adam/file-share
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/file-share.git synced 2026-09-30 03:13:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Personal file share — Samba + FileBrowser on EC2
61 commits 1 branch 0 tags 1.4 MiB
HCL 71.4%
TypeScript 27.9%
JavaScript 0.7%
Find a file
Adam Moussa bbbdacd01c
docs(infra): drop the management rollback hold (PLAT-77) (#59) 
The old volume, cutover snapshots, and management secrets are deleted, so the docs no longer tell anyone to keep them.
2026-09-29 20:22:41 -04:00
.github/workflows docs(infra): record the prod HCP path after management decommission (PLAT-77) (#58) 2026-09-30 00:03:47 +00:00
.security-review Merge pull request #34 from Sea-Haven-Industries/dependabot/npm_and_yarn/minor-and-patch-de6c8d5989 2026-08-07 13:18:04 -04:00
bin Initial file-share stack 2026-05-14 15:23:38 -04:00
lib fix(infra): adopt existing data volume + cache AMI to stop replacement churn (#5) 2026-06-05 13:40:05 -04:00
terraform fix(infra): look up the live office VPN gateway (PLAT-77) (#57) 2026-09-29 22:49:31 +00:00
test fix(ci): enable Jest CDK stack tests 2026-08-07 12:19:12 -04:00
.gitignore feat(infra): add HCP Terraform for the prod file share (PLAT-77) (#56) 2026-09-29 22:32:39 +00:00
.npmrc chore: add .npmrc to allow all remote package installations (#50) 2026-09-16 20:50:18 -04:00
AGENTS.md docs(infra): drop the management rollback hold (PLAT-77) (#59) 2026-09-29 20:22:41 -04:00
cdk.context.json fix(infra): adopt existing data volume + cache AMI to stop replacement churn (#5) 2026-06-05 13:40:05 -04:00
cdk.json build(deps): migrate CDK app ts-node->tsx, adopt typescript 7 (INFRA-183) (#22) 2026-07-08 17:48:26 -04:00
package-lock.json chore(deps): update npm minor and patch (#53) 2026-09-28 16:05:14 +00:00
package.json chore(deps): update npm minor and patch (#53) 2026-09-28 16:05:14 +00:00
README.md docs(infra): drop the management rollback hold (PLAT-77) (#59) 2026-09-29 20:22:41 -04:00
tsconfig.json fix(ci): enable Jest CDK stack tests 2026-08-07 12:19:12 -04:00

README.md

File Share

Samba, FileBrowser, and SFTP for the Sea Haven offices. The live host is an EC2 instance in seahaven-prod, managed by HCP Terraform workspace file-share-prod.

Clients:

  • smb://10.40.20.185/files
  • http://10.40.20.185:8080
  • SFTP as user adam on port 22

The instance has no public IP. Its route table sends 10.10.0.0/16 (Ronkonkoma) and 10.30.0.0/16 (Locust) through the VPN gateway in workspace variable vpn_gateway_id, and everything else through a NAT gateway in the syslog public subnet. Ingress is TCP 445, 8080, and 22 from those two office ranges only.

Layout

Path What it is
terraform/ Live infrastructure. Subnet 10.40.20.0/24 in the syslog VPC, security group, instance role, DLM, and the instance plus volume attachment.
lib/, bin/ Retired management-account CDK stack. Do not deploy it. The stack was deleted on 2026-09-29.

The data volume is not created by Terraform. Set data_volume_id on the workspace to the existing volume id (vol-0f873de6adb59745f). Terraform attaches it at /dev/xvdf and the boot script mounts the existing filesystem at /data. A blkid guard keeps a disk that already has a filesystem from being formatted.

Apply

Workspace file-share-prod is manual apply. Auto-apply stays off until the share has soaked. user_data_replace_on_change is false, so an AMI or user-data change does not replace the instance by itself. Snapshot the data volume and confirm before any apply that would replace the instance.

The nightly DLM policy targets volumes tagged file-share-backup=true and keeps 30 snapshots.

Secrets

The instance role reads these secrets in seahaven-prod at boot. Do not put the values in Terraform:

Secret Purpose
file-share/smb-password Samba user password
file-share/filebrowser-password FileBrowser admin password

The management-account copies of those secrets were deleted on 2026-09-29, along with the old data volume and its cutover snapshots. The management deploy role githubdeploy-file-share is left in place. The CDK deploy workflow is gone so a dispatch cannot recreate the stack.

Expanding storage

Change the volume in seahaven-prod, then grow the filesystem. Terraform does not set the size.

  1. aws ec2 modify-volume --volume-id vol-0f873de6adb59745f --size <new-GiB>
  2. Wait until the modification leaves modifying.
  3. From an SSM session: sudo resize2fs /dev/nvme1n1