Integrate AWS with Strapi

Deploy Secure, Reliable, & Scalable Websites, Apps or Processes with Free Cloud Computing.

These integration guides are not official documentation and the Strapi Support Team will not provide assistance with them.

This is a step-by-step guide for deploying a Strapi project to Amazon AWS EC2 inside your AWS VPC. This guide will connect to an Amazon AWS RDS for managing and hosting the database. Optionally, this guide will show you how to connect host and serve images on Amazon AWS S3.

Prerequisites

You have created a Strapi project to use for deploying on AWS.
You have read through the Strapi deployment configuration section.

Amazon AWS Install Requirements and creating an IAM non-root user

You must have an Amazon AWS account before doing these steps.

Best practices for using AWS Amazon services state to not use your root account user and to use instead the IAM (AWS Identity and Access Management) service. Your root user is therefore only used for a very few select tasks. For example, for billing, you create an Administrator user and Group for such things. And other, more routine tasks are done with a regular IAM User.

1. Follow these instructions for creating your Administrator IAM Admin User and Group

Login as root.
Create Administrator role.

2. Next, create a regular user for the creation and management of your Strapi project

Copy your IAM Users sign-in link found here: IAM Console and then log out of your root user and log in to your administrator user you just created.
Return to the IAM Console by searching for IAM and clicking or going here: IAM Console.
Click on Users, in the left hand menu, and then click Add User:
1. In the Set user details screen:
  - Provide a User name.
  - Access Type: Check both Programmatic access and AWS Management Console access.
  - Autogenerate a password or click Custom password and provide one.
  - OPTIONAL: For simplicity, uncheck the Require password reset.
  - Click Next: Permissions.
2. In the Set Permissions screen, do the following:
  - Click Create group, name it, e.g. Developers, and then choose appropriate policies under Policy Name:
    - search for ec2 and check AmazonEC2FullAccess
    - search for RDS and check AmazonRDSFullAccess
    - search for s3 and check AmazonS3FullAccess
    - search for vpc and check AmazonVPCFullAccess
  - Click Create group
  - Click to Add user to group and check the Developers group, to add the new user.
  - Click Next: Tags.
3. Add tags (optional)
  - This step is optional and based on your workflow and project scope.
  - Click Next: Review.
4. Review
  - Review the information and ensure it is correct. Use Previous to correct anything.
  - Click Create user.
5. Success - These are very IMPORTANT CREDENTIALS If you do not do these steps you will have to reset your Access key ID and Secret access key later.
  - Download the .csv file and store it in a safe place. This contains the user name, login link, Access key ID and Secret access key.
  - OPTIONAL: Add these credentials to your *Password manager**.
  - Click on the AWS Management Console Access sign-in link. This will log you out of Administrator.

3. `Log into` your AWS Management Console as your `regular user`

You may now proceed to the next steps.

Additional IAM User Resources

Create your AWS VPC

A VPC is an isolated portion of the AWS Cloud populated by AWS objects, such as Amazon EC2 instances. A VPC is logically isolated from other virtual networks in the AWS Cloud. You can launch your AWS resources, such as Amazon EC2 instances, into your VPC. You can specify an IP address range for the VPC, add subnets, associate security groups, and configure route tables.

1. From your AWS Management Console and as your regular user

Find Services, search for VPC and click on EC2, Isolated Cloud Resources
2. Select Appropriate Region
In the top menu, near your IAM Account User name, select, from the dropdown, the most appropriate region to host your Strapi project. For example, US East (N.Virginia) or Asia Pacific (Hong Kong). You will want to remember this region for configuring other services on AWS and serving these services from the same region.
3. Click on the orange Create VPC button
Select VPC and More
Select Auto-generate nametags. Add a suitable name, e.g. strapi-vpc.
Leave IPv4 CIDR block as 10.0.0.0/16 (unless you have a specific reason to change it).
Leave Tenancy as Default.
Select 2 for Number of Availability Zones (AZs)
Select 2 for Number of Public Subnets
Select 2 for Number of Private Subnets
Select 0 for NAT gateways.

Tips

If you know that you will need to scale your project, you can increase the number of subnets and NAT gateways. For example, if you are expecting a large number of users, you may want to increase the number of private subnets and NAT gateways. For more information, see VPC and Subnet Sizing.

