rbachwiki - User contributions [en]

RecipeApp

2026-06-10T19:45:24Z

Bacchas:

== Recipe App ==

'''1. Install Packages '''

<pre>
sudo apt update

sudo apt install apache2 sqlite3 libsqlite3-dev libapache2-mod-php php-sqlite3
</pre>

'''If your Apache uses a specific PHP version, install SQLite for that version. Check Apache PHP:'''

<pre>
apachectl -M | grep -i php
ls -la /etc/apache2/mods-enabled/php*.load
</pre>

''' Example: if Apache uses PHP 8.1:'''

<pre>
sudo apt install php8.1-sqlite3
sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlite3
sudo systemctl restart apache2
</pre>

''' Verify SQLite support:'''

<pre>
php -m | grep -i sqlite
ls -la /etc/php/*/apache2/conf.d/ | grep sqlite
</pre>

''' You should see:'''

<pre>
pdo_sqlite
sqlite3
</pre>

''' 2. Copy App Files'''
'''Example location:3. Set Permissions'''
'''Apache must write to SQLite and image upload folders:'''

<pre>
cd /var/www/html/11square

sudo mkdir -p data uploads/recipes
sudo chown -R www-data:www-data data uploads
sudo chmod -R 775 data uploads
</pre>

''' Do not make the whole app writable unless needed. Only data/ and uploads/ need write access.'''
'''4. Apache Virtual Host'''
'''Create a site config:'''

<pre>
sudo nano /etc/apache2/sites-available/mysite.conf
</pre>

<pre>
<VirtualHost *:80>
ServerName mysite.com
ServerAlias www.mysite.com

DocumentRoot /var/www/html/mysite

<Directory /var/www/html/mysite>
Options -Indexes +FollowSymLinks
AllowOverride All
Require all granted
</Directory>

ErrorLog ${APACHE_LOG_DIR}/mysite-error.log
CustomLog ${APACHE_LOG_DIR}/mysite-access.log combined
</VirtualHost></pre>

'''Enable the site: '''

<pre>
sudo a2ensite mysite.conf
sudo a2enmod rewrite
sudo apachectl configtest
sudo systemctl restart apache2
</pre>

'''If config test says Syntax OK, Apache is good.'''
'''5. Test App From Server'''
'''From the app folder: ''''

<pre>
cd /var/www/html/mysite

php -l index.php
php -l lib/Database.php
</pre>

'''7. Optional HTTPS
Install Certbot:'''

sudo apt install certbot python3-certbot-apache

Issue certificate:

sudo certbot --apache -d mysite.com -d www.mysite.com

'''Then test:'''
sudo apachectl configtest
sudo systemctl restart apache2

'''8. Common Troubleshooting'''
'''Check Apache/PHP errors:'''

sudo tail -n 100 /var/log/apache2/mysite-error.log
sudo tail -n 100 /var/log/apache2/error.log

'''Watch live while refreshing the browser:'''

sudo tail -f /var/log/apache2/mysite-error.log

'''If you see:'''

'''PDOException: could not find driver'''
'''Install SQLite for Apache’s active PHP version:'''

ls -la /etc/apache2/mods-enabled/php*.load
sudo apt install php8.1-sqlite3
sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlite3
sudo systemctl restart apache2

'''If you see permission errors for SQLite or uploads:'''

sudo chown -R www-data:www-data /var/www/html/mysite/data /var/www/html/mysite/uploads
sudo chmod -R 775 /var/www/html/mysite/data /var/www/html/mysite/uploads

'''Back up these folders/files:'''

/var/www/html/mysite/data/cocktails.sqlite
/var/www/html/mysite/uploads/

'''Those contain your saved recipes and uploaded images.'''

RecipeApp

2026-06-10T19:43:24Z

Bacchas:

== Recipe App ==

'''1. Install Packages '''

<pre>
sudo apt update

sudo apt install apache2 sqlite3 libsqlite3-dev libapache2-mod-php php-sqlite3
</pre>

'''If your Apache uses a specific PHP version, install SQLite for that version. Check Apache PHP:'''

<pre>
apachectl -M | grep -i php
ls -la /etc/apache2/mods-enabled/php*.load
</pre>

''' Example: if Apache uses PHP 8.1:'''

<pre>
sudo apt install php8.1-sqlite3
sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlite3
sudo systemctl restart apache2
</pre>

''' Verify SQLite support:'''

<pre>
php -m | grep -i sqlite
ls -la /etc/php/*/apache2/conf.d/ | grep sqlite
</pre>

''' You should see:'''

<pre>
pdo_sqlite
sqlite3
</pre>

''' 2. Copy App Files'''
'''Example location:3. Set Permissions'''
'''Apache must write to SQLite and image upload folders:'''

<pre>
cd /var/www/html/11square

sudo mkdir -p data uploads/recipes
sudo chown -R www-data:www-data data uploads
sudo chmod -R 775 data uploads
</pre>

''' Do not make the whole app writable unless needed. Only data/ and uploads/ need write access.'''
'''4. Apache Virtual Host'''
'''Create a site config:'''

<pre>
sudo nano /etc/apache2/sites-available/11square.conf
</pre>

<pre>
<VirtualHost *:80>
ServerName 11square.com
ServerAlias www.11square.com

DocumentRoot /var/www/html/11square

<Directory /var/www/html/11square>
Options -Indexes +FollowSymLinks
AllowOverride All
Require all granted
</Directory>

ErrorLog ${APACHE_LOG_DIR}/11square-error.log
CustomLog ${APACHE_LOG_DIR}/11square-access.log combined
</VirtualHost></pre>

'''Enable the site: '''

<pre>
sudo a2ensite 11square.conf
sudo a2enmod rewrite
sudo apachectl configtest
sudo systemctl restart apache2
</pre>

'''If config test says Syntax OK, Apache is good.'''
'''5. Test App From Server'''
'''From the app folder: ''''

<pre>
cd /var/www/html/11square

php -l index.php
php -l lib/Database.php
</pre>

'''7. Optional HTTPS
Install Certbot:'''

sudo apt install certbot python3-certbot-apache

Issue certificate:

sudo certbot --apache -d 11square.com -d www.11square.com

'''Then test:'''
sudo apachectl configtest
sudo systemctl restart apache2

'''8. Common Troubleshooting'''
'''Check Apache/PHP errors:'''

sudo tail -n 100 /var/log/apache2/11square-error.log
sudo tail -n 100 /var/log/apache2/error.log

'''Watch live while refreshing the browser:'''

sudo tail -f /var/log/apache2/11square-error.log

'''If you see:'''

'''PDOException: could not find driver'''
'''Install SQLite for Apache’s active PHP version:'''

ls -la /etc/apache2/mods-enabled/php*.load
sudo apt install php8.1-sqlite3
sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlite3
sudo systemctl restart apache2

'''If you see permission errors for SQLite or uploads:'''

sudo chown -R www-data:www-data /var/www/html/11square/data /var/www/html/11square/uploads
sudo chmod -R 775 /var/www/html/11square/data /var/www/html/11square/uploads

'''Back up these folders/files:'''

/var/www/html/11square/data/cocktails.sqlite
/var/www/html/11square/uploads/

'''Those contain your saved recipes and uploaded images.'''

RecipeApp

2026-06-10T19:42:20Z

Bacchas:

== Recipe App ==

'''1. Install Packages '''

<pre>
sudo apt update

sudo apt install apache2 sqlite3 libsqlite3-dev libapache2-mod-php php-sqlite3
</pre>

'''If your Apache uses a specific PHP version, install SQLite for that version. Check Apache PHP:'''

<pre>
apachectl -M | grep -i php
ls -la /etc/apache2/mods-enabled/php*.load
</pre>

''' Example: if Apache uses PHP 8.1:'''

<pre>
sudo apt install php8.1-sqlite3
sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlite3
sudo systemctl restart apache2
</pre>

''' Verify SQLite support:'''

<pre>
php -m | grep -i sqlite
ls -la /etc/php/*/apache2/conf.d/ | grep sqlite
</pre>

''' You should see:'''

<pre>
pdo_sqlite
sqlite3
</pre>

''' 2. Copy App Files'''
'''Example location:3. Set Permissions'''
'''Apache must write to SQLite and image upload folders:'''

<pre>
cd /var/www/html/11square

sudo mkdir -p data uploads/recipes
sudo chown -R www-data:www-data data uploads
sudo chmod -R 775 data uploads
</pre>

''' Do not make the whole app writable unless needed. Only data/ and uploads/ need write access.
4. Apache Virtual Host
Create a site config:''''

<pre>
sudo nano /etc/apache2/sites-available/11square.conf
</pre>

'''' ''''

<pre>
<VirtualHost *:80>
ServerName 11square.com
ServerAlias www.11square.com

DocumentRoot /var/www/html/11square

<Directory /var/www/html/11square>
Options -Indexes +FollowSymLinks
AllowOverride All
Require all granted
</Directory>

ErrorLog ${APACHE_LOG_DIR}/11square-error.log
CustomLog ${APACHE_LOG_DIR}/11square-access.log combined
</VirtualHost></pre>

''''Enable the site: ''''

<pre>
sudo a2ensite 11square.conf
sudo a2enmod rewrite
sudo apachectl configtest
sudo systemctl restart apache2
</pre>

''''If config test says Syntax OK, Apache is good.'''
'''5. Test App From Server'''
'''From the app folder: ''''

