Elastic cache

-------------------------------------------------------------- Elastic-cache -------------------------------------------



--------------------------- Network creation -------------------------


[ec2-user@ip-172-31-44-174 ~]$ docker network create ip-net
200e2365b6fbf0f542944018971dac7ccc42ce9355e10419fdea5bfa94d37aac


------------------------ Container creation ------------------


[ec2-user@ip-172-31-41-59 ssl]$ docker container run \
--name ip-api1 \
--network ip-net \
--restart always \
-d \
-e REDIS_PORT="6379" \
-e REDIS_HOST="flask-redis-cache-001.djxwsl.0001.aps1.cache.amazonaws.com" \
-e APP_PORT="8080" \
-e API_KEY="48c444472b0840848c261f62abe32b0d" \
> fujikomalan/ipgeolocation-api-service
ec0498898e6a70968661cf46cbdd17da45753c9e271260b967daa9f0fd1d9f24
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$ docker container run --name ip-api2 --network ip-net --restart always -d -e REDIS_PORT="6379" -e REDIS_HOST="flask-redis-cache-001.djxwsl.0001.aps1.cache.amazonaws.com" -e APP_PORT="8080" -e API_KEY="48c444472b0840848c261f62abe32b0d" fujikomalan/ipgeolocation-api-service
39356e2e7e5c246d0e071bf0672f52bc454f2e8ed172062f79ca987e45c8831b
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$ docker container run --name ip-api3 --network ip-net --restart always -d -e REDIS_PORT="6379" -e REDIS_HOST="flask-redis-cache-001.djxwsl.0001.aps1.cache.amazonaws.com" -e APP_PORT="8080" -e API_KEY="48c444472b0840848c261f62abe32b0d" fujikomalan/ipgeolocation-api-service
dc2923f90400b9806059e0579e8cf40e119802469a2ddd1fa17c8e0f9f67b415
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$ docker container run \
--name nginx \
--restart always \
-p 80:80 -p 443:443 \
-d \
-v $(pwd)/default.conf:/etc/nginx/conf.d/default.conf \
nginx:latest
396ad7aaab743823d09db787ee008815246b16cdcde14d594551b4a95d1bc54a
[ec2-user@ip-172-31-41-59 ssl]$ docker container rm -f nginx
nginx
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$ docker container run --name nginx --network ip-net --restart always -p 80:80 -p 443:443 -d -v $(pwd)/default.conf:/etc/nginx/conf.d/default.conf nginx:latest
36b920f61572106988e20def1dda604ae77aed759cd35b97cfcf09f890efa8a8
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$
[ec2-user@ip-172-31-41-59 ssl]$ vim default.conf
[ec2-user@ip-172-31-41-59 ssl]$ docker container ls -a
CONTAINER ID   IMAGE                                   COMMAND                  CREATED              STATUS              PORTS
                                        NAMES
36b920f61572   nginx:latest                            "/docker-entrypoint.…"   25 seconds ago       Up 24 seconds       0.0.0.0:80->80/tcp, :::80->80/tcp, 0.0.0.0:443->443/tcp, :::443->443/tcp   nginx
dc2923f90400   fujikomalan/ipgeolocation-api-service   "python3 app.py"         About a minute ago   Up About a minute   8080/tcp
                                        ip-api3
39356e2e7e5c   fujikomalan/ipgeolocation-api-service   "python3 app.py"         About a minute ago   Up About a minute   8080/tcp
                                        ip-api2
ec0498898e6a   fujikomalan/ipgeolocation-api-service   "python3 app.py"         About a minute ago   Up About a minute   8080/tcp
                                        ip-api1



-------------- SSL install -------------------

[ec2-user@ip-172-31-41-59 ssl]$ docker container exec -it nginx bash
root@36b920f61572:/#
root@36b920f61572:/#
root@36b920f61572:/#
root@36b920f61572:/# apt install certbot python3-certbot-nginx
root@36b920f61572:/#
root@36b920f61572:/#
root@36b920f61572:/# certbot --nginx
[ec2-user@ip-172-31-41-59 ssl]$ cat default.conf
server {
    server_name  custom.chrisich.fun;

location / {
        proxy_pass http://flaskapps;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }


    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/custom.chrisich.fun/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/custom.chrisich.fun/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

upstream flaskapps{
        server ip-api1:8080;
        server ip-api2:8080;
        server ip-api3:8080;

}
server {
    if ($host = custom.chrisich.fun) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen       80;
    listen  [::]:80;
    server_name  custom.chrisich.fun;
    return 404; # managed by Certbot





---------------Redis-cli keys ------------------

[ec2-user@ip-172-31-44-174 flask]$ redis6-cli -h flask-redis-cache.djxwsl.ng.0001.aps1.cache.amazonaws.com -p 6379
flask-redis-cache.djxwsl.ng.0001.aps1.cache.amazonaws.com:6379>
flask-redis-cache.djxwsl.ng.0001.aps1.cache.amazonaws.com:6379>

flask-redis-cache.djxwsl.ng.0001.aps1.cache.amazonaws.com:6379> KEYS *
1) "5.5.5.5"
2) "9.9.9.9"
3) "8.8.8.8"
flask-redis-cache.djxwsl.ng.0001.aps1.cache.amazonaws.com:6379>
flask-redis-cache.djxwsl.ng.0001.aps1.cache.amazonaws.com:6379>
flask-redis-cache.djxwsl.ng.0001.aps1.cache.amazonaws.com:6379> DEL 8.8.8.8
(integer) 1
flask-redis-cache.djxwsl.ng.0001.aps1.cache.amazonaws.com:6379>
flask-redis-cache.djxwsl.ng.0001.aps1.cache.amazonaws.com:6379>
flask-redis-cache.djxwsl.ng.0001.aps1.cache.amazonaws.com:6379> KEYS *
1) "5.5.5.5"
2) "9.9.9.9"