Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/tkwonn/portfolio
Backend Project #2
https://github.com/tkwonn/portfolio
static-website vm web-server
Last synced: 12 days ago
JSON representation
Backend Project #2
- Host: GitHub
- URL: https://github.com/tkwonn/portfolio
- Owner: tkwonn
- Created: 2024-05-16T23:51:54.000Z (8 months ago)
- Default Branch: main
- Last Pushed: 2024-12-28T20:44:40.000Z (18 days ago)
- Last Synced: 2024-12-28T21:24:26.167Z (18 days ago)
- Topics: static-website, vm, web-server
- Language: TypeScript
- Homepage: https://taesokkwon.com
- Size: 4.86 MB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Portfolio Website
[](https://github.com/tkwonn/portfolio/commits/)
[](https://github.com/tkwonn/portfolio/actions/workflows/deploy.yml)
## What is this
This is a personal portfolio project designed to showcase my personal background, skills, and projects.
**URL:** [taesokkwon.com](https://taesokkwon.com)
## Table of Contents
1. [Built with](#built-with)
2. [Architecture](#architecture)
3. [Server Configuration](#server-configuration)
1. [SSL/TLS Setup](#ssltls-setup)
2. [Security Headers](#security-headers)
3. [Cache Control Settings](#cache-control-settings)
4. [CI/CD](#cicd)
1. [Continuous Integration](#continuous-integration)
2. [Continuous Delivery](#continuous-deployment)
## Built with
| **Category** | **Technology** |
| ------------ | --------------------------------- |
| VM | Amazon EC2 |
| Web server | Nginx |
| Frontend | TypeScript, Next.js, Tailwind CSS |
| CI/CD | GitHub Actions |
This site is fully static by using Next.js's Static Export and does not require Node.js.
## Architecture
This website is hosted on a single AWS EC2 instance and uses Nginx as a reverse proxy to manage multiple services under different domains.
| **Server name** | **Backend Service** |
| ------------------------------------------------------------------ | ----------------------------------------------- |
| [taesokkwon.com](https://taesokkwon.com) | Static site served by Nginx |
| [plantuml.taesokkwon.com](https://plantuml.taesokkwon.com) | PHP application served by PHP-FPM (via FastCGI) |
| [text-snippet.taesokkwon.com](https://text-snippet.taesokkwon.com) | PHP application served by PHP-FPM (via FastCGI) |
## Server Configuration
#### SSL/TLS Setup
- All services are secured with SSL/TLS certificates managed through LetsEncrypt (automatic certificate renewal via Certbot's systemd timer)
#### Security Headers
| **Header** | **Description** |
| ------------------------- | ----------------------------------------------------------------------- |
| Strict-Transport-Security | Enforces secure (HTTPS) connections to the server |
| X-Content-Type-Options | Prevents MIME-type sniffing, ensuring the declared content type is used |
#### Cache Control Settings
The Cache-Control headers are configured by content type:
```nginx
map $sent_http_content_type $cache_control {
"text/html" "public, no-cache, must-revalidate";
"~image/" "public, max-age=31536000, immutable";
"~/_next/static/" "public, max-age=31536000, immutable";
default "public, no-cache";
}
```
- HTML: No caching, always serves fresh content.
- Images and static files: Cached for one year and marked as immutable.
Since Next.js generates unique filenames for each build, any changes automatically generate new filenames, ensuring updates are reflected despite the immutable setting (cache-busting).
Additionally, the following compression settings reduce transfer sizes:
```nginx
gzip on;
gzip_types text/plain text/css application/javascript application/json image/svg+xml;
```
## CI/CD
The project uses GitHub Actions to automate testing and deployment workflows with the following configurations:
### Continuous Integration
- Utilizes npm cache and Next.js cache to speed up builds
- Code quality checks using Prettier and ESLint
### Continuous Deployment
- Secure AWS Authentication using OpenID Connect (short-lived tokens)
- Minimal IAM permissions to ensure secure cloud role operations
- AWS Systems Manager (SSM) for secure remote command execution (no direct SSH access or security group changes)