In good news, I did get an entire Aurora Postgres ...
# sst
d
In good news, I did get an entire Aurora Postgres cluster up and running and playing nice with the API. Combined with the debug stack, that's going to be a game changer for CI/CD
f
Wow.. Glad you got it working man!
yeah
copyFiles
isn’t an esbuild option.. it’s something we added.
Do you mind sharing what the issue was and how you got it to work?
d
Hey! Will provide an update in a bit. Had to catch up on sleep haha, I'm in EST and stayed up most of the night migrating our repo. It's looking great though!
Thanks for the great work and fast updates!
I might submit some issues/PRs based on this recent experience to plug some holes in documentation, touch on gotchas that might save newcomers time
f
Thanks @Dmitry Pavluk. Btw, just curious, do you have a VPN setup to connect to ur RDS or r u exposing it publicly?
d
Tailscale baby. It's been amazing
Literally don't even think about it anymore
f
did you have to setup a Client VPC Endpoint on the AWS side?
tailscale looks real slick
d
No VPC endpoints. As long as the EC2 hosting tailscale is in the right VPC, can connect to any resource within that VPC.
f
Ah.. some sort of relaying I’m guessing
When you have a chance, can I bother you for a link on the tailscale installation steps?
I think we should add that to our docs.. others might find this useful
d
Hey, yes absolutely. I'm starting to forget how I set it up myself, would be good to document
I looked into Twingate at the same time and actually prototyped it first. It was cool but I got stuck so Tailscale it was
A cool thing about Twingate is the control plane for all org-wide access: https://www.twingate.com/blog/introducing-identity-first-networking/
Regarding Tailscale, here's the documentation that helped me install it, from the horse's mouth itself as it were: https://twitter.com/DmitryPavluk/status/1333877569020710914
f
yeah lemme take a look at both and write up something… it was quite a bit of work and guessing when I followed the AWS doc to setup the VPN
d
Right, and another benefit of Tailscale is security access. When I signed up, I just allowed access to anyone from our GSuite org. When an employee leaves and GSuite account is terminated, DB access is automatically revoked b/c of that.
f
that makes a lot of sense