<pre>
cd /var/www/html/11square

php -l index.php
php -l lib/Database.php
</pre>

'''7. Optional HTTPS
Install Certbot:'''

sudo apt install certbot python3-certbot-apache

Issue certificate:

sudo certbot --apache -d 11square.com -d www.11square.com

'''Then test:'''
sudo apachectl configtest
sudo systemctl restart apache2

'''8. Common Troubleshooting'''
'''Check Apache/PHP errors:'''

sudo tail -n 100 /var/log/apache2/11square-error.log
sudo tail -n 100 /var/log/apache2/error.log

'''Watch live while refreshing the browser:'''

sudo tail -f /var/log/apache2/11square-error.log

'''If you see:'''

'''PDOException: could not find driver'''
'''Install SQLite for Apache’s active PHP version:'''

ls -la /etc/apache2/mods-enabled/php*.load
sudo apt install php8.1-sqlite3
sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlite3
sudo systemctl restart apache2

'''If you see permission errors for SQLite or uploads:'''

sudo chown -R www-data:www-data /var/www/html/11square/data /var/www/html/11square/uploads
sudo chmod -R 775 /var/www/html/11square/data /var/www/html/11square/uploads

'''Back up these folders/files:'''

/var/www/html/11square/data/cocktails.sqlite
/var/www/html/11square/uploads/

'''Those contain your saved recipes and uploaded images.'''

RecipeApp

2026-06-10T19:41:12Z

Bacchas:

== Recipe App ==

''''1. Install Packages ''''

<pre>
sudo apt update

sudo apt install apache2 sqlite3 libsqlite3-dev libapache2-mod-php php-sqlite3
</pre>

''''If your Apache uses a specific PHP version, install SQLite for that version. Check Apache PHP:''''

<pre>
apachectl -M | grep -i php
ls -la /etc/apache2/mods-enabled/php*.load
</pre>

'''' Example: if Apache uses PHP 8.1:''''

<pre>
sudo apt install php8.1-sqlite3
sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlite3
sudo systemctl restart apache2
</pre>

'''' Verify SQLite support:''''

<pre>
php -m | grep -i sqlite
ls -la /etc/php/*/apache2/conf.d/ | grep sqlite
</pre>

'''' You should see:''''

<pre>
pdo_sqlite
sqlite3
</pre>

'''' 2. Copy App Files
Example location:3. Set Permissions
Apache must write to SQLite and image upload folders:''''

<pre>
cd /var/www/html/11square

sudo mkdir -p data uploads/recipes
sudo chown -R www-data:www-data data uploads
sudo chmod -R 775 data uploads
</pre>

'''' Do not make the whole app writable unless needed. Only data/ and uploads/ need write access.
4. Apache Virtual Host
Create a site config:''''

<pre>
sudo nano /etc/apache2/sites-available/11square.conf
</pre>

'''' ''''

<pre>
<VirtualHost *:80>
ServerName 11square.com
ServerAlias www.11square.com

DocumentRoot /var/www/html/11square

<Directory /var/www/html/11square>
Options -Indexes +FollowSymLinks
AllowOverride All
Require all granted
</Directory>

ErrorLog ${APACHE_LOG_DIR}/11square-error.log
CustomLog ${APACHE_LOG_DIR}/11square-access.log combined
</VirtualHost></pre>

''''Enable the site: ''''

<pre>
sudo a2ensite 11square.conf
sudo a2enmod rewrite
sudo apachectl configtest
sudo systemctl restart apache2
</pre>

''''If config test says Syntax OK, Apache is good.'''
'''5. Test App From Server'''
'''From the app folder: ''''

<pre>
cd /var/www/html/11square

php -l index.php
php -l lib/Database.php
</pre>

'''7. Optional HTTPS
Install Certbot:'''

sudo apt install certbot python3-certbot-apache

Issue certificate:

sudo certbot --apache -d 11square.com -d www.11square.com

'''Then test:'''
sudo apachectl configtest
sudo systemctl restart apache2

'''8. Common Troubleshooting'''
'''Check Apache/PHP errors:'''

sudo tail -n 100 /var/log/apache2/11square-error.log
sudo tail -n 100 /var/log/apache2/error.log

'''Watch live while refreshing the browser:'''

sudo tail -f /var/log/apache2/11square-error.log

'''If you see:'''

'''PDOException: could not find driver'''
'''Install SQLite for Apache’s active PHP version:'''

ls -la /etc/apache2/mods-enabled/php*.load
sudo apt install php8.1-sqlite3
sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlite3
sudo systemctl restart apache2

'''If you see permission errors for SQLite or uploads:'''

sudo chown -R www-data:www-data /var/www/html/11square/data /var/www/html/11square/uploads
sudo chmod -R 775 /var/www/html/11square/data /var/www/html/11square/uploads

'''Back up these folders/files:'''

/var/www/html/11square/data/cocktails.sqlite
/var/www/html/11square/uploads/

'''Those contain your saved recipes and uploaded images.'''

RecipeApp

2026-06-10T19:18:30Z

Bacchas: Created page with "== Recipe App == ''''1. Install Packages '''' <pre> sudo apt update sudo apt install apache2 sqlite3 libsqlite3-dev libapache2-mod-php php-sqlite3 </pre> ''''If your Apache uses a specific PHP version, install SQLite for that version. Check Apache PHP:'''' <pre> apachectl -M | grep -i php ls -la /etc/apache2/mods-enabled/php*.load </pre> '''' Example: if Apache uses PHP 8.1:'''' <pre> sudo apt install php8.1-sqlite3 sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlit..."

== Recipe App ==

''''1. Install Packages ''''

<pre>
sudo apt update

sudo apt install apache2 sqlite3 libsqlite3-dev libapache2-mod-php php-sqlite3
</pre>

''''If your Apache uses a specific PHP version, install SQLite for that version. Check Apache PHP:''''

<pre>
apachectl -M | grep -i php
ls -la /etc/apache2/mods-enabled/php*.load
</pre>

'''' Example: if Apache uses PHP 8.1:''''

<pre>
sudo apt install php8.1-sqlite3
sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlite3
sudo systemctl restart apache2
</pre>

'''' Verify SQLite support:''''

<pre>
php -m | grep -i sqlite
ls -la /etc/php/*/apache2/conf.d/ | grep sqlite
</pre>

'''' You should see:''''

<pre>
pdo_sqlite
sqlite3
</pre>

'''' 2. Copy App Files
Example location:3. Set Permissions
Apache must write to SQLite and image upload folders:''''

<pre>
cd /var/www/html/11square

sudo mkdir -p data uploads/recipes
sudo chown -R www-data:www-data data uploads
sudo chmod -R 775 data uploads
</pre>

'''' Do not make the whole app writable unless needed. Only data/ and uploads/ need write access.
4. Apache Virtual Host
Create a site config:''''

<pre>
sudo nano /etc/apache2/sites-available/11square.conf
</pre>

'''' ''''

<pre>
<VirtualHost *:80>
ServerName 11square.com
ServerAlias www.11square.com

DocumentRoot /var/www/html/11square

<Directory /var/www/html/11square>
Options -Indexes +FollowSymLinks
AllowOverride All
Require all granted
</Directory>

ErrorLog ${APACHE_LOG_DIR}/11square-error.log
CustomLog ${APACHE_LOG_DIR}/11square-access.log combined
</VirtualHost></pre>

''''Enable the site: ''''

<pre>
sudo a2ensite 11square.conf
sudo a2enmod rewrite
sudo apachectl configtest
sudo systemctl restart apache2
</pre>

''''If config test says Syntax OK, Apache is good.
5. Test App From Server
From the app folder: ''''

<pre>
cd /var/www/html/11square

php -l index.php
php -l lib/Database.php
</pre>

'''' ''''

<pre>
'''7. Optional HTTPS
Install Certbot:'''

sudo apt install certbot python3-certbot-apache

Issue certificate:

sudo certbot --apache -d 11square.com -d www.11square.com

'''Then test:'''
sudo apachectl configtest
sudo systemctl restart apache2

'''8. Common Troubleshooting'''
'''Check Apache/PHP errors:'''

sudo tail -n 100 /var/log/apache2/11square-error.log
sudo tail -n 100 /var/log/apache2/error.log

'''Watch live while refreshing the browser:'''

sudo tail -f /var/log/apache2/11square-error.log

'''If you see:'''

'''PDOException: could not find driver'''
'''Install SQLite for Apache’s active PHP version:'''

ls -la /etc/apache2/mods-enabled/php*.load
sudo apt install php8.1-sqlite3
sudo phpenmod -v 8.1 -s apache2 pdo_sqlite sqlite3
sudo systemctl restart apache2

If you see permission errors for SQLite or uploads:
sudo chown -R www-data:www-data /var/www/html/11square/data /var/www/html/11square/uploads
sudo chmod -R 775 /var/www/html/11square/data /var/www/html/11square/uploads
Backup
Back up these folders/files:
/var/www/html/11square/data/cocktails.sqlite
/var/www/html/11square/uploads/
Those contain your saved recipes and uploaded images.
</pre>

AI APPS

2026-06-10T19:09:27Z

Bacchas:

==[[PYTHONAPP]]==
==[[IMAGEBROWSER]]==
==[[RecipeApp]]==

IMAGEBROWSER

2026-05-29T16:46:21Z

Bacchas:

== Server Setup ==
1. upload contents to web folder

''' Even if PHP is already installed, confirm MySQL and GD support:'''
<pre>
sudo apt update
sudo apt install php-mysql php-gd exiftool
php -v
php -m | grep -E 'pdo_mysql|gd'
</pre>

==Create Database==

'''In phpMyAdmin:'''

'''Create a database, for example imagebrowser.'''

