FastAPI Project Todo List

• Build APIs
• Build Server service
• Using Nginx like proxy
• Setup SSL
• Setup Firewall
• Testing
• Automated CI/CD

Create new ubuntu service

• cd /etc/systemd/system/
• nano fastapi.service

[Unit]
Description=demo fastapi application
After=network.target

[Service]
User=thanh
Group=thanh
WorkingDirectory=/home/thanh/app/src/
Environment="PATH=/home/thanh/app/venv/bin"
EnvironmentFile=/home/thanh/.env
ExecStart=/home/thanh/app/venv/bin/gunicorn -w 4 -k uvicorn.workers.UvicornWorker app.main:app --bind 0.0.0.0:8000

[Install]
WantedBy=multi-user.target

• systemctl start fastapi
• systemctl status fastapi
• sudo systemctl enable fastapi # Enable service

Install Nginx

• sudo apt install nginx -y

• systemctl start nginx

• cd /etc/nginx/sites-available

• sudo vi default

  server {
  listen 80 default_server;
  listen [::]:80 default_server;
  
      server_name _; # replace with specific domain name like sanjeev.com
  
      location / {
          proxy_pass http://localhost:8000;
          proxy_http_version 1.1;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection 'upgrade';
          proxy_set_header Host $http_host;
          proxy_set_header X-NginX-Proxy true;
          proxy_redirect off;
      }
  
  }
  

• systemctl restart nginx

Setup SSL using CertBot

Tutorial: Setup Certbot for nginx in ubuntu

• sudo snap install --classic certbot
• sudo certbot --nginx

Check change in nginx: cat /etc/nginx/sites-available/default

Setup Firewall

• sudo ufw status # Check status of firewall
• sudo ufw allow <port/http/https/ssl/...> # Set port to open
• sudo ufw enable
• sudo ufw delete allow <port/http/https/ssl/...>

Testing

• pytest --disable-warnings -v -s -x

Automated CI/CD

_{Make changes to code -> Commit changes
-> (Continous Integration) -> Pull Source Code -> Install Dependencies -> Run Automated Tests -> Build Images
-> (Continous Delivery) -> Grab images/code -> Update Production}