Imported from shipshitdev/skills (
skills/ec2-backend-deployer/SKILL.md). Install upstream withnpx skills add shipshitdev/skills --skill ec2-backend-deployer. Copyright stays with the author.
EC2 Backend Deployer
Authorized Scope
Apply this engine only within the user's requested task and existing explicit authorization. Loading or delegating to it grants no additional authority. Preserve report-only restrictions and the caller's target, host, provider, and cost limits. Existing approval satisfies a gate only for the same actions and scope; obtain approval before expanding them. Forward these limits to delegates.
Contract
Inputs:
- Target repository, deployment goal, and approved AWS account/environment
- Existing Docker, registry, CI, and host-access configuration
Outputs:
- Scoped deployment configuration or a reviewed deployment plan
- Health-check evidence when deployment is authorized
Creates/Modifies:
- Docker and CI configuration within the requested setup
- Remote deployment state only when the target and operation are authorized
External Side Effects:
- Registry, CI, SSH, and AWS calls required for the approved deployment
Confirmation Required:
- Before creating billable infrastructure, changing secrets, or deploying outside the explicitly approved target and action
- Before replacing existing deployment configuration beyond the requested change
Delegates To:
deployfor the repository's release and deployment gates
When to Use
Use when you're:
- Setting up CI/CD for backend deployment to EC2
- Configuring Docker-based deployments
- Implementing automated deployment pipelines
- Deploying NestJS, Next.js, or Express backends
- Setting up container registries and image management
- Configuring secure EC2 access (Tailscale)
Quick Workflow
- Dockerfile: Multi-stage build (base → builder → production)
- Registry: GitHub Container Registry (ghcr.io) recommended
- CI/CD: GitHub Actions with Tailscale for secure SSH
- Deploy: Docker Compose on EC2 with health checks
- Verify: Health endpoint + deployment verification
Key Components
Docker
- Multi-stage builds for smaller images
- Non-root user for security
- HEALTHCHECK for container orchestration
- BuildKit secrets for sensitive data
GitHub Actions
docker/build-push-actionfor image buildingtailscale/github-actionfor secure accessappleboy/ssh-actionfor deployment
EC2
- Docker Compose v2 required
- Health check verification
- Rollback procedures