode = True

sudo service odoo-server restart
sudo service nginx restart

# https://www.digitalocean.com/community/tutorials/how-to-set-up-basic-http-authentication-with-nginx-on-ubuntu-14-04