Select S3 Gateway for VPC Endpoints.
Check Enable DNS hostnames and Enable DNS resolution.
Select Create VPC.

Launch an EC2 virtual machine

Amazon calls a virtual private server, a virtual server or Amazon EC2 instance. To use this service you will Launch Instance. In this section, you will establish IAM credentials, launch a new instance and set-up primary security rules.

1. From your AWS Management Console and as your regular user

Find Services, search for ec2 and click on EC2, Virtual Servers in the Cloud

2. Select Appropriate Region

In the top menu, near your IAM Account User name, select, from the dropdown, the most appropriate region to host your Strapi project. For example, US East (N.Virginia) or Asia Pacific (Hong Kong). You will want to remember this region for configuring other services on AWS and serving these services from the same region.

3. Click on the orange `Launch Instance` button

Select Ubuntu Server 22.04 LTS (HVM), SSD Volume Type
Ensure General purpose + t2.small is checked.

Tips

t2.small is the smallest instance type in which Strapi runs. t2.nano and t2.micro DO NOT work. At the moment, deploying the Strapi Admin interface requires more than 1g of RAM. Therefore, t2.small or larger instance is needed.
Make sure you are creating the instance in the correct VPC. You should choose a public subnet otherwise you will not be able to access the instance.

Click the grey Next: Configure Instance Details and Next: Add Storage
In the Step 4: Add Storage verify the General Purpose SSD (gp2), then click Next: Add tags.
In the Step 5: Add Tags, add tags to suit your project or leave blank, then click Next: Configure Security Group.
In the Step 6: Configure Security Group, configure the security settings as follows:
- Assign a security group: Check as Create a new security group
- Security group name: Name it, e.g. strapi
- Description: Write a short description, e.g. strapi instance security settings
- You should have a rule: Type: SSH, Protocol: TCP, Port Range 22, Source: 0.0.0.0/0 (all IP addresses). If not, add it.
- Click the grey Add rule to add each of these rules:
  - Type: SSH, Protocol: TCP, Port Range 22, Source: ::/0
  - Type: HTTP, Protocol: TCP, Port Range 80, Source: 0.0.0.0/0, ::/0
  - Type: HTTPS, Protocol: TCP, Port Range 443, Source: 0.0.0.0/0, ::/0
  - Type: Custom TCP Rule, Protocol: TCP, Port Range 1337, Source: 0.0.0.0/0 Description: Strapi for Testing Port These rules are basic configuration and security rules. You may want to tighten and limit these rules based on your own project and organizational policies.

Tip

After setting up your Nginx rules and domain name with the proper aliases, you will need to delete the rule regarding port 1337 as this is for testing and setting up the project - not for production.

Click the blue Review and Launch button.
Review the details, in the Step 7: Review Instance Launch, then click the blue Launch button. Now, you need to select an existing key pair or create a new key pair. To create a new key pair, do the following:
- Select the dropdown option Create a new key pair.
- Name your the key pair name, e.g. ec2-strapi-key-pair

Caution

Download the private key file (.pem file). This file is needed, so note where it was downloaded.

After downloading the file, click the blue Launch Instances button.

Your instance is now running. Continue to the next steps.

Install a PostgreSQL database on AWS RDS

Amazon calls their database hosting services RDS. Multiple database options exist and are available. In this guide, PostgreSQL is used as the example, and the steps are similar for each of the other database that are supported by Strapi. (MySQL, PostgreSQL, MariaDB, SQLite). You will set-up an RDS instance to host your postgresql database.

Tip

Amazon RDS does NOT have a completely free evaluation tier. After finishing this guide, if you are only testing, please remember to delete the database. Otherwise, you will incur charges.

1. Navigate to the `AWS RDS Service`

In the top menu, click on Services and do a search for rds, click on RDS, Managed Relational Database Service.

2. Select your region

In the top menu bar, select the region that is the same as the EC2 instance, e.g. EU (Paris) or US East (N. Virgina).

3. Create the database

Click the orange Create database button. Follow these steps to complete installation of a PostgreSQL database:

Engine Options: Click on PostgreSQL, version PostgreSQL 10.x-R1
Templates: Click on Free Tier.
Settings
- DB instance identifier Give a name to your database, e.g. strapi-database
- Credential Settings: This is your psql database username and password.
  - Master username: Keep as postgres, or change (optional)
  - Uncheck Auto generate a password, and then type in a new secret password.
Connectivity
- Connect to an EC2 compute instance Click on the Instace dropdown, and select the EC2 instance you created earlier.
OPTIONAL: Review any further options (DB Instance size, Storage, Connectivity), and modify to your project needs.
You need to give you Database a name. Under Additional configuration:
- Additional configuration, and then Initial database name: Give your database a name, e.g. strapi.
Review the rest of the options and click the orange, Create database button.

