Skip to main content

Amazon Web Services AMI

On this page, we explain step by step how to run CloudPanel on an EC2 instance on Amazon Web Services.

MySQL 8.0

The provided AMIS have MySQL 8.0 installed. If you need MariaDB, you need to use the Installer.

Launching an EC2 Instance

Choose AMI

  1. Log in to the AWS Management Console.

  2. Select an Operating System and click on Launch to start a CloudPanel instance.

AWS RegionX86_64ARM64 (Graviton)
US East (N.Virginia)LaunchLaunch
US East (Ohio)LaunchLaunch
US West (N. California)LaunchLaunch
US West (Oregon)LaunchLaunch
Africa (Cape Town)LaunchLaunch
Asia Pacific (Hong Kong)LaunchLaunch
Asia Pacific (Mumbai)LaunchLaunch
Asia Pacific (Seoul)LaunchLaunch
Asia Pacific (Singapore)LaunchLaunch
Asia Pacific (Sydney)LaunchLaunch
Asia Pacific (Tokyo)LaunchLaunch
Canada (Central)LaunchLaunch
Europe (Frankfurt)LaunchLaunch
Europe (Ireland)LaunchLaunch
Europe (London)LaunchLaunch
Europe (Milan)LaunchLaunch
Europe (Paris)LaunchLaunch
Europe (Spain)LaunchLaunch
Europe (Stockholm)LaunchLaunch
Europe (Zurich)LaunchLaunch
Middle East (Bahrain)LaunchLaunch
Middle East (UAE)LaunchLaunch
South America (Sáo Paulo)LaunchLaunch

Name and tags

Enter the name of your EC2 Instance, e.g., my-cloudpanel-instance.

Name and Tags

Instance Type

Choose an instance type and ensure that it fits the minimum requirements.

Instance Type

Key pair (login)

Select a Key pair or Create a new key pair to log in via SSH after launching the instance.

Key Pair

Network settings

  1. Click on Edit to make changes on the Network Settings.
Edit Network Settings
  1. Select the VPC, Subnet, and enter a Security Group Name and Description.
Edit Network Settings

Inbound security groups rules

CloudPanel Firewall

All pre-configured CloudPanel Firewall Rules are not needed and should be removed.
If you want to use the CloudPanel integrated firewall for whitelisting ports, create a security group with one rule which allows All TCP. In that case, all traffic is filtered by the CloudPanel Firewall and not by AWS.

Create a Security Group with the following rules:

  • SSH (22) - For your IP only
  • HTTP (80) - For everyone
  • HTTPS (443) - For everyone
  • UDP (443) - For everyone (Required for HTTP3)
  • CloudPanel (8443) - For your IP only
Inbound security groups rules

Configure Storage

By default, the root partition has 10 GB and the home partition 25 GB.
If you need more disk space, increase the home partition, e.g. to 50 GB.

Configure Storage

Launch Instance

Click on the button Launch Instance to launch the instance.

Launch Instance

Create Elastic IP Address

A static IP (Elastic IP Address) is needed for running web applications.

  1. To create an Elastic IP Address click in the left navigation on Network & Security --> Elastic IPs.

  2. Click on button Allocate Elastic IP address to create an Elastic IP Address.

  3. Select the Allocated IP Address and Associate it to your launched instance.

Associate Elastic IP Address

Access CloudPanel

You can now access CloudPanel via Browser: https://yourElasticIpAddress:8443

Ignore the self-signed certificate warning and click on Advanced and Proceed to continue to CloudPanel.

Ignore Self-Signed Certificate

SSH Access

With your previously created private key, you can connect to the instance via SSH.

Make sure that the private key has read-only (chmod 400) permissions.

ssh -i path_to_your_private_key.pem ubuntu@yourElasticIpAddress

With the following command, you can become root.

sudo su root