How to host 2FAuth on AWS EC2 VM Instance - ServerAvatar

The 2FAuth library allows you to implement this security measure with ease. 2FAuth is a Web application designed to manage your Two-Factor Authentication (2FA) accounts and generate their security codes. When it comes to hosting 2FAuth, AWS EC2 is preferred due to its scalable infrastructure and seamless deployment options. ServerAvatar makes the deployment of the 2FAuth application on the AWS EC2 platform an easy step-by-step process.

Create an AWS EC2 Instance

Getting Started with AWS EC2:

In the dynamic landscape of cloud computing, Amazon EC2 (Elastic Compute Cloud) stands as a cornerstone service provided by Amazon Web Services (AWS), offering a flexible and scalable solution for hosting virtual servers in the cloud. Designed to cater to a diverse range of computing needs, EC2 allows businesses and developers to deploy virtual machines quickly and securely, enabling them to run various applications and manage workloads with ease.

From startups seeking cost-effective computing power to enterprises requiring robust, scalable infrastructure, EC2 provides a vast array of instance types optimized for different use cases. These instances offer customizable configurations, including computing power, memory, storage, and networking capabilities, empowering users to tailor their virtual environments precisely to their application requirements.

Whether it's launching a single instance for a small-scale project or orchestrating a complex network of instances across multiple regions, EC2 simplifies the process with its intuitive management console and comprehensive APIs. This versatility makes it a preferred choice for businesses looking to leverage the scalability and reliability of cloud computing without the overhead of managing physical hardware.

Using AWS EC2 instances offers a multitude of benefits that cater to diverse business needs and technical requirements. Here are some key advantages:

• Scalability: EC2 enables swift adjustments to your computing capacity according to demand, offering elasticity that efficiently manages fluctuating workloads for businesses, preventing resource over-provisioning.
• Cost-Effectiveness: With EC2, you pay only for the compute capacity you use. This pay-as-you-go pricing model eliminates the need for upfront investments in hardware and allows for cost optimization by scaling resources as needed.
• Flexibility: EC2 provides a diverse range of instance types tailored for various use cases, including compute-optimized, memory-optimized, storage-optimized, and GPU instances. This versatility allows you to select the ideal instance type that best suits your specific application needs.
• Security: AWS offers a secure environment for hosting EC2 instances, incorporating features such as security groups, network access control lists (ACLs), and Virtual Private Clouds (VPCs) to manage network access effectively. Integration with other AWS services, such as AWS Identity and Access Management (IAM), further enhances security by providing detailed access control capabilities.
• Ease of Use: EC2 instances can be easily launched, managed, and configured using the AWS Management Console, Command Line Interface (CLI), or SDKs/APIs. Automation tools like AWS CloudFormation and AWS Elastic Beanstalk further simplify deployment and management tasks.
• Reliability: AWS ensures a high level of reliability for EC2 instances with SLAs that guarantee a specific level of uptime. Additionally, EC2 instances can be configured to automatically recover from failures using features like Auto Scaling and Amazon Elastic Block Store (EBS) snapshots.

Let’s Get started with Creating a Virtual Machine on AWS EC2:

To create a server in Amazon. First log in to Amazon web service. Once you are there, Follow the steps given below.

Step 1: Search for the EC2 service in the AWS search bar

• The first step is to search for EC2 services, as Amazon provides multiple web services. Then click on the EC2 with virtual servers in the cloud option which is shown in the image below.

Step 2: Launching Instances from the EC2 Dashboard

• Now you are in the EC2 Dashboard, navigate to the running instances section. After that new tab for instances will be displayed there you have to click on the Launch Instances button as shown in the images below.

Step 3: Naming and Tagging Your EC2 Instance

• The next step is to name the instance of your choice and you can also add tags to your instance which can help organize, manage, and track resources.

Step 4: Select the OS for your Instance

• After following the steps, proceed to select the operating system for your instance. Generally, the 2FAuth application requires Ubuntu 20.04 LTS or a later version for compatibility and support.
• In this case, First, click on Ubuntu and then select the Amazon Machine Image of Ubuntu Server 22.04 LTS as an operating system. In addition to this, select the architecture to 64-bit(x64/86) as shown in the image below.

Step 5: Select the Instance type

• In this step, select the size of your VM instance. AWS EC2 provides lots of different options when it comes to plans and pricing. The selection of instances completely depends on the requirements. So, select the instance based on the complexity and traffic of your sites.

Step 6: Select SSH Key pair or create one

• Here you can select the Key pair name for SSH. If you don't have any key pair stored, you can also create a new key pair by clicking on the Create new key pair option as shown in the following image.

Step 7: Configuring Network Settings

• In this step, you have to configure the network by simply clicking on the Edit button as shown in the following image.

• Then you have to create a new security group by selecting the create security group radio button. You can enter the security group name of your choice and can also add a description for your security group for that you can refer to the image below.

Step 8: Add Inbound Security Group Rules

• The next step is to add inbound security group rules which are necessary to configure for connecting your instance to ServerAvatar. Click on the button shown in the image below to add security group rules.

