Bookstack Wiki Architecture

• 1. Bookstack infra with default auth
• 2. Bookstack infra with Google auth, on default VPC
• 3. Bookstack infra with Google auth, custom VPC

1. Bookstack infra with default auth

1. Bookstack infra with default auth, on default VPC, RDS AutoBackup Off, Single-AZ, EC2. ≈$45.40

This BookStack infrastructure is optimized for cost efficiency by utilizing an existing VPC instead of provisioning a new one. AWS Cognito authentication is disabled, relying on standard authentication mechanisms. The database is hosted on RDS with a Single-AZ deployment, and AutoBackup is disabled to minimize costs. Additionally, the infrastructure includes an EC2 instance, EFS Backup for persistent storage, Secrets Manager and Systems Manager for secure configuration management, and CloudWatch Logs for monitoring and troubleshooting.

You can always update the current stack using a Change Set to enable:

• RDS Multi-AZ (MultiAZ=true) for high availability,

• RDS AutoBackup (AutoBackup=true) for automatic backups,

• RDS Deletion Protection (DeletionProtection=true) to prevent accidental deletion.

However, you cannot switch from the default VPC to a custom one because the CIDR block differs, preventing the stack from being updated.

For instructions on updating the stack using a Change Set, please refer to the dedicated guide.

2. Bookstack infra with Google auth, on default VPC

2. Bookstack infra with Google auth, on default VPC, RDS AutoBackup Off, Single-AZ, EC2. ≈$51.40

Balanced BookStack deployment utilizing an existing VPC with AWS Cognito for authentication. RDS Single-AZ with AutoBackup disabled ensures cost efficiency, while EFS Backup, Secrets Manager, Systems Manager, EC2, and CloudWatch Logs provide security and monitoring.

You can always update the current stack using a Change Set to enable:

• RDS Multi-AZ (MultiAZ=true) for high availability,

• RDS AutoBackup (AutoBackup=true) for automatic backups,

• RDS Deletion Protection (DeletionProtection=true) to prevent accidental deletion.

However, you cannot switch from the default VPC to a custom one because the CIDR block differs, preventing the stack from being updated.

For instructions on updating the stack using a Change Set, please refer to the dedicated guide.

3. Bookstack infra with Google auth, custom VPC

3. Bookstack infra with Google auth, custom VPC, RDS AutoBackup Off, Single-AZ, EC2.  ≈$84.25

The BookStack infrastructure is designed for a scalable and secure deployment. It utilizes a new VPC for network isolation, AWS Cognito for authentication, and RDS for database management in a Single-AZ configuration with AutoBackup disabled to optimize costs. An EC2 instance powers the application, while EFS Backup ensures data persistence. Secrets Manager and Systems Manager enhance configuration security, and CloudWatch Logs provide real-time monitoring and troubleshooting capabilities.

You can always update the current stack using a Change Set to enable:

• RDS Multi-AZ (MultiAZ=true) for high availability,

• RDS AutoBackup (AutoBackup=true) for automatic backups,

• RDS Deletion Protection (DeletionProtection=true) to prevent accidental deletion.

However, you cannot switch from the default VPC to a custom one because the CIDR block differs, preventing the stack from being updated.

For instructions on updating the stack using a Change Set, please refer to the dedicated guide.