anchor.diff:  ----------------------------------------------------------------------------------------------------------------
   
   With `<user>`, `<password>` and `<host>` replaced with suitable values.
  +
  +== Deploying to Amazon AWS
  +
  +**Caution:** When deploying the Web UI using Docker, it will run in 'production mode' by default. In this mode of operation, an SSL certificate is required to log into the Web UI. As a workaround, you can set the `cookieSecureOption` on line 106 of the file `app/org/genivi/webserver/controllers/AuthConfigImpl.scala` to `false`.
  +
  +=== AWS Prerequisites
  +
  +Deployment of rvi-sota-server requires valid AWS administrator credentials, as well as an SSH key to administer any instances launched by the vw-garage deployment scripts.
  +
  +==== Create New User for Deployment
  +
  +For security purposes, we recommend creating a new IAM user to manage the deployment. This user will have full access to the AWS services, but will not have the capability to create new users. If the credentials for the *deploy* user are compromised, they can be reset using the root AWS account.
  +
  +===== Save User Credentials
  +
  +Once the user has been created, you should download the credentials. Be careful! You will only have one opportunity to do this. Once you have them, create a file in your home directory called `~/.boto`. It should look like this (with the angle brackets omitted):
  +
  +--------------------------------------------------------------
  +[Credentials]
  +aws_access_key_id = <your deploy user's access key id>
  +aws_secret_access_key = <your deploy user's secret access key>
  +--------------------------------------------------------------
  +
  +===== Set User Security Policy
  +
  +We recommend attaching the `PowerUserAccess` policy to the *deploy* user.
  +
  +==== SSH Keypair
  +
  +You will need an SSH keypair available in the AWS region you wish to install to (eu-west-1 by default). Full documentation for key pairs is available from the https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-key-pairs.html[AWS Website].
  +
  +=== Deploying with docker-launcher
  +
  +To deploy to AWS, you will need to configure `docker-launcher.yml`.
  +
  +[source,yaml]
  +----
  +reboot_strategy: 'best-effort'
  +registry:
  +  user: atsjenkins // <1>
  +  email: jenkins@advancedtelematic.com // <2>
  +ec2:
  +  key: tauron // <3>
  +  image: ami-07fd8270 <4>
  +  region: eu-west-1 <5>
  +
  +vars:
  +  db_root_password: "sota-test"
  +  db_user: "sota"
  +  db_user_password: "s0ta"
  +  db_resolver_name: "sota_resolver"
  +  db_core_name: "sota_core"
  +  play_crypto_secret: "YM5B6o<ywKn4tTyA;tOZ<2xUEajF4DDi=O/PPm1Q^w2LqtKISd9oqYT6b>>C1gQa"
  +----
  +
  +You will need to change at least three values from the example file:
  +
  +<1> Your username at Docker Hub
  +<2> The email address associated with your Docker Hub account
  +<3> The name of an SSH keypair associated with your AWS account
  +
  +You may wish to also change the region (5). Note that if you do so, you will need to select a CoreOS image (4) valid for `c3.xlarge` instances in your chosen region. If you don't change the region, the default from the example file should work.
  +
  +Once you've configured `docker-launcher.yml` to your liking, you can run `docker-launcher -c docker-launcher.yml deploy-sota-ec2.yml` to deploy to AWS. Note that this may take quite some time. You can set debug verbosity in docker-launcher with `-vvv`.
  +
  +
  +
  
positive.code: 
  Docker Launcher launches projects using Docker and Ansible. It is a prerequisite for deploying the SOTA server, and can be installed from https://github.com/advancedtelematic/docker-launcher[its GitHub repository.] *Please ensure you are using the latest version of Docker Launcher. Older versions may not correctly deploy the SOTA Server.*
  
  [[deploying-with-docker-launcher]]
  = Deploying with Docker Launcher
  
  [[development-system]]
  == Development System
  
  **Caution:** When deploying the Web UI using Docker, it will run in 'production mode' by default. In this mode of operation, an SSL certificate is required to log into the Web UI. As a workaround, you can set the `cookieSecureOption` on line 106 of the file `app/org/genivi/webserver/controllers/AuthConfigImpl.scala` to `false`.
  
  
negative.code: -----------------------------------------------------------------------
  
  [[cistaging-remote-system]]
  === CI/Staging remote system
  
  For deploying a remote system for staging and CI, with a docker daemon accessible from a single IP run
  
  