• ServerAvatar requires 43210 port to be open. In total, You need to keep the following ports open on the instance.
  • 22 (SSH): To access your server via SSH
  • 80 (HTTP): To access your sites on HTTP
  • 443 (HTTPS): To access your sites on HTTPS
  • 43210 (ServerAvatar): To allow communication between ServerAvatar and your instance
• To understand and proceed further, please take the reference of the image depicted below.

Step 9: Configure the storage for your instance

• The final step is to configure the storage. You can select the size of the storage according to your needs. However, it is recommended to select at least 25GB disk volume, and in AWS EC2 there is also an option to select the root volume which you can choose as per your requirements. Now click on the Launch Instance button, as shown in the image below.

• Congratulations! You have successfully created your AWS EC2 Instance which is now ready to connect with ServerAvatar.

Initial Server Configuration

The Initial server configuration includes the installation and configuration of various packages required to host your website. Usually, You have to write commands and modify configuration files. Luckily, With ServerAvatar, Your full server configuration and optimization can be automated.

Here are the three ways to automatically configure your server with ServerAvatar.

wget https://srvr.so/install
chmod +x install
./install

Install and Setup 2FAuth on Cloud using ServerAvatar

Self-Hosting 2FAuth Application: Step-by-Step Guide

Introduction:

In an age where cybersecurity is paramount, adding an extra layer of security through Two-Factor Authentication (2FA) is a must. The 2FAuth library allows you to implement this security measure with ease. This guide will walk you through the steps to self-host 2FAuth on your own web server, whether on a local machine or a hosted environment, using Apache2 or NGINX as your HTTP server.

Requirements:

1. HTTP Server: You need a web server such as Apache or NGINX. These are the most popular web servers, and you likely have one of them installed if you are using a web hosting service.
2. PHP: Ensure you have PHP 8.1 or higher installed with the following extensions:
   • BCMath
   • Ctype
   • Fileinfo
   • JSON
   • Mbstring
   • OpenSSL
   • PDO
   • Tokenizer
   • XML
3. Database: 2FAuth supports various databases such as:
   • MariaDB 10.2+
   • MySQL 5.7+
   • PostgreSQL 9.6+
   • SQLite 3.8.8+
   • SQL Server 2017+
4. Composer: Composer is required to manage PHP dependencies for 2FAuth. Follow the Composer installation guide.

Step-by-Step Installation Guide:

Step 1: Create a GitHub application

Start by creating a GitHub application using ServerAvatar. This will allow you to easily manage and deploy your 2FAuth instance. Follow these steps:

1. Open ServerAvatar: Log in to your ServerAvatar account.
2. Navigate to the Application Dashboard: In the dashboard, find the option to create a new application.
3. Create the GitHub Application:
   • HTTP URL: Enter https://github.com/Bubka/2FAuth.git
   • Branch Name: Set this to master
   • Deployment Script: Use the script composer install --prefer-dist --no-scripts --no-dev

This configuration will clone the 2FAuth repository and install the necessary dependencies.

Step 2: Set Custom Webroot

Set the custom webroot as public for your application. This can be done from the application dashboard in the application settings. The webroot directory is where your web server searches for the application files to serve.

Step 3: Create a Database

From the server dashboard, navigate to the databases section and create a new database. This database will store your application's data.

Step 4: Enable SSH Credentials

To securely access your server, enable SSH credentials. SSH (Secure Shell) provides a secure way to log in to your server remotely, ensuring that your data and commands are encrypted. This step is crucial for managing your server and deploying your 2FAuth application.

Step 5: Login Using SSH Credentials

• Once you have your SSH credentials enabled, you can log in to your server. Open a terminal and use the following command: sudo ssh {username}@{ip}
• Replace {username} with your actual username and {ip} with your server's IP address. You will be prompted to enter your password. After successful authentication, you will have remote access to your server.

Step 6: Navigate to the Application Path

With SSH access established, navigate to your application's directory on the server. This is where you will set up your 2FAuth project. Use the cd command to change directories to your application's root path.

Step 7: Execution

Run the following command and answer the wizard questions. php artisan 2fauth:install

At the conclusion of the wizard, the 2FAuth setup process will be complete.

Step 8: Verify Installation

To confirm that your 2FAuth installation is successful, visit your application domain in a web browser. You should see the 2FAuth page, indicating that your setup is complete and your application is ready for development.

Conclusion:

By following this guide, you have successfully set up and deployed your 2FAuth application. This process included creating a GitHub application, setting a custom webroot, creating a database, enabling SSH credentials, logging into your server, navigating to the application path, executing the installation script, and verifying your installation. Your 2FAuth application is now up and running, providing an extra layer of security for your users through Two-Factor Authentication. With 2FAuth, you can enhance the security of your web applications, protect sensitive data, and offer your users a more secure login experience. This setup ensures a robust environment for managing your application's security features effectively. Start leveraging the power of 2FAuth to safeguard your application and provide peace of mind to your users.