Install Raspberry Pi OS Lite (32-bit) with SSH enabled. With i.e. Raspi Card Imager for Android. Available in Play Store.

Edit password with passwd

Edit /etc/wpa_supplicant/wpa_supplicant.conf to enter WiFi network and password. Add the following to the end of the file:

network={
      ssid="Wifi name"
      psk="Wifi password"
}

Execute hostname -I to check assigned IP adress

Edit the hostname of the raspberry using sudo raspi-config. System options -> Hostname

Login to raspberry via SSH using ssh pi@hostname

Guide from here.

sudo apt-get remove apache2 (in case apache is installed)

sudo apt-get install nginx

Confirm by browsing to http://your-hostname/

Create /etc/nginx/sites-available/url.conf

server {
  listen 4000;
  server_name *url here, e.g. raps.hilkojj.nl*;
  location / {
    proxy_pass http://localhost:8000;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "Upgrade";
  }
}

NOTE: The Upgrade and Connection headers are to support Websockets.

sudo ln -s /etc/nginx/sites-available/url.conf /etc/nginx/sites-enabled/url.conf

Confirm with sudo nginx -t

Reload NGINX sudo systemctl reload nginx

Read logs with

sudo tail -f /var/log/nginx/access.log

or

sudo tail -f /var/log/nginx/error.log

sudo apt install letsencrypt

Confirm renewal bot is running: sudo systemctl status certbot.timer

apt install python3-certbot-nginx

sudo certbot --nginx --agree-tos --preferred-challenges http -d raps.hilkojj.nl

certbot will try to retrieve a file for confirmation from the provided url, so make sure port 80 is also port forwarded.

Now everything that is hosted locally on port 8000 will be accessible through HTTPS (port 443): https://url

Install Pip3 and other useful utilities:

sudo apt-get install python3-dev python3-pip
sudo python3 -m pip install --upgrade pip setuptools wheel

Install pipenv to keep track of installed packages for this project: pip3 install --user pipenv

Enter the environment with pipenv shell.

Use sudo -E env PATH=$PATH python boot.py to run script with sudo

Run boot.py on each reboot: sudo nano /etc/crontab.

Add @reboot pi cd /home/pi/hamsterraps/ && sudo -E env PATH=$PATH /home/pi/.local/bin/pipenv run sh ./boot.sh to end of file.

sudo is needed in order for ws2811_init() to succeed. (-5 return code otherwise).

sudo -E env PATH=$PATH explained here.