Deploying Sentry

# Connect to your server
ssh root@YOUR_SERVER_IP

# Update system packages
apt update && apt upgrade -y

# Set timezone
timedatectl set-timezone UTC

# Configure hostname
hostnamectl set-hostname sentry

# Install essential packages
apt install -y curl wget git vim ufw fail2ban htop

# Enable UFW
ufw default deny incoming
ufw default allow outgoing

# Allow SSH
ufw allow 22/tcp

# Allow HTTP and HTTPS
ufw allow 80/tcp
ufw allow 443/tcp

# Enable firewall
ufw enable

# Verify status
ufw status verbose

# Create sentry user
adduser --disabled-password --gecos "" sentry

# Add to docker group (after Docker installation)
usermod -aG docker sentry

# Switch to sentry user for remaining setup
su - sentry

# Remove old versions
sudo apt remove docker docker-engine docker.io containerd runc 2>/dev/null

# Install prerequisites
sudo apt install -y ca-certificates curl gnupg lsb-release

# Add Docker's official GPG key
sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg \
  | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
sudo chmod a+r /etc/apt/keyrings/docker.gpg

# Add Docker repository
echo "deb [arch=$(dpkg --print-architecture) \
  signed-by=/etc/apt/keyrings/docker.gpg] \
  https://download.docker.com/linux/ubuntu \
  $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

# Install Docker
sudo apt update
sudo apt install -y docker-ce docker-ce-cli containerd.io \
  docker-buildx-plugin docker-compose-plugin

# Verify installation
docker --version
docker compose version

# Create Docker daemon configuration
sudo tee /etc/docker/daemon.json > /dev/null <<EOF
{
  "log-driver": "json-file",
  "log-opts": {
    "max-size": "100m",
    "max-file": "3"
  },
  "storage-driver": "overlay2"
}
EOF

# Restart Docker to apply changes
sudo systemctl restart docker

# Enable Docker to start on boot
sudo systemctl enable docker

# Switch to sentry user if not already
su - sentry

# Clone the repository
git clone https://github.com/getsentry/self-hosted.git sentry
cd sentry

# Checkout the latest stable release
git fetch --tags
LATEST_TAG=$(git describe --tags `git rev-list --tags --max-count=1`)
git checkout $LATEST_TAG
echo "Installing Sentry version: $LATEST_TAG"

# Copy environment template
cp .env.example .env

# Edit environment file
vim .env

# Primary configuration
SENTRY_BIND=9000
SENTRY_SECRET_KEY= # Will be generated automatically

# Mail configuration (example with SMTP)
SENTRY_MAIL_HOST=smtp.your-provider.com
SENTRY_MAIL_PORT=587
SENTRY_MAIL_USERNAME=your-email@domain.com
SENTRY_MAIL_PASSWORD=your-app-password
SENTRY_MAIL_USE_TLS=true
SENTRY_SERVER_EMAIL=sentry@yourdomain.com

# Data retention (in days)
SENTRY_EVENT_RETENTION_DAYS=90

system.url-prefix: 'https://sentry.yourdomain.com'
system.admin-email: 'admin@yourdomain.com'

# Enable features
features.organizations:discover-basic: true
features.organizations:discover-query: true
features.organizations:performance-view: true

# Run the installer
./install.sh

# Start Sentry in detached mode
docker compose up -d

# Verify all containers are running
docker compose ps

# View logs (optional)
docker compose logs -f

# Exit sentry user to root
exit

# Install Nginx
apt install -y nginx

# Start and enable Nginx
systemctl start nginx
systemctl enable nginx

server {
    listen 80;
    server_name sentry.yourdomain.com;

    location / {
        proxy_pass http://127.0.0.1:9000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # WebSocket support
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

        # Timeouts
        proxy_connect_timeout 300;
        proxy_send_timeout 300;
        proxy_read_timeout 300;

        # File upload size
        client_max_body_size 100M;
    }
}

# Enable the site
ln -sf /etc/nginx/sites-available/sentry /etc/nginx/sites-enabled/
rm -f /etc/nginx/sites-enabled/default