'''Use collation utf8mb4_unicode_ci.'''

'''Import:'''

database/schema.sql

4. Create MySQL User

'''You can do this in phpMyAdmin, or with MySQL CLI:'''
<pre>
CREATE USER 'imagebrowser_user'@'localhost' IDENTIFIED BY 'your-strong-password';
GRANT ALL PRIVILEGES ON imagebrowser.* TO 'imagebrowser_user'@'localhost';
FLUSH PRIVILEGES;
</pre>

5. Configure app on the server

<pre>
cd /var/www/html
cp config/config.example.php config/config.php
nano config/config.php
</pre>

'''Set these values'''
<pre>
'base_url' => '',
'categories_dir' => __DIR__ . '/../categories',
'thumbnail_dir' => __DIR__ . '/../cache/thumbs',
'db' => [
'host' => '127.0.0.1',
'port' => 3306,
'database' => 'imagebrowser',
'username' => 'imagebrowser_user',
'password' => 'your-strong-password',
'charset' => 'utf8mb4',
],
</pre>

'''Use base_url => '' if the app is at the domain root. If installed in a subfolder like /gallery, use:'''
'base_url' => '/gallery',

6. Set Permissions

'''Apache/PHP must be able to read categories/ and write to cache/ and uploads:'''

<pre>
sudo chown -R www-data:www-data /var/www/html/cache /var/www/html/uploads /var/www/html/categories
sudo chmod -R 775 /var/www/html/cache /var/www/html/uploads /var/www/html/categories
</pre>

7. Apache Setup

'''Check which document root Apache is actually serving:'''

sudo apachectl -S

8. Setup Conf file

sudo nano /etc/apache2/sites-available/imagebrowser.conf

'''Example '''
<pre>
<VirtualHost *:80>
ServerName yourdomain.com
DocumentRoot /var/www/imagebrowser

<Directory /var/www/imagebrowser>
AllowOverride All
Require all granted
</Directory>

ErrorLog ${APACHE_LOG_DIR}/imagebrowser_error.log
CustomLog ${APACHE_LOG_DIR}/imagebrowser_access.log combined
</VirtualHost>
</pre>

8. Enable it

<pre>
sudo a2ensite imagebrowser.conf
sudo a2enmod rewrite
sudo systemctl reload apache2
</pre>

9. Create an Admin User For the App

'''Cd into the App Folder'''

<pre>
cd /var/www/html
php cli/create_admin.php admin@example.com "your-admin-password"
</pre>

10. Add Images to the Category Folder

11. Sign in to the Admin

<pre>
https://yourdomain.com/login.php
</pre>

12. Go ot Admin and click

Sync Library
Render Category Thumbnails

13. Quick verifications. Run these on the server

<pre>
cd /var/www/html
php -l index.php
php -l thumb.php
php -l app/bootstrap.php
php -l app/thumbnails.php
</pre>

<pre>

</pre>

IMAGEBROWSER

2026-05-29T16:33:28Z

Bacchas:

IMAGEBROWSER

2026-05-29T16:21:44Z

Bacchas:

IMAGEBROWSER

2026-05-29T16:19:32Z

Bacchas:

IMAGEBROWSER

2026-05-29T16:19:10Z

Bacchas:

IMAGEBROWSER

2026-05-29T16:16:54Z

Bacchas:

== Server Setup ==
1. upload contents to web folder

''' Even if PHP is already installed, confirm MySQL and GD support:'''

IMAGEBROWSER

2026-05-29T16:16:45Z

Bacchas:

== Server Setup ==
1. upload contents to web folder
''' Even if PHP is already installed, confirm MySQL and GD support:'''

IMAGEBROWSER

2026-05-29T16:16:18Z

Bacchas:

== Server Setup ==
1. upload contents to web folder
* Even if PHP is already installed, confirm MySQL and GD support:

IMAGEBROWSER

2026-05-29T16:15:48Z

Bacchas: Created page with "== Server Setup == 1. upload contents to web folder"

== Server Setup ==
1. upload contents to web folder

AI APPS

2026-05-29T16:14:50Z

Bacchas:

==[[PYTHONAPP]]==
==[[IMAGEBROWSER]]==

AI APPS

2026-05-29T16:14:08Z

Bacchas: Created page with "==PYTHONAPP=="

==[[PYTHONAPP]]==

Main Page

2026-05-29T16:13:57Z

Bacchas:

==[[APPSHEET]]==
==[[AI APPS]]==

== [[AWS|Amazon Cloud Service]] ==
== [[Bash]] ==
== [[Bluhost]] ==
==[[Centos OS]] ==

== [[Docker]]==
== [[Github]]==
==[[Google Sheets]]==
== [[Hacking|Hacking And Security ]] ==
==[[Hardware]]==
==[[IOS Apps]]==
==[[JavaScript]]==
==[[Linode]]==
==[[Login and reset Forget Password]]==
== [[Math]] ==
== [[Mac]] ==
== [[Mysql]] ==
== [[Networking]] ==
== [[Open Source Software]] ==
== [[Oracle SQL]] ==
== [[Programming]] ==
== [[Problem Solution]] ==
== [[Software Tips]] ==
==[[Tailscale]]==
== [[Utilities]] ==
== [[Ubuntu Tips]] ==

== [[Web Links]] ==
== [[Windows]] ==
==[[Virtualization]]==

PYTHONAPP

2026-05-29T15:31:45Z

Bacchas:

=Karaoke app Deployment=
== Prerequisite Check ==
# ssh into the server
# verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot
# if certbot isn't installed
sudo apt update
sudo apt install certbot python3-certbot-apache -y

# Install Python venv if needed:
sudo apt install python3-venv python3-pip -y

== Create the App Directory ==
sudo mkdir -p /var/www/html/myapp
cd /var/www/html/myapp

== Upload App Files ==
# Upload the .env file (hidden, so it won't be picked up by scp -r)
'''If you don't see .env in Finder, press Cmd+Shift+. to toggle hidden files.'''

== Set up the Python Environment ==

cd /var/www/html/myapp
python3 -m venv venv
source venv/bin/activate
pip install flask pymysql cryptography gunicorn DBUtils
deactivate

'''The cryptography package is required for MySQL caching_sha2_password auth.'''

== Configure the Database ==
'''Open phpMyAdmin in your browser. Make sure the user in your .env file has privileges on the dbasename database. If not, in phpMyAdmin run:'''

GRANT ALL PRIVILEGES ON dbasename.* TO 'YourUser'@'localhost';
FLUSH PRIVILEGES;
'''Verify your .env file on the server has the correct values:'''

cat /var/www/html/myapp/.env

''' It should contain '''
DB_HOST=localhost
DB_USER=YourUser
DB_PASS=YourPassword
DB_NAME=dbasename
SECRET_KEY=some-random-string
HOST_NAME= name for the host side
PORT=3001
'''Important: Use a different port from any other apps you have running. I'm using 3001 here — pick whatever's free.'''

==Test App Manually==
cd /var/www/html/myapp
source venv/bin/activate
python3 app.py

'''You should see "Karaoke app running on http://localhost:3001". In another SSH window test'''
sudo nano /etc/systemd/system/myapp.service

== Create the systemd Service ==
'''Paste '''
[Unit]
Description=My App mydir (Gunicorn)
After=network.target

[Service]
User=www-data
Group=www-data
WorkingDirectory=/var/www/html/myapp
Environment="PATH=/var/www/html/myapp/venv/bin"
ExecStart=/var/www/html/myapp/venv/bin/gunicorn --workers 3 --bind 127.0.0.1:3001 app:app
Restart=always

[Install]
WantedBy=multi-user.target

'''Save (Ctrl+O, Enter, Ctrl+X).'''

'''Set permissions:'''
sudo chown -R www-data:www-data /var/www/html/myapp

'''Enable and start '''
sudo systemctl daemon-reload
sudo systemctl enable myapp
sudo systemctl start myapp
sudo systemctl status myapp

'''You should see active (running). If not:'''
sudo journalctl -u myapp -n 50

== Configure Apache Reverse Proxy==
'''Enable required modules (only needed once on the server):'''
sudo a2enmod proxy proxy_http ssl rewrite headers

'''Create the HTTP vhost (which certbot will upgrade later):'''

sudo nano /etc/apache2/sites-available/mydomain.conf

'''Paste — replace yourdomain.com with your actual domain'''
<pre>
<VirtualHost *:80>
ServerName yourdomain.com
ServerAlias www.yourdomain.com
DocumentRoot /var/www/html/domainfolder
#the proxy stuff below is needed if you are doing reverse proxy. not needed for a regular port 80 deployment
ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

ErrorLog ${APACHE_LOG_DIR}/mydomain-error.log
CustomLog ${APACHE_LOG_DIR}/mydomain-access.log combined
</VirtualHost>
</pre>

'''Enable and reload'''
sudo a2ensite mydomain.conf
sudo apache2ctl configtest
sudo systemctl reload apache2

Test in your browser: http://yourdomain.com — you should see the login page.

