Comment by Nick Verwymeren on "How to run Typesense search in AWS"

Home
Feed

Extend

Hashnode Pro
Hashnode for Agents

Resources

The foreword
Hashnode gql skill

Buildful - AI coding agent that delivers frontier-level results at a fraction of the cost Bug0 - The AI-native e2e QA regression testing Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Search Hashnode

Search posts, tags, users, and pages

Comment by Nick Verwymeren on "How to run Typesense search in AWS" | Hashnode

Discussion

CommentHow to run Typesense search in AWS

Nick Verwymeren

Mar 24, 2023

I used cloudformation, but it look like the IP that is output does not support SSL. Can you provide some insight on how I could support SSL?

Stefan Olaru

Head of Development | Architect | 7x AWS Certified | AWS Community Builder | Serverless

Mar 25, 2023

Hi Nick, SSL on IP is tricky but you can point a sub/domain to it and install Certbot to issue a free Let's Encrypt certificate.

Stefan Olaru Thanks for the reply. I've tried that but then I run into issues with the certificate being only readable by root, but the typesense service being run by ec2-user. I get this error on startup:

"An error occurred while trying to load server certificate file: /etc/letsencrypt/live/example.com/fullchain.pem"

I've read that putting a load balancer in front of everything will allow us to install an aws issued certificate. Would you have an example of how to do that?

Nick Verwymeren

Mar 27, 2023

Stefan Olaru

Head of Development | Architect | 7x AWS Certified | AWS Community Builder | Serverless

Mar 28, 2023

Hi Nick, you could add an ALB in front of your instance, though for a single instance and just for SSL certificate it might be overkill.

Have a look at my other article about running a multi-node Typesense, it uses a Load Balancer blog.stefanolaru.com/how-to-run-highly-available-…

Another (free) option would be to install Nginx which will handle the SSL termination and proxy to Typesense. But it's very likely possible to manage this directly from Typesense ...