brunitto / hello-django Goto Github PK

By default, log groups created by App Runner have no retention policy so they will last forever (high cost). It's a good idea to keep it by a limited amount of time, like 1 or 2 days for non-critical applications.

Add /home/guido/.local/bin to PATH within container

A recommended setup is to use both Nginx and Gunicorn in the production environment, but AWS App Runner does not support more than one container, and although possible, we chose not to run both in the same container, as it might become bloated and hard do manage.

A better option is to use CDNs and maybe a Django remote storage source, like S3.

Do not allow 0.0.0.0 traffic in database provisioning in CD workflow

https://code.visualstudio.com/docs/remote/containers#_prebuilding-dev-container-images

https://umgzi3x2be.us-east-1.awsapprunner.com/static/main/style.css

returns 404

https://docs.gunicorn.org/en/latest/deploy.html

Add a Terraform container so it's possible to test cloud resources provisioning from the development environment.

It's not a good idea to install Terraform in the Dockerfile cause it will add overhead to the production container, maybe use different Dockerfile for development and production environments.

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_lifecycle_policy

https://code.visualstudio.com/remote/advancedcontainers/add-nonroot-user