== Enable HTTPS with Certbot==
'''Make sure your domain's DNS A record points to your server IP first.'''

'''Run certbot:'''
sudo certbot --apache -d yourdomain.com -d www.yourdomain.com

'''Choose 2 (Redirect) when asked, so HTTP automatically redirects to HTTPS.'''

'''Certbot will create /etc/apache2/sites-available/rb222-le-ssl.conf and enable it.'''
sudo apache2ctl configtest
sudo systemctl reload apache2

'''Visit https://yourdomain.com — you should see the lock icon and the app.'''

'''If certbot fails to auto-configure (it sometimes does), create the SSL vhost manually:'''

sudo nano /etc/apache2/sites-available/mydomain-le-ssl.conf

<pre>
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/yourdomain.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/yourdomain.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf

ErrorLog ${APACHE_LOG_DIR}/rb222-ssl-error.log
CustomLog ${APACHE_LOG_DIR}/rb222-ssl-access.log combined
</VirtualHost>
</IfModule>
</pre>
'''then'''
sudo a2ensite mydomain-le-ssl.conf
sudo systemctl reload apache2

'''Cert auto-renewal is already enabled by certbot's systemd timer — verify with'''
sudo systemctl list-timers | grep certbot

=Database Optimization=
<pre>
CREATE INDEX idx_songs_title ON songs(Title(100));
CREATE INDEX idx_songs_artists ON songs(Artists(100));
CREATE INDEX idx_favorite_name ON Favorite(Name(80), Tag(20));
CREATE INDEX idx_queue_status ON queue(Status(20));
CREATE INDEX idx_queue_timestamp ON queue(TimeStamp(20));
CREATE INDEX idx_archive_name ON Archive_Singers(Name(80));
</pre>
= How to find out the service name of the app=
'''This is the service that starts the app, this will list all running services'''
<pre>
# "What services exist on this box?"
systemctl list-unit-files --type=service --state=enabled

# "Which one is MY app?"
sudo grep -l "/var/www/html/<dirname>" /etc/systemd/system/*.service

# "Which service owns port X?"
sudo lsof -i :3000 -P -n # gets PID
ps -o unit= -p <PID> # gets service name
</pre>
== How to rebuild venv dir if deleted==
<pre>
cd /path/to/karaapp # your project dir

# 1. Recreate the virtual environment
python3 -m venv venv

# 2. Activate it
source venv/bin/activate

# 3. Reinstall dependencies
pip install --upgrade pip
pip install -r requirements.txt

# 4. Start the app (however you normally run it)
gunicorn app:app # or: python app.py
</pre>

PYTHONAPP

2026-05-08T18:19:01Z

Bacchas: /* Configure Apache Reverse Proxy */

Setup Mac for ssh into synology

2026-04-24T19:02:27Z

Bacchas:

== Set up Password-less Login ==

'''For an unattended script, your Mac needs to log in without a password. Open Terminal on your Mac:'''
'''Generate a key:'''
ssh-keygen -t ed25519 (Press Enter through all prompts).
'''Copy it to the NAS:'''
ssh-copy-id -i ~/.ssh/id_ed25519.pub your_nas_user@100.x.y.z
'''Test it:'''
ssh your_nas_user@100.x.y.z. If you get in without a password, you’re ready.

== Fix Permissions on the Synology==
'''Log in to your NAS with your password one last time and run these commands to restrict access to your home folder: '''
'''Set Home Directory to 755: SSH requires that your home directory is not writable by others.'''
chmod 755 /volume1/homes/bacchas
'''Set .ssh Folder to 700: This folder must be readable only by you.'''
chmod 700 /volume1/homes/bacchas/.ssh
'''Set authorized_keys to 600: The key file must be strictly protected.'''
chmod 600 /volume1/homes/bacchas/.ssh/authorized_keys

== Verify "User Home Service" is Enabled ==
'''SSH keys won't work if the NAS isn't correctly mapping your home directory. '''
'''In DSM, go to Control Panel > User & Group > Advanced.'''
'''Scroll down to User Home and ensure Enable user home service is checked. '''

==Check Synology’s SSH Configuration ==
'''Sometimes PubkeyAuthentication is disabled in the system config. '''
'''On the NAS, edit the config file: '''
sudo vi /etc/ssh/sshd_config.
'''Find these lines and ensure they are uncommented (no # at the start):'''
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys
'''If you made changes, restart the service in Control Panel > Terminal & SNMP by unchecking and re-checking the Enable SSH service box. '''

==Mac-Specific: Add Key to your SSH Agent==
'''On macOS, your terminal might not be "offering" the key automatically. Run this command on your Mac to manually add it to your current session:'''
ssh-add ~/.ssh/id_ed25519

==How to Troubleshoot==
'''If it still asks for a password, run the connection in "verbose" mode on your Mac:'''
ssh -vvv username@192.168.20.22
'''Look for a line that says "debug1: Next authentication method: publickey". If it says "Authentication refused: bad ownership or modes," it means the permission fix in Step 1 didn't stick or was applied to the wrong path. '''

==Restart the Service==
'''Changes to sshd_config do not take effect until the service restarts.'''
'''Command: sudo '''
synosystemctl restart sshd.
'''Alternative: Toggle "Enable SSH Service" off and back on in the DSM Control Panel. '''

=Create config file=
'''Create a config file in the ~/.ssh/config'''
''' This file contains the host name and the path to the ssh keys'''
<pre>
Host wendy
HostName 192.168.20.22
User myname
IdentityFile ~/.ssh/keyidfile
IdentitiesOnly yes

#for tailscale

Host wendy-tailscale
HostName 1.1.1.1
User myname
IdentityFile ~/.ssh/keyfile
IdentitiesOnly yes

</pre>

==[[ Backup_script_on_mac_config_and_setup| Mac Setup]] - [[Bash| Bash menu]]-[[Main_Page| Home]]==
[[Category:Bash]]

Scripts to backup to synology without mounting drives

2026-04-24T19:02:12Z

Bacchas: /* Mac Setup Bash menu- Home */

<pre>
#!/bin/bash
# Use absolute paths for everything
RSYNC_BIN="/usr/bin/rsync"
MKDIR_BIN="/bin/mkdir"

fdate=`date -I`
fname="wendy_karaoke.txt"
LOG_FILE="$HOME/Desktop/cronlogfiles/logs/$fname"

# Create log directory if missing
mkdir -p "$HOME/Desktop/cronlogfiles/logs"

# Log Header
{
echo " "
echo "***********************************************************"
echo " "
echo "------ $(date) --------"
echo " "
} >> "$LOG_FILE"

# THE FIX:
# 1. Changed '-avi' to '-av' (Removes the cryptic >f+++++ codes, showing only filenames)
# 2. Added '--modify-window=1' (Ignores tiny timestamp differences common on external drives)
rsync -av --delete --modify-window=1 \
--omit-dir-times --no-perms --no-owner --no-group \
--exclude={'.DS_Store','Thumbs.db','*.tmp'} \
"/Volumes/owcv1/Karaoke/" \
"wendy:/volume1/Karaoke_All_folders/" \
>> "$LOG_FILE" 2>&1
</pre>

==[[ Backup_script_on_mac_config_and_setup| Mac Setup]] - [[Bash| Bash menu]]-[[Main_Page| Home]]==
[[Category:Bash]]

Setup Mac for ssh into synology

2026-04-24T19:01:12Z

Bacchas:

== Set up Password-less Login ==

'''For an unattended script, your Mac needs to log in without a password. Open Terminal on your Mac:'''
'''Generate a key:'''
ssh-keygen -t ed25519 (Press Enter through all prompts).
'''Copy it to the NAS:'''
ssh-copy-id -i ~/.ssh/id_ed25519.pub your_nas_user@100.x.y.z
'''Test it:'''
ssh your_nas_user@100.x.y.z. If you get in without a password, you’re ready.

== Fix Permissions on the Synology==
'''Log in to your NAS with your password one last time and run these commands to restrict access to your home folder: '''
'''Set Home Directory to 755: SSH requires that your home directory is not writable by others.'''
chmod 755 /volume1/homes/bacchas
'''Set .ssh Folder to 700: This folder must be readable only by you.'''
chmod 700 /volume1/homes/bacchas/.ssh
'''Set authorized_keys to 600: The key file must be strictly protected.'''
chmod 600 /volume1/homes/bacchas/.ssh/authorized_keys

== Verify "User Home Service" is Enabled ==
'''SSH keys won't work if the NAS isn't correctly mapping your home directory. '''
'''In DSM, go to Control Panel > User & Group > Advanced.'''
'''Scroll down to User Home and ensure Enable user home service is checked. '''

==Check Synology’s SSH Configuration ==
'''Sometimes PubkeyAuthentication is disabled in the system config. '''
'''On the NAS, edit the config file: '''
sudo vi /etc/ssh/sshd_config.
'''Find these lines and ensure they are uncommented (no # at the start):'''
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys
'''If you made changes, restart the service in Control Panel > Terminal & SNMP by unchecking and re-checking the Enable SSH service box. '''

==Mac-Specific: Add Key to your SSH Agent==
'''On macOS, your terminal might not be "offering" the key automatically. Run this command on your Mac to manually add it to your current session:'''
ssh-add ~/.ssh/id_ed25519