After a few minutes, you may refresh your page and see that your database has been successfully created.

Configure S3 for image hosting

Amazon calls cloud storage services S3. You create a bucket, which holds the files, images, folders, etc... which then can be accessed and served by your application. This guide will show you how to use Amazon S3 to host the images for your project.

1. Navigate to the `Amazon S3`

In the top menu, click on Services and do a search for s3, click on Scalable storage in the cloud.

2. Create the bucket

Click on the blue Create bucket button:

Give your bucket a unique name, under Bucket name, e.g. my-project-name-images.
Select the most appropriate region, under Region, e.g. EU (Paris) or US East (N. Virgina).
Click Next.
Configure any appropriate options for your project in the Configure Options page, and click next.
Under Block public access:
- Uncheck Block all public access and set the permissions as follows:
  - Uncheck Block new public ACLs and uploading public objects (Recommended)
  - Uncheck Block public access to buckets and objects granted through any access control lists (ACLs)
  - Check Block public access to buckets and objects granted through new public bucket policies
  - Check Block public and cross-account access to buckets and objects through any public bucket policies
- Select Do not grant Amazon S3 Log Delivery group write access to this bucket.
Click Next.
Review and click Create bucket.

Configure EC2 as a Node.js server

You will set-up your EC2 server as a Node.js server. Including basic configuration and Git.

You will need your EC2 ip address:

In the AWS Console, navigate to the AWS EC2. In the top menu, click on Services and do a search for ec2, click on Virtual Servers in the cloud.
Click on 1 Running Instance and note the IPv4 Public OP address. E.g. 1.2.3.4.

1. Setup the `.pem` file

You downloaded, in a previous step, your User .pem file. e.g. ec2-strapi-key-pair.pem. This needs to be included in each attempt to SSH into your EC2 server. Move your .pem file to ~/.ssh/, follow these steps:
On your local machine, navigate to the folder that contains your .pem file. e.g. downloads
Move the .pem file to ~/.ssh/ and set file permissions: Path:./path-to/.pem-file/

mv ec2-strapi-key-pair.pem ~/.ssh/
chmod 400 ~/.ssh/ec2-strapi-key-pair.pem

2. Log in to your server as the default `ubuntu` user:

Tip In the future, each time you log into your EC2 server, you will need to add the path to the .pem file and add the IP address for your EC2 instance at the end, e.g. ssh -i ~/.ssh/ec2-strapi-key-pair.pem ubuntu@1.2.3.4.

ssh -i ~/.ssh/ec2-strapi-key-pair.pem ubuntu@1.2.3.4

Welcome to Ubuntu 22.04.2 LTS (GNU/Linux 4.15.0-1032-aws x86_64)

...

To run a command as administrator (user "root"), use "sudo <command>".
See "man sudo_root" for details.

ubuntu@ip-1.2.3.4:~$

3. Install Node.js with npm:

The following steps will install Node.js (example using Node 20) onto your EC2 server.

cd ~
sudo apt-get update
...
sudo apt-get install -y ca-certificates curl gnupg
...
sudo mkdir -p /etc/apt/keyrings
curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | sudo gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
NODE_MAJOR=20
sudo apt-get update
...
sudo apt-get install nodejs -y
...
node -v && npm -v

The last command node -v && npm -v should output two versions numbers, eg. v20.x.x, 6.x.x.

4. Create and change npm's default directory.

The following steps are based on how to resolve access permissions from npmjs.com:

Create a .npm-global directory and set the path to this directory for node_modules

cd ~
mkdir ~/.npm-global
npm config set prefix '~/.npm-global'

Create (or modify) a ~/.profile file:

sudo nano ~/.profile

Add these lines at the bottom of the ~/.profile file.

1# set PATH so global node modules install without permission issues
2export PATH=~/.npm-global/bin:$PATH

Lastly, update your system variables:

source ~/.profile

You are now ready to continue to the next section.

