Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

which are in the group_vars/vault file.

Security Group

Description

Ports

Details

Admin

Management-Access

worldwide ssh access

Aspace prod and staging, port 22

The production and staging ArchivesSpace servers need this group to allow developers to ssh to them. This allows worldwide ssh access; we're using SSH keys to control access

Allows SSH access by developers to the ArchivesSpace server.

admin

Public-Access-Web

Public web access

Aspace prod and staging, ports 80 and 443

Open worldwide, to allow

Allows public web access to the production and staging ArchivesSpace servers.

admin

Temp-Production

short term production firewall rules

Aspace prod, port 8983

Used

for short-term access to the SOLR configuration on ArchivesSpace production from developers' IP addresses

to allow developers and export code to access the ASpace API.

admin

Temp-Staging

short term staging firewall rules

Aspace staging, port 8983

Used for short-term access to the SOLR configuration on ArchivesSpace production from developers' IP addresses

See Temp-Production.

admin

In addition there is a default security group that appears unused, but cannot be deleted.

...