==How to Troubleshoot==
'''If it still asks for a password, run the connection in "verbose" mode on your Mac:'''
ssh -vvv username@192.168.20.22
'''Look for a line that says "debug1: Next authentication method: publickey". If it says "Authentication refused: bad ownership or modes," it means the permission fix in Step 1 didn't stick or was applied to the wrong path. '''

==Restart the Service==
'''Changes to sshd_config do not take effect until the service restarts.'''
'''Command: sudo '''
synosystemctl restart sshd.
'''Alternative: Toggle "Enable SSH Service" off and back on in the DSM Control Panel. '''

=Create config file=
'''Create a config file in the ~/.ssh/config'''
''' This file contains the host name and the path to the ssh keys'''
<pre>
Host wendy
HostName 192.168.20.22
User myname
IdentityFile ~/.ssh/keyidfile
IdentitiesOnly yes

#for tailscale

Host wendy-tailscale
HostName 1.1.1.1
User myname
IdentityFile ~/.ssh/keyfile
IdentitiesOnly yes

</pre>

==[[ Backup_script_on_mac_config_and_setup| Mac Setup]] [[Bash| Bash menu]]-[[Main_Page| Home]]==
[[Category:Bash]]

Setup Mac for ssh into synology

2026-04-24T18:58:33Z

Bacchas:

== Set up Password-less Login ==

'''For an unattended script, your Mac needs to log in without a password. Open Terminal on your Mac:'''
'''Generate a key:'''
ssh-keygen -t ed25519 (Press Enter through all prompts).
'''Copy it to the NAS:'''
ssh-copy-id -i ~/.ssh/id_ed25519.pub your_nas_user@100.x.y.z
'''Test it:'''
ssh your_nas_user@100.x.y.z. If you get in without a password, you’re ready.

== Fix Permissions on the Synology==
'''Log in to your NAS with your password one last time and run these commands to restrict access to your home folder: '''
'''Set Home Directory to 755: SSH requires that your home directory is not writable by others.'''
chmod 755 /volume1/homes/bacchas
'''Set .ssh Folder to 700: This folder must be readable only by you.'''
chmod 700 /volume1/homes/bacchas/.ssh
'''Set authorized_keys to 600: The key file must be strictly protected.'''
chmod 600 /volume1/homes/bacchas/.ssh/authorized_keys

== Verify "User Home Service" is Enabled ==
'''SSH keys won't work if the NAS isn't correctly mapping your home directory. '''
'''In DSM, go to Control Panel > User & Group > Advanced.'''
'''Scroll down to User Home and ensure Enable user home service is checked. '''

==Check Synology’s SSH Configuration ==
'''Sometimes PubkeyAuthentication is disabled in the system config. '''
'''On the NAS, edit the config file: '''
sudo vi /etc/ssh/sshd_config.
'''Find these lines and ensure they are uncommented (no # at the start):'''
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys
'''If you made changes, restart the service in Control Panel > Terminal & SNMP by unchecking and re-checking the Enable SSH service box. '''

==Mac-Specific: Add Key to your SSH Agent==
'''On macOS, your terminal might not be "offering" the key automatically. Run this command on your Mac to manually add it to your current session:'''
ssh-add ~/.ssh/id_ed25519

==How to Troubleshoot==
'''If it still asks for a password, run the connection in "verbose" mode on your Mac:'''
ssh -vvv username@192.168.20.22
'''Look for a line that says "debug1: Next authentication method: publickey". If it says "Authentication refused: bad ownership or modes," it means the permission fix in Step 1 didn't stick or was applied to the wrong path. '''

=Create config file=
'''Create a config file in the ~/.ssh/config'''
''' This file contains the host name and the path to the ssh keys'''
<pre>
Host wendy
HostName 192.168.20.22
User myname
IdentityFile ~/.ssh/keyidfile
IdentitiesOnly yes

#for tailscale

Host wendy-tailscale
HostName 1.1.1.1
User myname
IdentityFile ~/.ssh/keyfile
IdentitiesOnly yes

</pre>

==[[ Backup_script_on_mac_config_and_setup| Mac Setup]] [[Bash| Bash menu]]-[[Main_Page| Home]]==
[[Category:Bash]]

Setup Mac for ssh into synology

2026-04-24T18:54:30Z

Bacchas:

Setup Mac for ssh into synology

2026-04-24T18:52:52Z

Bacchas:

Scripts to backup to synology without mounting drives

2026-04-24T18:35:27Z

Bacchas:

<pre>
#!/bin/bash
# Use absolute paths for everything
RSYNC_BIN="/usr/bin/rsync"
MKDIR_BIN="/bin/mkdir"

fdate=`date -I`
fname="wendy_karaoke.txt"
LOG_FILE="$HOME/Desktop/cronlogfiles/logs/$fname"

# Create log directory if missing
mkdir -p "$HOME/Desktop/cronlogfiles/logs"

# Log Header
{
echo " "
echo "***********************************************************"
echo " "
echo "------ $(date) --------"
echo " "
} >> "$LOG_FILE"

# THE FIX:
# 1. Changed '-avi' to '-av' (Removes the cryptic >f+++++ codes, showing only filenames)
# 2. Added '--modify-window=1' (Ignores tiny timestamp differences common on external drives)
rsync -av --delete --modify-window=1 \
--omit-dir-times --no-perms --no-owner --no-group \
--exclude={'.DS_Store','Thumbs.db','*.tmp'} \
"/Volumes/owcv1/Karaoke/" \
"wendy:/volume1/Karaoke_All_folders/" \
>> "$LOG_FILE" 2>&1
</pre>

==[[ Backup_script_on_mac_config_and_setup| Mac Setup]] [[Bash| Bash menu]]-[[Main_Page| Home]]==
[[Category:Bash]]

Setup Mac for ssh into synology

2026-04-24T18:35:09Z

Bacchas:

=Create config file=
'''Create a config file in the ~/.ssh/config'''
''' This file contains the host name and the path to the ssh keys'''
<pre>
Host wendy
HostName 192.168.20.22
User myname
IdentityFile ~/.ssh/keyidfile
IdentitiesOnly yes

#for tailscale

Host wendy-tailscale
HostName 1.1.1.1
User myname
IdentityFile ~/.ssh/keyfile
IdentitiesOnly yes

</pre>

==[[ Backup_script_on_mac_config_and_setup| Mac Setup]] [[Bash| Bash menu]]-[[Main_Page| Home]]==
[[Category:Bash]]

Setup Mac for ssh into synology

2026-04-24T17:56:52Z

Bacchas: Created page with "=Create config file= '''Create a config file in the ~/.ssh/config''' ''' This file contains the host name and the path to the ssh keys''' <pre> Host wendy HostName 192.168.20.22 User myname IdentityFile ~/.ssh/keyidfile IdentitiesOnly yes #for tailscale Host wendy-tailscale HostName 1.1.1.1 User myname IdentityFile ~/.ssh/keyfile IdentitiesOnly yes </pre>"

Scripts to backup to synology without mounting drives

2026-04-24T17:51:55Z

Bacchas: Created page with "<pre> #!/bin/bash # Use absolute paths for everything RSYNC_BIN="/usr/bin/rsync" MKDIR_BIN="/bin/mkdir" fdate=`date -I` fname="wendy_karaoke.txt" LOG_FILE="$HOME/Desktop/cronlogfiles/logs/$fname" # Create log directory if missing mkdir -p "$HOME/Desktop/cronlogfiles/logs" # Log Header { echo " " echo "***********************************************************" echo " " echo "------ $(date) --------" echo " " } >> "$LOG_FILE" # THE FIX: # 1. Changed '-avi'..."

Backup script on mac config and setup

2026-04-24T17:50:28Z

Bacchas: Created page with "= Setup Mac for ssh into synology = =Scripts to backup to synology without mounting drives="

=[[ Setup Mac for ssh into synology ]]=
=[[Scripts to backup to synology without mounting drives]]=

Bash

2026-04-24T17:47:30Z

Bacchas:

== [[backup script on mac config and setup ]] ==
==[[Scripts used on Servers]]==
==[[Useful bash commands]]==
==[[Tmux]]==

== Useful Command Line Utilities ==
* [[RMLINT | RMLINT - Duplicate Finding cmd Tool]]
* [[RCLONE | Rclone syncs your files to cloud storage ]]
* [[NCDU | Ncdu Ncdu is a disk usage analyzer]]
* [[BTOP]]
* [[NTFY]]

==[[Image Scripts]]==
==[[Script Course]]==
==[[Centos OS | More Scripting]]==
==[[Sample Scripts]]==
==[[File Commands]]==
===[[Ubuntu File System Commands]]===
* find, copy, replace, rename
==[[AWK Command]]==
==[[Text File Commands]]==
* find and replace text in bulk
==[[BSD MAILX]]==
==[[Shell Scripting]]==

PYTHONAPP

2026-04-23T14:49:49Z

Bacchas:

=Karaoke app Deployment=
== Prerequisite Check ==
# ssh into the server
# verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot
# if certbot isn't installed
sudo apt update
sudo apt install certbot python3-certbot-apache -y

# Install Python venv if needed:
sudo apt install python3-venv python3-pip -y

== Create the App Directory ==
sudo mkdir -p /var/www/html/myapp
cd /var/www/html/myapp

== Upload App Files ==
# Upload the .env file (hidden, so it won't be picked up by scp -r)
'''If you don't see .env in Finder, press Cmd+Shift+. to toggle hidden files.'''

