Infrastructure and application setup for new clients

Welcome to the process of setting up your infrastructure and your application!

Details about infrastructure and source code management

Choose infrastructure providers

Domain registrar: AWS, Gandi, noip, dyn, Rackforest/.hu
DNS provider: AWS, HE, Cloudflare, Google, Rackforest/.hu
Server provider: UpCloud
SSL certificate provider for HTTPS: Cheapsslsecurity.com, SSLMate, DigiCert
CDN provider: AWS, KeyCDN
Transactional email provider: AWS, SparkPost
Storage provider: AWS, Backblaze B2, Selectel
Incoming ESP: G Suite, Protonmail

.hu domain regisztrátorok

Google Cloud Platform Premium Support for $150/mo

AWS certificates for internal usage only

Secure browser in an ephemeral cloud instance

Deploy Windows Server 2016 Standard instance
Finish installation on the console: set language
Log in as Administrator with RDP
Download Basilisk browser
Create UpCloud shortcut on the Desktop: basilisk.exe "https://www.upcloud.com/register/?promo=U29Q8S"
Create AWS shortcut: "https://portal.aws.amazon.com/gp/aws/developer/registration/index.html"
Download user.js to %APPDATA%\Moonchild Productions\Basilisk\Profiles\
Open On-Screen Keyboard for entering passwords
Use the browser
Delete the instance

UpCloud registration

Referral URL
Enable 2FA
My Account / Billing / MANUAL
My Account / Billing / AUTOMATED / Credit Card drop-down
Servers / Deploy a server
Servers / Server listing / (server name) / IP ADDRESSES / REVERSE DNS NAME Public IPv4 + IPv6
Document server IP + password

Amazon Web Services registration

https://aws.amazon.com/
Account type: Professional
Support Plan: Basic
Enable 2FA
Route53 / Domain + DNS
CloudFront / CDN
SES / Domain + SMTP credentials + Move Out of the Sandbox + Bounce notification
S3 / Server backup bucket
IAM / Route53 API user + CloudFront API user + S3 API user
Document credentials

Infrastructure setup

Document in hosting.yml and server.yml (Skype, Google Contacts, KeePass, link-torzs)
Gain access to providers (web based sub-account or API)
Manage migrations
PTR/IPv4, PTR/IPv6 records
DNS records (check, clean up, monitor)
Incoming ESP and bounce notification
My email address: [email protected]
Whitelisted IP-s (office)

Application setup

3rd parties (document, gain access, set up)
User names and SSH keys
Git repository, branch usage (git flow)
Issue tracker
Paid plugins, libraries (updates, gain access, support)
Application environment definition
Set up CI
Write deploy script
Notifications (email, chat, SMS)