Install and Configure Git versioning on your server

A convenient way to maintain your Strapi application and update it during and after initial development is to use Git. In order to use Git, you will need to have it installed on your EC2 instance. EC2 instances should have Git installed by default, so you will first check if it is installed and if it is not installed, you will need to install it.

The next step is to configure Git on your server.

1. Check to see if `Git` is installed

If you see a git version 2.x.x then you do have Git installed. Check with the following command:

git --version

2. OPTIONAL: Install Git.

Tip

Only do if not installed, as above. Please follow these directions on how to install Git on Ubuntu 22.04.

3. Configure the global username and email settings: Setting up Git - Your Identity

After installing and configuring Git on your EC2 instance. Please continue to the next step.

Prepare and clone Strapi project to server

These instructions assume that you have already created a Strapi project, and have it in a GitHub repository.

You will need to update the database.json file to configure Strapi to connect to the RDS database. And you will need to install an npm package called pg locally on your development server.

Tip

The pg package install is only necessary if you are using PostgresSQL as your database. Make sure to uninstall the sqlite3 package if you changed your database to PostgresSQL.

1. Install `pg` in your Strapi project.

On your development machine, navigate to your Strapi project root directory: Path: ./my-project/

npm install pg

2. Edit the `./config/database.js` file.

Copy/paste the following:

1module.exports = ({ env }) => ({
2  connection: {
3    client: "postgres",
4    connection: {
5      host: env("DATABASE_HOST", "127.0.0.1"),
6      port: env.int("DATABASE_PORT", 5432),
7      database: env("DATABASE_NAME", "strapi"),
8      user: env("DATABASE_USERNAME", ""),
9      password: env("DATABASE_PASSWORD", ""),
10    },
11    useNullAsDefault: true,
12  },
13});

1export default ({ env }) => ({
2  connection: {
3    client: "postgres",
4    connection: {
5      host: env("DATABASE_HOST", "127.0.0.1"),
6      port: env.int("DATABASE_PORT", 5432),
7      database: env("DATABASE_NAME", "strapi"),
8      user: env("DATABASE_USERNAME", ""),
9      password: env("DATABASE_PASSWORD", ""),
10    },
11    useNullAsDefault: true,
12  },
13});

3. Install the Strapi AWS S3 Upload Provider:

Path: ./my-project/.

npm install @strapi/provider-upload-aws-s3

To enable and configure the provider, create or edit the file at ./config/plugins.js.

1module.exports = ({ env }) => ({
2  upload: {
3    config: {
4      provider: 'aws-s3',
5      providerOptions: {
6        s3Options: {
7          accessKeyId: env('AWS_ACCESS_KEY_ID'),
8          secretAccessKey: env('AWS_ACCESS_SECRET'),
9          region: env('AWS_REGION'),
10          params: {
11            Bucket: env('AWS_BUCKET_NAME'),
12          },
13        }
14      },
15      // These parameters could solve issues with ACL public-read access — see [this issue](https://github.com/strapi/strapi/issues/5868) for details
16      actionOptions: {
17        upload: {
18          ACL: null
19        },
20        uploadStream: {
21          ACL: null
22        },
23      }
24    },
25  }
26});

1export default ({ env }) => ({
2  upload: {
3      config: {
4          provider: 'aws-s3',
5          providerOptions: {
6              s3Options: {
7                  accessKeyId: env('AWS_ACCESS_KEY_ID'),
8                  secretAccessKey: env('AWS_ACCESS_SECRET'),
9                  region: env('AWS_REGION'),
10                  params: {
11                    Bucket: env('AWS_BUCKET_NAME'),
12                  },
13              }
14          },
15      },
16  }
17});

See the documentation about using an upload provider here.

4. Push your local changes to your project's GitHub repository

git add .
git commit -m 'Installed pg, aws-S3 upload provider and updated the config files'
git push

5. Deploy from GitHub

You will next deploy your Strapi project to your EC2 instance by cloning it from GitHub.

Tip

Cloning a GitHub repository requires a personal access token. See the GitHub documentation for how to generate and use a personal access token.

From your terminal and logged into your EC2 instance as the ubuntu user:

cd ~
git clone https://github.com/your-name/your-project-repo.git

Next, navigate to the my-project folder, the root for Strapi. You will need to run npm install to install the packages for your project. Make sure to uninstall the sqlite3 package if you changed your database to PostgresSQL.

