Nectar Applications - CKAN

NeCTAR have packaged CKAN into the Application Catalogue so you can create your own instance of CKAN running in the NeCTAR cloud.

To create the application, click the Applications tab, then the Applications sub-tab. If you don't immediately see CKAN, just type it into the search field on the right. Once you've found it, click Quick Deploy.

If you want to enable HTTPS, please see the Enable HTTPS article. If you want to add Backups, please see the Duply Backups article. Click Next to continue.

Choose the instance flavor (use an m2.small - m2.xlarge), the NeCTAR Ubuntu 16.04 (Xenial) instance image, your Key Pair and the Availability Zone. Click Next to continue.

Provide the required site configuration settings for CKAN:

• Site name is the name of the CKAN site that will be created.
• Password is the initial password for the CKAN admin user. Note that passwords cannot contain $, ', ", or \.

Click Next to continue.

The last step allows you to provide a name. You can keep the default, CKAN, or supply your own. Click Create to continue.

You will then be taken to the Application Environments screen. You'll want to click the Deploy This Environment button to kick off the deployment.

The application is now being deployed. This should take around 15 minutes.

CKAN is now deployed and ready. You should see the Last Operation message appear with the address of your CKAN instance. You can click this link to get started.

You will reach the CKAN welcome page. Click the Log in link.

You can login as the CKAN admin user with the Password you provided earlier.

CKAN is now available!

Using Fail2ban

The fail2ban service is configured to monitor access to the CKAN login page. Too many access attempts will result in the temporary banning of an offending IP address.

You can use the fail2ban-client command on your instance to manage the fail2ban service.

To check the CKAN fail2ban status:

$ sudo fail2ban-client status ckan-murano
Status for the jail: ckan-murano
|- Filter
|  |- Currently failed: 0
|  |- Total failed:     5
|  `- File list:        /var/log/apache2/ckan_default.access.log ...
`- Actions
   |- Currently banned: 1
   |- Total banned:     1
   `- Banned IP list:   10.10.10.100

To un-ban CKAN access for the IP address (10.10.10.100 in this example):

$ sudo fail2ban-client set ckan-murano unbanip 10.10.10.100
$ sudo fail2ban-client status ckan-muranoStatus for the jail: ckan-murano
|- Filter
|  |- Currently failed: 0
|  |- Total failed:     5
|  `- File list:        /var/log/apache2/ckan_default.access.log ...
`- Actions
   |- Currently banned: 0
   |- Total banned:     1
   `- Banned IP list: