From e7c4e426af4cc1be1493d8b8d7940d4833d73c18 Mon Sep 17 00:00:00 2001
From: Bramble Xu <liangxu006@gmail.com>
Date: Thu, 14 Mar 2019 15:43:59 +0900
Subject: [PATCH] #87: implement AWS launch button

---
 README.md     |   9 +++
 awsdeploy.yml | 169 ++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 178 insertions(+)
 create mode 100644 awsdeploy.yml

diff --git a/README.md b/README.md
index bf686de3..00847f9e 100644
--- a/README.md
+++ b/README.md
@@ -49,6 +49,15 @@ heroku stack:set container
 git push heroku master
 ```
 
+### AWS
+
+Doccano can be deployed to AWS ([Cloudformation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html)) by clicking on the button below:
+
+[![AWS CloudFormation Launch Stack SVG Button](https://cdn.rawgit.com/buildkite/cloudformation-launch-stack-button-svg/master/launch-stack.svg)](https://us-east-1.console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/create/review?templateURL=https://s3-external-1.amazonaws.com/cf-templates-10vry9l3mp71r-us-east-1/20190732wl-new.templatexloywxxyimi&stackName=doccano)
+
+> Notice: (1) EC2 KeyPair cannot be created automatically, so make sure you have an existing EC2 KeyPair in one region. Or [create one yourself](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-key-pairs.html#having-ec2-create-your-key-pair). (2) If you want to access doccano via HTTPS in AWS, here is an [instruction](https://github.com/chakki-works/doccano/wiki/HTTPS-setting-for-doccano-in-AWS).
+
+
 ## Features
 
 * Collaborative annotation
diff --git a/awsdeploy.yml b/awsdeploy.yml
new file mode 100644
index 00000000..401c2fb5
--- /dev/null
+++ b/awsdeploy.yml
@@ -0,0 +1,169 @@
+AWSTemplateFormatVersion: 2010-09-09
+Description: AWS CloudFormation Template for doccano.
+Resources:
+  AppSG:
+    Type: 'AWS::EC2::SecurityGroup'
+    Properties:
+      GroupDescription: 'for the app nodes that allow ssh, http and docker ports'
+      SecurityGroupIngress:
+        - IpProtocol: tcp
+          FromPort: '80'
+          ToPort: '80'
+          CidrIp: 0.0.0.0/0
+        - IpProtocol: tcp
+          FromPort: '443'
+          ToPort: '443'
+          CidrIp: 0.0.0.0/0
+        - IpProtocol: tcp
+          FromPort: '22'
+          ToPort: '22'
+          CidrIp: 0.0.0.0/0
+    Metadata:
+      'AWS::CloudFormation::Designer':
+        id: 116a7f7b-14c5-489a-a3c8-faf276be7ab0
+  App:
+    Type: 'AWS::EC2::Instance'
+    Properties:
+      InstanceType: t2.micro
+      ImageId: ami-0ac019f4fcb7cb7e6
+      KeyName: !Ref KeyName
+      SecurityGroups:
+        - !Ref AppSG
+      UserData: !Base64 
+        'Fn::Join':
+          - ''
+          - - |
+              #!/usr/bin/env bash
+            - |
+              sudo apt update
+            - >
+              sudo apt install -y apt-transport-https ca-certificates curl
+              software-properties-common
+            - >
+              curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo
+              apt-key add -
+            - >
+              sudo add-apt-repository "deb [arch=amd64]
+              https://download.docker.com/linux/ubuntu bionic stable"
+            - |
+              sudo apt update
+            - |
+              apt-cache policy docker-ce
+            - |
+              sudo apt install -y docker-ce
+            - |
+              sudo usermod -aG docker ${USER}
+            - |
+              touch /env.list
+            - sudo tee -a /env.list <<< ADMIN=
+            - !Ref AdminUserName
+            - |+
+
+            - sudo tee -a /env.list <<< EMAIL=
+            - !Ref AdminEmail
+            - |+
+
+            - sudo tee -a /env.list <<< PASSWORD=
+            - !Ref AdminPassword
+            - |+
+
+            - sudo tee -a /env.list <<< DEBUG=
+            - !Ref Debug
+            - |+
+
+            - sudo tee -a /env.list <<< SECRET_KEY=
+            - !Ref SecretKey
+            - |+
+
+            - |
+              set -a
+            - |
+              source /env.list
+            - |
+              set +a
+            - |
+              sudo docker pull chakkiworks/doccano:latest
+            - >
+              sudo docker run -d --name doccano --env-file /env.list -p 80:80
+              chakkiworks/doccano:latest
+            - >
+              sudo docker exec doccano tools/create-admin.sh ${ADMIN} ${EMAIL}
+              ${PASSWORD}
+    Metadata:
+      'AWS::CloudFormation::Designer':
+        id: 3547c02e-5393-4b26-a9af-6f00dc2cbcdb
+Metadata:
+  'AWS::CloudFormation::Designer':
+    116a7f7b-14c5-489a-a3c8-faf276be7ab0:
+      size:
+        width: 60
+        height: 60
+      position:
+        x: 60
+        'y': 210
+      z: 1
+      embeds: []
+    3547c02e-5393-4b26-a9af-6f00dc2cbcdb:
+      size:
+        width: 60
+        height: 60
+      position:
+        x: 180
+        'y': 210
+      z: 1
+      embeds: []
+      isassociatedwith:
+        - 116a7f7b-14c5-489a-a3c8-faf276be7ab0
+Parameters:
+  InstanceType:
+    Description: Server EC2 instance type
+    Type: String
+    Default: t2.micro
+    AllowedValues:
+      - t1.micro
+      - t2.micro
+      - t2.small
+      - t2.medium
+    ConstraintDescription: must be a valid EC2 instance type.
+  KeyName:
+    Description: Name of an EC2 KeyPair to enable SSH access to the instance.
+    Type: 'AWS::EC2::KeyPair::KeyName'
+    ConstraintDescription: must be the name of an existing EC2 KeyPair.
+  AdminUserName:
+    Description: The admin account user name
+    Type: String
+    MinLength: 1
+    MaxLength: 16
+    AllowedPattern: '[a-zA-Z][a-zA-Z0-9]*'
+  AdminEmail:
+    Default: admin@gmail.com
+    Description: The admin account user email
+    Type: String
+    AllowedPattern: '^[\x20-\x45]?[\w-\+]+(\.[\w]+)*@[\w-]+(\.[\w]+)*(\.[a-z]{2,})$'
+  AdminPassword:
+    Description: The admin account password
+    Type: String
+    NoEcho: true
+    MinLength: 1
+    MaxLength: 16
+    AllowedPattern: '^[a-zA-Z0-9]*$'
+  Debug:
+    Default: 'False'
+    AllowedValues:
+      - 'False'
+      - 'True'
+    Description: Debug mode or not
+    Type: String
+    AllowedPattern: '^[a-zA-Z0-9]*$'
+  SecretKey:
+    Default: zICc59rlKXmlFRpG
+    Description: Secret key for Django
+    Type: String
+    AllowedPattern: '^[a-zA-Z0-9]*$'
+Outputs:
+  PublicDNS:
+    Value: !GetAtt 
+      - App
+      - PublicDnsName
+    Description: Newly created server DNS address
+