Path: ./my-project/

cd ./my-project/
npm install
NODE_ENV=production npm run build

Next, you need to install PM2 Runtime and configure the ecosystem.config.js file

6. Install PM2 Runtime

PM2 Runtime allows you to keep your Strapi project alive and to reload it without downtime.

Ensure you are logged in as a non-root user. You will install PM2 globally:

npm install pm2@latest -g

Now, you will need to configure an ecosystem.config.js file. This file will set env variables that connect Strapi to your database. It will also be used to restart your project whenever any changes are made to files within the Strapi file system itself (such as when an update arrived from Github). You can read more about this file here.

You will need to open your nano editor and then copy/paste the following:

cd ~
pm2 init
sudo nano ecosystem.config.js

Next, replace the boilerplate content in the file, with the following:

1module.exports = {
2  apps: [
3    {
4      name: 'your-app-name', // Your project name
5      cwd: '/home/ubuntu/my-project', // Path to your project
6      script: 'npm', // For this example we're using npm, could also be yarn
7      args: 'start', // Script to start the Strapi server, `start` by default
8      env: {
9        APP_KEYS: 'your app keys', // you can find it in your project .env file.
10        API_TOKEN_SALT: 'your api token salt',
11        ADMIN_JWT_SECRET: 'your admin jwt secret',
12        JWT_SECRET: 'your jwt secret',
13        NODE_ENV: 'production',
14        DATABASE_HOST: 'your-unique-url.rds.amazonaws.com', // database Endpoint under 'Connectivity & Security' tab
15        DATABASE_PORT: '5432',
16        DATABASE_NAME: 'strapi', // DB name under 'Configuration' tab
17        DATABASE_USERNAME: 'postgres', // default username
18        DATABASE_PASSWORD: 'Password',
19        AWS_ACCESS_KEY_ID: 'aws-access-key-id',
20        AWS_ACCESS_SECRET: 'aws-access-secret', // Find it in Amazon S3 Dashboard
21        AWS_REGION: 'aws-region',
22        AWS_BUCKET_NAME: 'my-project-bucket-name',
23      },
24    },
25  ],
26};

1export default {
2  apps: [
3    {
4      name: 'your-app-name',
5      cwd: '/home/ubuntu/my-project',
6      script: 'npm',
7      args: 'start',
8      env: {
9        NODE_ENV: 'production',
10        DATABASE_HOST: 'your-unique-url.rds.amazonaws.com', // database Endpoint under 'Connectivity & Security' tab
11        DATABASE_PORT: '5432',
12        DATABASE_NAME: 'strapi', // DB name under 'Configuration' tab
13        DATABASE_USERNAME: 'postgres', // default username
14        DATABASE_PASSWORD: 'Password',
15        AWS_ACCESS_KEY_ID: 'aws-access-key-id',
16        AWS_ACCESS_SECRET: 'aws-access-secret', // Find it in Amazon S3 Dashboard
17        AWS_REGION: 'aws-region',
18        AWS_BUCKET_NAME: 'my-project-bucket-name',
19      },
20    },
21  ],
22};

You can also set your environment variables in a .env file in your project like so:

1DATABASE_HOST=your-unique-url.rds.amazonaws.com
2DATABASE_PORT=5432
3DATABASE_NAME=strapi
4DATABASE_USERNAME=postgres
5DATABASE_PASSWORD=Password
6AWS_ACCESS_KEY_ID=aws-access-key-id
7AWS_ACCESS_SECRET=aws-access-secret
8AWS_REGION=aws-region
9AWS_BUCKET_NAME=my-project-bucket-name

We recommend you continue setting the NODE_ENV variable in the ecosystem.config.js file.

Use the following command to start pm2:

cd ~
pm2 start ecosystem.config.js

Your Strapi project should now be available on http://your-ip-address:1337/. Your IP address will be the one corresponding to your Ubuntu server.

Tip

Earlier, Port 1337 was allowed access for testing and setup purposes. After setting up NGINX, the Port 1337 needs to have access denied.

7. Configure PM2 Runtime to launch project on system startup.

Follow the steps below to have your app launch on system startup.

Tip

These steps are based on the PM2 Runtime Startup Guide.

