*** This version of Confluence is for testing only and contains a copy of content from June 29th 2026. No changes will be preserved. ***
...
| Environment | Backend | Domain | Note | Sample URL | |
|---|---|---|---|---|---|
| Production | On-line | on-prod.diaper.cf | This points to AWS under Cornell contract i.e. 35.168.248.57 | https://on-prod.diaper.cf:5001/api/version | |
| Test | On-line | on-test.diaper.cf | This points to public AWS (under Tan's account) i.e. 3.232.82.82 | https://on-test.diaper.cf:5001/api/version | |
| Production | Off-line | off-prod.diaper.cf | (Not set up yet) | ||
| Test | Off-line | off-test.diaper.cf | (Not set up yet) This points to public AWS (under Tan's account) i.e. 3.232.82.82 |
For API callers (i.e. frontend web/app)
...
Let's Encrypt website (no need to visit for this purpose, though): https://letsencrypt.org/
Tutorial for creating SSL cert
...
Stop after done `sudo yum install -y certbot python2-certbot-apache`
[Generate Wildcard SSL certificate using Let’s Encrypt/Certbot | by Saurabh Palande | Medium](https://medium.com/@saurabh6790/generate-wildcard-ssl-certificate-using-lets-encrypt-certbot-273e432794d7)
Start at Step 3 (skip Step 1/2). Replace `./certbot-auto` with `sudo certbot`
Use the command line below to create
Note: There can be multiple domains in command, e.g. `-d diaper.cf -d *.diaper.cf` (where * is a wildcard)
Note: (The order is important) First deploy DNS TXT record under the prompted domain (do so at website of freenom), pause for 5 minutes for it to activate, use the website below (MxToolbox) to verify it’s been activated (mind the value must be correct) then hit continue (otherwise will fail)
Note: If you include multiple domains, you will be required to enter multiple DNS TXT records
[DNS Lookup Text Record - MxToolbox](https://mxtoolbox.com/TXTLookup.aspx)
...
| Code Block |
|---|
sudo certbot certonly --manual --preferred-challenges=dns --email diapertestemail@gmail.com --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d diaper.cf -d *.diaper.cf |
Cert information
Upon success, you'll see some information similar to below
...
Note SSL cert is a separate thing to register besides domain. These two need to be renewed separately.
Copy cert files to somewhere docker can access and give permission
...