Editing AWS Elastic Beanstalk (section)

== Configuration ==

=== Web application configuration files ===

==== AWS eb cli configuration ====

Configuration is stored in `.elasticbeanstalk/config.yml`. 

This file should ''not'' be included in git repo.

The Elastic Beanstalk (EBS) application and environment names are specified in this yaml file. This is determines these properties for the AWS `eb cli`.

By default, `eb deploy` will upload all files in the git repo. 

==== Server configuration ====

`.config` files in `.ebextensions/` contain server configuration directives. <ref>[https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/ebextensions.html Advanced environment customization with configuration files (.ebextensions)] - AWS documentation</ref>

Files are processed in alphabetical order.

The directives in the files are processed on the server. The config files are uploaded to a staging directory, e.g. `/var/app/staging/` where they are executed. They are not moved to the web root directory with the rest of the web app files. 

==== Uploading a distribution outside of git ====

To upload another installation, e.g. wiki files, specify a zip archive to upload to the server in `.elasticbeanstalk/config.yml`:

<syntaxhighlight lang="yaml">
deploy:
    artifact: name_of_archive.zip
</syntaxhighlight>

`eb deploy` will look in the project root for the zip file. 

If it is necessary to upload `.ebextensions` config files, these files must be added to the root of the zipped distribution.

=== Security rules ===

'''AWS Console''' > '''EC2''' > ''instances'' > ''instance linked to EBS environment'' > ''details'' > ''click on '''security group''''' > '''inbound rules''' tab

Open up the SSH port (22) to specific public IP of the local development LAN. e.g. `XX.XX.XX.XX/32` where `XX.XX.XX.XX` is the IPv4 public address.

Open up the HTTPS port (443) to all IP addresses, e.g. `0.0.0.0/0` and `::/0`

<div class="alert alert-info">Note that this configuration can be placed in an `.ebextensions` config file. See [[Elastic_Beanstalk_Security_Certificates#Open_HTTPS_port_.28443.29|Open the HTTPS port for Let's Encrypt certificates]].</div>

=== Web app environment variables ===

Any variables needed by the app can be stored here. E.g. `LETSENCRYPT_DOMAIN` for the purposes of installing a security certificate, or RDS connection properties.

* '''AWS Management Console''' > '''Elastic Beanstalk''' > ''web app environment'' > '''Configuration''' > '''Software''' Group > '''Edit'''
* Scroll down to '''Environment Properties''' at the bottom
* Enter key/value pairs as needed

<p class="alert alert-info">These key/value pairs can be created in an `.ebextensions` config file, but should be created manually if they contain sensitive information.</p>