Skip to content

Hosting Services

Matty edited this page Nov 7, 2017 · 18 revisions

This page details the config of the services hosted on AWS. AWS Console

EC2

The Elastic Compute Cloud is the Linux server where the website is hosted and managed. Manage EC2

Instance Configuration

  • Public IP (Elastic): ec2-13-210-77-161.ap-southeast-2.compute.amazonaws.com (13.210.77.161) Port 22 for SSH.
  • Private IP: ip-172-31-13-160.ap-southeast-2.compute.internal (172.31.13.160)
  • Operating System: Amazon Linux
  • Instance Type: t2.micro
  • Security Group: sgWebServer
  • Key Pair (Authentication): valuesfootprintsWeb.pem

Route53

Amazon Route53 is a Domain Name Service (DNS) application. Manage Route53. | AWS Instructions.

  • Registered Domain: valuesfootprint.com
  • Associated Elastic IP: 13.210.77.161 (The DNS redirects the domain to this IP).
  • Registration Date: 2017-10-16 (Auto Renew is enabled).

SSL

The connection to the website is encrypted using an SSL certificate provided by Let's Encrypt | Instructions (1) (2).

Because it is free, it will need to be renewed monthly (If the automatic renewal process fails).

First, try the following to renew the existing certificates:

  • cd /opt/letsencrypt
  • ./letsencrypt-auto renew

If this doesn't work, try these commands to request a complete renewal.

  • cd /opt/letsencrypt
  • ./letsencrypt-auto certonly --standalone

Make sure to use "valuesfootprint.com, www.valuesfootprint.com" for the input when LE asks for the domain for the certificate renewal

The path of the certificate keys stored on the server need to be configured with Nginx. See more info on the Website Details page.

RDS

Amazon RDS is where the database containing the survey results is created. Manage RDS

  • Public IP: valuesfootprint.czhryunktcev.ap-southeast-2.rds.amazonaws.com (Port 1433)
  • RDBMS: Microsoft SQL Server
  • Instance Type: db.t2.micro
  • Security Group: sgDbServer

IAM

IAM Users enables collaborative development of AWS services, with flexibility of what each user defined can access. Manage IAM

  • IAM users sign in here.

Groups

  • admin: This gives users access to everything except Amazon account configuration.

Users

  • SwinTeam13: Assigned to 'admin' group.

Security Groups

Security groups control what connections are open (ports) to each instance inside the group. Manage Security Groups

sgWebServer

This security group controls what ports are open for the EC2 instance.

Inbound Rule Port Open Accessible from
HTTP 80 Anywhere
HTTPS 443 Anywhere
SSH 22 This IP needs to be manually set each time from the console.

sgDbServer

This security group controls what ports are open for the RDS instance.

Inbound Rule Port Open Accessible from
MS SQL 1433 Anywhere