== Set up the Python Environment ==

cd /var/www/html/myapp
python3 -m venv venv
source venv/bin/activate
pip install flask pymysql cryptography gunicorn DBUtils
deactivate

'''The cryptography package is required for MySQL caching_sha2_password auth.'''

== Configure the Database ==
'''Open phpMyAdmin in your browser. Make sure the user in your .env file has privileges on the dbasename database. If not, in phpMyAdmin run:'''

GRANT ALL PRIVILEGES ON dbasename.* TO 'YourUser'@'localhost';
FLUSH PRIVILEGES;
'''Verify your .env file on the server has the correct values:'''

cat /var/www/html/myapp/.env

''' It should contain '''
DB_HOST=localhost
DB_USER=YourUser
DB_PASS=YourPassword
DB_NAME=dbasename
SECRET_KEY=some-random-string
HOST_NAME= name for the host side
PORT=3001
'''Important: Use a different port from any other apps you have running. I'm using 3001 here — pick whatever's free.'''

==Test App Manually==
cd /var/www/html/myapp
source venv/bin/activate
python3 app.py

'''You should see "Karaoke app running on http://localhost:3001". In another SSH window test'''
sudo nano /etc/systemd/system/myapp.service

== Create the systemd Service ==
'''Paste '''
[Unit]
Description=My App mydir (Gunicorn)
After=network.target

[Service]
User=www-data
Group=www-data
WorkingDirectory=/var/www/html/myapp
Environment="PATH=/var/www/html/myapp/venv/bin"
ExecStart=/var/www/html/myapp/venv/bin/gunicorn --workers 3 --bind 127.0.0.1:3001 app:app
Restart=always

[Install]
WantedBy=multi-user.target

'''Save (Ctrl+O, Enter, Ctrl+X).'''

'''Set permissions:'''
sudo chown -R www-data:www-data /var/www/html/myapp

'''Enable and start '''
sudo systemctl daemon-reload
sudo systemctl enable myapp
sudo systemctl start myapp
sudo systemctl status myapp

'''You should see active (running). If not:'''
sudo journalctl -u myapp -n 50

== Configure Apache Reverse Proxy==
'''Enable required modules (only needed once on the server):'''
sudo a2enmod proxy proxy_http ssl rewrite headers

'''Create the HTTP vhost (which certbot will upgrade later):'''

sudo nano /etc/apache2/sites-available/mydomain.conf

'''Paste — replace yourdomain.com with your actual domain''
<pre>
<VirtualHost *:80>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

ErrorLog ${APACHE_LOG_DIR}/mydomain-error.log
CustomLog ${APACHE_LOG_DIR}/mydomain-access.log combined
</VirtualHost>
</pre>

'''Enable and reload'''
sudo a2ensite mydomain.conf
sudo apache2ctl configtest
sudo systemctl reload apache2

Test in your browser: http://yourdomain.com — you should see the login page.

== Enable HTTPS with Certbot==
'''Make sure your domain's DNS A record points to your server IP first.'''

'''Run certbot:'''
sudo certbot --apache -d yourdomain.com -d www.yourdomain.com

'''Choose 2 (Redirect) when asked, so HTTP automatically redirects to HTTPS.'''

'''Certbot will create /etc/apache2/sites-available/rb222-le-ssl.conf and enable it.'''
sudo apache2ctl configtest
sudo systemctl reload apache2

'''Visit https://yourdomain.com — you should see the lock icon and the app.'''

'''If certbot fails to auto-configure (it sometimes does), create the SSL vhost manually:'''

sudo nano /etc/apache2/sites-available/mydomain-le-ssl.conf

<pre>
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/yourdomain.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/yourdomain.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf

ErrorLog ${APACHE_LOG_DIR}/rb222-ssl-error.log
CustomLog ${APACHE_LOG_DIR}/rb222-ssl-access.log combined
</VirtualHost>
</IfModule>
</pre>
'''then'''
sudo a2ensite mydomain-le-ssl.conf
sudo systemctl reload apache2

'''Cert auto-renewal is already enabled by certbot's systemd timer — verify with'''
sudo systemctl list-timers | grep certbot

=Database Optimization=
<pre>
CREATE INDEX idx_songs_title ON songs(Title(100));
CREATE INDEX idx_songs_artists ON songs(Artists(100));
CREATE INDEX idx_favorite_name ON Favorite(Name(80), Tag(20));
CREATE INDEX idx_queue_status ON queue(Status(20));
CREATE INDEX idx_queue_timestamp ON queue(TimeStamp(20));
CREATE INDEX idx_archive_name ON Archive_Singers(Name(80));
</pre>
= How to find out the service name of the app=
'''This is the service that starts the app, this will list all running services'''
<pre>
# "What services exist on this box?"
systemctl list-unit-files --type=service --state=enabled

# "Which one is MY app?"
sudo grep -l "/var/www/html/<dirname>" /etc/systemd/system/*.service

# "Which service owns port X?"
sudo lsof -i :3000 -P -n # gets PID
ps -o unit= -p <PID> # gets service name
</pre>

PYTHONAPP

2026-04-21T20:25:32Z

Bacchas: /* Test App Manually */

=Karaoke app Deployment=
== Prerequisite Check ==
# ssh into the server
# verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot
# if certbot isn't installed
sudo apt update
sudo apt install certbot python3-certbot-apache -y

# Install Python venv if needed:
sudo apt install python3-venv python3-pip -y

== Create the App Directory ==
sudo mkdir -p /var/www/html/myapp
cd /var/www/html/myapp

== Upload App Files ==
# Upload the .env file (hidden, so it won't be picked up by scp -r)
'''If you don't see .env in Finder, press Cmd+Shift+. to toggle hidden files.'''

== Set up the Python Environment ==

cd /var/www/html/myapp
python3 -m venv venv
source venv/bin/activate
pip install flask pymysql cryptography gunicorn DBUtils
deactivate

'''The cryptography package is required for MySQL caching_sha2_password auth.'''

== Configure the Database ==
'''Open phpMyAdmin in your browser. Make sure the user in your .env file has privileges on the dbasename database. If not, in phpMyAdmin run:'''

GRANT ALL PRIVILEGES ON dbasename.* TO 'YourUser'@'localhost';
FLUSH PRIVILEGES;
'''Verify your .env file on the server has the correct values:'''

cat /var/www/html/myapp/.env

''' It should contain '''
DB_HOST=localhost
DB_USER=YourUser
DB_PASS=YourPassword
DB_NAME=dbasename
SECRET_KEY=some-random-string
HOST_NAME= name for the host side
PORT=3001
'''Important: Use a different port from any other apps you have running. I'm using 3001 here — pick whatever's free.'''

==Test App Manually==
cd /var/www/html/myapp
source venv/bin/activate
python3 app.py

'''You should see "Karaoke app running on http://localhost:3001". In another SSH window test'''
sudo nano /etc/systemd/system/myapp.service

== Create the systemd Service ==
'''Paste '''
[Unit]
Description=My App mydir (Gunicorn)
After=network.target

[Service]
User=www-data
Group=www-data
WorkingDirectory=/var/www/html/myapp
Environment="PATH=/var/www/html/myapp/venv/bin"
ExecStart=/var/www/html/myapp/venv/bin/gunicorn --workers 3 --bind 127.0.0.1:3001 app:app
Restart=always

[Install]
WantedBy=multi-user.target

'''Save (Ctrl+O, Enter, Ctrl+X).'''

'''Set permissions:'''
sudo chown -R www-data:www-data /var/www/html/myapp

'''Enable and start '''
sudo systemctl daemon-reload
sudo systemctl enable myapp
sudo systemctl start myapp
sudo systemctl status myapp

'''You should see active (running). If not:'''
sudo journalctl -u myapp -n 50

== Configure Apache Reverse Proxy==
'''Enable required modules (only needed once on the server):'''
sudo a2enmod proxy proxy_http ssl rewrite headers

'''Create the HTTP vhost (which certbot will upgrade later):'''

sudo nano /etc/apache2/sites-available/mydomain.conf

'''Paste — replace yourdomain.com with your actual domain''
<pre>
<VirtualHost *:80>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

ErrorLog ${APACHE_LOG_DIR}/mydomain-error.log
CustomLog ${APACHE_LOG_DIR}/mydomain-access.log combined
</VirtualHost>
</pre>

'''Enable and reload'''
sudo a2ensite mydomain.conf
sudo apache2ctl configtest
sudo systemctl reload apache2

Test in your browser: http://yourdomain.com — you should see the login page.

== Enable HTTPS with Certbot==
'''Make sure your domain's DNS A record points to your server IP first.'''

'''Run certbot:'''
sudo certbot --apache -d yourdomain.com -d www.yourdomain.com

'''Choose 2 (Redirect) when asked, so HTTP automatically redirects to HTTPS.'''

'''Certbot will create /etc/apache2/sites-available/rb222-le-ssl.conf and enable it.'''
sudo apache2ctl configtest
sudo systemctl reload apache2

'''Visit https://yourdomain.com — you should see the lock icon and the app.'''