# Test and reload
nginx -t && systemctl reload nginx

# Install Certbot
apt install -y certbot python3-certbot-nginx

# Obtain SSL certificate
certbot --nginx -d sentry.yourdomain.com \
  --non-interactive --agree-tos \
  --email admin@yourdomain.com

# Verify auto-renewal
certbot renew --dry-run

# Email configuration
mail.backend = 'smtp'
mail.host = 'smtp.your-provider.com'
mail.port = 587
mail.username = 'your-email@domain.com'
mail.password = 'your-app-password'
mail.use-tls = True
mail.use-ssl = False
mail.from = 'sentry@yourdomain.com'
mail.list-namespace = 'sentry.yourdomain.com'

services:
  web:
    deploy:
      resources:
        limits:
          memory: 2G
        reservations:
          memory: 1G

  worker:
    deploy:
      resources:
        limits:
          memory: 2G
        reservations:
          memory: 1G

  postgres:
    command: postgres -c max_connections=200
    deploy:
      resources:
        limits:
          memory: 2G

  redis:
    deploy:
      resources:
        limits:
          memory: 512M

# Restart with new configuration
docker compose down
docker compose up -d

npm install @sentry/node

// Initialize in your app
const Sentry = require("@sentry/node");

Sentry.init({
  dsn: "https://YOUR_KEY@sentry.yourdomain.com/PROJECT_ID",
  environment: "production",
  tracesSampleRate: 1.0,
});

pip install sentry-sdk

# Initialize in your app
import sentry_sdk

sentry_sdk.init(
    dsn="https://YOUR_KEY@sentry.yourdomain.com/PROJECT_ID",
    environment="production",
    traces_sample_rate=1.0,
)

composer require sentry/sentry

// Initialize in your app
\Sentry\init([
    'dsn' => 'https://YOUR_KEY@sentry.yourdomain.com/PROJECT_ID',
    'environment' => 'production',
    'traces_sample_rate' => 1.0,
]);

#!/bin/bash
# /home/sentry/backup-sentry.sh
set -e

BACKUP_DIR="/home/sentry/backups"
DATE=$(date +%Y%m%d_%H%M%S)
mkdir -p $BACKUP_DIR

cd /home/sentry/sentry

# Backup PostgreSQL
docker compose exec -T postgres pg_dump -U postgres sentry | \
  gzip > $BACKUP_DIR/sentry_postgres_$DATE.sql.gz

# Backup volumes
tar -czf $BACKUP_DIR/sentry_volumes_$DATE.tar.gz \
  -C /var/lib/docker/volumes .

# Keep only last 7 days of backups
find $BACKUP_DIR -name "sentry_*" -mtime +7 -delete

echo "Backup completed: $DATE"

chmod +x /home/sentry/backup-sentry.sh

# Add to crontab (daily at 3 AM)
(crontab -l 2>/dev/null; echo "0 3 * * * /home/sentry/backup-sentry.sh") | crontab -

# Navigate to Sentry directory
cd /home/sentry/sentry

# Pull latest changes
git fetch --tags
LATEST_TAG=$(git describe --tags `git rev-list --tags --max-count=1`)

# Check current version
CURRENT_TAG=$(git describe --tags)
echo "Current: $CURRENT_TAG, Latest: $LATEST_TAG"

# Update if new version available
if [ "$CURRENT_TAG" != "$LATEST_TAG" ]; then
  # Stop services
  docker compose down

  # Checkout new version
  git checkout $LATEST_TAG

  # Run installer (handles migrations)
  ./install.sh --skip-user-creation

  # Start services
  docker compose up -d
fi

# Clean up old events (run periodically)
cd /home/sentry/sentry
docker compose exec web sentry cleanup --days=90

# Remove unused Docker resources
docker system prune -af --volumes

# Check disk usage
df -h
du -sh /var/lib/docker/volumes/*