Generate and configure a startup script to launch PM2, it will generate a Startup Script to copy/paste, do so:

$ cd ~
$ pm2 startup systemd

[PM2] Init System found: systemd
[PM2] To setup the Startup Script, copy/paste the following command:
sudo env PATH=$PATH:/usr/bin /usr/lib/node_modules/pm2/bin/pm2 startup systemd -u your-name --hp /home/your-name

Copy/paste the generated command:

$ sudo env PATH=$PATH:/usr/bin /usr/lib/node_modules/pm2/bin/pm2 startup systemd -u your-name --hp /home/your-name

[PM2] Init System found: systemd
Platform systemd

. . .


[PM2] [v] Command successfully executed.
+---------------------------------------+
[PM2] Freeze a process list on reboot via:
   $ pm2 save

[PM2] Remove init script via:
   $ pm2 unstartup systemd

Next, Save the new PM2 process list and environment.

pm2 save

[PM2] Saving current process list...
[PM2] Successfully saved in /home/your-name/.pm2/dump.pm2

OPTIONAL: You can test to see if the script above works whenever your system reboots with the sudo reboot command. You will need to login again with your non-root user and then run pm2 list and systemctl status pm2-ubuntu to verify everything is working.

Create you first Administrator user

The next steps will create an Administrator user on the strapi AWS instance.

1. Locate your `IPv4 Public IP`

Login as your regular user to your EC2 Dashboard
Click on 1 Running Instances.
Below, in the Description tab, locate your IPv4 Public IP

2. Next, create your Administrator user, and login to Strapi

Go to http://your-ip-address:1337/admin
Complete the registration form.
Click Ready to Start

Set up a webhook

Providing that your project is set-up on GitHub, you will need to configure your Strapi Project Repository with a webhook. The following article provides additional information to the steps below: GitHub Creating Webhooks Guide.

You need to access the Settings tab for your Strapi Project Repository:
1. Navigate and click to Settings for your repository.
2. Click on Webhooks, then click Add Webhook.
3. The fields are filled out like this:
  - Payload URL: Enter http://your-ip-address:8080
  - Content type: Select application/json
  - Which events would you like to trigger this webhook: Select Just the push event
  - Secret: Enter YourSecret
  - Active: Select the checkbox
4. Review the fields and click Add Webhook.
Next, you need to create a Webhook Script on your server. These commands create a new file called webhook.js which will hold two variables:

cd ~
mkdir NodeWebHooks
cd NodeWebHooks
sudo nano webhook.js

In the nano editor, copy/paste the following script, but make sure to replace your_secret_key and repo with the values that correspond to your project, then save and exit.

(This script creates a variable called PM2_CMD which is used after pulling from GitHub to update your project. The script first changes to the home directory and then runs the variable PM2_CMD as pm2 restart strapi. The project uses the ecosystem.config.js as the point of starting your application.)

1var secret = 'your_secret_key'; // Your secret key from Settings in GitHub
2var repo = '~/path-to-strapi-root-folder/'; // path to the root of your Strapi project on server
3
4const http = require('http');
5const crypto = require('crypto');
6const exec = require('child_process').exec;
7
8const PM2_CMD = 'cd ~ && pm2 startOrRestart ecosystem.config.js';
9
10http
11  .createServer(function(req, res) {
12    req.on('data', function(chunk) {
13      let sig =
14        'sha1=' +
15        crypto
16          .createHmac('sha1', secret)
17          .update(chunk.toString())
18          .digest('hex');
19
20      if (req.headers['x-hub-signature'] == sig) {
21exec(`cd ${repo} && git pull && NODE_ENV=production npm run build && ${PM2_CMD}`, (error, stdout, stderr) => {
22          if (error) {
23            console.error(`exec error: ${error}`);
24            return;
25          }
26          console.log(`stdout: ${stdout}`);
27          console.log(`stderr: ${stderr}`);
28        });
29      }
30    });
31
32    res.end();
33  })
34  .listen(8080);

Allow the port to communicate with outside web traffic for port 8080:
- Within your AWS EC2 dashboard:
  - In the left hand menu, click on Security Groups,
  - Select with the checkbox, the correct Group Name, e.g. strapi,
  - At the bottom of the screen, in the Inbound tab, click Edit, and then Add Rule:
    - Type: Custom TCP
    - Protocol: TCP
    - Port Range: 8080
    - Source: Custom 0.0.0.0/0, ::/0
  - Then Save
- If the ufw firewall is enabled, configure settings to include port 8080 by running the following command:

sudo ufw allow 8080/tcp

Earlier you setup pm2 to start the services (your Strapi project) whenever the EC2 instance reboots or is started. You will now do the same for the webhook script.

