Overview This blog posts shows how the CloudFlare firewall can increase website security and reduce server resources required to run a WordPress website. Introduction I’ve recently set up a new web server for PTS, an AWS t3a.nano – a virtual server with 0.5GB of RAM and 5% of a processor…
EC2 AMD Epyc vs Xeon Introduction The reservation for the t2.nano that powers this and a number of other websites finished this week. Of course I wanted to try the new t3 series EC2 instances which are meant to be both cheaper and faster than t2, and I was curious…
Servers on the internet are under constant attack, usually from automated scripts trying to make use of your resources. WordPress installations are doubly attacked, because they’re often out of date and are relatively easy to take over. This article describes how to use fail2ban and Cloudflare to protect your Amazon…
Amazon has introduced the Amazon Time Sync Service that is accessible within your VPC by default. It’s a highly accurate time server accessible via NTP. Here’s how to configure ntpd to use the new AWS time service.
OpenSSH certificates are used to authenticate you against your server, so you can log in to administer your server. It’s a good idea to rotate OpenSSH certificates occasionally, in case they’ve someone been released or compromised. This isn’t something AWS can do for you, so you have to do it manually.…
I’m happy to announce that this week I qualified as an AWS Certified Solutions Architect – Professional Level. This is significant qualification that validates that my knowledge and skills with the AWS platform meet their high professional standards. I offer independent AWS Consulting Services (prices here). Please contact us if we can help with your project.
I run all my websites on a tiny Amazon EC2 t2.nano instance, which has 512MB of RAM. This runs Nginx, MySQL, PHP, Monit, and other bits and pieces. The instance is easily powerful enough for most tasks, especially given I use a the CloudFlare Content Distribution Network (CDN). The instance…
Moving WordPress Between AWS Regions – EC2 and RDS In previous articles, I’ve described how to set up WordPress in AWS using EC2 and RDS. In this article I’ll describe the steps I took to move the server between regions and get it working again – in my case from…
Backing Up EC2 To Dropbox Introduction In this tutorial we’ll be setting up a backup databases from EC2 to Dropbox. You can use it to backup anything you like – logs, your entire webroot, anything really. AWS is reliable, but an offsite backup is best practice – AWS doesn’t make this easy.…
Today I wanted to sftp into the webroot for my server (/var/www) but because of the way the permissions are set up the default ec2-user doesn’t have permission to do this. That directory tree is owned by the user “fred”, which otherwise doesn’t get used. I decided to allow ssh…