'''If certbot fails to auto-configure (it sometimes does), create the SSL vhost manually:'''

sudo nano /etc/apache2/sites-available/mydomain-le-ssl.conf

<pre>
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/yourdomain.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/yourdomain.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf

ErrorLog ${APACHE_LOG_DIR}/rb222-ssl-error.log
CustomLog ${APACHE_LOG_DIR}/rb222-ssl-access.log combined
</VirtualHost>
</IfModule>
</pre>
'''then'''
sudo a2ensite mydomain-le-ssl.conf
sudo systemctl reload apache2

'''Cert auto-renewal is already enabled by certbot's systemd timer — verify with'''
sudo systemctl list-timers | grep certbot

=Database Optimization=
<pre>
CREATE INDEX idx_songs_title ON songs(Title(100));
CREATE INDEX idx_songs_artists ON songs(Artists(100));
CREATE INDEX idx_favorite_name ON Favorite(Name(80), Tag(20));
CREATE INDEX idx_queue_status ON queue(Status(20));
CREATE INDEX idx_queue_timestamp ON queue(TimeStamp(20));
CREATE INDEX idx_archive_name ON Archive_Singers(Name(80));
</pre>

PYTHONAPP

2026-04-21T20:25:04Z

Bacchas: /* Configure the Database */

=Karaoke app Deployment=
== Prerequisite Check ==
# ssh into the server
# verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot
# if certbot isn't installed
sudo apt update
sudo apt install certbot python3-certbot-apache -y

# Install Python venv if needed:
sudo apt install python3-venv python3-pip -y

== Create the App Directory ==
sudo mkdir -p /var/www/html/myapp
cd /var/www/html/myapp

== Upload App Files ==
# Upload the .env file (hidden, so it won't be picked up by scp -r)
'''If you don't see .env in Finder, press Cmd+Shift+. to toggle hidden files.'''

== Set up the Python Environment ==

cd /var/www/html/myapp
python3 -m venv venv
source venv/bin/activate
pip install flask pymysql cryptography gunicorn DBUtils
deactivate

'''The cryptography package is required for MySQL caching_sha2_password auth.'''

== Configure the Database ==
'''Open phpMyAdmin in your browser. Make sure the user in your .env file has privileges on the dbasename database. If not, in phpMyAdmin run:'''

GRANT ALL PRIVILEGES ON dbasename.* TO 'YourUser'@'localhost';
FLUSH PRIVILEGES;
'''Verify your .env file on the server has the correct values:'''

cat /var/www/html/myapp/.env

''' It should contain '''
DB_HOST=localhost
DB_USER=YourUser
DB_PASS=YourPassword
DB_NAME=dbasename
SECRET_KEY=some-random-string
HOST_NAME= name for the host side
PORT=3001
'''Important: Use a different port from any other apps you have running. I'm using 3001 here — pick whatever's free.'''

==Test App Manually==
cd /var/www/html/myapp
source venv/bin/activate
python3 app.py

'''You should see "Karaoke app running on http://localhost:3001". In another SSH window test'''
sudo nano /etc/systemd/system/rb222.service

== Create the systemd Service ==
'''Paste '''
[Unit]
Description=My App mydir (Gunicorn)
After=network.target

[Service]
User=www-data
Group=www-data
WorkingDirectory=/var/www/html/myapp
Environment="PATH=/var/www/html/myapp/venv/bin"
ExecStart=/var/www/html/myapp/venv/bin/gunicorn --workers 3 --bind 127.0.0.1:3001 app:app
Restart=always

[Install]
WantedBy=multi-user.target

'''Save (Ctrl+O, Enter, Ctrl+X).'''

'''Set permissions:'''
sudo chown -R www-data:www-data /var/www/html/myapp

'''Enable and start '''
sudo systemctl daemon-reload
sudo systemctl enable myapp
sudo systemctl start myapp
sudo systemctl status myapp

'''You should see active (running). If not:'''
sudo journalctl -u myapp -n 50

== Configure Apache Reverse Proxy==
'''Enable required modules (only needed once on the server):'''
sudo a2enmod proxy proxy_http ssl rewrite headers

'''Create the HTTP vhost (which certbot will upgrade later):'''

sudo nano /etc/apache2/sites-available/mydomain.conf

'''Paste — replace yourdomain.com with your actual domain''
<pre>
<VirtualHost *:80>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

ErrorLog ${APACHE_LOG_DIR}/mydomain-error.log
CustomLog ${APACHE_LOG_DIR}/mydomain-access.log combined
</VirtualHost>
</pre>

'''Enable and reload'''
sudo a2ensite mydomain.conf
sudo apache2ctl configtest
sudo systemctl reload apache2

Test in your browser: http://yourdomain.com — you should see the login page.

== Enable HTTPS with Certbot==
'''Make sure your domain's DNS A record points to your server IP first.'''

'''Run certbot:'''
sudo certbot --apache -d yourdomain.com -d www.yourdomain.com

'''Choose 2 (Redirect) when asked, so HTTP automatically redirects to HTTPS.'''

'''Certbot will create /etc/apache2/sites-available/rb222-le-ssl.conf and enable it.'''
sudo apache2ctl configtest
sudo systemctl reload apache2

'''Visit https://yourdomain.com — you should see the lock icon and the app.'''

'''If certbot fails to auto-configure (it sometimes does), create the SSL vhost manually:'''

sudo nano /etc/apache2/sites-available/mydomain-le-ssl.conf

<pre>
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/yourdomain.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/yourdomain.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf

ErrorLog ${APACHE_LOG_DIR}/rb222-ssl-error.log
CustomLog ${APACHE_LOG_DIR}/rb222-ssl-access.log combined
</VirtualHost>
</IfModule>
</pre>
'''then'''
sudo a2ensite mydomain-le-ssl.conf
sudo systemctl reload apache2

'''Cert auto-renewal is already enabled by certbot's systemd timer — verify with'''
sudo systemctl list-timers | grep certbot

=Database Optimization=
<pre>
CREATE INDEX idx_songs_title ON songs(Title(100));
CREATE INDEX idx_songs_artists ON songs(Artists(100));
CREATE INDEX idx_favorite_name ON Favorite(Name(80), Tag(20));
CREATE INDEX idx_queue_status ON queue(Status(20));
CREATE INDEX idx_queue_timestamp ON queue(TimeStamp(20));
CREATE INDEX idx_archive_name ON Archive_Singers(Name(80));
</pre>

PYTHONAPP

2026-04-21T17:40:20Z

Bacchas:

=Karaoke app Deployment=
== Prerequisite Check ==
# ssh into the server
# verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot
# if certbot isn't installed
sudo apt update
sudo apt install certbot python3-certbot-apache -y

# Install Python venv if needed:
sudo apt install python3-venv python3-pip -y

== Create the App Directory ==
sudo mkdir -p /var/www/html/myapp
cd /var/www/html/myapp

== Upload App Files ==
# Upload the .env file (hidden, so it won't be picked up by scp -r)
'''If you don't see .env in Finder, press Cmd+Shift+. to toggle hidden files.'''

== Set up the Python Environment ==

cd /var/www/html/myapp
python3 -m venv venv
source venv/bin/activate
pip install flask pymysql cryptography gunicorn DBUtils
deactivate

'''The cryptography package is required for MySQL caching_sha2_password auth.'''

== Configure the Database ==
'''Open phpMyAdmin in your browser. Make sure the user in your .env file has privileges on the karaoke database. If not, in phpMyAdmin run:'''

GRANT ALL PRIVILEGES ON dbasename.* TO 'YourUser'@'localhost';
FLUSH PRIVILEGES;
'''Verify your .env file on the server has the correct values:'''

cat /var/www/html/rb222/.env

''' It should contain '''
DB_HOST=localhost
DB_USER=YourUser
DB_PASS=YourPassword
DB_NAME=dbasename
SECRET_KEY=some-random-string
HOST_NAME= name for the host side
PORT=3001
'''Important: Use a different port from any other apps you have running. I'm using 3001 here — pick whatever's free.'''

==Test App Manually==
cd /var/www/html/myapp
source venv/bin/activate
python3 app.py

'''You should see "Karaoke app running on http://localhost:3001". In another SSH window test'''
sudo nano /etc/systemd/system/rb222.service

== Create the systemd Service ==
'''Paste '''
[Unit]
Description=My App mydir (Gunicorn)
After=network.target

[Service]
User=www-data
Group=www-data
WorkingDirectory=/var/www/html/myapp
Environment="PATH=/var/www/html/myapp/venv/bin"
ExecStart=/var/www/html/myapp/venv/bin/gunicorn --workers 3 --bind 127.0.0.1:3001 app:app
Restart=always

[Install]
WantedBy=multi-user.target

'''Save (Ctrl+O, Enter, Ctrl+X).'''

'''Set permissions:'''
sudo chown -R www-data:www-data /var/www/html/myapp

'''Enable and start '''
sudo systemctl daemon-reload
sudo systemctl enable myapp
sudo systemctl start myapp
sudo systemctl status myapp

'''You should see active (running). If not:'''
sudo journalctl -u myapp -n 50

== Configure Apache Reverse Proxy==
'''Enable required modules (only needed once on the server):'''
sudo a2enmod proxy proxy_http ssl rewrite headers

'''Create the HTTP vhost (which certbot will upgrade later):'''

sudo nano /etc/apache2/sites-available/mydomain.conf

'''Paste — replace yourdomain.com with your actual domain''
<pre>
<VirtualHost *:80>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

ErrorLog ${APACHE_LOG_DIR}/mydomain-error.log
CustomLog ${APACHE_LOG_DIR}/mydomain-access.log combined
</VirtualHost>
</pre>

'''Enable and reload'''
sudo a2ensite mydomain.conf
sudo apache2ctl configtest
sudo systemctl reload apache2

Test in your browser: http://yourdomain.com — you should see the login page.

