Post

Yup! 1. Go Pulumi code controlling AWS resources 2. EC2 AutoScaling Groups + docker-ce behind ALBs 3. Dedicated VPC for each service+env 4. WireGuard VPNs for remote access + Tailscale now! 5. Imgproxy for resizing images + CloudFront We're using the "immutable servers" approach. Any questions?

I'm not entirely sure how you manage data stores such as people's posts and likes and makes them consistent. Btw good and decently making-sense approach of using ASG + Docker CE :D Tailscale sounds good too! Also What about caching on the staging web app?

Yup, I like it boring/reliable 👍️ webapp not yet fronted by a CDN, just a tiny custom Go net/http server running on 3 ASG instances behind an ALB. All user data, except images (which are imgproxy+S3+CloudFront), is stored in a single multi-AZ RDS Postgres instance.