AWS Deployment

# Create security group
aws ec2 create-security-group \
  --group-name antmedia-sg \
  --description "Ant Media Server Security Group" \
  --vpc-id vpc-xxxxxxxx

# Add rules
aws ec2 authorize-security-group-ingress --group-id sg-xxxxxxxx --protocol tcp --port 5080 --cidr 0.0.0.0/0
aws ec2 authorize-security-group-ingress --group-id sg-xxxxxxxx --protocol tcp --port 5443 --cidr 0.0.0.0/0
aws ec2 authorize-security-group-ingress --group-id sg-xxxxxxxx --protocol tcp --port 1935 --cidr 0.0.0.0/0
aws ec2 authorize-security-group-ingress --group-id sg-xxxxxxxx --protocol udp --port 5000-65000 --cidr 0.0.0.0/0
aws ec2 authorize-security-group-ingress --group-id sg-xxxxxxxx --protocol tcp --port 22 --cidr YOUR_IP/32

# Allocate Elastic IP
aws ec2 allocate-address --domain vpc

# Associate with instance
aws ec2 associate-address \
  --instance-id i-xxxxxxxx \
  --allocation-id eipalloc-xxxxxxxx

sudo nano /usr/local/antmedia/conf/red5.properties

server.name=YOUR_ELASTIC_IP_OR_DOMAIN

sudo systemctl restart antmedia

# Create volume
aws ec2 create-volume \
  --size 100 \
  --volume-type gp3 \
  --iops 3000 \
  --availability-zone us-east-1a

# Attach to instance
aws ec2 attach-volume \
  --volume-id vol-xxxxxxxx \
  --instance-id i-xxxxxxxx \
  --device /dev/sdf

# Format (first time only)
sudo mkfs -t ext4 /dev/xvdf

# Create mount point
sudo mkdir -p /mnt/streams

# Mount
sudo mount /dev/xvdf /mnt/streams

# Add to fstab for persistence
echo '/dev/xvdf /mnt/streams ext4 defaults,nofail 0 2' | sudo tee -a /etc/fstab

# Change ownership
sudo chown -R antmedia:antmedia /mnt/streams

# Create S3 bucket
aws s3 mb s3://your-antmedia-recordings --region us-east-1

# Configure lifecycle policy for automatic cleanup
aws s3api put-bucket-lifecycle-configuration \
  --bucket your-antmedia-recordings \
  --lifecycle-configuration file://lifecycle.json

# Create DocumentDB cluster
aws docdb create-db-cluster \
  --db-cluster-identifier antmedia-cluster \
  --engine docdb \
  --master-username antmedia \
  --master-user-password YourStrongPassword \
  --vpc-security-group-ids sg-xxxxxxxx

# Create instance
aws docdb create-db-instance \
  --db-instance-identifier antmedia-instance \
  --db-instance-class db.r5.large \
  --engine docdb \
  --db-cluster-identifier antmedia-cluster

sudo /usr/local/antmedia/change_server_mode.sh cluster "mongodb://antmedia:YourStrongPassword@antmedia-cluster.cluster-xxxxxxxx.us-east-1.docdb.amazonaws.com:27017/?replicaSet=rs0&readPreference=secondaryPreferred&retryWrites=false"

sudo /usr/local/antmedia/enable_ssl.sh -d yourdomain.com -e admin@yourdomain.com

wget https://s3.amazonaws.com/amazoncloudwatch-agent/ubuntu/amd64/latest/amazon-cloudwatch-agent.deb
sudo dpkg -i amazon-cloudwatch-agent.deb

{
  "logs": {
    "logs_collected": {
      "files": {
        "collect_list": [
          {
            "file_path": "/var/log/antmedia/antmedia-error.log",
            "log_group_name": "/aws/ec2/antmedia",
            "log_stream_name": "{instance_id}/error.log"
          }
        ]
      }
    }
  }
}

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:PutObject",
        "s3:GetObject",
        "s3:ListBucket"
      ],
      "Resource": [
        "arn:aws:s3:::your-antmedia-recordings/*",
        "arn:aws:s3:::your-antmedia-recordings"
      ]
    },
    {
      "Effect": "Allow",
      "Action": [
        "cloudwatch:PutMetricData",
        "logs:CreateLogGroup",
        "logs:CreateLogStream",
        "logs:PutLogEvents"
      ],
      "Resource": "*"
    }
  ]
}

aws ec2 request-spot-instances \
  --spot-price "0.10" \
  --instance-count 1 \
  --type "one-time" \
  --launch-specification file://spot-spec.json

aws dlm create-lifecycle-policy \
  --description "Daily AntMedia backups" \
  --state ENABLED \
  --execution-role-arn arn:aws:iam::ACCOUNT:role/DLMRole \
  --policy-details file://backup-policy.json