dap-ps
/
infra-dapps
mirror of https://github.com/dap-ps/infra-dapps.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
190 Commits 2 Branches 0 Tags 386 KiB
HCL 54.4%
Python 23.1%
JavaScript 19.4%
Makefile 1.9%
Jinja 1.2%
Go to file
Jakub Sokołowski e50f2db95b
ansible/inventory: update dev db host IP 
Signed-off-by: Jakub Sokołowski <jakub@status.im>
 		2021-03-30 10:36:55 +02:00
ansible ansible/inventory: update dev db host IP 2021-03-30 10:36:55 +02:00
files forward admin@dap.ps to jakub@status.im 2020-02-06 17:36:35 +01:00
modules aws-eb-env: drop unnecessary interpolation 2021-02-02 18:30:24 +01:00
.gitignore ignore *.tfstate.*.backup 2019-07-25 17:04:52 -04:00
Makefile upgrade to Terraform 0.13 2020-09-26 18:23:01 +02:00
README.md readme: fix links to stages 2021-01-22 11:48:32 +01:00
ansible.cfg ansible.cfg: enable ansible ssh multiplexing 2021-02-01 13:24:47 +01:00
backup.tf use terraform 0.12 formatting 2020-01-22 09:09:16 +01:00
dev.tf drop dap.ps from dev SANs, causes race condition in DNS 2021-02-02 19:04:42 +01:00
dns.tf delegate dap.ps domain management to Route53 2020-01-27 20:49:05 +01:00
mail.tf aws-eb-env: drop unnecessary interpolation 2021-02-02 18:30:24 +01:00
main.tf upgrade to Terraform 0.13 2020-09-26 18:23:01 +02:00
outputs.tf comment out smtp outputs for now 2019-08-06 09:43:57 -04:00
prod.tf upgrade to Terraform 0.13 2020-09-26 18:23:01 +02:00
secrets.tf upgrade to Terraform 0.13 2020-09-26 18:23:01 +02:00
smtp.tf add more actions to smtp sending policy 2019-08-06 09:02:10 -04:00
variables.tf upgrade to Terraform 0.13 2020-09-26 18:23:01 +02:00
versions.tf upgrade to Terraform 0.13 2020-09-26 18:23:01 +02:00

README.md

Description

This repo configures infrastructure for the https://dap.ps/ service.

The service is split into two stages:

Stage With CDN Without CDN
prod https://prod.dap.ps/ https://raw.prod.dap.ps/
dev https://dev.dap.ps/ https://raw.dev.dap.ps/

The prod environment is CNAMEed to dap.ps domain.

Technical Details

Site

The infrastructure is hosted on AWS and consists of 5 main elements:

All the AWS parts are provisioned and managed with Terraform and the MongoDB cluster configured with Ansible.

The dap.ps domain is registered via Gandi DNS provider and is managed with AWS Route53 Hosted Zone by changing the Name Servers with help from Gandi support. See dns.tf for more details.

EMail

There are no mailboxes for dap.ps domain. We forward emails using AWS Lambda and AWS SES. You can change the forwarding rules by editing the defaultConfig object in files/sesforwarder.js and adding Verified Emails in mail.tf.

Usage

Creation of both dev and prod stages is as simple as:

terraform init
terraform apply

And then configure the MongoDB hosts using ansible:

ansible-playbook ansible/dev.yml
ansible-playbook ansible/prod.yml

Known Issues

  • The ElasticBeanstalk environments can fail when being recreated
    • This is mostly due to AWS being slow at destorying resources and their race conditions
  • There is no easy way of making ElasticBeanstalk spread geographically
    • The only way seems to have multiple EB environments linked via ELB
  • CDN can be slow to pick up updates to ElasticBeanstalk application
    • Invalidating the CloudFront cache fixes the issue

TODO

  • #4 - [prod] Geographically spread hosts
  • #11 - [prod] MongoDB Web UI
  • #13 - [prod] Stress test infrastructure

Links

These helped me during work on this setup: