Search Hashnode

Search posts, tags, users, and pages

Comment by Nick Verwymeren on "How to run Typesense search in AWS" | Hashnode

Nick Verwymeren

Mar 24, 2023

I used cloudformation, but it look like the IP that is output does not support SSL. Can you provide some insight on how I could support SSL?

Stefan Olaru

Head of Development | Architect | 7x AWS Certified | AWS Community Builder | Serverless

Mar 25, 2023

Hi Nick, SSL on IP is tricky but you can point a sub/domain to it and install Certbot to issue a free Let's Encrypt certificate.

Nick Verwymeren

Mar 27, 2023

Stefan Olaru Thanks for the reply. I've tried that but then I run into issues with the certificate being only readable by root, but the typesense service being run by ec2-user. I get this error on startup:

"An error occurred while trying to load server certificate file: /etc/letsencrypt/live/example.com/fullchain.pem"

I've read that putting a load balancer in front of everything will allow us to install an aws issued certificate. Would you have an example of how to do that?

Stefan Olaru

Head of Development | Architect | 7x AWS Certified | AWS Community Builder | Serverless

Mar 28, 2023

Hi Nick, you could add an ALB in front of your instance, though for a single instance and just for SSL certificate it might be overkill.

Have a look at my other article about running a multi-node Typesense, it uses a Load Balancer blog.stefanolaru.com/how-to-run-highly-available-…

Another (free) option would be to install Nginx which will handle the SSL termination and proxy to Typesense. But it's very likely possible to manage this directly from Typesense ...