pango-xdemo

README

Xdemo

Linux

install postgresql server

sudo apt update
sudo apt install postgresql postgresql-contrib libpq-dev

sudo cp /etc/postgresql/14/main/postgresql.conf /tmp/
sudo sed -i -e "s/#listen_addresses.*/listen_addresses = '*'/" /etc/postgresql/14/main/postgresql.conf

sudo cp /etc/postgresql/14/main/pg_hba.conf /tmp/
sudo sed -i -e 's,127.0.0.1/32,0.0.0.0/0,' -e 's,::1/128,::/0,' /etc/postgresql/14/main/pg_hba.conf

sudo systemctl enable postgresql
sudo systemctl start  postgresql

change password to 'xxxx'

sudo -u postgres psql
psql> \password
psql> \q

create postgresql database

CREATE USER xdemo PASSWORD 'xdemo';
CREATE DATABASE xdemo WITH OWNER=xdemo ENCODING='UTF-8';
GRANT ALL ON DATABASE xdemo TO xdemo;

install mariadb server

sudo apt update
sudo apt install postgresql postgresql-contrib libpq-dev

sudo nano /etc/mysql/mariadb.conf.d/50-server.cnf

[mysqld]
sql_mode = 'PIPES_AS_CONCAT'
bind-addresses = 0.0.0.0

sudo systemctl enable  mariadb
sudo systemctl restart mariadb

create mariadb database

CREATE USER 'xdemo'@'%' IDENTIFIED BY 'xdemo';
CREATE DATABASE xdemo CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
GRANT ALL PRIVILEGES ON *.* TO 'xdemo'@'%';

install golang (1.24)

wget https://go.dev/dl/go1.24.0.linux-amd64.tar.gz
tar -xzvf go1.24.0.linux-amd64.tar.gz
sudo mv go /opt/
sudo ln -s /opt/go/bin/go /usr/bin/go

build

./build.sh

deploy

export LOG_SLACK_WEBHOOK=https://hooks.slack.com/services/...

./deploy.sh

install as system service

@see https://www.freedesktop.org/software/systemd/man/latest/systemd.unit.html

sudo useradd xdemo

echo '
[Unit]
Description = slack alert for %I
After = network.target

[Service]
Type = oneshot
Environment = WEBHOOK=https://hooks.slack.com/services/...
ExecStart = /usr/bin/curl -X POST -H "Content-Type: application/json" -d '"'"'{"icon_emoji": ":boom:", "text": "[%H] %i failure alert"}'"'"' $WEBHOOK
User = nobody
Group = systemd-journal
' | sudo tee /etc/systemd/system/slack-alert@.service

echo '
[Unit]
Description = Pango Xdemo
After = syslog.target network.target local-fs.target
OnFailure = slack-alert@%n.service

[Service]
Type = simple
WorkingDirectory = /app/xdemo
ExecStart = /app/xdemo/xdemo
ExecReload = /bin/kill -HUP $MAINPID
Restart = on-failure
User = xdemo
Group = xdemo

[Install]
WantedBy = multi-user.target
' | sudo tee /usr/lib/systemd/system/xdemo.service

sudo systemctl daemon-reload
sudo systemctl enable xdemo
sudo systemctl start xdemo

test slack notify

sudo systemctl start slack-alert@xdemo.service.service

bind privileged port (optional)

sudo setcap 'cap_net_bind_service=+ep' /app/xdemo/xdemo

Windows

install golang (1.24)

download https://go.dev/dl/go1.24.0.windows-amd64.zip and extract it.

get goversioninfo

go get github.com/josephspurrier/goversioninfo/cmd/goversioninfo

build

build.bat

deploy

SET LOG_SLACK_WEBHOOK=https://hooks.slack.com/services/...

deploy.bat

init database

cd /app/xdemo
./xdemo schema init

install as windows service

Run As Administrator

xdemo.exe install

apache proxy setting

Virtual Host

<VirtualHost *:80 *:443>
	ServerName xdemo.local

	<If "%{HTTPS} == 'on'">
		RequestHeader set X-Forwarded-Proto "https"
		RequestHeader set X-Forwarded-Port  "443"
	</If>

	DocumentRoot /app/xdemo/web
	<Directory /app/xdemo/web>
		AllowOverride All
		Options FollowSymLinks Indexes
		Require all granted
	</Directory>

	AllowEncodedSlashes NoDecode

	ProxyTimeout      300
	ProxyRequests     Off
	ProxyPreserveHost On

	ProxyPass         /  http://localhost:6060/  nocanon retry=0 connectiontimeout=5
	ProxyPassReverse  /  http://localhost:6060/
</VirtualHost>

Directory

[server]
prefix = /xdemo

	Alias /xdemo /app/xdemo/web
	<Directory /app/xdemo/web>
		AllowOverride All
		Options FollowSymLinks Indexes
		Require all granted
	</Directory>

	ProxyTimeout      300
	ProxyRequests     Off
	ProxyPreserveHost On

	ProxyPass         /xdemo   http://localhost:6060/xdemo  nocanon retry=0 connectiontimeout=5
	ProxyPassReverse  /xdemo   http://localhost:6060/xdemo

nginx proxy setting

upstream xdemo {
	server    127.0.0.1:6060;
	keepalive 600;
}

server {
	listen       80;
	listen       443 ssl;
	server_name  xdemo.local;

	charset utf-8;

	client_max_body_size 0;

	location / {
		proxy_pass              http://xdemo;
		proxy_http_version      1.1;
		proxy_set_header        X-Real-IP $remote_addr;
		proxy_set_header        X-Forwarded-Proto $scheme;
		proxy_set_header        X-Forwarded-Port  $server_port;
		proxy_set_header        X-Forwarded-For   $proxy_add_x_forwarded_for;
		proxy_set_header        Host $http_host;
		proxy_request_buffering off;
		proxy_buffering         off;
		proxy_connect_timeout   5s;
		proxy_send_timeout      60s;
		proxy_read_timeout      600s;
	}
}

SSL

openssl genrsa -out xdemo.key 2048
openssl req -new -x509 -sha256 -key xdemo.key -out xdemo.cer -days 3650

openssl req -x509 -newkey rsa:2048 -keyout xdemo.key -out xdemo.cer -days 3650 -nodes -subj "/CN=*.xdemo.local"

OpenSearch

DELETE xdemo_applog

PUT xdemo_applog
{
	"mappings": {
		"properties": {
			"time": {
				"type": "date",
				"format": "date_time"
			}
		}
	}
}

GET xdemo_applog

GET xdemo_applog/_search
{
	"query": {
		"match_all": {}
	}
}

POST xdemo_applog/_delete_by_query
{
	"query": {
		"match_all": {}
	}
}

DELETE xdemo_access

PUT xdemo_access
{
	"mappings": {
		"properties": {
			"time": {
				"type": "date",
				"format": "date_time"
			}
		}
	}
}

GET xdemo_access

GET xdemo_access/_search
{
	"query": {
		"match_all": {}
	}
}

POST xdemo_access/_delete_by_query
{
	"query": {
		"match_all": {}
	}
}