More comfortable hardware specs, custom Chromium flags 🚩

This release marks the jump for a starving t4g.nano instance to a far loftier t4g.micro one, with a whopping entire gigabyte of memory.

It also introduces custom Chromium flags for html2pdf.

Install with:

bash <(curl -s https://raw.githubusercontent.com/ccjmne/orca-deploy/master/ec2/utils/deploy.sh)

Full Changelog: v1.8...2026-01-03

Enable IPv6, switch to Amazon Linux 2023 AMI 🕊️

This release fully embraces IPv6 networking and upgrades the OS to the most recent version of the Amazon Linux AMI.

• Document AWS VPC & Subnet configuration for IPv6
• Upgrade to the latest Amazon Linux AMI (2023)
• Favour systemd timers over cron jobs

Install with:

bash <(curl -s https://raw.githubusercontent.com/ccjmne/orca-deploy/master/ec2-ubuntu/utils/deploy.sh)

Promote `pre-revamp` to `master` 🤔

This release most primarily reflects the acceptance that it's been a while since the revamp started, yet the solution still uses its previous iteration in production.

• Demote master branch to next, promote pre-revamp to master.
• Set up Cron job for automatic renewal of Let's Encrypt SSL certificates monthly.

Install with:

bash <(curl -s https://raw.githubusercontent.com/ccjmne/orca-deploy/master/ec2-ubuntu/utils/deploy.sh)

Note that this command now points to the master branch.

Switch to using AWS Linux 2 AMI w/ ARM! 🖥️

• Switch to using the (RHEL-backed) AWS Linux 2 AMI
• Switch to a less costly ARM architecture
• Build multi-arch Docker images for Orca

This entire setup should be more affordable and future-proof—although updating to Amazon Linux 2023 or more would be welcome, not being able to install EPEL package poses problems with installing Certbot for NGINX.

Deploy with:

bash <(curl -s https://raw.githubusercontent.com/ccjmne/orca-deploy/pre-revamp/ec2-ubuntu/utils/deploy.sh)

Tighter security and automated cleaning tasks 🧹

• Perform regular cleaning tasks associated with general system maintenance (apt-get and journalctl)
• Enforce strict Access-Control-Allow-Origin CORS header on responses
• Update Tomcat to version 9.0.20-jre8 and PosgreSQL JDBC to version 42.2.9

Deploy with:
curl -s https://raw.githubusercontent.com/ccjmne/orca-deploy/master/ec2-ubuntu/utils/deploy.sh | bash

Better PDF reports, enable virtual memory ♻

Major changes:

• Dedicate 2G of disk space to virtual memory into /swapfile
• Generate PDF reports with ccjmne/docker-puppeteer-html2pdf
• Drop wkhtmltopdf entirely

QoL improvements:

• Introduce "message of the day" with update instructions
• Update Postgres JDBC to newest version (42.2.5)

Phasing out the old domain 👋

Major updates:

• Install wkhtmltopdf-0.13
• NGINX proxy Cache-Control no-cache, no-store for API, must-revalidate for static assets
• Drop support and certificates management for the obsolete formationssecurite.fr domain

QoL improvements:

• Optimise Docker container for faster re-bundling
• Docker memory limit removed, restart policy updated (unless-stopped)

Compression and versions restore 👍

• Enabled gzip compression on most transferred resources with NGINX.
• Enhanced shell scripts to specify the version tag to use when composing or running the app's Docker container.

Deploy with:
curl -s https://raw.githubusercontent.com/ccjmne/orca-deploy/master/ec2-ubuntu/utils/deploy.sh | bash

Quality of Life improvements! 👌

• Restarting components on a crash
• More expressive outputs in shell scripts
• Tailored to use as little memory as possible

Deploy with:
curl -s https://raw.githubusercontent.com/ccjmne/orca-deploy/master/ec2-ubuntu/utils/deploy.sh | bash

Fully documented deployment process! 👏

Not only is it fully documented, but it also boils down to just a single command to set up and deploy:

curl -s https://raw.githubusercontent.com/ccjmne/orca-deploy/master/ec2-ubuntu/utils/deploy.sh | bash