https://github.com/tkwonn/portfolio
Backend Project #2
https://github.com/tkwonn/portfolio
static-website vm web-server
Last synced: 13 days ago
JSON representation
Backend Project #2
- Host: GitHub
- URL: https://github.com/tkwonn/portfolio
- Owner: tkwonn
- Created: 2024-05-16T23:51:54.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2025-06-20T18:04:37.000Z (12 months ago)
- Last Synced: 2025-11-14T16:25:36.151Z (7 months ago)
- Topics: static-website, vm, web-server
- Language: TypeScript
- Homepage: https://taesokkwon.com
- Size: 16 MB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Portfolio Website
[](https://github.com/tkwonn/portfolio/commits/)
[](https://github.com/tkwonn/portfolio/actions/workflows/deploy.yml)
## Table of Contents
- [About](#-about)
- [Built with](#️-built-with)
- [Architecture](#️-architecture)
- [Server Configuration](#️-server-configuration)
- [CI/CD](#-cicd)
## 💡 About
This is a personal portfolio project designed to showcase my personal background, skills, and projects.
**URL:** [taesokkwon.com](https://taesokkwon.com)
## 🏗️ Built with
| **Category** | **Technology** |
| ------------ | --------------------------------- |
| VM | Amazon EC2 |
| Web server | Nginx |
| Frontend | TypeScript, Next.js, Tailwind CSS |
| CI/CD | GitHub Actions |
This site is fully static by using Next.js's Static Export and does not require Node.js.
## 🏛️ Architecture
This website is hosted on a single AWS EC2 instance and uses Nginx as a reverse proxy to manage multiple services under different domains.
| **Server name** | **Backend Service** | **GitHub Repository** |
| --------------------------------------------------------------------------------------------- | ----------------------------------------------- | --------------------------------------------------------------------------- |
| taesokkwon.com | Static site served by Nginx | - |
| plantuml.taesokkwon.com | PHP application served by PHP-FPM (via FastCGI) | README |
| text-snippet.taesokkwon.com | PHP application served by PHP-FPM (via FastCGI) | README |
## ⚙️ Server Configuration
#### SSL/TLS Setup
- All services are secured with SSL/TLS certificates managed through LetsEncrypt (automatic certificate renewal via Certbot's systemd timer)
#### Security Headers
| **Header** | **Description** |
| ------------------------- | ----------------------------------------------------------------------- |
| Strict-Transport-Security | Enforces secure (HTTPS) connections to the server |
| X-Content-Type-Options | Prevents MIME-type sniffing, ensuring the declared content type is used |
#### Cache Control Settings
The Cache-Control headers are configured by content type:
```nginx
map $sent_http_content_type $cache_control {
"text/html" "public, no-cache, must-revalidate";
"~image/" "public, max-age=31536000, immutable";
"~/_next/static/" "public, max-age=31536000, immutable";
default "public, no-cache";
}
```
- HTML: No caching, always serves fresh content.
- Images and static files: Cached for one year and marked as immutable.
Since Next.js generates unique filenames for each build, any changes automatically generate new filenames, ensuring updates are reflected despite the immutable setting (cache-busting).
Additionally, the following compression settings reduce transfer sizes:
```nginx
gzip on;
gzip_types text/plain text/css application/javascript application/json image/svg+xml;
```
## 🚀 CI/CD
This project uses GitHub Actions to automate testing and deployment workflows with the following configurations.
#### Continuous Integration
- Utilizes npm cache and Next.js cache to speed up builds
- Code quality checks using Prettier and ESLint
#### Continuous Deployment
- Temporary Security Group Modifications: Dynamically updates the EC2 instance’s security group to allow SSH access from the GitHub Actions runner.
- SSH Deployment: Deploys updates via an SSH connection that remotely executes commands (such as pulling the latest code, installing dependencies, building the project, and reloading Nginx) on the production server.
- Post-Deployment Cleanup: Revokes the temporary SSH access immediately after deployment to maintain security.