Setup AWS Lightsail

[deobald]

AWS Lightsail will be our production environment. We will deploy to Lightsail when we are ready to beta test with Pariyatti staff and internal (old meditator) users.

Production-Readiness

Note: these tasks have moved to https://github.com/pariyatti/kosa/issues/55

Initial Setup

• [x] @brihas to setup Pariyatti AWS Organization
• [x] @brihas give AWS permission to @deobald and @balwa to manage:
  • [x] Lightsail boxes
  • [x] Route53 (for DNS)
  • [x] CloudFront (for CDN)

create TerraForm scripts

• [x] fix 500 errors
  • [x] fix logging (see #kosa on discord)
  • [x] resolve error for fresh kosa install
• [x] TerraForm a $20 box so we don't run out of memory :)
• [x] delegate to Ansible for deployment:
  • [x] run provision.yml
  • [x] run deploy.yml
  • [x] run seeds.yml (but only once)
  • [x] Ansible should update all Ubuntu packages on deploy
  • [x] Caddyfile should be conditional by environment to avoid certificate errors
• [x] documentation
  • [x] add "install terraform" to readme
  • [x] add "getting default secret key" to readme
  • [x] add terraform state file to vault? (currently only in S3) or just explain in readme?
• [x] request AWS Support to bump Lightsail instances from 2 to 20

Secrets

• [x] figure out how to use .kdbx (if possible) within scripts ... or pull scripted secrets into Vault