Install the webhook as a Systemd service
- Run echo $PATH and copy the output for use in the next step.

cd ~
echo $PATH

/home/your-name/.npm-global/bin:/home/your-name/bin:/home/your-name/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin

Create a webhook.service file:

sudo nano /etc/systemd/system/webhook.service

In the nano editor, copy/paste the following script, but make sure to replace ubuntu in two places if you changed the default ubuntu user, and paste the $PATH from above.

Caution

Delete the #comments before saving, then save and exit.

[Unit]
Description=Github webhook
After=network.target

[Service]
Environment=PATH=/PASTE-PATH_HERE #path from echo $PATH (as above)
Type=simple
User=ubuntu #replace with your name, if changed from default ubuntu user
ExecStart=/usr/bin/node /home/ubuntu/NodeWebHooks/webhook.js #replace with your name, if changed from default ubuntu user
Restart=on-failure

[Install]
WantedBy=multi-user.target

Enable and start the new service so it starts when the system boots:

sudo systemctl enable webhook.service
sudo systemctl start webhook

Check the status of the webhook:

sudo systemctl status webhook

You may test your webhook by following the instructions here.

Further steps to take

You can add a domain name or use a subdomain name for your Strapi project, you will need to install NGINX and configure it.

Tip

After setting up NGINX, for security purposes, you need to disable port access on Port 1337. You may do this easily from your EC2 Dashboard. In Security Groups (left-hand menu), click the checkbox of the group, eg. strapi, and below in the inbound tab, click Edit, and delete the rule for Port Range : 1337 by click the x.

To install SSL, you will need to install and run Certbot by Let's Encrypt.
Set-up Nginx with HTTP/2 Support for Ubuntu 22.04.

Your Strapi project has been installed on an AWS EC2 instance using Ubuntu 22.04.

Integrate AWS with Strapi

Deploy Secure, Reliable, & Scalable Websites, Apps or Processes with Free Cloud Computing.

Prerequisites

Amazon AWS Install Requirements and creating an IAM non-root user

1. Follow these instructions for creating your Administrator IAM Admin User and Group

2. Next, create a regular user for the creation and management of your Strapi project

3. Log into your AWS Management Console as your regular user

Additional IAM User Resources

Create your AWS VPC

1. From your AWS Management Console and as your regular user

2. Select Appropriate Region

3. Click on the orange Create VPC button

Launch an EC2 virtual machine

1. From your AWS Management Console and as your regular user

2. Select Appropriate Region

3. Click on the orange Launch Instance button

Caution

Install a PostgreSQL database on AWS RDS

Tip

1. Navigate to the AWS RDS Service

2. Select your region

3. Create the database

Configure S3 for image hosting

1. Navigate to the Amazon S3

2. Create the bucket

Configure EC2 as a Node.js server

1. Setup the .pem file

2. Log in to your server as the default ubuntu user:

3. Install Node.js with npm:

4. Create and change npm's default directory.

Install and Configure Git versioning on your server

1. Check to see if Git is installed

2. OPTIONAL: Install Git.

3. Configure the global username and email settings: Setting up Git - Your Identity

Prepare and clone Strapi project to server

Tip

1. Install pg in your Strapi project.

2. Edit the ./config/database.js file.

3. Install the Strapi AWS S3 Upload Provider:

4. Push your local changes to your project's GitHub repository

5. Deploy from GitHub

Tip

6. Install PM2 Runtime

Tip

7. Configure PM2 Runtime to launch project on system startup.

Tip

Create you first Administrator user

1. Locate your IPv4 Public IP

2. Next, create your Administrator user, and login to Strapi

Set up a webhook

Further steps to take

Tip

3. `Log into` your AWS Management Console as your `regular user`

3. Click on the orange `Create VPC` button

3. Click on the orange `Launch Instance` button

1. Navigate to the `AWS RDS Service`

1. Navigate to the `Amazon S3`

1. Setup the `.pem` file

2. Log in to your server as the default `ubuntu` user:

1. Check to see if `Git` is installed

1. Install `pg` in your Strapi project.

2. Edit the `./config/database.js` file.

1. Locate your `IPv4 Public IP`