AWS Lightsail Deployment

server {
    listen 80;
    server_name your-domain.com www.your-domain.com;
    
    # Redirect HTTP to HTTPS
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name your-domain.com www.your-domain.com;
    
    # SSL Configuration
    ssl_certificate /etc/letsencrypt/live/your-domain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/your-domain.com/privkey.pem;
    ssl_protocols TLSv1.2 TLSv1.3;
    
    # Application Proxy
    location / {
        proxy_pass http://127.0.0.1:8000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    
    # Static Files
    location /static/ {
        alias /var/www/swansea-harriers/static/;
        expires 30d;
        add_header Cache-Control "public, no-transform";
    }
}

[Unit]
Description=Swansea Harriers Rankings Platform
After=network.target

[Service]
User=www-data
Group=www-data
WorkingDirectory=/var/www/swansea-harriers
Environment="PATH=/var/www/swansea-harriers/venv/bin"
ExecStart=/var/www/swansea-harriers/venv/bin/gunicorn --workers 3 --bind 127.0.0.1:8000 wsgi:app
Restart=always

[Install]
WantedBy=multi-user.target

import multiprocessing

# Server socket
bind = "127.0.0.1:8000"
backlog = 2048

# Worker processes
workers = multiprocessing.cpu_count() * 2 + 1
worker_class = 'sync'
worker_connections = 1000
timeout = 30
keepalive = 2

# Logging
accesslog = '/var/log/swansea-harriers/access.log'
errorlog = '/var/log/swansea-harriers/error.log'
loglevel = 'info'

# Process naming
proc_name = 'swansea-harriers'

# Server mechanics
daemon = False
pidfile = '/var/run/swansea-harriers.pid'
user = 'www-data'
group = 'www-data'
tmp_upload_dir = None