Yueteng yh958@cornell.edu
Root domain is: diaper.cf
Registered as a free domain (renewable every 12 months) at https://www.freenom.com/
User account login info (email, password) are the same as gmail/github/etc
Current registration expires on 2021-12-05 (Must renew at the website before expiration)
| Environment | Backend | Domain | Note |
|---|---|---|---|
| Production | On-line | on-prod.diaper.cf | This points to AWS under Cornell contract |
| Production | Off-line | off-prod.diaper.cf | (Not set up yet) This points to AWS under Cornell contract |
| Test | On-line | on-test.diaper.cf | This points to public AWS (under Tan's account) |
| Test | Off-line | off-test.diaper.cf | (Not set up yet) This points to public AWS (under Tan's account) |
Choose the domain accordingly, prepend it with http or https, and append it with port number and path.
e.g. https://online-prod.diaper.cf:5001/api/version
The free SSL cert from Let's Encrypt is used for this purpose.
Let's Encrypt: https://letsencrypt.org/
[Tutorial: Configure SSL/TLS on Amazon Linux 2 - Amazon Elastic Compute Cloud]
(https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/SSL-on-amazon-linux-2.html#letsencrypt)
On section "Certificate automation: Let’s Encrypt with Certbot on Amazon Linux 2", Use this to instal `certauto`, but not to create
Stop after done `sudo yum install -y certbot python2-certbot-apache`
[Generate Wildcard SSL certificate using Let’s Encrypt/Certbot | by Saurabh Palande | Medium]
(https://medium.com/@saurabh6790/generate-wildcard-ssl-certificate-using-lets-encrypt-certbot-273e432794d7)
Start at Step 3. Replace `./certbot-auto` with `sudo certbot`
Use this to run command to create
Note: There can be multiple domains in command, e.g. `-d yueteng.me -d *.yueteng.me`
Note: (The order is important) First deploy DNS TXT record under the prompted domain, pause for 5 minutes for it to activate, use the website below to verify it’s been activated (mind the value must be correct) then hit continue (otherwise will fail)
Note: If you include multiple domains, you will be required to enter multiple DNS TXT records
[DNS Lookup Text Record - MxToolbox](https://mxtoolbox.com/TXTLookup.aspx)
Command line to use
sudo certbot certonly --manual --preferred-challenges=dns --email diapertestemail@gmail.com --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d diaper.cf -d *.diaper.cf |