Zekarim/comem-archidep

Media engineering architecture & deployment course

COMEM+ Architecture & Deployment course

In this course you will learn:

• How to deploy applications on a Linux server on an IaaS platform (Amazon Web Services).
• How to deploy applications on a PaaS platform (Heroku).

In pursuit of this goal, you will learn:

• How to use the command line and version control.
• The basics of Unix system administration and cloud computing architectures.
• Good security practices related to system administration and web applications.

This course is a COMEM+ web development course taught at HEIG-VD.

• Plan
• What you will need
• Exercises
• Useful links
• References

Plan

• Introduction
  • Command line
  • Secure Shell (SSH) - (video)
• Version control
  • Version control with Git - (video)
  • Git branching - (video)
  • Collaborating with Git - (video)
• Security
  • Open Web Application Security Project
  • OWASP Top 10 - The Ten Most Critical Web Application Security Risks
    • Video: OWASP Top 10 & exercise
    • Video: PHP TodoList injection vulnerability
    • Video: PHP TodoList XSS vulnerability
• Basic deployment
  • Cloud computing - (video)
  • Linux - (video)
  • Unix basics & administration
    • Video: file system, users, permissions & administrative access
    • Video: user management & permission management
  • Unix processes
    • Video: process IDs & exit statuses
    • Video: streams, pipelines & signals
  • Unix networking
  • APT
• Advanced deployment
  • Twelve-factor app
  • Unix environment variables
  • Linux process management
  • Domain Name System (DNS)
  • Reverse proxying
  • TLS/SSL certificates
• Automated deployment
  • Shell scripting
  • Git hooks
• Platform-as-a-Service (PaaS)
  • Heroku
• Software development (extra)
  • Continuous software development
  • Automated testing

What you will need

• A Unix CLI (Git Bash is included with Git on Windows)
• Git
• A free GitHub account
• Google Chrome (recommended, any browser with developer tools will do)
• A free Heroku account
• The Heroku CLI

Exercises

• Version control
  • Collaborative exercise (graded, video 1, video 2)
  • Clone a repository from a server
  • Push a repository to a server
• Unix
  • Permissions
  • Pipeline
• Basic deployment
  • Run your own virtual server on Amazon Web Services (diagram)
  • Deploy a PHP application with SFTP (diagram)
  • Deploy a PHP application with Git (diagram)
  • Configure a PHP application through environment variables (diagram)
  • Manage a PHP application with systemd as a Process Manager (diagram)
  • Configure a domain name
• Advanced deployment
  • Deploy a static site with nginx (diagram)
  • Deploy a PHP application with nginx and the FastCGI process manager (diagram)
  • Set up an automated deployment with Git hooks (diagram)
  • Deploy a web application with a database (graded), not yet available
  • Provision a Let's Encrypt TLS certificate with Certbot
  • Extra exercises
    • Deploy the One Chat Room web application (Node.js & MongoDB)
    • Deploy the Big Browser web application (Node.js & Redis)
    • Deploy the WOPR web application (Ruby & Redis)
    • Configure nginx as a load balancer
  • End result diagram (assuming the One Chat Room application was deployed)
• Platform-as-a-Service deployment
  • Deploy a PHP web page to Heroku
  • Deploy web applications with a database to Heroku

Useful links

• Command line cheatsheet
• System administration cheatsheet
• Git cheatsheet
• Final Test Matter

References

These are the main references used throughout this course. More detailed and additional links to various online articles and documentation can be found at the end of each subject.

• The Linux Documentation Project
  • Advanced Bash-Scripting Guide
• SSH, The Secure Shell: The Definitive Guide - Daniel J. Barrett, Richard E. Silverman, Robert G. Byrnes
• The Git Book
  • Chapter 1 - Getting Started
  • Chapter 2 - Git Basics
  • Chapter 3 - Git Branching
  • Chapter 5 - Distributed Git
  • Chapter 8 - Customizing Git - Git Hooks
• Open Web Application Security Project
  • OWASP Top Ten
• Ops School Curriculum
  • Sysadmin 101
  • Unix Fundamentals 101
  • Unix Fundamentals 201
  • Networking 101
  • Networking 201
• The Internet Explained From First Principles
• The Twelve-Factor App
• Systemd Manual
  • Unit Configuration
  • Service Configuration
• nginx documentation
  • Beginner's Guide
  • Configuring HTTPS Servers
• Heroku Dev Center

Wikipedia is also often referenced, namely these and related articles:

• Secure Shell
• Cloud Computing
• Internet Protocol
  • IP Address
  • Port (Computer Networking)
• Domain Name System
• Environment Variable
• Reverse Proxy
• Public Key Certificate