Simple bash script using the AWS Cli to backup EBS Volumes.

I used a free tier micro EC2 Amazon AMI to act as the backup generator.

AWS Interface

1. Create new policy with permission to create snapshots:

– Security, Identity & Compliance > IAM

– Policy > Create policy

– Create Your Own Policy

– Give a relevant name and insert the following into the Policy Document:

CloudFlare

1. SignUp for CloudFlare and follow the instruction to switch DNS to them

2. Within your CloudFlare account select Crypto

3. The first Option will be SSL

4. Select Flexible SSL

WordPress HTTPS Plugin

1. Search and install

2. Settings > Proxy: Yes

3. Save

After installing WHM on EC2 I started to setup the individual CPanel accounts with FTP accounts.

When trying to connect via FTP with a new account I got the following error with Filezilla:

‘Failed to Retrieve Directory Listing’

From carrying out some research it turns out that a range of passive ports need to be added to your Security Group. To find the passive port range used by Pure-FTP, shell into the servers and run the following:

vim /etc/pure-ftpd.conf

Search for Passive and you should see (version 60 of WHM):

PassivePortRange 49152 65534

Add this port range (49152 – 65534) to your Security Group and test with FileZilla.

* Make sure ForcePassiveIP is set to the correct external IP

**Try to lock down the passive port range to an IP range where possible

Simple guide to installing CPanel (WHM) on an Amazon EC2 instance.

Add and configure a VPC

1. Networking & Content Delivery > VPC
2. Start VPC Wizard > Select
3. Set CIDR to range of your choosing
4. Give a relevant name
5. Create VPC

Add and configure a Security Group:

1. Networking & Content Delivery > VPC > Security > Security Groups
2. Create Security Group
   1. Give relevant name, group and description
   2. Select previously created VPC
   3. Yes, Create
3. Highlight the newly created Group
   1. Inbound Rules (scroll down) > Edit
   2. Add rules for the following ports:

• 80
• 22
• 2083 – for CPanel
• 2087 – for WHM

*I would suggest setting the Source to ‘My IP’ until testing is complete

As part of a corporate network migration, DNS was top of the list.

MyDNSConfig 3.0.1 was the source and Route 53 being the preferred destination.

Step are very straightforward:

1. Login to AWS Account and navigate to Route 53
2. Create ‘Hosted Domain’ > enter domain name and a comment (good housekeeping)
3. Select ‘Import Zone File’
4. SSH to the MyDNSConfig server
5. Export a record by the following command:

mydnsexport domain.com

Which outputs the entire zone file e.g.