Stack Summary

This stack comprises:

• Core Framework: The project uses Spring Framework to provide a foundation for dependency injection, component management, and service configuration across modules.
• Security: Spring Security manages authentication and authorization, complemented by Bouncy Castle for cryptographic operations.
• Data Access: A combination of Hibernate, JPA, and PostgreSQL supports robust ORM-based data persistence, with JDBC facilitating additional database connectivity needs.
• Transaction Management: The project uses Narayana as the transaction manager implementation, integrated with Spring’s JpaTransactionManager for distributed transaction support and ensuring transactional integrity.
• Data Auditing: Javers provides auditing and historical versioning, allowing for tracking and comparing changes to data over time.
• Business Rules Engine: Drools is integrated into the CIA project to enable a robust business rules engine.
• Messaging: ActiveMQ Artemis and Spring JMS enable asynchronous communication between application components, supporting distributed and event-driven designs.
• Web/UI Layer: Vaadin powers the UI with a server-driven architecture, providing components like Vaadin Themes and Sass Compiler for a rich, interactive frontend experience directly in Java.
• Monitoring: JavaMelody and AWS SDK for CloudWatch provide real-time application monitoring and logging capabilities, supporting both local and cloud environments.
• Testing: JUnit, Mockito, Spring Test, and Selenium WebDriver are used extensively for unit, integration, system, browser, and mock testing to ensure application reliability and robustness.
• Utilities: Apache Commons, Google Guava, SLF4J, and Logback offer utility functions and structured logging, enhancing application maintainability and monitoring.
• Build & Dependency Management: Maven handles project builds, dependency management, and plugin configurations, enabling smooth project management and modular builds.

AWS Stack Summary

• Networking and Security: Amazon VPC creates an isolated network environment with NAT Gateway, NACLs, and VPC Flow Logs. VPC Endpoints provide private access to AWS services (e.g., S3, EC2, SSM), AWS WAF protects against web attacks, AWS IAM secures access control, and AWS KMS encrypts data at rest.

• Domain and SSL Management: Amazon Route 53 handles DNS and domain registration, while AWS Certificate Manager (ACM) provides SSL/TLS certificates for HTTPS security.

• Compute Layer: Amazon EC2 instances host the application, providing flexible and scalable compute resources.

• Load Balancing: The Application Load Balancer (ALB) distributes HTTP/HTTPS traffic across EC2 instances, optimizing for high availability and resilience.

• Data Storage: Amazon RDS offers a resilient PostgreSQL setup with multi-AZ deployment and custom parameter groups. Amazon S3 securely stores artifacts and logs, with lifecycle policies and KMS-managed encryption keys for compliance.

• Secrets Management: AWS Secrets Manager securely stores and rotates credentials, such as database passwords, with automated Lambda support for rotation.

• Monitoring and Alarms: Amazon CloudWatch monitors infrastructure health through metrics, logs, and alarms, enabling proactive management.

• Resilience and Disaster Recovery: AWS Resilience Hub assesses and recommends enhancements to improve the system's resilience, providing disaster recovery and fault-tolerant strategies.

• Automation and Maintenance: AWS Systems Manager (SSM) automates inventory, patching, and other maintenance tasks, increasing operational efficiency.

Launching the CloudFormation Stack

To launch the CloudFormation stack, follow these steps:

1. Log in to your AWS Management Console.

2. Navigate to the CloudFormation service.

3. Click on Create stack.

4. In the Select Template section, choose Upload a template file and upload the cia-dist-cloudformation.json file.

5. Click Next.

6. Fill out the Stack name and any required parameters. The parameters are described in the CloudFormation stack file. Adjust them according to your requirements.

7. Click Next to configure stack options. You can add tags or configure advanced options as needed.

8. Click Next to review your stack settings. Make sure everything is set up as desired.

9. In the Capabilities section, check the boxes for the following options:

   • I acknowledge that AWS CloudFormation might create IAM resources.
   • I acknowledge that AWS CloudFormation might create IAM resources with custom names.

10. Click Create stack to start the stack creation process. AWS CloudFormation will create the required resources and deploy the CIA project.

11. Once the stack creation process is complete, you can access the application by navigating to the output URL provided in the CloudFormation stack Outputs tab.

Prerequisites

1. Install OpenJDK and PostgreSQL:

   sudo apt-get install openjdk-21-jdk postgresql-16
   

2. Install PostgreSQL on Ubuntu:

   sudo apt-get install postgresql-16 postgresql-contrib postgresql-16-pgaudit
   

Database Setup

1. Create an empty database:

   Below instructions set the default username/password and database name used for development. We recommend using custom credentials and updating the configuration at /opt/cia/webapps/cia/WEB-INF/database.properties to define your own username/password and database name.

   sudo su - postgres
   psql
   

   CREATE USER eris WITH password 'discord';
   CREATE DATABASE cia_dev;
   GRANT ALL PRIVILEGES ON DATABASE cia_dev to eris;
   

PostgreSQL Configuration

1. Enable prepared transactions and required extensions:

   Edit /etc/postgresql/16/main/postgresql.conf and set:

   max_prepared_transactions = 100
   shared_preload_libraries = 'pg_stat_statements, pgaudit, pgcrypto'
   pgaudit.log = ddl
   pg_stat_statements.track = all
   pg_stat_statements.max = 10000
   

2. Modify PostgreSQL settings:

   Edit /etc/postgresql/16/main/pg_hba.conf and add the following line:

   host all all ::1/128 md5
   

3. Restart PostgreSQL:

   service postgresql restart
   

Install CIA Debian Package

1. Download the CIA Debian package:

   wget https://github.com/Hack23/cia/releases/download/2024.11.23/cia-dist-deb-2024.11.23.all.deb
   

2. Install the Debian package:

   sudo dpkg -i cia-dist-deb-2024.11.23.all.deb
   

Access the Server

1. Access the server at https://localhost:28443/cia/.