Clever Cloud - anyone have any experience with them?

I’m using Fly.io for my test environment but am concerned about using an American company. Credible sources have told me that it might be illegal to use American cloud providers for healthcare services in Sweden, where I am active.

Therefore, I’ve started looking for other options. Clever Cloud seems like an interesting option, as it supports Elixir. They are based in France and are ISO 27001 certified, which is good.

However, when I Google them, I find very little information about them. Is anyone here using them? If so, what’s your experience with them?

2 Likes

I have not heard of them but have you thought about a dedicated server? What is your projected monthly spend?

You could:

  • Rent a managed server
  • Rent an unmanaged server (cheaper than above)
  • Co-locate your own server at a datacenter
  • Set up your own infrastructure/dc

An old thread but still worth a look:

2 Likes

I have moved all my projects to Scaleway to de-americanize. I am very happy for the most part. A little bit of outage here and there but nothing big. Most of it in paris region, amsterdam is usually not hit.

I am about three working days out from releasing an open source deployer with Scaleway adapters :slight_smile:

Edit: replied to wrong person but oh well

5 Likes

I might eventually go for a dedicated server, but I want something up and running quickly. I expect a very low load to begin with. I’ll probably launch a free version of my service for a selected small group, and I expect to keep it small for a while.

The thing that scares me a bit is security. I am coming from the front end and am not strong on infrastructure. On the other hand, I have connections I could hire for this.

1 Like

If you plan on using real data for the first iterations, then I would certainly advise to consult with someone, as usually there are special security considerations when it comes to this kind of sensitive data.

3 Likes

If you mean security on the server, if you go with a managed server they should harden the server for you (install firewall, disable root login, passwordless login, change ssh ports etc). If you mean app-wise, you could take a look at something like: Sobelow - Uncover vulnerabilities in your Phoenix projects

1 Like

I feel more confident about securing the app than the server, but I’ll definitely check out Sobelow.

1 Like

In that case I reckon a managed server could be a good fit for you - these companies have a lot of experience managing servers and you can learn a lot from them (ask them what they have done to harden the server etc).

There are also lots of guides around, eg: 20 CentOS Server Hardening Security Tips - Part 1 and Security Guide | Red Hat Product Documentation (however I would definitely recommended getting a managed server first - just for peace of mind if nothing else).

100% agree with this. I went down a rabbit hole a while ago and while it was fullfilling, it just made me appreciate when you pay for it to not be a problem.

1 Like

I had a very good experience with Clever Cloud at my precedent job so I would recommend them, but we used them for some PHP projects.

IIRC the deployment system for elixir was to run the app with Mix, not releases, which I found strange but I guess it’s fine. That may have changed.

2 Likes