== Enable HTTPS with Certbot==
'''Make sure your domain's DNS A record points to your server IP first.'''

'''Run certbot:'''
sudo certbot --apache -d yourdomain.com -d www.yourdomain.com

'''Choose 2 (Redirect) when asked, so HTTP automatically redirects to HTTPS.'''

'''Certbot will create /etc/apache2/sites-available/rb222-le-ssl.conf and enable it.'''
sudo apache2ctl configtest
sudo systemctl reload apache2

'''Visit https://yourdomain.com — you should see the lock icon and the app.'''

'''If certbot fails to auto-configure (it sometimes does), create the SSL vhost manually:'''

sudo nano /etc/apache2/sites-available/mydomain-le-ssl.conf

<pre>
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/yourdomain.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/yourdomain.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf

ErrorLog ${APACHE_LOG_DIR}/rb222-ssl-error.log
CustomLog ${APACHE_LOG_DIR}/rb222-ssl-access.log combined
</VirtualHost>
</IfModule>
</pre>
'''then'''
sudo a2ensite mydomain-le-ssl.conf
sudo systemctl reload apache2

'''Cert auto-renewal is already enabled by certbot's systemd timer — verify with'''
sudo systemctl list-timers | grep certbot

=Database Optimization=
<pre>
CREATE INDEX idx_songs_title ON songs(Title(100));
CREATE INDEX idx_songs_artists ON songs(Artists(100));
CREATE INDEX idx_favorite_name ON Favorite(Name(80), Tag(20));
CREATE INDEX idx_queue_status ON queue(Status(20));
CREATE INDEX idx_queue_timestamp ON queue(TimeStamp(20));
CREATE INDEX idx_archive_name ON Archive_Singers(Name(80));
</pre>

PYTHONAPP

2026-04-21T17:37:50Z

Bacchas:

=Karaoke app Deployment=
== Prerequisite Check ==
# ssh into the server
# verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot
# if certbot isn't installed
sudo apt update
sudo apt install certbot python3-certbot-apache -y

# Install Python venv if needed:
sudo apt install python3-venv python3-pip -y

== Create the App Directory ==
sudo mkdir -p /var/www/html/myapp
cd /var/www/html/myapp

== Upload App Files ==
# Upload the .env file (hidden, so it won't be picked up by scp -r)
'''If you don't see .env in Finder, press Cmd+Shift+. to toggle hidden files.'''

== Set up the Python Environment ==

cd /var/www/html/myapp
python3 -m venv venv
source venv/bin/activate
pip install flask pymysql cryptography gunicorn DBUtils
deactivate

'''The cryptography package is required for MySQL caching_sha2_password auth.'''

== Configure the Database ==
'''Open phpMyAdmin in your browser. Make sure the user in your .env file has privileges on the karaoke database. If not, in phpMyAdmin run:'''

GRANT ALL PRIVILEGES ON dbasename.* TO 'YourUser'@'localhost';
FLUSH PRIVILEGES;
'''Verify your .env file on the server has the correct values:'''

cat /var/www/html/rb222/.env

''' It should contain '''
DB_HOST=localhost
DB_USER=YourUser
DB_PASS=YourPassword
DB_NAME=dbasename
SECRET_KEY=some-random-string
HOST_NAME= name for the host side
PORT=3001
'''Important: Use a different port from any other apps you have running. I'm using 3001 here — pick whatever's free.'''

==Test App Manually==
cd /var/www/html/myapp
source venv/bin/activate
python3 app.py

'''You should see "Karaoke app running on http://localhost:3001". In another SSH window test'''
sudo nano /etc/systemd/system/rb222.service

== Create the systemd Service ==
'''Paste '''
[Unit]
Description=My App mydir (Gunicorn)
After=network.target

[Service]
User=www-data
Group=www-data
WorkingDirectory=/var/www/html/myapp
Environment="PATH=/var/www/html/myapp/venv/bin"
ExecStart=/var/www/html/myapp/venv/bin/gunicorn --workers 3 --bind 127.0.0.1:3001 app:app
Restart=always

[Install]
WantedBy=multi-user.target

'''Save (Ctrl+O, Enter, Ctrl+X).'''

'''Set permissions:'''
sudo chown -R www-data:www-data /var/www/html/myapp

'''Enable and start '''
sudo systemctl daemon-reload
sudo systemctl enable myapp
sudo systemctl start myapp
sudo systemctl status myapp

'''You should see active (running). If not:'''
sudo journalctl -u myapp -n 50

== Configure Apache Reverse Proxy==
'''Enable required modules (only needed once on the server):'''
sudo a2enmod proxy proxy_http ssl rewrite headers

'''Create the HTTP vhost (which certbot will upgrade later):'''

sudo nano /etc/apache2/sites-available/mydomain.conf

'''Paste — replace yourdomain.com with your actual domain''
<pre>
<VirtualHost *:80>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

ErrorLog ${APACHE_LOG_DIR}/mydomain-error.log
CustomLog ${APACHE_LOG_DIR}/mydomain-access.log combined
</VirtualHost>
</pre>

'''Enable and reload'''
sudo a2ensite mydomain.conf
sudo apache2ctl configtest
sudo systemctl reload apache2

Test in your browser: http://yourdomain.com — you should see the login page.

== Enable HTTPS with Certbot==
'''Make sure your domain's DNS A record points to your server IP first.'''

'''Run certbot:'''
sudo certbot --apache -d yourdomain.com -d www.yourdomain.com

'''Choose 2 (Redirect) when asked, so HTTP automatically redirects to HTTPS.'''

'''Certbot will create /etc/apache2/sites-available/rb222-le-ssl.conf and enable it.'''
sudo apache2ctl configtest
sudo systemctl reload apache2

'''Visit https://yourdomain.com — you should see the lock icon and the app.'''

'''If certbot fails to auto-configure (it sometimes does), create the SSL vhost manually:'''

sudo nano /etc/apache2/sites-available/mydomain-le-ssl.conf

<pre>
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName yourdomain.com
ServerAlias www.yourdomain.com

ProxyPreserveHost On
ProxyPass / http://127.0.0.1:3001/
ProxyPassReverse / http://127.0.0.1:3001/

SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/yourdomain.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/yourdomain.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf

ErrorLog ${APACHE_LOG_DIR}/rb222-ssl-error.log
CustomLog ${APACHE_LOG_DIR}/rb222-ssl-access.log combined
</VirtualHost>
</IfModule>
</pre>
'''then'''
sudo a2ensite mydomain-le-ssl.conf
sudo systemctl reload apache2

'''Cert auto-renewal is already enabled by certbot's systemd timer — verify with'''
sudo systemctl list-timers | grep certbot

PYTHONAPP

2026-04-21T17:30:26Z

Bacchas:

PYTHONAPP

2026-04-21T17:22:02Z

Bacchas:

PYTHONAPP

2026-04-21T17:19:38Z

Bacchas:

PYTHONAPP

2026-04-21T17:15:49Z

Bacchas:

PYTHONAPP

2026-04-21T17:08:24Z

Bacchas:

PYTHONAPP

2026-04-21T17:06:41Z

Bacchas:

PYTHONAPP

2026-04-21T17:06:15Z

Bacchas:

=Karaoke app Deployment=
== 1 Prerequisite Check ==
# ssh into the server
# verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot
# if certbot isn't installed
sudo apt update
sudo apt install certbot python3-certbot-apache -y

# Install Python venv if needed:
sudo apt install python3-venv python3-pip -y

== 2 Create the App Directory ==
sudo mkdir -p /var/www/html/myapp
cd /var/www/html/myapp

pip install flask pymysql cryptography gunicorn DBUtils

PYTHONAPP

2026-04-21T17:02:55Z

Bacchas:

PYTHONAPP

2026-04-21T17:02:42Z

Bacchas:

==Karaoke app Deployment==
== 1 Prerequisite Check ==
# ssh into the server
# verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot
# if certbot isn't installed
sudo apt update
sudo apt install certbot python3-certbot-apache -y

pip install flask pymysql cryptography gunicorn DBUtils

PYTHONAPP

2026-04-21T17:01:15Z

Bacchas:

==Karaoke app Deployment==

# ssh into the server
# verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot

pip install flask pymysql cryptography gunicorn DBUtils

PYTHONAPP

2026-04-21T17:00:58Z

Bacchas:

==Karaoke app Deployment==

* ssh into the server
* verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot

pip install flask pymysql cryptography gunicorn DBUtils

PYTHONAPP

2026-04-21T17:00:45Z

Bacchas:

==Karaoke app Deployment==

1. ssh into the server
2. verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot

pip install flask pymysql cryptography gunicorn DBUtils

PYTHONAPP

2026-04-21T17:00:36Z

Bacchas:

==Karaoke app Deployment==

1. ssh into the server'
2. verify what is installed
apache2 -v
python3 --version
mysql --version
which certbot

pip install flask pymysql cryptography gunicorn DBUtils