AZURE WEB DEPLOYMENT
Cloud VM Infrastructure & Server Hardening
PROJECT BACKGROUND
Aplikasi web klien pada shared hosting sering mengalami kendala performa dan keterbatasan konfigurasi server kustom karena ketiadaan akses root.
THE CORE CHALLENGE
Lonjakan trafik menyebabkan timeout pada shared hosting, sementara konfigurasi port dan modul backend tidak dapat disesuaikan.
ENGINEERING STRATEGY
Melakukan migrasi sistem ke Azure Virtual Machine (B-series), mengonfigurasi Network Security Group (NSG) dengan prinsip least privilege, menyiapkan Nginx reverse proxy, dan mengotomasi sertifikat SSL.
ARCHITECTURE SPECIFICATION
- 01Compute Infrastructure: Azure B-series Virtual Machine running Ubuntu Linux LTS
- 02Network Security: Azure Network Security Group (NSG) restricting inbound ports to 22, 80, 443
- 03Web Server: Nginx configured as a reverse proxy passing upstream headers and gzip compression
- 04Security Hardening: UFW firewall policies and automated Let's Encrypt SSL/TLS renewal
devrifki.my.id routed to static Azure Public IP with automated A records.
Network Security Group strictly whitelisting ports 22 (SSH), 80 (HTTP), 443 (HTTPS).
Let's Encrypt Certbot SSL automation, HTTP-to-HTTPS redirect, & gzip compression.
/var/www/devrifki/ isolated with www-data permissions and sub-project integrity.
DELIVERED CAPABILITIES
- Full root access enabling custom runtime installations and environment isolation
- Automated TLS encryption and HTTP-to-HTTPS redirect rules
- Dedicated CPU and memory allocation preventing noisy-neighbor degradation
- Structured domain DNS management and reverse proxy routing
PROJECT LIFECYCLE
Completed cloud deployment architecture.
TECHNICAL TAKEAWAY
Pengalaman mengonfigurasi server Linux dari level kernel hingga reverse proxy memperkuat keyakinan bahwa keandalan software bertumpu pada fondasi infrastruktur yang kokoh.
